MCP server for GetCourse API -- users, deals.
SaferSkills independently audited getcourse-mcp (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for GetCourse LMS API. 3 tools for users, deals, and user creation.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"getcourse": {
"command": "npx",
"args": ["-y", "@theyahia/getcourse-mcp"],
"env": {
"GETCOURSE_DOMAIN": "myschool.getcourse.ru",
"GETCOURSE_API_KEY": "your-api-key"
}
}
}
}claude mcp add getcourse -- npx -y @theyahia/getcourse-mcpSet env: GETCOURSE_DOMAIN + GETCOURSE_API_KEY.
{
"getcourse": {
"command": "npx",
"args": ["-y", "@theyahia/getcourse-mcp"],
"env": {
"GETCOURSE_DOMAIN": "myschool.getcourse.ru",
"GETCOURSE_API_KEY": "your-api-key"
}
}
}| Tool | Description |
|---|---|
get_users | List users with optional status/date filters |
create_user | Create or update a user, add to group/deal |
get_deals | List deals (orders) with status/date filters |
| Variable | Required | Description |
|---|---|---|
GETCOURSE_DOMAIN | Yes | Account domain (e.g. myschool.getcourse.ru) |
GETCOURSE_API_KEY | Yes | API secret key from account settings |
HTTP_PORT=3000 npx @theyahia/getcourse-mcp
# or
npx @theyahia/getcourse-mcp --http 3000Endpoints: POST /mcp (JSON-RPC), GET /health (status).
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.