tickadoo — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tickadoo (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
@tickadoo/mcp-server is the local stdio entrypoint for tickadoo MCP. Since v2.0.0 it is a thin bridge to the canonical remote server at:
https://mcp.tickadoo.com/mcpThe package no longer defines tools, formats catalogue data, or calls a local tickadoo backend. It connects to the remote Streamable HTTP MCP server and proxies tools/list, tools/call, resources/list, resources/read, and ping. The live remote owns the tool list, schemas, results, and errors.
No API key is required.
Use the hosted remote directly when your MCP client supports Streamable HTTP:
{
"mcpServers": {
"tickadoo": {
"url": "https://mcp.tickadoo.com/mcp"
}
}
}Use the npm package when your MCP client needs a local stdio command:
{
"mcpServers": {
"tickadoo": {
"command": "npx",
"args": ["-y", "@tickadoo/mcp-server"]
}
}
}Set TICKADOO_MCP_URL to point the bridge at another compatible Streamable HTTP MCP endpoint:
TICKADOO_MCP_URL=http://127.0.0.1:8787/mcp npx -y @tickadoo/mcp-serverSet TICKADOO_LOG_LEVEL=none to silence bridge status logs on stderr.
npm install
npm run build
npm testRun the built stdio bridge:
node dist/index.jsRefresh the MCP registry metadata from the live remote:
npm run sync:server-jsonRun the optional live integration test:
LIVE=1 npm testThe current tool list is served by the remote MCP server. Visit mcp.tickadoo.com or run npm run sync:server-json to refresh the registry metadata in this repo.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.