Huly Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Huly Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The most complete MCP server for Huly — the open-source project management platform.
Connects Claude Desktop (and any MCP-compatible client) directly to your Huly workspace. Manage projects, issues, milestones, components, documents, labels, and more — all via natural language.
| Category | Tool | Description |
|---|---|---|
| Projects | list_projects | List all projects in the workspace |
get_project | Get project details + available statuses | |
create_project | Create a new tracker project with a unique identifier | |
| Issues | list_issues | List issues with optional status / priority filters |
get_issue | Get full details of an issue (e.g. PROJ-42) | |
create_issue | Create a new issue | |
update_issue | Update title, status, priority, assignee, due date, component, milestone | |
delete_issue | Permanently delete an issue by identifier | |
| Comments | add_comment | Add a comment to an issue |
list_comments | List all comments on an issue (includes IDs for delete_comment) | |
delete_comment | Delete a specific comment by ID | |
| Time Tracking | log_time | Log hours spent on an issue |
| Labels | list_labels | List all labels with color + usage count |
create_label | Create a new label with an optional hex color | |
add_label | Add a label to an issue (auto-creates if it doesn't exist) | |
remove_label | Remove a label from an issue | |
| Relations | add_relation | Mark two issues as related (bidirectional) |
add_blocked_by | Mark an issue as blocked by another issue | |
set_parent | Set or clear the parent epic of an issue | |
| Members | list_members | List workspace members |
| Milestones | list_milestones | List milestones for a project |
create_milestone | Create a milestone with a target date and status | |
| Components | list_components | List components (sub-areas) in a project |
create_component | Create a new component with optional lead | |
| Documents | list_teamspaces | List document teamspaces |
create_teamspace | Create a new teamspace (top-level document folder) | |
list_documents | List documents in a teamspace | |
delete_document | Permanently delete a document by ID | |
get_document | Get document metadata + content | |
create_document | Create a new document in a teamspace | |
update_document | Write Markdown content to a document — Mermaid diagrams render natively | |
link_document | Link a document to an issue — appears in the Relations panel | |
| Search | search_issues | Full-text search across all issues |
npx huly-mcp-sdk setupThis runs the interactive setup wizard — sends a one-time code to your email (works for Google/GitHub SSO accounts too) and writes your .env file automatically.
Your workspace slug is the part of your Huly URL after the domain: huly.app/`myteam` → slug is myteam.
The same MCP server works across all major AI coding tools. Pick your client.
Auth note: All config examples below useHULY_TOKEN. If you have issues with token expiry, use email + password instead — just replace theenvblock with: ``json "HULY_EMAIL": "[email protected]", "HULY_PASSWORD": "yourpassword", "HULY_WORKSPACE": "your-workspace-slug"`` See Manual Auth for details on both options.
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json{
"mcpServers": {
"huly": {
"command": "npx",
"args": ["huly-mcp-sdk"],
"env": {
"HULY_TOKEN": "your-token",
"HULY_WORKSPACE": "your-workspace-slug"
}
}
}
}Restart Claude Desktop after saving.
claude mcp add huly -e HULY_TOKEN=your-token -e HULY_WORKSPACE=your-slug -- npx huly-mcp-sdkOr scope it to a single project only:
claude mcp add huly --scope project -e HULY_TOKEN=your-token -e HULY_WORKSPACE=your-slug -- npx huly-mcp-sdkVerify it's connected: claude mcp list
Create or edit ~/.cursor/mcp.json:
{
"mcpServers": {
"huly": {
"command": "npx",
"args": ["huly-mcp-sdk"],
"env": {
"HULY_TOKEN": "your-token",
"HULY_WORKSPACE": "your-workspace-slug"
}
}
}
}Restart Cursor. The tools appear in the Agent panel under MCP.
Create or edit ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"huly": {
"command": "npx",
"args": ["huly-mcp-sdk"],
"env": {
"HULY_TOKEN": "your-token",
"HULY_WORKSPACE": "your-workspace-slug"
}
}
}
}Restart Windsurf. MCP tools are available to the Cascade AI panel.
{
"huly": {
"command": "npx",
"args": ["huly-mcp-sdk"],
"env": {
"HULY_TOKEN": "your-token",
"HULY_WORKSPACE": "your-workspace-slug"
}
}
}~/.continue/config.json and add to the mcpServers array:{
"mcpServers": [
{
"name": "huly",
"command": "npx",
"args": ["huly-mcp-sdk"],
"env": {
"HULY_TOKEN": "your-token",
"HULY_WORKSPACE": "your-workspace-slug"
}
}
]
}Edit ~/.config/zed/settings.json and add a context_servers entry:
{
"context_servers": {
"huly": {
"command": {
"path": "npx",
"args": ["huly-mcp-sdk"],
"env": {
"HULY_TOKEN": "your-token",
"HULY_WORKSPACE": "your-workspace-slug"
}
}
}
}
}Edit ~/.codex/config.json and add to mcpServers:
{
"mcpServers": {
"huly": {
"type": "stdio",
"command": "npx",
"args": ["huly-mcp-sdk"],
"env": {
"HULY_TOKEN": "your-token",
"HULY_WORKSPACE": "your-workspace-slug"
}
}
}
}The server uses standard stdio transport. If your tool supports MCP, the config pattern is always the same:
npx["huly-mcp-sdk"]HULY_TOKEN + HULY_WORKSPACEConsult your tool's MCP documentation for the exact config file location.
Alternative (avoid npx cold-start): Clone and build once, then point directly at the compiled binary: ``bash git clone https://github.com/varaprasadreddy9676/huly-mcp.git cd huly-mcp && npm install && npm run build`Replace"command": "npx", "args": ["huly-mcp-sdk"]with"command": "node", "args": ["/absolute/path/to/huly-mcp/dist/index.js"]` in any config above.
<img width="932" height="401" alt="image" src="https://github.com/user-attachments/assets/0f9d9a74-ca1e-4884-bd6a-918c0fb8ddbd" />
Projects & issues:
Milestones & components:
Labels & relations:
Time tracking:
Documents:
get_documentget_document always returns full metadata (title, teamspace, comments, snapshots). To also fetch and display the text content, set the optional HULY_FRONT_URL env var:
"env": {
"HULY_TOKEN": "...",
"HULY_WORKSPACE": "myteam",
"HULY_FRONT_URL": "https://front.huly.app"
}For self-hosted Huly, set HULY_FRONT_URL to your own front service URL (e.g. http://localhost:8083).
update_documentupdate_document accepts a documentId and a markdown string and writes rich structured content directly to the document — no manual editing required.
Supported Markdown:
| Element | Syntax | |||
|---|---|---|---|---|
| Headings | #, ##, ### | |||
| Bold / inline code | **bold**, ` code ` | |||
| Paragraphs | plain text | |||
| Bullet lists | - item | |||
| Pipe tables | `\ | col \ | col \ | ` |
| Code blocks | `lang | |||
| Mermaid diagrams | `mermaid — stored as Huly's native mermaid node type so diagrams render as interactive visuals in the editor |
Example:
update_document({
documentId: "abc123",
markdown: `# Service Flow\n\n` +
`## Architecture\n\n` +
"```mermaid\n" +
"flowchart TD\n" +
" A([User]) --> B[Browse Catalogue]\n" +
" B --> C[Pay via Razorpay]\n" +
" C --> D[Order Confirmed]\n" +
"```\n\n" +
"## Business Rules\n\n" +
"- Payment required before confirmation\n" +
"- All orders synced to HIS\n"
})The Mermaid block renders as a live interactive diagram in Huly's document editor — not as a code block.
Import many issues at once from a CSV file — useful for migrating from other tools:
node scripts/import-csv.js tasks.csv PROJCSV format:
title,priority,status,dueDate
Fix login bug,High,In Progress,2025-04-01
Add dark mode,Medium,,
Improve performance,Urgent,,2025-05-01Required column: title. Optional: priority (Urgent/High/Medium/Low), status (must match a status name in the project), dueDate (YYYY-MM-DD).
Create a .env file in the project root (or pass via env in your client config):
Option A — Email + password (recommended):
Works if you have a password set on your Huly account (Profile → Security → Change password).
[email protected]
HULY_PASSWORD=yourpassword
HULY_WORKSPACE=your-workspace-slugOption B — Token:
HULY_WORKSPACE=your-workspace-slug
HULY_TOKEN=your-token-hereTo get a token: go to huly.app → open browser DevTools → Application → Local Storage → https://huly.app → copy the token value.
Tokens expire after some time. If you get an auth error, switch to email + password auth or refresh the token from DevTools.
Self-hosted Huly:
HULY_ACCOUNTS_URL=https://your-huly-instance.com/account
HULY_FRONT_URL=https://your-huly-instance.com@hcengineering/server-client, not per tool call (model load takes 1–3 s, so this keeps tools fast)list_comments now includes comment IDs in its output\\\mermaid` blocks use Huly's native node type and render as interactive diagramscore:space:Model), not per-project; removed incorrect space filter that caused "no statuses found" errors on create_issue, update_issue, and list_issuesmembers: [currentUser] so newly created projects are immediately visible in the Huly UIlog_time, list_comments, component/milestone assignment on update_issueget_document, create_documentcreate_project, create_milestone, assignee support on issues~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.