Hudu Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Hudu Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP (Model Context Protocol) server for Hudu IT documentation platform. Provides 39 tools and 6 resources for managing companies, assets, articles, passwords, websites, and more through any MCP-compatible client.
[!IMPORTANT] Before you click: this server depends on@wyre-technology/node-hudu, which is hosted on the GitHub Packages npm registry. GitHub Packages has no anonymous access — even though the package is public, everynpm installneeds a token. The cloud builder runsnpm installfor you, so you must give it one, or the build fails withnpm error 401 Unauthorized ... npm.pkg.github.com.
>
1. Create a GitHub Personal Access Token with theread:packagesscope (classic token). Any GitHub account works — you do not need to be a member of thewyre-technologyorg to read its public packages. 2. Add it as a build variable when prompted by the deploy flow: - DigitalOcean App Platform → set an encrypted env var named `NODE_AUTH_TOKEN` with scope Build Time to your PAT (theDockerfilereads it viaARG NODE_AUTH_TOKENto authenticatenpm ci). - Cloudflare Workers → set a build variable named `NODE_AUTH_TOKEN` to your PAT (Workers → Settings → Build → Variables and Secrets).
[!NOTE] The DigitalOcean target builds the full Docker image and runs the complete MCP server over HTTP — this is the recommended path for operators. This repo does not ship awrangler.json/Workers entrypoint, so for a self-hosted server prefer DigitalOcean or the prebuilt container image (ghcr.io/wyre-technology/hudu-mcp).
This project depends on @wyre-technology/node-hudu, published to the GitHub Packages npm registry, which requires a token even for public packages. Authenticate npm once before installing:
git clone https://github.com/wyre-technology/hudu-mcp.git
cd hudu-mcp
# Authenticate npm to GitHub Packages (token needs the read:packages scope)
export NODE_AUTH_TOKEN=$(gh auth token) # or a PAT with read:packages
npm install
npm run buildThe repo's .npmrc already points the @wyre-technology scope at GitHub Packages and reads the token from NODE_AUTH_TOKEN, so no further config is needed.
| Variable | Required | Default | Description |
|---|---|---|---|
HUDU_BASE_URL | Yes | - | Your Hudu instance URL (e.g., https://docs.example.com) |
HUDU_API_KEY | Yes | - | Your Hudu API key |
MCP_TRANSPORT | No | stdio | Transport type: stdio or http |
MCP_HTTP_PORT | No | 8080 | HTTP server port (when using http transport) |
MCP_HTTP_HOST | No | 0.0.0.0 | HTTP server host |
MCP_SERVER_NAME | No | hudu-mcp | Server name reported to MCP clients |
MCP_SERVER_VERSION | No | 1.0.0 | Server version reported to MCP clients |
LOG_LEVEL | No | info | Log level: error, warn, info, debug |
LOG_FORMAT | No | simple | Log format: json or simple |
Add to your claude_desktop_config.json:
{
"mcpServers": {
"hudu": {
"command": "node",
"args": ["/path/to/hudu-mcp/dist/entry.js"],
"env": {
"HUDU_BASE_URL": "https://docs.example.com",
"HUDU_API_KEY": "your-api-key"
}
}
}
}HUDU_BASE_URL=https://docs.example.com \
HUDU_API_KEY=your-api-key \
MCP_TRANSPORT=http \
MCP_HTTP_PORT=8080 \
npm start| Tool | Description |
|---|---|
hudu_list_companies | List companies with optional filters |
hudu_get_company | Get a company by ID |
hudu_create_company | Create a new company |
hudu_update_company | Update an existing company |
hudu_delete_company | Delete a company |
hudu_archive_company | Archive a company |
hudu_unarchive_company | Unarchive a company |
hudu_test_connection | Test the connection to Hudu API |
| Tool | Description |
|---|---|
hudu_list_assets | List assets with optional filters |
hudu_get_asset | Get an asset by ID |
hudu_create_asset | Create a new asset |
hudu_update_asset | Update an existing asset |
hudu_delete_asset | Delete an asset |
hudu_archive_asset | Archive an asset |
| Tool | Description |
|---|---|
hudu_list_asset_layouts | List asset layouts |
hudu_get_asset_layout | Get an asset layout by ID |
hudu_create_asset_layout | Create a new asset layout |
hudu_update_asset_layout | Update an existing asset layout |
| Tool | Description |
|---|---|
hudu_list_asset_passwords | List asset passwords |
hudu_get_asset_password | Get an asset password by ID |
hudu_create_asset_password | Create a new asset password |
hudu_update_asset_password | Update an existing asset password |
hudu_delete_asset_password | Delete an asset password |
| Tool | Description |
|---|---|
hudu_list_articles | List knowledge base articles |
hudu_get_article | Get an article by ID |
hudu_create_article | Create a new article |
hudu_update_article | Update an existing article |
hudu_delete_article | Delete an article |
hudu_archive_article | Archive an article |
| Tool | Description |
|---|---|
hudu_list_websites | List monitored websites |
hudu_get_website | Get a website by ID |
hudu_create_website | Create a new website |
hudu_update_website | Update an existing website |
hudu_delete_website | Delete a website |
| Tool | Description |
|---|---|
hudu_list_folders | List folders |
hudu_list_procedures | List procedures |
hudu_list_activity_logs | List activity logs |
hudu_list_relations | List relations |
hudu_list_magic_dash | List Magic Dash items |
| URI | Description |
|---|---|
hudu://companies | List of all companies |
hudu://companies/{id} | Company details by ID |
hudu://assets | List of all assets |
hudu://assets/{id} | Asset details by ID |
hudu://articles | List of all articles |
hudu://articles/{id} | Article details by ID |
# Install dependencies
npm install
# Build
npm run build
# Run in development mode
npm run dev
# Clean build output
npm run clean~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.