Server data from the Official MCP Registry
Connect AI agents to Granoflow for tasks, reviews, and spaced-review memory cards.
Connect AI agents to Granoflow for tasks, reviews, and spaced-review memory cards.
A well-structured MCP server for the Granoflow task management app with strong security practices. The codebase properly handles authentication via environment variables, implements safe defaults (dry-run mode), and avoids dangerous patterns. Permissions are appropriate for a developer tool that proxies a local HTTP API. Minor code quality observations exist but do not materially impact security. Supply chain analysis found 1 known vulnerability in dependencies (1 critical, 0 high severity). Package verification found 1 issue.
4 files analyzed · 5 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"com-granoflow-mcp-server": {
"args": [
"-y",
"@granoflow/mcp-server"
],
"command": "npx"
}
}
}From the project's GitHub README.
Granoflow is an app for planning and reviewing work tasks. It helps extract knowledge and experience worth remembering from completed work, turn those insights into review cards, and make them available for quick retrieval or spaced review at reasonable intervals.
Granoflow's local features are free to use forever. If privacy is your concern, do not subscribe: without membership, your data never leaves your device or gets uploaded to the cloud.
Learn more at granoflow.com.
MCP server for Granoflow: exposes the Granoflow Local HTTP API as tools for AI agents, IDEs, and automation.
This server is intentionally thin. It does not own Granoflow business logic, database access, app orchestration, or release workflows. It resolves a local API endpoint, forwards structured requests to the running Granoflow app, and returns predictable MCP tool results.
The default Granoflow API URL is:
http://127.0.0.1:56789
You can override it with:
export GRANOFLOW_API_BASE_URL="http://127.0.0.1:56789"
export GRANOFLOW_API_TOKEN="..."
The MCP server can keep non-secret local connection defaults in:
~/.config/granoflow-mcp/config.json
Set GRANOFLOW_MCP_CONFIG_PATH to use a different config path for tests,
temporary setups, or advanced local installs. API tokens are not stored in this
file; keep GRANOFLOW_API_TOKEN in the MCP client environment.
npm install -g @granoflow/mcp-server
For a user-facing setup walkthrough, see Granoflow MCP User Install And Demo Guide.
For maintainers, see Granoflow MCP Release Checklist.
Agents can also reuse the bundled Granoflow Agent Workflow skill for task completion, review-card drafting, and user-feedback handling conventions.
develop is the active integration branch. It may contain unverified or
unreleased changes.main is the npm release branch. Publish @granoflow/mcp-server latest only
from main.develop into main only after release preflight passes.For local development:
npm install
npm run build
node dist/index.js
Verify an installed package without starting an MCP stdio session:
npx -y @granoflow/mcp-server --version
npx -y @granoflow/mcp-server --help
Before publishing a release, verify the package contents:
npm run release:preflight
Initial tools:
granoflow_setup_statusgranoflow_setup_detect_local_apigranoflow_setup_write_configgranoflow_setup_open_configgranoflow_setup_open_appgranoflow_healthgranoflow_versiongranoflow_capabilitiesgranoflow_ai_agent_toolsgranoflow_task_listgranoflow_task_exportgranoflow_task_validategranoflow_task_importgranoflow_task_creategranoflow_task_create_structuredgranoflow_task_updategranoflow_task_update_structuredgranoflow_task_completegranoflow_task_finishgranoflow_task_resolvegranoflow_project_listgranoflow_project_resolvegranoflow_project_creategranoflow_project_updategranoflow_project_deletegranoflow_milestone_listgranoflow_milestone_resolvegranoflow_milestone_creategranoflow_milestone_updategranoflow_milestone_deletegranoflow_review_day_showgranoflow_api_requestPrefer the structured task, project, and milestone tools for common resource operations. The JSON payload tools remain available as escape hatches when the running app exposes newer fields before this package has first-class schemas.
Write tools default to dry-run behavior. Ask the tool to write only after you have reviewed the preview or the user has explicitly requested a write. Delete tools also require the current resource title before writing, and refuse linked tasks unless the caller explicitly accepts that impact.
When a user asks to complete, finish, close, mark done, wrap up, or otherwise
end a task, prefer granoflow_task_finish over the low-level
granoflow_task_complete endpoint. Before writing, infer startedAt and
endedAt from the current agent conversation when evidence is available. Write
taskReview only when there is a meaningful decision, lesson, failure mode, or
reusable process detail; leave it empty when it would only say what happened.
Create one reviewCardDrafts item per durable knowledge point worth long-term
memory, and omit cards when there is nothing worth remembering.
Use the setup tools when an agent or MCP client needs to connect to a local Granoflow app without hand-editing every setting first:
granoflow_setup_status reports config path, env/config precedence, token
presence, MCP server version, Local HTTP API health, version metadata,
capability summary, and local Granoflow process evidence without printing
secrets.granoflow_setup_detect_local_api probes a small bounded localhost port list
only.granoflow_setup_write_config previews or writes non-secret config. It
defaults to dry-run.granoflow_setup_open_config creates and optionally opens the config file for
manual editing.granoflow_setup_open_app previews or opens the installed Granoflow app after
user approval. On macOS it tries the formal /Applications/granoflow.app
path before app-name fallbacks. It defaults to dry-run.When setup status sees a configured localhost API URL that is unreachable, it checks whether a local Granoflow process appears to be running. If not, it returns a warning and asks the agent to confirm before opening the app.
This package implements a standard MCP stdio server. The primary compatibility contract is the MCP protocol plus the npm executable:
npx -y @granoflow/mcp-server
Cursor and Codex are the verified client targets for this repository. Other MCP-compatible clients can use the same stdio command shape, but are not part of the routine verification matrix.
Add this to .cursor/mcp.json in a project or ~/.cursor/mcp.json globally:
{
"mcpServers": {
"granoflow": {
"command": "npx",
"args": ["-y", "@granoflow/mcp-server"],
"env": {
"GRANOFLOW_API_BASE_URL": "http://127.0.0.1:56789"
}
}
}
}
Add this to ~/.codex/config.toml:
[mcp_servers.granoflow]
command = "npx"
args = ["-y", "@granoflow/mcp-server"]
[mcp_servers.granoflow.env]
GRANOFLOW_API_BASE_URL = "http://127.0.0.1:56789"
Restart Codex after changing MCP configuration.
For clients that support local stdio MCP servers, configure the server with:
{
"type": "stdio",
"command": "npx",
"args": ["-y", "@granoflow/mcp-server"],
"env": {
"GRANOFLOW_API_BASE_URL": "http://127.0.0.1:56789",
},
}
npm install
npm run check
npm run check runs Prettier, ESLint, TypeScript, and Vitest.
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.