Back to Browse

Ithura MCP Server

by Ithura
Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Manage tasks, sprints, projects, and wiki pages in your Ithura workspace.

About

Manage tasks, sprints, projects, and wiki pages in your Ithura workspace.

Security Report

5.2
Moderate5.2Moderate Risk

This is a well-structured MCP server for the Ithura project management API with proper authentication and appropriate permissions. The code uses environment variables for credentials, implements input validation via Zod schemas, and all API calls are properly authenticated. Minor quality improvements around error handling and input sanitization are recommended, but no security vulnerabilities were identified. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

4 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Workspace API token, created under Settings > API tokens. Carries the permissions of the member who created it.Required

Environment variable: ITHURA_API_KEY

The workspace slug, as it appears in your Ithura URL.Optional

Environment variable: ITHURA_WORKSPACE_SLUG

API base URL. Defaults to https://api.ithura.com; set this when self-hosting.Optional

Environment variable: ITHURA_API_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "com-ithura-mcp": {
      "env": {
        "ITHURA_API_KEY": "your-ithura-api-key-here",
        "ITHURA_API_URL": "your-ithura-api-url-here",
        "ITHURA_WORKSPACE_SLUG": "your-ithura-workspace-slug-here"
      },
      "args": [
        "-y",
        "ithura-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Ithura MCP server

npm MCP Registry license

A Model Context Protocol server for Ithura, a quiet project management workspace for deliberate teams.

Point Claude, Cursor, or any MCP client at your Ithura workspace and let it read and write real work: tasks, sprints, projects, modules, wiki pages, and intake.

"What is left in the current sprint?"
"Create a task for the login timeout bug and put it in this sprint."
"Summarise every task that moved to Done this week."

Listed in the official MCP Registry as com.ithura/mcp.

Install

No install step. Point your MCP client at npx:

npx ithura-mcp

Claude Desktop / Claude Code

Add to your MCP settings (claude_desktop_config.json, or .mcp.json in a project for Claude Code):

{
  "mcpServers": {
    "ithura": {
      "command": "npx",
      "args": ["-y", "ithura-mcp"],
      "env": {
        "ITHURA_API_KEY": "your-api-token",
        "ITHURA_WORKSPACE_SLUG": "your-workspace"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json takes the same block.

Configuration

VariableRequiredDefaultNotes
ITHURA_API_KEYyesWorkspace API token, from Settings > API tokens
ITHURA_WORKSPACE_SLUGyesThe slug in your workspace URL
ITHURA_API_URLnohttps://api.ithura.comPoint at your own host when self-hosting

Create the token in Ithura under Settings > API tokens. It carries the permissions of the member who created it, so create it as a user whose access matches what you want the agent to have.

Tools

23 tools across the work graph:

AreaTools
Projectslist_projects, get_project, create_project, update_project
Taskslist_issues, get_issue, create_issue, update_issue, delete_issue
Commentslist_issue_comments, add_issue_comment
Sprintslist_cycles, create_cycle, add_issues_to_cycle, remove_issue_from_cycle
Moduleslist_modules, create_module, add_issues_to_module, delete_module
Metadatalist_states, list_labels, create_label
Searchsearch_workspace

Every tool returns JSON, so the model sees real field values rather than prose.

Notes

  • The API noun for a work item is issue in the HTTP API; the product calls them tasks. The tool names follow the API.
  • Writes are real. Consider a token scoped to a member with limited project access if you want the agent kept to a corner of the workspace.
  • Self-hosting: set ITHURA_API_URL to your instance and everything else works unchanged.

Links

License

MIT

Reviews

No reviews yet

Be the first to review this server!