Infinite Campus (Campus Parent) for Claude — grades, attendance, assignments, messages
Infinite Campus (Campus Parent) for Claude — grades, attendance, assignments, messages
This MCP server for Infinite Campus implements solid authentication and session management with proper credential handling. Credentials are stored in environment variables (not hardcoded), transmitted securely in POST bodies (not URLs), and the codebase demonstrates careful input validation and error handling. A moderate concern exists around terms-of-service violation risk (the server scrapes a non-public API endpoint), but this is a user responsibility issue rather than a code security flaw. Permissions align well with the server's educational data access purpose. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.
3 files analyzed · 7 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: IC_BASE_URL
Environment variable: IC_DISTRICT
Environment variable: IC_USERNAME
Environment variable: IC_PASSWORD
Environment variable: IC_NAME
Environment variable: IC_DISABLE_FETCHPROXY
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-chrischall-infinitecampus-mcp": {
"env": {
"IC_NAME": "your-ic-name-here",
"IC_BASE_URL": "your-ic-base-url-here",
"IC_DISTRICT": "your-ic-district-here",
"IC_PASSWORD": "your-ic-password-here",
"IC_USERNAME": "your-ic-username-here",
"IC_DISABLE_FETCHPROXY": "your-ic-disable-fetchproxy-here"
},
"args": [
"-y",
"infinitecampus-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
MCP server for Infinite Campus (Campus Parent portal). Single-account config — linked districts are auto-discovered via CUPS SSO after login.
19 tools across academics, daily life, documents, messaging, and feature discovery.
| Domain | Tools |
|---|---|
| Districts | ic_list_districts |
| Students | ic_list_students |
| Schedule | ic_get_schedule |
| Assignments | ic_list_assignments (sectionID server-side; missingOnly / date filters client-side) |
| Grades | ic_list_grades, ic_list_recent_grades (default 14d window) |
| School calendar | ic_list_school_days |
| Attendance | ic_list_attendance (per-course summary), ic_list_attendance_events (individual events with codes + comments) |
| Behavior | ic_list_behavior (FeatureDisabled-aware) |
| Food service | ic_list_food_service (FeatureDisabled-aware) |
| Documents | ic_list_documents, ic_download_document |
| Messaging | ic_list_messages (3 sources: prism notifications + Messenger 2.0 inbox + portal announcements), ic_get_message (fetch parsed HTML body of an inbox message) |
| Teachers | ic_list_teachers (teachers per section + assigned counselors) |
| Assessments | ic_list_assessments (standardized test scores) |
| Fees | ic_list_fees (assignments + surplus balance) |
| Features | ic_get_features (per-enrollment displayOptions flags) |
Tools that the harness will gate as write/IO operations: ic_download_document.
infinitecampus-mcp tries two auth paths in priority order; whichever succeeds first is used. Existing setups keep working unchanged.
IC_BASE_URL=https://campus.springfield.k12.example.us
IC_DISTRICT=springfield
IC_USERNAME=parent@example.com
IC_PASSWORD=...
IC_NAME=Springfield # optional, defaults to IC_DISTRICT
IC_BASE_URL + IC_DISTRICT (still required so the MCP knows which host to talk to and which district to dispatch on), then install the fetchproxy 0.3.0 extension (Chrome Web Store / Safari .dmg) and sign into your IC portal once. The MCP reads the JSESSIONID (HttpOnly) + XSRF-TOKEN cookies on startup and goes direct-to-API from Node thereafter — the extension is not in the request hot path.Set IC_DISABLE_FETCHPROXY=1 to opt out of the fallback (turns missing credentials into a hard error — useful in headless CI).
Linked districts (via CUPS SSO) are auto-discovered after primary login — a parent with kids in two districts only configures the primary. No extra config needed. If you have truly separate IC instances with different credentials, run two MCP instances.
See .env.example.
Unofficial — not affiliated with Infinite Campus. AI-maintained.
By using this MCP server, you acknowledge and agree to the following:
1. This server accesses your own Campus Parent account. Auth happens via your own credentials, scoped to the student records your school district has authorized you to view. It does not — and cannot — access anyone else's student records.
2. Infinite Campus's Terms of Use govern your use of this server, just as they govern your direct use of Campus Parent. The clauses most relevant here:
Users may not access, use, or search the Services by any means other than our publicly supported interfaces (for example, scraping or using the content to train artificial intelligence software).
And: "You are responsible for safeguarding the password that you use to access the Service and you agree not to disclose your password to any third party."
You are agreeing to those terms — read by the maintainer 2026-05-23 — every time you invoke a tool in this server. This server uses Infinite Campus's mobile-app JSON endpoints (/campus/api/oneRosterCampus, /portal/api/...) which are not "publicly supported interfaces" — IC may treat this as a ToS violation.
3. Personal, parent/student use only. This project is not affiliated with, endorsed by, sponsored by, or in partnership with Infinite Campus, Inc. or any school district. It is a personal automation tool for an authorized Campus Parent / Campus Student user to read their own (or their student's) records. Do not use it to bulk-extract student data, share another family's grades, or train AI models on student records.
4. FERPA + COPPA apply. Student educational records are protected under the federal Family Educational Rights and Privacy Act (FERPA), and student data for under-13 users is additionally covered by COPPA. Even though your parent-portal access is lawful, how you store, redistribute, or feed that data into LLMs is regulated. Treat any output from this server (grades, attendance, behavior records, schedules) as confidential student data. Do not put it in shared LLM contexts, do not paste it into screenshots, and do not train models on it.
5. You accept full responsibility for any consequences of using this server in connection with your Campus Parent account — rate limiting, account warnings, district IT investigations, or any enforcement action your district or Infinite Campus takes. Your district may have additional acceptable-use policies (acceptable-use agreements, parent handbooks) that further restrict automation. If your district or Infinite Campus objects to your use, stop using this server.
This section is the maintainer's good-faith summary of the terms — it is not legal advice and does not modify or supersede Infinite Campus's actual ToU or any school district's policies.
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.