Back to Browse

Locus MCP Server

Developer ToolsUse Caution4.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

stories.yaml — an open specification for software requirements, enforced by CI.

About

stories.yaml — an open specification for software requirements, enforced by CI.

Security Report

4.8
Use Caution4.8High Risk

Locus MCP Server is a well-architected developer tool for managing user stories with appropriate authentication, reasonable permissions scoping, and good code quality. The server supports both local file mode (zero-auth) and cloud mode (API key auth), with proper credential handling via environment variables. No critical vulnerabilities or malicious patterns detected. Minor findings are limited to low-severity code quality concerns and informational observations. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

3 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Optional: Locus API key for cloud team sync. Prefix ptmcp_. Not required for local stories.yaml mode.Required

Environment variable: PROTOTYPER_API_KEY

Optional: Locus project UUID for cloud team sync.Optional

Environment variable: PROTOTYPER_PROJECT_ID

Optional: Explicit path to stories.yaml. Defaults to auto-discovery from project root.Optional

Environment variable: LOCUS_STORIES_PATH

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-jonybur-oc-mcp-server": {
      "env": {
        "LOCUS_STORIES_PATH": "your-locus-stories-path-here",
        "PROTOTYPER_API_KEY": "your-prototyper-api-key-here",
        "PROTOTYPER_PROJECT_ID": "your-prototyper-project-id-here"
      },
      "args": [
        "-y",
        "@locus-dev/mcp-server"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!