MCP Marketplace
Sign inSign up
Back to Browse

Dear Claude MCP Server

by Sns45
Developer ToolsUse Caution1.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Spawn Claude Code instances from 6 platforms when 'Dear Claude' is mentioned.

About

Spawn Claude Code instances from 6 platforms when 'Dear Claude' is mentioned.

Security Report

1.2
Use Caution1.2Critical Risk

This MCP server has several critical security vulnerabilities that put user data and system integrity at risk. Most critically, API credentials (GitHub tokens, Linear tokens, Jira credentials, Notion tokens, GitLab tokens) are embedded directly in prompt text sent to Claude instances, creating a path for credential exfiltration. Additionally, the server spawns arbitrary Claude instances with permissionless execution mode and broad filesystem/network access without sufficient isolation. The codebase shows dangerous patterns like unsanitized prompt construction, weak webhook signature verification, and insufficient rate limiting on instance spawning. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

3 files analyzed · 21 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

process_spawn

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

system_info

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

HTTP server port for webhooks (default: 3334)Optional

Environment variable: DEAR_CLAUDE_PORT

Bind address for the HTTP server (default: 127.0.0.1, loopback only)Optional

Environment variable: DEAR_CLAUDE_HOST

Override the data directory (default: $XDG_DATA_HOME/dear-claude or ~/.local/share/dear-claude)Optional

Environment variable: DEAR_CLAUDE_DATA_DIR

Token guarding the /api/* and /mcp control endpoints (auto-generated at <dataDir>/api-token if unset)Required

Environment variable: DEAR_CLAUDE_API_TOKEN

Override Tailscale hostname for webhook URLs (auto-detected if not set)Optional

Environment variable: TAILSCALE_HOSTNAME

GitHub OAuth App or GitHub App client IDOptional

Environment variable: GITHUB_CLIENT_ID

GitHub OAuth App or GitHub App client secretRequired

Environment variable: GITHUB_CLIENT_SECRET

GitHub webhook signature secretRequired

Environment variable: GITHUB_WEBHOOK_SECRET

GitHub personal access token (alternative to OAuth)Required

Environment variable: GITHUB_ACCESS_TOKEN

GitHub App ID (for installation-based auth)Optional

Environment variable: GITHUB_APP_ID

Path to GitHub App private key PEM fileOptional

Environment variable: GITHUB_APP_PRIVATE_KEY_PATH

Linear OAuth application client IDOptional

Environment variable: LINEAR_CLIENT_ID

Linear OAuth application client secretRequired

Environment variable: LINEAR_CLIENT_SECRET

Linear webhook signing secretRequired

Environment variable: LINEAR_WEBHOOK_SECRET

Linear personal API key (alternative to OAuth)Required

Environment variable: LINEAR_ACCESS_TOKEN

Jira Cloud domain (e.g. 'mycompany' for mycompany.atlassian.net)Optional

Environment variable: JIRA_DOMAIN

Jira account email for API authenticationOptional

Environment variable: JIRA_USER_EMAIL

Jira API token from id.atlassian.comRequired

Environment variable: JIRA_API_TOKEN

Shared secret for Jira webhook URL validationRequired

Environment variable: JIRA_WEBHOOK_SECRET

GitLab personal or project access tokenRequired

Environment variable: GITLAB_ACCESS_TOKEN

GitLab webhook secret tokenRequired

Environment variable: GITLAB_WEBHOOK_SECRET

Notion OAuth integration client IDOptional

Environment variable: NOTION_CLIENT_ID

Notion OAuth integration client secretRequired

Environment variable: NOTION_CLIENT_SECRET

Notion internal integration token (alternative to OAuth)Required

Environment variable: NOTION_ACCESS_TOKEN

Notion webhook verification secretRequired

Environment variable: NOTION_WEBHOOK_SECRET

Absolute path to Obsidian vault directory for file watchingOptional

Environment variable: OBSIDIAN_VAULT_PATH

Giphy API key for embedding GIF reactions in responsesRequired

Environment variable: GIPHY_API_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-sns45-dear-claude": {
      "env": {
        "JIRA_DOMAIN": "your-jira-domain-here",
        "GIPHY_API_KEY": "your-giphy-api-key-here",
        "GITHUB_APP_ID": "your-github-app-id-here",
        "JIRA_API_TOKEN": "your-jira-api-token-here",
        "JIRA_USER_EMAIL": "your-jira-user-email-here",
        "DEAR_CLAUDE_HOST": "your-dear-claude-host-here",
        "DEAR_CLAUDE_PORT": "your-dear-claude-port-here",
        "GITHUB_CLIENT_ID": "your-github-client-id-here",
        "LINEAR_CLIENT_ID": "your-linear-client-id-here",
        "NOTION_CLIENT_ID": "your-notion-client-id-here",
        "TAILSCALE_HOSTNAME": "your-tailscale-hostname-here",
        "GITHUB_ACCESS_TOKEN": "your-github-access-token-here",
        "GITLAB_ACCESS_TOKEN": "your-gitlab-access-token-here",
        "JIRA_WEBHOOK_SECRET": "your-jira-webhook-secret-here",
        "LINEAR_ACCESS_TOKEN": "your-linear-access-token-here",
        "NOTION_ACCESS_TOKEN": "your-notion-access-token-here",
        "OBSIDIAN_VAULT_PATH": "your-obsidian-vault-path-here",
        "DEAR_CLAUDE_DATA_DIR": "your-dear-claude-data-dir-here",
        "GITHUB_CLIENT_SECRET": "your-github-client-secret-here",
        "LINEAR_CLIENT_SECRET": "your-linear-client-secret-here",
        "NOTION_CLIENT_SECRET": "your-notion-client-secret-here",
        "DEAR_CLAUDE_API_TOKEN": "your-dear-claude-api-token-here",
        "GITHUB_WEBHOOK_SECRET": "your-github-webhook-secret-here",
        "GITLAB_WEBHOOK_SECRET": "your-gitlab-webhook-secret-here",
        "LINEAR_WEBHOOK_SECRET": "your-linear-webhook-secret-here",
        "NOTION_WEBHOOK_SECRET": "your-notion-webhook-secret-here",
        "GITHUB_APP_PRIVATE_KEY_PATH": "your-github-app-private-key-path-here"
      },
      "args": [
        "-y",
        "dear-claude"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

More Developer Tools MCP Servers

Git

Free

by Modelcontextprotocol · Developer Tools

Read, search, and manipulate Git repositories programmatically

80.0K
Stars
14
Installs
6.5
Security
No ratings yet
Local

Fetch

Free

by Modelcontextprotocol · Developer Tools

Web content fetching and conversion for efficient LLM usage

80.0K
Stars
15
Installs
5.3
Security
No ratings yet
Local

Toleno

Free

by Toleno · Developer Tools

Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.

180
Stars
683
Installs
8.0
Security
4.8
Local

mcp-creator-python

Free

by mcp-marketplace · Developer Tools

Create, build, and publish Python MCP servers to PyPI — conversationally.

-
Stars
112
Installs
10.0
Security
4.7
Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

-
Stars
81
Installs
10.0
Security
5.0
Remote

MarkItDown

Free

by Microsoft · Content & Media

Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption

168.6K
Stars
79
Installs
4.2
Security
5.0
Local