calq-mcp
Verified Safeby Calq-dev
Overview
Provides a Model Context Protocol server for time tracking, project management, AI-powered memory, and team collaboration for developers, integrating with LLM agents.
Installation
docker compose up -dEnvironment Variables
- DATABASE_URL
- VOYAGE_API_KEY
- GITHUB_CLIENT_ID
- GITHUB_CLIENT_SECRET
- MCP_PORT
- CHROMA_URL
- BASE_URL
- OAUTH_CALLBACK_URL
- POSTGRES_PASSWORD
- YOUTRACK_URL
Security Notes
The server uses Drizzle ORM, which mitigates common SQL injection risks through its type-safe API. Authentication is handled via robust OAuth 2.1 with PKCE, leveraging GitHub as the identity provider. Sensitive configurations like API keys and secrets are correctly managed via environment variables. While `POSTGRES_PASSWORD` has a weak default in the `docker-compose.yml`, users are explicitly advised to configure their own. The generated Claude Desktop hook scripts execute Node.js, and perform local file I/O (e.g., reading transcripts); however, the paths are provided by the trusted Claude Desktop environment, minimizing direct arbitrary file access risks from external user input. Overall, the codebase demonstrates good security practices for a modern Node.js application.
Similar Servers
spec-workflow-mcp
Facilitates structured, specification-driven software development by providing a workflow engine, real-time dashboards, and tools for task management, approvals, and detailed implementation logging, integrated with AI agents and VSCode.
mcp-github-project-manager
AI-powered GitHub Project Management, including automated roadmap generation, sprint planning, issue triaging, task breakdown, and comprehensive project workflow automation.
mcp
Provides an MCP server to integrate Large Language Models with Teamwork.com for project management and helpdesk operations.
mcp-ai-agent-guidelines
A comprehensive AI agent development framework focused on structured design, prompt engineering, code analysis, and agent-to-agent orchestration for developers.