vikunja-mcp
Verified Safeby democratize-technology
Overview
Facilitates integration and automation of Vikunja task and project management by exposing its API functionalities via the Model Context Protocol (MCP), enabling structured, AI-driven interactions.
Installation
node dist/index.jsEnvironment Variables
- VIKUNJA_URL
- VIKUNJA_API_TOKEN
- RATE_LIMIT_ENABLED
- RATE_LIMIT_PER_MINUTE
- MAX_REQUEST_SIZE
- TOOL_TIMEOUT
- LOG_LEVEL
- DEBUG
- VIKUNJA_MAX_TASKS_LIMIT
Security Notes
The project demonstrates an extremely high focus on security. It includes comprehensive input sanitization (XSS, SQL injection, Command Injection, Path Traversal, LDAP/NoSQL injection, Unicode bypass, Prototype Pollution) with 180+ regex patterns and 40 dedicated test cases. Production-grade rate limiting with circuit breakers and mutexes is implemented to prevent DoS attacks, memory leaks, and race conditions, explicitly addressing architectural flaws. Sensitive data like API tokens are handled via environment variables and masked in logs. The 'defense in depth' strategy is robust and well-documented.
Similar Servers
claude-todo-emulator
Provides persistent task management for AI coding assistants within IDEs like Cursor and Windsurf by emulating Claude Code's todo system.
trello-mcp-server
Provides an AI-agent-friendly interface (MCP server) to interact with the Trello API for managing boards, lists, cards, and other Trello resources.
Teamwork-MCP
The MCP server simplifies interaction with the Teamwork.com API, enabling AI agents to manage projects, tasks, people, and companies within Teamwork.
openapi-mcp-server
Converts OpenAPI specifications into Model Context Protocol (MCP) tools, enabling AI assistants to interact with APIs.