ava
Verified Safeby yutakobayashidev
Overview
An AI-powered project management and communication tool for developers, automatically sharing progress and insights with teams via Slack based on AI agent activity.
Installation
pnpm devEnvironment Variables
- NEXT_PUBLIC_BASE_URL
- NEXT_PUBLIC_SITE_NAME
- DATABASE_URL
- SLACK_APP_CLIENT_ID
- SLACK_APP_CLIENT_SECRET
- SLACK_SIGNING_SECRET
- OPENAI_API_KEY
- STRIPE_SECRET_KEY
- STRIPE_WEBHOOK_SECRET
Security Notes
The project demonstrates robust security practices including OAuth 2.1 with PKCE for secure client authorization, timing-safe string comparison for secrets (preventing timing attacks), and cryptographic verification of Slack request signatures (HMAC SHA256) to prevent replay attacks and ensure authenticity of incoming requests. Sensitive information like API keys and secrets are externalized via environment variables. The `hono/secure-headers` middleware is also used for foundational web security.
Similar Servers
github-mcp-server
Connects AI tools (agents, assistants, chatbots) directly to GitHub's platform, enabling natural language interactions for repository management, issue/PR automation, code analysis, and workflow automation.
conductor-tasks
An intelligent assistant for developers to transform requirements into actionable tasks, generate implementation plans, track progress, and accelerate development, leveraging multiple LLMs and integrating into an editor via MCP or as a CLI.
responsible-vibe-mcp
Transforms any AI coding agent into a structured development partner by guiding it through battle-tested engineering workflows with persistent context and documentation.
backlog
A zero-configuration task manager that stores project tasks in Git-based Markdown files, designed for frictionless collaboration between AI agents and human developers.