# todoglow (npm · todoglow-mcp)

See what each of your coding agents is working on, and read or advance your todos.

- Trust score: 69/100 (medium)
- Change this week: +15
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-18

## Components

- npm · `todoglow-mcp`: 69/100 (this document), [markdown](https://verifymcp.io/servers/app-devglow-todoglow/todoglow-mcp.md), [page](https://verifymcp.io/servers/app-devglow-todoglow/todoglow-mcp)

## Channel facts

- Registry: `npm`
- Package: `todoglow-mcp`
- Version: `1.1.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-18.

- **Supply Chain Security**: 98/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - 30 of 96 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 6 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 778 tokens (~97/item across 8 items; 8 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add app-devglow-todoglow -- npx -y todoglow-mcp
```

### Codex

```bash
codex mcp add app-devglow-todoglow -- npx -y todoglow-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "app-devglow-todoglow": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "todoglow-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add app-devglow-todoglow --command npx --arg -y --arg todoglow-mcp
```

### Hermes

```yaml
mcp_servers:
  app-devglow-todoglow:
    command: "npx"
    args: ["-y", "todoglow-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "app-devglow-todoglow": {
      "command": "npx",
      "args": [
        "-y",
        "todoglow-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-12 (score 69, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-08-11 (score 54)

First indexed and scored.

## MCP tools (8)

### `set_topic` (~132 tokens)

Set Work Topic

Add a todo to the user's todoglow app. Only use this when the user explicitly asks to add a todo (e.g. 'todo 추가해줘', 'add this to my todos'). Do NOT call this automatically at conversation start — use update_thread instead. If called again in the same session with a pending todo, it will UPDATE the text instead of creating a new one.

Input parameters:

- `source` (string): Source identifier (e.g. "claude", "cursor"). Defaults to "mcp"
- `text` (string, required): The overarching topic or goal (max 200 chars). Keep it concise.

### `list_todos` (~45 tokens)

List Todos

List all active todos in todoglow. Returns id, text, status, and timing info.

Input parameters:

- `status` (string): Filter by status. Omit to list all.

### `list_receipt_todos` (~127 tokens)

List Receipt Todos

List completed todos for a month as they appear in todoglow's receipt view, with their current receipt display title. Use this before set_receipt_titles to see what needs a public title. In the receipt's privacy mode, a todo is shown in the clear ONLY if it has a display title; everything else is masked.

Input parameters:

- `month` (string, required): Month to list, as YYYY-MM (e.g. 2026-07).
- `only` (string): Filter: 'masked' = no display title yet, 'public' = has one. Default all.

### `set_receipt_titles` (~101 tokens)

Set Receipt Titles

Set the receipt display title for one or more todos, in a single batch. A todo with a display title is shown in the clear when the receipt's privacy mode is on; everything else is masked. Pass title: null to clear one (back to masked). Only give a title to todos the user is willing to publish in a screenshot — when in doubt, leave it masked.

Input parameters:

- `entries` (array, required): Batch of id/title pairs to apply.

### `get_active_todo` (~30 tokens)

Get Active Todo

Get the currently active (in_progress) todo — the one the user is focused on right now.

### `advance_todo` (~44 tokens)

Advance Todo Status

Advance a todo's status: pending → in_progress → completed. Use this when a todo is started or finished.

Input parameters:

- `id` (string, required): The todo ID to advance

### `update_thread` (~101 tokens)

Update Agent Thread

Register and update your work status in todoglow's AGENTS section. Call this at the START of every conversation with status 'working' and a short task description. Update status as work progresses (working → done/failed). Creates a new thread or updates an existing one by name.

Input parameters:

- `name` (string, required): Thread name (e.g. task description). Used to find or create the thread.
- `status` (string, required): Current status of the thread

### `get_threads` (~25 tokens)

Get Agent Threads

List all agent threads in todoglow. Shows background work status from AI agents.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/app-devglow-todoglow/todoglow-mcp#diagnostics

## Score history

- 2026-08-18: 69
- 2026-08-17: 69
- 2026-08-16: 69
- 2026-08-15: 69
- 2026-08-14: 69
- 2026-08-13: 69
- 2026-08-12: 69
- 2026-08-11: 54

## Links

- npm package: https://www.npmjs.com/package/todoglow-mcp
- Socket report: https://socket.dev/npm/package/todoglow-mcp
- Repository: https://github.com/aesopfrom0/todoglow-releases
- Website: https://devglow.app/todoglow
- Changelog RSS feed: https://verifymcp.io/servers/app-devglow-todoglow/todoglow-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/app-devglow-todoglow/todoglow-mcp.json
- HTML version of this page: https://verifymcp.io/servers/app-devglow-todoglow/todoglow-mcp