com.killbottleneck/killbottleneck
NPM · KILLBOTTLENECK-MCP
Goal and process maps for humans and AI agents on your own server.
Available components
Last scanned (14 hours ago)
Scores higher than 49% of npm servers
Category Project Management
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security81
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 30 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency35
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Licence could not be checked: the licence is shipped as a file inside the package, not declared as a standard (SPDX) licence identifier, so we cannot tell whether it is OSI-approved.Unverified
- Actively maintained (last published 45 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability74
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2179 tokens (~108/item across 20 items; 20 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage81
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 44% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "delete_node" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 20 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Checks we ran (15)
- Malware scan
- Known CVEs
- Install scripts
- Dependency health
- Source repository
- Provenance
- Maintenance
- Security disclosure
- Schema quality
- Stability
- Tool coverage
- Injection markers
- Destructive annotations
- Judged manipulation
- MCP protocol
Checks we could not complete (1)
These are gaps on our side, not findings about this package. We only credit what we can confirm, so a category made up entirely of them scores 0.
- License in Provenance & TransparencyLicence could not be checked: the licence is shipped as a file inside the package, not declared as a standard (SPDX) licence identifier, so we cannot tell whether it is OSI-approved.
Does not apply to this package (2)
- Endpoint SecurityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.
- Transport & ReachabilityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.
The score does not measure everything. What the score does not measure →
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
- Stability: 0.97 → pass security
- 3 Nov 26 −1
- Stability: pass → 0.97 functional
- 28 Oct 26 +1
- Stability: 0.97 → pass security
- 26 Oct 26 −1
- Stability: pass → 0.93 functional
- 24 Oct 26 −5
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: pass → fail ▼ security
- 17 Oct 26 +2
- Stability: 0.90 → pass security
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Oct 26 −3
- Stability: pass → 0.83 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/killbottleneck-mcp@0.63.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 93 packages
| Packages resolved | 93 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
add_nodes ~138
Add a subtree of nodes to an existing map under parent_id (or under the apex when parent_id is omitted). A node is a goal; a node with an assignee (owner) OR a deadline IS a task — that is the only kind of task in killBottleneck (there is no separate task record; new work = new node). NOTE: this re-computes the layout of the whole map. Max 200 nodes per call. Returns the updated tree.
| Name | Type | Req | Description |
|---|---|---|---|
| items | array | yes | – |
| map_id | string | yes | – |
| parent_id | string | – | Existing node id to attach under; omit for apex |
No output schema declared.
No examples provided.
create_event ~155
Create a personal calendar EVENT with a time (meeting, call, dentist…) — NOT a task and not part of any map. Optional participants (e-mails of instance members from list_people; each sees the event in their calendar) and a reminder N minutes before (in-app + e-mail). Times are the instance's local time.
| Name | Type | Req | Description |
|---|---|---|---|
| day | string | yes | YYYY-MM-DD |
| note | string | – | – |
| participants | array | – | e-mails of instance members |
| remind_before_min | integer | – | reminder N minutes before start (0 = at start); omit for no reminder |
| time | string | – | HH:MM (24h); omit for an all-day event |
| title | string | yes | – |
No output schema declared.
No examples provided.
create_map ~116
Create a new goal map from an outline. The map gets an apex (root goal) from `title`/`apex_text`; `outline` items become nested nodes. Layout is computed automatically. Max 200 nodes per call. Returns the created tree with node ids.
| Name | Type | Req | Description |
|---|---|---|---|
| apex_text | string | – | Root goal statement, defaults to title |
| description | string | – | Map description |
| outline | array | yes | Top-level items under the apex, each may have children |
| title | string | yes | Map/project title |
No output schema declared.
No examples provided.
create_reminder ~128
Set a timed REMINDER for a map node relative to its deadline: offset_days before the deadline (0 = on the deadline day, 1 = the day before) at time HH:MM, instance local time. One reminder per person and node (calling again replaces it). Does NOT change the deadline; the node must already have one (set it with update_node first). Private to the key owner.
| Name | Type | Req | Description |
|---|---|---|---|
| map_id | string | yes | – |
| node_id | string | yes | – |
| offset_days | integer | – | – |
| time | string | yes | HH:MM (24h) |
No output schema declared.
No examples provided.
create_rule ~193
Create an automation rule on a map: WHEN trigger fires (and optional AND conditions match) DO the actions in order. Rules run for changes made in the UI, via API and by agents alike. Structural limits: 50 rules per map, 10 actions, 20 conditions — there is NO monthly run quota. A rule applies only to future events, never retroactively. node_id scopes the rule to one node (required for schedule rules whose actions target a node).
| Name | Type | Req | Description |
|---|---|---|---|
| actions | array | yes | 1-10 actions, executed in order |
| conditions | array | – | Optional AND chain checked on the trigger node |
| enabled | boolean | – | Default true |
| map_id | string | yes | – |
| name | string | yes | Human-readable rule name (max 120 chars) |
| node_id | string | – | Optional: scope the rule to one node of the map |
| trigger | object | yes | – |
No output schema declared.
No examples provided.
delete_node ~65
Delete a node INCLUDING its whole subtree. The apex (root) cannot be deleted and whole maps cannot be deleted via the API. Irreversible — read the map first and double-check the node id.
| Name | Type | Req | Description |
|---|---|---|---|
| map_id | string | yes | – |
| node_id | string | yes | – |
No output schema declared.
No examples provided.
delete_rule ~44
Delete an automation rule. Its run log stays (with the rule name snapshot). Irreversible.
| Name | Type | Req | Description |
|---|---|---|---|
| map_id | string | yes | – |
| rule_id | string | yes | – |
No output schema declared.
No examples provided.
delete_rule_template ~42
Delete a rule template from the library (author or admin only). Rules already created from it are independent copies and stay untouched.
| Name | Type | Req | Description |
|---|---|---|---|
| template_id | string | yes | – |
No output schema declared.
No examples provided.
get_map ~97
Read one map as an indented tree with node ids, statuses ([✓] done, [~] in progress, [ ] todo), deadlines and owners. The header shows the key's access level (owner/edit = full write; work and read = only the status of the key owner's own nodes, like ticking off in the app). Always call this before modifying a map you have not read yet.
| Name | Type | Req | Description |
|---|---|---|---|
| map_id | string | yes | – |
No output schema declared.
No examples provided.
get_org_structure ~69
Read the organization structure (the org map): positions and functions with node ids, holders and deputies. Use the node ids as dynamic rule targets "position:<nodeId>" / "deputy_of_position:<nodeId>". Read-only — holders and deputies are appointed by an admin in the app.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_portfolio ~83
Read the portfolio overview across all team and shared maps the key owner can read (private maps are excluded, exactly like the Organization page): per-project completion, overdue and stuck items, people with overdue work and a 7-day change summary. Optional today=YYYY-MM-DD. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| today | string | – | YYYY-MM-DD, defaults to the server date |
No output schema declared.
No examples provided.
list_events ~55
List the key owner's calendar events (own and invited) in a day range; default today−365 … +730. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | YYYY-MM-DD |
| to | string | – | YYYY-MM-DD |
No output schema declared.
No examples provided.
list_maps ~57
List goal maps the key owner can see — own, team and shared maps (id, title, node count, last update, access: owner/edit/work/read). Use archived=true to list archived maps instead.
| Name | Type | Req | Description |
|---|---|---|---|
| archived | boolean | – | – |
No output schema declared.
No examples provided.
list_people ~80
List the people work can be assigned to: instance members (e-mail, display name, role) and external contacts visible to the key owner (their owner_email is a pseudo e-mail usable as owner). Use these e-mails as `owner` in create_map/add_nodes/update_node and in set_owner rules — an unknown e-mail is rejected. Read-only.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_rule_runs ~87
Read the run log of a map's automation rules (newest first, max 100): what fired, on which node, ok/failed/skipped and what the actions did. skipped = a safety stop (rule chain depth or per-save cap), detail says which.
| Name | Type | Req | Description |
|---|---|---|---|
| map_id | string | yes | – |
| rule_id | string | – | Optional: only runs of this rule |
No output schema declared.
No examples provided.
list_rule_templates ~58
List the instance-wide library of rule templates (shape of a rule without a map or node scope). To use one, read it and call create_rule on the target map with its trigger/conditions/actions — the created rule is an independent copy.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_rules ~62
List automation rules of a map: id, name, enabled, scope node, trigger, conditions, actions, last_fired and last_error (a non-empty last_error means the rule is misconfigured and its owner was notified).
| Name | Type | Req | Description |
|---|---|---|---|
| map_id | string | yes | – |
No output schema declared.
No examples provided.
save_rule_template ~119
Save a rule shape into the instance-wide template library (create, or update with template_id — only the author or an admin may update). Templates carry no map and no node scope; create_subnodes may only use parent=trigger_node. Template names are unique.
| Name | Type | Req | Description |
|---|---|---|---|
| actions | array | yes | – |
| conditions | array | – | – |
| name | string | yes | Unique template name (max 120 chars) |
| template_id | string | – | Update an existing template (author or admin only); omit to create |
| trigger | object | yes | – |
No output schema declared.
No examples provided.
update_node ~407
Update fields of one node: title, status (todo/in_progress/done), description, deadline (YYYY-MM-DD, empty string clears), planned_on (YYYY-MM-DD, today to +7 days, empty string clears — WHEN the key owner plans to work on it; this is how killBottleneck expresses priority, never by moving the deadline), owner (e-mail, empty string clears), wait_for_children, colour, who performs it (executor_kind / executor_name) and the automation wish (automation_wanted / automation_note). Unknown fields are rejected with the list of allowed ones. Marking status done may unblock waiting nodes, notify their owners and trigger automations on them.
| Name | Type | Req | Description |
|---|---|---|---|
| automation_note | string | – | Optional context for the automation wish. Empty string clears. |
| automation_wanted | boolean | – | Wish that this step were automated; notifies the AI agent managers. |
| color | string | – | Node colour as #rrggbb, empty string clears |
| deadline | string | – | – |
| description | string | – | – |
| executor_kind | string | – | Who performs the step. Default "human". |
| executor_name | string | – | Which automation handles this step, e.g. "n8n backup" — a record of what exists, not an instruction. Empty string clears. |
| map_id | string | yes | – |
| node_id | string | yes | – |
| owner | string | – | Accountable PERSON (e-mail of an instance member, see list_people). Stays a human even for AI/cron steps — this is who gets notified. Empty string clears. Unknown e-mails are rejected. |
| planned_on | string | – | YYYY-MM-DD, today to +7 days, empty string clears. WHEN the key owner plans to work on it — this is how killBottleneck expresses priority; never move the deadline to express priority. |
| status | string | – | – |
| title | string | – | – |
| wait_for_children | boolean | – | – |
No output schema declared.
No examples provided.
update_rule ~124
Update an automation rule. Pass only `enabled` to toggle it on/off; otherwise pass the FULL new shape (name, trigger, actions, optional conditions/node_id) — partial field edits are not merged. Edits apply to future events only and clear the rule's error state.
| Name | Type | Req | Description |
|---|---|---|---|
| actions | array | – | – |
| conditions | array | – | – |
| enabled | boolean | – | – |
| map_id | string | yes | – |
| name | string | – | – |
| node_id | string | – | – |
| rule_id | string | yes | – |
| trigger | object | – | – |
No output schema declared.
No examples provided.
How do I install the com.killbottleneck/killbottleneck MCP server?
com.killbottleneck/killbottleneck runs locally as an npm package, launched with npx -y killbottleneck-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · killbottleneck-mcp
claude mcp add com-killbottleneck-killbottleneck -- npx -y killbottleneck-mcp
What is the com.killbottleneck/killbottleneck MCP server?
com.killbottleneck/killbottleneck is an MCP server listed in the public MCP registry as com.killbottleneck/killbottleneck. Goal and process maps for humans and AI agents on your own server. This page covers its npm package (killbottleneck-mcp).
Is the com.killbottleneck/killbottleneck MCP server safe to use?
com.killbottleneck/killbottleneck scores 74 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.killbottleneck/killbottleneck MCP server expose?
com.killbottleneck/killbottleneck exposes 20 tools: list_maps, get_map, create_map, add_nodes, update_node, and 15 more. Their descriptions and schemas cost roughly 2,179 tokens of context every time the server is loaded.
Is the com.killbottleneck/killbottleneck MCP server still maintained?
com.killbottleneck/killbottleneck is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What did VerifyMCP test on the com.killbottleneck/killbottleneck MCP server?
VerifyMCP ran 15 checks on com.killbottleneck/killbottleneck, covering Malware scan, Known CVEs, Install scripts, Dependency health and 11 more. One item could not be completed, a gap on our side rather than a finding about com.killbottleneck/killbottleneck: License. Endpoint Security and Transport & Reachability do not apply to an npm package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.