WEEEK (smart)
NPM · WEEEK-MCP-SMART
WEEEK tasks and CRM by name, not IDs — an MCP server covering the whole public API
Available components
Last scanned (23 hours ago)
Scores higher than 90% of npm servers
Category Project Management
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security81
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 30 of 94 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency97
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to IlyaIvanchikov/weeek-mcp). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 16 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability68
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 2236 tokens (~89/item across 25 items; 25 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage71
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 14% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 25 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Nov 26 +1
- Stability: 0.97 → pass security
- 1 Nov 26 −1
- Stability: pass → 0.97 functional
- 26 Oct 26 +1
- Stability: 0.97 → pass security
- 25 Oct 26 −1
- Stability: pass → 0.97 functional
- 24 Oct 26 −5
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: pass → fail ▼ security
- 19 Oct 26 +1
- Stability: 0.97 → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Stability: 0.97 → pass security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Package version: 1.0.1 → 1.0.2 functional
- 18 Oct 26 0
- Stability: 0.93 → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Package version: 1.0.0 → 1.0.1 functional
- 17 Oct 26 +1
- Package version: 0.7.0 → 1.0.0 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Analysed npm/weeek-mcp-smart@1.0.2
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | IlyaIvanchikov/weeek-mcp |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/IlyaIvanchikov/weeek-mcp/.github/workflows/release.yml@refs/tags/v1.0.2 |
| Rekor log index | 3316241880 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:e9629af8a627837854f1e56919f4be14d9b36fe5dfa31d77cf24f38b9485993ea4de14f6ce84f1e6e487919773a724d32c566fea772bf903b597be774 |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 94 packages
| Packages resolved | 94 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
weeek_add_assignees ~58
Assign one or more workspace members (by name or id) to a WEEEK task, keeping the existing assignees. Returns the task.
| Name | Type | Req | Description |
|---|---|---|---|
| assignees | array | yes | – |
| id | integer | yes | – |
No output schema declared.
No examples provided.
weeek_add_comment ~69
Add a markdown comment to a WEEEK task as the token's owner. Pass `reply_to` (a comment id from weeek_list_comments) to answer in a thread.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | – |
| markdown | string | yes | – |
| reply_to | integer | – | – |
No output schema declared.
No examples provided.
weeek_add_task_to_project ~73
Show a WEEEK task in another project too (a task can live in several). Project and optional column by name or id. To move between boards of one project use weeek_move_task.
| Name | Type | Req | Description |
|---|---|---|---|
| column | – | – | – |
| id | integer | yes | – |
| project | string|number | yes | – |
No output schema declared.
No examples provided.
weeek_add_watchers ~61
Add members (by name or id) as watchers of a WEEEK task, so they get its notifications. Returns the task; watchers are its `watchers` field.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | – |
| watchers | array | yes | – |
No output schema declared.
No examples provided.
weeek_attach_file ~78
Attach a local file to a WEEEK task. For safety only files inside the allowed directory (the server's working directory by default, or WEEEK_ATTACH_DIR if set) — and its subfolders — may be attached; paths outside it are refused.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | – |
| task_id | integer | yes | – |
No output schema declared.
No examples provided.
weeek_complete_task ~39
Mark a WEEEK task complete, or reopen it (completed:false).
| Name | Type | Req | Description |
|---|---|---|---|
| completed | boolean | yes | – |
| id | integer | yes | – |
No output schema declared.
No examples provided.
weeek_create_task ~275
Create a WEEEK task. Accepts project/column/assignee by NAME or id, a natural-language `due` date, a priority (low, medium, high, hold), a type (action, meet, call), a `parent` task id for a subtask, and custom-field values in `fields` by field name (global and project fields). One call — no need to look up ids first. Omit `assignee` to self-assign; to change assignees later use weeek_add_assignees / weeek_remove_assignees.
| Name | Type | Req | Description |
|---|---|---|---|
| assignee | – | – | – |
| column | – | – | – |
| description | string | – | – |
| due | string | – | – |
| fields | object | – | Custom-field values by field name or id. text/link: a string; number: a number; boolean: true/false; datetime: a natural-language date or time; select: an option name; multiselect: option names; memb… |
| parent | integer | – | Id of the task this one becomes a subtask of. |
| priority | string | – | – |
| project | string|number | yes | – |
| title | string | yes | – |
| type | string | – | – |
No output schema declared.
No examples provided.
weeek_create_tasks ~129
Create up to 50 WEEEK tasks in one call. Each item takes the same fields as weeek_create_task: `title` and `project` (name or id) are required; `column`, `assignee`, `due`, `description`, `priority`, `type`, `parent` and `fields` are optional. Items are created in order and one bad name does not abort the batch: the reply is one entry per item, `{ ok: true, task }` or `{ ok: false, error, candidates? }`.
| Name | Type | Req | Description |
|---|---|---|---|
| tasks | array | yes | – |
No output schema declared.
No examples provided.
weeek_delete_comment ~60
Permanently delete one comment from a WEEEK task. Irreversible; requires confirm:true.
| Name | Type | Req | Description |
|---|---|---|---|
| comment_id | integer | yes | – |
| confirm | boolean | yes | Must be true to confirm this irreversible action. |
| id | integer | yes | – |
No output schema declared.
No examples provided.
weeek_delete_task ~72
Permanently delete a WEEEK task by id. Irreversible — the task is removed, not just completed. Requires confirm:true; to merely close a task use weeek_complete_task instead.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | yes | Must be true to confirm this irreversible action. |
| id | integer | yes | – |
No output schema declared.
No examples provided.
weeek_get_attachment ~93
Read one WEEEK attachment by id. For an image WEEEK hosts itself this returns the image, so a task whose requirements live in a screenshot can actually be read instead of guessed at from the surrounding text; anything else comes back as metadata. Ids come from a task's `attachments` list (weeek_get_task).
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
| metadataOnly | boolean | – | – |
No output schema declared.
No examples provided.
weeek_get_task ~61
Get one WEEEK task by id: assignees, watchers, parent and subtasks, priority, dates, tags, locations, time entries, attachments and custom-field values (`customFields`, option names shown).
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | – |
No output schema declared.
No examples provided.
weeek_list_boards ~58
List the boards of a WEEEK project (by name or id): id, name, privacy. Use it to find a board for weeek_move_task or weeek_list_columns.
| Name | Type | Req | Description |
|---|---|---|---|
| project | string|number | yes | – |
No output schema declared.
No examples provided.
weeek_list_columns ~56
List the columns of a WEEEK board: id, name, boardId. Pass the board by id, or by name together with its `project`.
| Name | Type | Req | Description |
|---|---|---|---|
| board | string|number | yes | – |
| project | – | – | – |
No output schema declared.
No examples provided.
weeek_list_comments ~71
List the comments on a WEEEK task: id, author member id, markdown, reply parent, timestamps. Paged; `hasMore` says whether to call again with a larger offset.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | – |
| limit | integer | – | – |
| offset | integer | – | – |
No output schema declared.
No examples provided.
weeek_list_members ~45
List WEEEK workspace members (id + display name). Any tool that takes an assignee, watcher or member accepts these names directly; use this to see who exists.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
weeek_list_projects ~40
List WEEEK projects: id, name, isPrivate, status and portfolioId. Use weeek_get_project for a project's description and team.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
weeek_list_tasks ~246
List WEEEK tasks with server-side filters: project, board, column, assignee (userId), completion, free-text `search`, priority, type, a single `day` or a startDate–endDate range (dd.mm.yyyy), completion dates. Set allPages=true together with userId, startDate, and endDate to fetch every matching page inside the connector without returning unrelated workspace pages.
| Name | Type | Req | Description |
|---|---|---|---|
| all | boolean | – | Include completed and deleted tasks; when set, `completed` is ignored. |
| allPages | boolean | – | – |
| boardColumnId | integer | – | – |
| boardId | integer | – | – |
| completed | boolean | – | – |
| completedAtFrom | – | – | – |
| completedAtTo | – | – | – |
| day | string | – | – |
| endDate | – | – | – |
| limit | integer | – | – |
| offset | integer | – | – |
| priority | string | – | – |
| projectId | integer | – | – |
| search | string | – | Text to find in titles and descriptions. |
| sortBy | string | – | – |
| startDate | – | – | – |
| type | string | – | – |
| userId | string | – | – |
No output schema declared.
No examples provided.
weeek_move_task ~69
Move a WEEEK task to a column (by name or id, scoped to the given board) on that board. Find board ids with weeek_list_boards.
| Name | Type | Req | Description |
|---|---|---|---|
| board_id | integer | yes | – |
| column | string|number | yes | – |
| id | integer | yes | – |
No output schema declared.
No examples provided.
weeek_remove_assignees ~70
Unassign one or more members (by name or id) from a WEEEK task. Requires confirm:true. Returns the task.
| Name | Type | Req | Description |
|---|---|---|---|
| assignees | array | yes | – |
| confirm | boolean | yes | Must be true to confirm this irreversible action. |
| id | integer | yes | – |
No output schema declared.
No examples provided.
weeek_remove_task_from_project ~71
Remove a WEEEK task from one of its projects (by name or id); the task keeps its other projects. Requires confirm:true.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | yes | Must be true to confirm this irreversible action. |
| id | integer | yes | – |
| project | string|number | yes | – |
No output schema declared.
No examples provided.
weeek_remove_watchers ~63
Stop members (by name or id) watching a WEEEK task. Requires confirm:true. Returns the task.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | yes | Must be true to confirm this irreversible action. |
| id | integer | yes | – |
| watchers | array | yes | – |
No output schema declared.
No examples provided.
weeek_set_task_parent ~55
Make a WEEEK task a subtask of `parent` (a task id), or pass parent:null to detach it and make it top-level again.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | – |
| parent | – | yes | – |
No output schema declared.
No examples provided.
weeek_update_task ~297
Update a WEEEK task: title, natural-language `due` and `start` dates (`start` goes with the due date — `due` or the task's own — because the API refuses one alone; some plans refuse start dates), priority (low, medium, high, hold), type (action, meet, call), `duration` in minutes, `tags` by name or id (replaces; an empty list clears), and `fields`: custom-field values by field name (options and members by name; null clears; other fields keep their values). Description is NOT updatable — the API ignores it; set it on create. Assignees, watchers, parent and projects have their own tools.
| Name | Type | Req | Description |
|---|---|---|---|
| due | string | – | – |
| duration | integer | – | – |
| fields | object | – | Custom-field values by field name or id. text/link: a string; number: a number; boolean: true/false; datetime: a natural-language date or time; select: an option name; multiselect: option names; memb… |
| id | integer | yes | – |
| priority | string | – | – |
| start | string | – | – |
| tags | array | – | Replaces the task's tags; an empty list clears them. |
| title | string | – | – |
| type | string | – | – |
No output schema declared.
No examples provided.
weeek_version ~27
Return this MCP server's name and version, so callers can check which build is running.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
How do I install the WEEEK (smart) MCP server?
WEEEK (smart) runs locally as an npm package, launched with npx -y weeek-mcp-smart. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · weeek-mcp-smart
claude mcp add ilyaivanchikov-weeek-mcp-smart -- npx -y weeek-mcp-smart
What is the WEEEK (smart) MCP server?
WEEEK (smart) is an MCP server listed in the public MCP registry as io.github.IlyaIvanchikov/weeek-mcp-smart. WEEEK tasks and CRM by name, not IDs, an MCP server covering the whole public API. This page covers its npm package (weeek-mcp-smart).
Is the WEEEK (smart) MCP server safe to use?
WEEEK (smart) scores 86 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 4 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the WEEEK (smart) MCP server expose?
WEEEK (smart) exposes 25 tools: weeek_version, weeek_list_projects, weeek_list_boards, weeek_list_columns, weeek_list_tasks, and 20 more. Their descriptions and schemas cost roughly 2,236 tokens of context every time the server is loaded.
Is the WEEEK (smart) MCP server still maintained?
WEEEK (smart) is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the WEEEK (smart) MCP server under?
WEEEK (smart) declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.