io.github.usekaneo/kaneo

NPM · @KANEO/MCP · SCANNED AUG 12

Official MCP server for Kaneo: manage tasks, projects, and labels from Claude and other MCP clients

Available components

+33 this week 79 79 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security98

No malware found by supply-chain analysis.Pass
No known CVEs affecting this package version or its production dependencies.Pass
No install/post-install scripts declared.Pass
35 of 110 dependencies flagged as unhealthy. View diagnostics → Partial

Provenance & Transparency100

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Cryptographically verified build provenance (signed, bound to usekaneo/kaneo). View diagnostics → Pass
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 1 days ago).Pass
Publishes a security disclosure policy (SECURITY.md).Pass

Schema Quality & AI Usability66

AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 1506 tokens (~41/item across 36 items; 36 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage70

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
9% of tool parameters carry a description.Partial

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @kaneo/mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add usekaneo-kaneo -- npx -y @kaneo/mcp

# add to Codex CLI

codex mcp add usekaneo-kaneo -- npx -y @kaneo/mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "usekaneo-kaneo": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@kaneo/mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add usekaneo-kaneo --command npx --arg -y --arg @kaneo/mcp

# ~/.hermes/config.yaml

mcp_servers:
  usekaneo-kaneo:
    command: "npx"
    args: ["-y", "@kaneo/mcp"]

// mcp.json

{
  "mcpServers": {
    "usekaneo-kaneo": {
      "command": "npx",
      "args": [
        "-y",
        "@kaneo/mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

12 Aug 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
10 Aug 26 +3
- Schema quality: 1010 → 1495 ▼ functional
- Tool coverage: 3% → 9% ▲ functional
- Package version: 0.1.9 → 0.1.10 functional
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
8 Aug 26 +1
- Security disclosure: fail → pass ▲ functional
7 Aug 26 +4
- Known CVEs: partial → pass ▲ security
- Dependency health: partial → 0.84 functional
6 Aug 26 +24
- Tool coverage: unverified → 100 ▲ functional
- Stability: unverified → 0.07 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- First check of Schema quality: fair functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 3 functional
- First check of Schema quality: pass functional
5 Aug 26 0
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: pass functional
- First check of Tool coverage: 3 functional
- First check of Schema quality: fair functional
- First check of Schema quality: fail functional
- Package version: 0.1.8 → 0.1.9 functional
4 Aug 26 46

First indexed and scored.

Show 4 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 12 Aug 2026 · Analysed npm/@kaneo/mcp@0.1.11

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result	Verified
Ecosystem	npm
Reason	Verified
Discovered via	Registry attestation endpoint
Source repo	usekaneo/kaneo
Certificate issuer	https://token.actions.githubusercontent.com
Certificate SAN	https://github.com/usekaneo/kaneo/.github/workflows/publish-mcp.yml@refs/heads/main
Rekor log index	2413903539
Predicate type	https://slsa.dev/provenance/v1
Subject digest	sha512:51c9b06419a9eb3b81a18b986801250366d56ed13a47ccfb497f5b00767de3a74d5f6e0c4f74235ae001d2e0f762bff5758f8e01eb90371d04e1f3524

Dependencies 110 packages

Packages resolved	110
Stale	35
Tree resolution	Complete

MCP tools · 36 exposed · ~1,506 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

attach_label_to_task ~34

Attach an existing label to a task.

Input Output Examples

Name	Type	Req	Description
labelId	string	yes	–
taskId	string	yes	–

No output schema declared.

No examples provided.

create_label ~52

Create a label in a workspace (optionally attach to a task).

Input Output Examples

Name	Type	Req	Description
color	string	yes	–
name	string	yes	–
taskId	string	–	–
workspaceId	string	yes	–

No output schema declared.

No examples provided.

create_project ~44

Create a project in a workspace.

Input Output Examples

Name	Type	Req	Description
icon	string	yes	–
name	string	yes	–
slug	string	yes	–
workspaceId	string	yes	–

No output schema declared.

No examples provided.

create_task ~75

Create a task in a project.

Input Output Examples

Name	Type	Req	Description
description	string	yes	–
dueDate	string	–	–
priority	string	yes	–
projectId	string	yes	–
startDate	string	–	–
status	string	yes	–
title	string	yes	–
userId	string	–	–

No output schema declared.

No examples provided.

create_task_comment ~31

Add a comment to a task.

Input Output Examples

Name	Type	Req	Description
content	string	yes	–
taskId	string	yes	–

No output schema declared.

No examples provided.

create_task_relation ~83

Create a relation between two tasks. relationType: 'subtask' (sourceTaskId is the parent, targetTaskId the child), 'blocks' (sourceTaskId blocks targetTaskId), or 'related' (bidirectional).

Input Output Examples

Name	Type	Req	Description
relationType	string	yes	–
sourceTaskId	string	yes	–
targetTaskId	string	yes	–

No output schema declared.

No examples provided.

create_time_entry ~56

Log time against a task. Omit endTime to leave the entry running.

Input Output Examples

Name	Type	Req	Description
description	string	–	–
endTime	string	–	–
startTime	string	yes	–
taskId	string	yes	–

No output schema declared.

No examples provided.

delete_label ~43

Delete a label by ID. Only task-associated labels can be deleted; workspace-level labels (taskId null) are rejected by the API.

Input Output Examples

Name	Type	Req	Description
id	string	yes	–

No output schema declared.

No examples provided.

delete_task ~22

Delete a task by ID.

Input Output Examples

Name	Type	Req	Description
taskId	string	yes	–

No output schema declared.

No examples provided.

delete_task_comment ~26

Delete one of your comments from a task.

Input Output Examples

Name	Type	Req	Description
commentId	string	yes	–

No output schema declared.

No examples provided.

delete_task_relation ~25

Delete a task relation by its relation ID.

Input Output Examples

Name	Type	Req	Description
id	string	yes	–

No output schema declared.

No examples provided.

detach_label_from_task ~27

Detach a label from its current task.

Input Output Examples

Name	Type	Req	Description
labelId	string	yes	–

No output schema declared.

No examples provided.

get_project ~22

Get a single project by ID.

Input Output Examples

Name	Type	Req	Description
id	string	yes	–

No output schema declared.

No examples provided.

get_task ~22

Get a task by ID.

Input Output Examples

Name	Type	Req	Description
taskId	string	yes	–

No output schema declared.

No examples provided.

get_task_relations ~33

List all relations (subtask/blocks/related) involving a task.

Input Output Examples

Name	Type	Req	Description
taskId	string	yes	–

No output schema declared.

No examples provided.

get_time_entry ~24

Get a single time entry by ID.

Input Output Examples

Name	Type	Req	Description
id	string	yes	–

No output schema declared.

No examples provided.

list_notifications ~15

List the signed-in user's notifications.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_project_columns ~39

List a project's columns. Their slugs are the values update_task_status and create_task accept as a status.

Input Output Examples

Name	Type	Req	Description
projectId	string	yes	–

No output schema declared.

No examples provided.

list_projects ~35

List projects in a workspace.

Input Output Examples

Name	Type	Req	Description
includeArchived	boolean	–	Include archived projects
workspaceId	string	yes	Workspace ID

No output schema declared.

No examples provided.

list_task_activity ~24

List a task's activity history.

Input Output Examples

Name	Type	Req	Description
taskId	string	yes	–

No output schema declared.

No examples provided.

list_task_comments ~23

List comments on a task.

Input Output Examples

Name	Type	Req	Description
taskId	string	yes	–

No output schema declared.

No examples provided.

list_task_time_entries ~27

List the time entries logged against a task.

Input Output Examples

Name	Type	Req	Description
taskId	string	yes	–

No output schema declared.

No examples provided.

list_tasks ~97

List tasks for a project (optionally filtered/sorted).

Input Output Examples

Name	Type	Req	Description
assigneeId	string	–	–
dueAfter	string	–	–
dueBefore	string	–	–
limit	integer	–	–
page	integer	–	–
priority	string	–	–
projectId	string	yes	–
sortBy	string	–	–
sortOrder	string	–	–
status	string	–	–

No output schema declared.

No examples provided.

list_workspace_labels ~24

List labels defined in a workspace.

Input Output Examples

Name	Type	Req	Description
workspaceId	string	yes	–

No output schema declared.

No examples provided.

list_workspace_members ~37

List the members of a workspace. Use this to resolve the user ID an assignee tool expects.

Input Output Examples

Name	Type	Req	Description
workspaceId	string	yes	–

No output schema declared.

No examples provided.

list_workspaces ~24

List workspaces (Better Auth organizations) the signed-in user can access.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

move_task ~45

Move a task to another project (and optional column status).

Input Output Examples

Name	Type	Req	Description
destinationProjectId	string	yes	–
destinationStatus	string	–	–
taskId	string	yes	–

No output schema declared.

No examples provided.

search ~91

Search across tasks, projects, workspaces, comments, and activities.

Input Output Examples

Name	Type	Req	Description
limit	integer	–	Maximum results, 1 to 50. Defaults to 20.
projectId	string	–	Limit to one project
q	string	yes	Search query
type	string	–	Restrict results to one kind. Defaults to all.
workspaceId	string	–	Limit to one workspace

No output schema declared.

No examples provided.

update_project ~64

Update project metadata (PATCH-style: only provided fields are changed).

Input Output Examples

Name	Type	Req	Description
description	string	–	–
icon	string	–	–
id	string	yes	–
isPublic	boolean	–	–
name	string	–	–
slug	string	–	–

No output schema declared.

No examples provided.

update_task ~91

Update a task (fetches current task, merges fields, then full update).

Input Output Examples

Name	Type	Req	Description
description	–	–	–
dueDate	–	–	–
position	number	–	–
priority	string	–	–
projectId	string	–	–
startDate	–	–	–
status	string	–	–
taskId	string	yes	–
title	string	–	–
userId	–	–	–

No output schema declared.

No examples provided.

update_task_assignee ~52

Assign a task to a workspace member, or pass a null userId to unassign it.

Input Output Examples

Name	Type	Req	Description
taskId	string	yes	–
userId	–	yes	Member user ID, or null to unassign

No output schema declared.

No examples provided.

update_task_comment ~33

Update one of your comments on a task.

Input Output Examples

Name	Type	Req	Description
commentId	string	yes	–
content	string	yes	–

No output schema declared.

No examples provided.

update_task_due_date ~41

Set a task's due date. Omit dueDate to clear it.

Input Output Examples

Name	Type	Req	Description
dueDate	string	–	–
taskId	string	yes	–

No output schema declared.

No examples provided.

update_task_status ~35

Update only the status (column) of a task.

Input Output Examples

Name	Type	Req	Description
status	string	yes	–
taskId	string	yes	–

No output schema declared.

No examples provided.

update_time_entry ~68

Update a time entry. startTime is required; omitting endTime keeps the stored one. startTime cannot be later than the end time.

Input Output Examples

Name	Type	Req	Description
description	string	–	–
endTime	string	–	–
id	string	yes	–
startTime	string	yes	–

No output schema declared.

No examples provided.

whoami ~22

Return the current Kaneo session and user for the cached device token.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

4 Aug 12 Aug

Day	Score
4 Aug	46
5 Aug	46
6 Aug	70
7 Aug	74
8 Aug	75
9 Aug	75
10 Aug	78
11 Aug	78
12 Aug	79