@kaneo/mcp

MCPattested
v0.1.13io.github.usekaneoMITUpdated 3d agonpmGitHub

Official MCP server for Kaneo: manage tasks, projects, and labels from Claude and other MCP clients

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build
A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.
704Downloads/wk
9kGitHub stars
836Forks
3d agoLast update
Reads these credentials
  • KANEO_API_KEYAPI keyoptional

    Kaneo API key for non-interactive auth; omit to use the interactive device flow

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package
Authorio.github.usekaneo
LicenseMIT
Version0.1.13
Sourcenpm+mcp-registry
Trust Status
A
85/100Trusted
✓Listed in Forge index+10/10
✓Identity verified · attested build+20/20
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓npm Trusted Publishing (Sigstore)+5/5
—npm maintainer match+0/5
→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)
✓CVE scan · clean+30/30
✓Static analysis · clean+20/20
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusIdentity verified
PublisherUnverified
SignatureUnsigned
Domain—
Provenance✓ Sigstore-verified · 39e7a34
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface38 tools · 5 privileged
Security scan✓ Cleanv0.1.13 · todayHow well does this scan work?
EvalsNone
IndexedAug 11, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

38 tools · 5 privileged
Statically extracted from the published packagev0.1.13 · 6h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

whoamiReturn the current Kaneo user for the configured authentication method.

Return the current Kaneo user for the configured authentication method.

No input schema was published for this tool.

list_workspacesList workspaces (Better Auth organizations) the signed-in user can access.

List workspaces (Better Auth organizations) the signed-in user can access.

No input schema was published for this tool.

list_projectsList projects in a workspace.

List projects in a workspace.

No input schema was published for this tool.

get_projectGet a single project by ID.

Get a single project by ID.

No input schema was published for this tool.

create_projectCreate a project in a workspace.

Create a project in a workspace.

No input schema was published for this tool.

update_projectUpdate project metadata (PATCH-style: only provided fields are changed).

Update project metadata (PATCH-style: only provided fields are changed).

No input schema was published for this tool.

list_tasksList a bounded page of tasks for a project (50 by default, maximum 100). Use pagination.totalPages and page to retrieve the rest; filters and sorting apply before pagination. For every task page, also follow relatedPage through pagination.relatedTotalPages for complete labels, links and column meta…

List a bounded page of tasks for a project (50 by default, maximum 100). Use pagination.totalPages and page to retrieve the rest; filters and sorting apply before pagination. For every task page, also follow relatedPage through pagination.relatedTotalPages for complete labels, links and column meta…

No input schema was published for this tool.

get_taskGet a task by ID.

Get a task by ID.

No input schema was published for this tool.

get_task_by_ticket_idGet one task by its ticket ID (project key and number, e.g. KAN-12). If multiple accessible tasks share the ID, provide workspaceId or projectId.

Get one task by its ticket ID (project key and number, e.g. KAN-12). If multiple accessible tasks share the ID, provide workspaceId or projectId.

No input schema was published for this tool.

create_taskCreate a task in a project.

Create a task in a project.

No input schema was published for this tool.

duplicate_taskDuplicate a task in the same project, copying its fields and labels. Pass title to rename the copy.

Duplicate a task in the same project, copying its fields and labels. Pass title to rename the copy.

No input schema was published for this tool.

update_taskUpdate a task (fetches current task, merges fields, then full update).

Update a task (fetches current task, merges fields, then full update).

No input schema was published for this tool.

move_taskprivilegedMove a task to another project (and optional column status).

Move a task to another project (and optional column status).

No input schema was published for this tool.

update_task_statusUpdate only the status (column) of a task.

Update only the status (column) of a task.

No input schema was published for this tool.

list_task_commentsList comments on a task.

List comments on a task.

No input schema was published for this tool.

create_task_commentAdd a comment to a task.

Add a comment to a task.

No input schema was published for this tool.

update_task_commentUpdate one of your comments on a task.

Update one of your comments on a task.

No input schema was published for this tool.

delete_task_commentprivilegedDelete one of your comments from a task.

Delete one of your comments from a task.

No input schema was published for this tool.

list_workspace_labelsList labels defined in a workspace.

List labels defined in a workspace.

No input schema was published for this tool.

create_labelCreate a label in a workspace (optionally attach to a task).

Create a label in a workspace (optionally attach to a task).

No input schema was published for this tool.

attach_label_to_taskAttach an existing label to a task.

Attach an existing label to a task.

No input schema was published for this tool.

detach_label_from_taskDetach a label from its current task.

Detach a label from its current task.

No input schema was published for this tool.

create_task_relationCreate a relation between two tasks. relationType: 'subtask' (sourceTaskId is the parent, targetTaskId the child), 'blocks' (sourceTaskId blocks targetTaskId), or 'related' (bidirectional).

Create a relation between two tasks. relationType: 'subtask' (sourceTaskId is the parent, targetTaskId the child), 'blocks' (sourceTaskId blocks targetTaskId), or 'related' (bidirectional).

No input schema was published for this tool.

get_task_relationsList all relations (subtask/blocks/related) involving a task.

List all relations (subtask/blocks/related) involving a task.

No input schema was published for this tool.

delete_task_relationprivilegedDelete a task relation by its relation ID.

Delete a task relation by its relation ID.

No input schema was published for this tool.

delete_labelprivilegedDelete a task or workspace label by ID. Workspace-label cascades resume automatically; repeat the tool if pendingDeletion remains true.

Delete a task or workspace label by ID. Workspace-label cascades resume automatically; repeat the tool if pendingDeletion remains true.

No input schema was published for this tool.

list_workspace_membersList the members of a workspace. Use this to resolve the user ID an assignee tool expects.

List the members of a workspace. Use this to resolve the user ID an assignee tool expects.

No input schema was published for this tool.

searchSearch across tasks, projects, workspaces, comments, and activities.

Search across tasks, projects, workspaces, comments, and activities.

No input schema was published for this tool.

list_project_columnsList a project's columns. Their slugs are the values update_task_status and create_task accept as a status.

List a project's columns. Their slugs are the values update_task_status and create_task accept as a status.

No input schema was published for this tool.

delete_taskprivilegedDelete a task by ID.

Delete a task by ID.

No input schema was published for this tool.

update_task_assigneeAssign a task to a workspace member, or pass a null userId to unassign it.

Assign a task to a workspace member, or pass a null userId to unassign it.

No input schema was published for this tool.

update_task_due_dateSet a task's due date. Omit dueDate to clear it.

Set a task's due date. Omit dueDate to clear it.

No input schema was published for this tool.

list_task_time_entriesList the time entries logged against a task.

List the time entries logged against a task.

No input schema was published for this tool.

get_time_entryGet a single time entry by ID.

Get a single time entry by ID.

No input schema was published for this tool.

create_time_entryLog time against a task. Omit endTime to leave the entry running.

Log time against a task. Omit endTime to leave the entry running.

No input schema was published for this tool.

update_time_entryUpdate a time entry. startTime is required; omitting endTime keeps the stored one. startTime cannot be later than the end time.

Update a time entry. startTime is required; omitting endTime keeps the stored one. startTime cannot be later than the end time.

No input schema was published for this tool.

list_task_activityList a task's activity history.

List a task's activity history.

No input schema was published for this tool.

list_notificationsList the signed-in user's notifications.

List the signed-in user's notifications.

No input schema was published for this tool.

38 of 38 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Official MCP server for Kaneo: manage tasks, projects, and labels from Claude and other MCP clients

Keywords
mcp
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-10-12 — observed resolution, not a publisher declaration.

60 packages resolved · 4 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

67 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+55 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.