tracker-mcp

MCPattested

v1.2.0io.github.sdamarketingMITUpdated 2d agonpm GitHub

MCP server for Yandex Tracker API v3 — full coverage (187 tools): issues, queues, boards, sprints, projects, goals, bulk ops, admin catalogs

Works in

ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build

A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.

571Downloads/wk

1GitHub stars

2d agoLast update

Needs 1 credential before it runs

TRACKER_TOKENAPI keyrequired
OAuth-токен Яндекс 360 (y0_...) или IAM-токен Yandex Cloud (t1....)
TRACKER_AUTHAPI keyoptional
Схема авторизации: oauth (Яндекс 360) или iam (Yandex Cloud)

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package

Authorio.github.sdamarketing

LicenseMIT

Version1.2.0

Sourcenpm+mcp-registry

GitHubsdamarketing/tracker_mcp

SBOMCycloneDX 1.6 ↓

Trust Status

A

85/100Trusted

✓Listed in Forge index+10/10

✓Identity verified · attested build+20/20

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

✓npm Trusted Publishing (Sigstore)+5/5

—npm maintainer match+0/5

→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusIdentity verified

PublisherUnverified

SignatureUnsigned

Domain—

Provenance✓ Sigstore-verified · 701407b

Dependencies✓ 3 resolved · none vulnerable

Tool surface40 tools · 11 privileged

Security scan✓ Cleanv1.2.0 · todayHow well does this scan work?

EvalsNone

IndexedOct 11, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

40 tools · 11 privileged

Statically extracted from the published packagev1.2.0 · 3h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

Filter toolsPrivileged only

list_issue_attachmentsList files attached to an issue and its comments.

List files attached to an issue and its comments.

No input schema was published for this tool.

upload_issue_attachmentprivilegedAttach a local file to an issue. Max file size is 1024 Mbit.

Attach a local file to an issue. Max file size is 1024 Mbit.

No input schema was published for this tool.

get_issue_attachmentGet metadata of one attached file (name, size, mime type).

Get metadata of one attached file (name, size, mime type).

No input schema was published for this tool.

download_issue_attachmentDownload attachment content: images come back as image content (visible in chat),

Download attachment content: images come back as image content (visible in chat),

No input schema was published for this tool.

get_attachment_thumbnailDownload the preview thumbnail of an attached image (image content).

Download the preview thumbnail of an attached image (image content).

No input schema was published for this tool.

download_entity_attachmentDownload an attachment of a project/portfolio/goal. Content path for entities is

Download an attachment of a project/portfolio/goal. Content path for entities is

No input schema was published for this tool.

upload_temp_attachmentprivilegedUpload a temporary file (not yet attached anywhere). Returns a temp id usable once

Upload a temporary file (not yet attached anywhere). Returns a temp id usable once

No input schema was published for this tool.

delete_issue_attachmentprivilegedDelete an attached file from an issue.

Delete an attached file from an issue.

No input schema was published for this tool.

create_boardCreate a new task board (via the liveBoards API; the legacy POST /boards ignores

Create a new task board (via the liveBoards API; the legacy POST /boards ignores

No input schema was published for this tool.

get_boardsList all issue boards of the organization.

List all issue boards of the organization.

No input schema was published for this tool.

get_boardGet board parameters by id, including its columns.

Get board parameters by id, including its columns.

No input schema was published for this tool.

get_board_columnsList columns of a board.

List columns of a board.

No input schema was published for this tool.

get_board_sprintsList sprints of a board (agile boards only).

List sprints of a board (agile boards only).

No input schema was published for this tool.

get_boards_paginateList boards with relative pagination (for more than one page): pass the last

List boards with relative pagination (for more than one page): pass the last

No input schema was published for this tool.

update_boardUpdate a board: name, backlog/sprints toggles, columns (with status mapping).

Update a board: name, backlog/sprints toggles, columns (with status mapping).

No input schema was published for this tool.

delete_boardprivilegedDelete a board by id.

Delete a board by id.

No input schema was published for this tool.

get_board_columnGet parameters of one board column.

Get parameters of one board column.

No input schema was published for this tool.

create_board_columnCreate a column on a board. version = current board version (If-Match lock;

Create a column on a board. version = current board version (If-Match lock;

No input schema was published for this tool.

update_board_columnRename a board column or change its statuses (version = board version).

Rename a board column or change its statuses (version = board version).

No input schema was published for this tool.

delete_board_columnprivilegedDelete a board column (version = board version).

Delete a board column (version = board version).

No input schema was published for this tool.

get_sprintGet sprint parameters by id.

Get sprint parameters by id.

No input schema was published for this tool.

create_sprintCreate a sprint on a board (the board must have sprints enabled).

Create a sprint on a board (the board must have sprints enabled).

No input schema was published for this tool.

update_sprintRename a sprint, change dates or status (version = sprint version, If-Match lock).

Rename a sprint, change dates or status (version = sprint version, If-Match lock).

No input schema was published for this tool.

start_sprintStart a sprint (moves to in_progress; version = sprint version).

Start a sprint (moves to in_progress; version = sprint version).

No input schema was published for this tool.

archive_sprintArchive a finished sprint (version = sprint version).

Archive a finished sprint (version = sprint version).

No input schema was published for this tool.

delete_sprintprivilegedDelete a sprint by id.

Delete a sprint by id.

No input schema was published for this tool.

bulk_update_issuesBulk edit many issues at once (max 10000). Values use the issue edit format;

Bulk edit many issues at once (max 10000). Values use the issue edit format;

No input schema was published for this tool.

bulk_move_issuesprivilegedBulk move issues to another queue. Components, versions and projects are cleared by default.

Bulk move issues to another queue. Components, versions and projects are cleared by default.

No input schema was published for this tool.

bulk_transition_issuesBulk move issues to a new status via a workflow transition. Get available transition

Bulk move issues to a new status via a workflow transition. Get available transition

No input schema was published for this tool.

get_bulk_operation_infoGet status and progress of a bulk change operation by its id.

Get status and progress of a bulk change operation by its id.

No input schema was published for this tool.

get_checklistGet the checklist of an issue.

Get the checklist of an issue.

No input schema was published for this tool.

add_checklist_itemAdd a checklist item to an issue.

Add a checklist item to an issue.

No input schema was published for this tool.

edit_checklist_itemprivilegedEdit a single checklist item. The Tracker API requires the full item list in the

Edit a single checklist item. The Tracker API requires the full item list in the

No input schema was published for this tool.

delete_checklistprivilegedDelete the whole checklist of an issue.

Delete the whole checklist of an issue.

No input schema was published for this tool.

delete_checklist_itemprivilegedDelete a checklist item from an issue.

Delete a checklist item from an issue.

No input schema was published for this tool.

add_commentAdd a comment to an issue. Supports Yandex Flavored Markdown.

Add a comment to an issue. Supports Yandex Flavored Markdown.

No input schema was published for this tool.

get_issue_commentsList comments of an issue.

List comments of an issue.

No input schema was published for this tool.

edit_commentprivilegedEdit an existing comment text.

Edit an existing comment text.

No input schema was published for this tool.

get_issue_commentGet one comment of an issue by id (numeric id or longId).

Get one comment of an issue by id (numeric id or longId).

No input schema was published for this tool.

add_comment_reactionAdd a reaction to a comment.

Add a reaction to a comment.

No input schema was published for this tool.

40 of 40 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

MCP server for Yandex Tracker API v3 — full coverage (187 tools): issues, queues, boards, sprints, projects, goals, bulk ops, admin catalogs

Keywords

mcpmodel-context-protocolyandex-trackertrackerissuesai-agents

Alternatives

Comparing tool surfaces…

Tools exposed

40 tools · 11 privileged · observed 2026-10-15 by static extraction. A tool surface is what one scan read on one day, not a live capability list.

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

Dependency tree

What one Forge scan resolved from npm metadata on 2026-10-15 — observed resolution, not a publisher declaration.

3 packages resolved · 2 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

zod4.6.7
@modelcontextprotocol/server2.3.12 dependencies
- zod4.6.7shown above
- @modelcontextprotocol/core2.3.11 dependency
  - zod4.6.7shown above