// MCP SERVER RECORD

Todos

Unverified
NPM@hasna/todos
FRisk gradecritical blast radius
Catalogue entry updated 5 days ago
Auth postureNot probedno remote endpoint probed yet
Tools52838 Destructive · 30 Execute · 197 Write · 263 Read
Worst categoryDestructivegrade tracks the peak, not the average
Capability mix
Destructive 38Execute 30Write 197Read 263
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.
Tools 528
apply_retention_cleanupDestructiveHighbulk_delete_tasksDestructiveHighcancel_agent_runDestructiveHighcancel_agent_run_dispatchDestructiveMediumcancel_dispatchDestructiveMedium
View all 528 tools
cleanup_artifactsDestructiveHighdelete_agentDestructiveHighdelete_artifactDestructiveHighdelete_commentDestructiveHighdelete_labelDestructiveHighdelete_milestoneDestructiveHighdelete_planDestructiveHighdelete_projectDestructiveHighdelete_roadmapDestructiveHighdelete_search_viewDestructiveHighdelete_tagDestructiveHighdelete_taskDestructiveHighdelete_task_listDestructiveHighdelete_templateDestructiveHighdelete_watch_ruleDestructiveHighdelete_webhookDestructiveHighmachines_archiveDestructiveMediummachines_deleteDestructiveHighremove_agent_run_adapterDestructiveHighremove_capacity_profileDestructiveHighremove_encryption_profileDestructiveHighremove_local_event_hookDestructiveMediumremove_local_extensionDestructiveMediumremove_policy_packDestructiveHighremove_review_routing_ruleDestructiveMediumremove_runner_sandbox_profileDestructiveHighremove_task_dependencyDestructiveMediumremove_task_relationshipDestructiveMediumremove_terminal_notification_ruleDestructiveMediumremove_verification_providerDestructiveMediumremove_workspace_trustDestructiveHighrestore_databaseDestructiveCriticalunfocusDestructiveHighbegin_task_run_transactionExecuteMediumbuild_context_packExecuteMediumcheck_database_integrityExecuteMediumclaim_next_agent_runExecuteHighdispatch_task_listExecuteHighdispatch_tasksExecuteHighdispatch_to_multipleExecuteHighenqueue_agent_runExecuteHighevaluate_terminal_watch_rulesExecuteMediuminstall_local_extensionExecuteHighpreview_user_scaffoldExecuteMediumprocess_remindersExecuteMediumqueue_agent_runExecuteMediumrequire_approval_gateExecuteHighretry_agent_runExecuteHighretry_agent_run_dispatchExecuteMediumrun_agent_workflow_demoExecuteHighrun_doctorExecuteHighrun_due_dispatchesExecuteHighrun_next_agent_dispatchExecuteHighrun_release_checksExecuteHighrun_saved_viewExecuteMediumrun_verificationExecuteMediumrun_verification_providerExecuteHighsimulate_agent_replayExecuteMediumstart_focus_sessionExecuteMediumtest_local_event_hookExecuteMediumtest_local_extension_compatibilityExecuteMediumtest_terminal_notification_ruleExecuteMediumwatch_source_todosExecuteMediumacknowledge_handoffWriteLowacquire_task_leaseWriteMediumadd_artifactWriteMediumadd_commentWriteMediumadd_task_dependencyWriteMediumadd_task_fileWriteMediumadd_task_relationshipWriteLowadd_task_run_artifactWriteMediumadd_task_run_commandWriteMediumadd_task_run_eventWriteMediumadd_task_run_fileWriteMediumadd_task_verificationWriteMediumappend_run_commandWriteLowapply_export_profileWriteMediumapply_failure_triageWriteMediumapply_user_scaffoldWriteMediumapprove_approval_gateWriteMediumapprove_gateWriteMediumapprove_review_itemWriteMediumapprove_taskWriteMediumarchive_completedWriteMediumassign_label_to_taskWriteLowattach_plan_to_projectWriteMediumauto_assign_taskWriteMediumbackup_databaseWriteLowbootstrap_workspaceWriteMediumbulk_create_tasksWriteMediumbulk_update_tasksWriteHighcancel_taskWriteMediumcapture_knowledge_snapshotWriteMediumclaim_goal_stepWriteMediumclaim_next_taskWriteMediumclaim_plan_stepWriteMediumclaim_review_itemWriteMediumclaim_taskWriteMediumclose_riskWriteMediumcomplete_agent_runWriteMediumcomplete_taskWriteMediumcreate_boardWriteLowcreate_branch_work_planWriteMediumcreate_calendar_itemWriteLowcreate_commentWriteLowcreate_custom_fieldWriteLowcreate_decision_recordWriteLowcreate_goal_workflowWriteMediumcreate_handoffWriteMediumcreate_handoff_packetWriteMediumcreate_inbox_intakeWriteMediumcreate_inbox_itemWriteMediumcreate_knowledge_recordWriteMediumcreate_knowledge_snapshotWriteMediumcreate_labelWriteLowcreate_local_backupWriteLowcreate_manual_checkpointWriteMediumcreate_milestoneWriteMediumcreate_nl_intakeWriteMediumcreate_planWriteMediumcreate_projectWriteLowcreate_reminderWriteLowcreate_retrospectiveWriteLowcreate_riskWriteMediumcreate_roadmapWriteMediumcreate_run_recordWriteMediumcreate_saved_viewWriteLowcreate_tagWriteLowcreate_taskWriteMediumcreate_task_from_templateWriteMediumcreate_task_listWriteMediumcreate_templateWriteMediumcreate_verification_evidenceWriteMediumcreate_watch_ruleWriteLowcreate_webhookWriteMediumdetect_file_relationshipsWriteMediumdismiss_reminderWriteLowencrypt_metadata_fieldsWriteMediumexport_report_fileWriteMediumexport_todos_mdWriteMediumextend_taskWriteLowextract_todosWriteMediumfail_agent_runWriteMediumfail_taskWriteMediumfinish_task_runWriteMediumgenerate_branch_work_planWriteMediumgenerate_release_notesWriteMediumheartbeatWriteLowimport_calendar_icsWriteMediumimport_external_issuesWriteMediumimport_handoffWriteMediumimport_issuesWriteMediumimport_local_bundleWriteMediumimport_onboarding_fixtureWriteMediumimport_roadmapWriteMediumimport_templateWriteMediumimport_todos_mdWriteMediuminit_templatesWriteLowinstall_template_libraryWriteMediumlink_task_git_refWriteLowlink_task_git_traceWriteMediumlink_task_to_commitWriteMediumlock_fileWriteMediumlock_taskWriteMediumlog_timeWriteLowmachines_heartbeatWriteLowmachines_registerWriteMediummachines_set_primaryWriteMediummachines_unarchiveWriteMediummaterialize_plan_stepsWriteMediummerge_duplicate_taskWriteHighmerge_tasksWriteMediummigrate_workflow_statesWriteMediummove_board_cardWriteMediumprioritize_taskWriteLowreassign_taskWriteMediumrebalance_workloadWriteMediumrecord_task_reviewWriteMediumrecover_stale_leasesWriteMediumrecover_stale_session_handoffWriteMediumregister_agentWriteMediumregister_local_machineWriteMediumreject_approval_gateWriteMediumreject_gateWriteMediumrelease_agentWriteMediumrelease_taskWriteMediumrelease_task_leaseWriteMediumrename_agentWriteMediumrenew_task_leaseWriteLowreopen_review_itemWriteMediumrequest_approvalWriteMediumrequest_review_queueWriteMediumrequest_task_reviewWriteMediumreschedule_taskWriteMediumresolve_missing_task_findingsWriteMediumrestore_local_backupWriteMediumresume_focus_sessionWriteLowreturn_review_itemWriteMediumsave_command_aliasWriteMediumsave_search_viewWriteLowscan_remindersWriteMediumschedule_taskWriteMediumscore_taskWriteMediumseal_audit_ledgerWriteMediumset_agent_run_adapterWriteMediumset_capacity_profileWriteMediumset_decision_statusWriteMediumset_encryption_profileWriteMediumset_focusWriteLowset_local_event_hookWriteMediumset_policy_packWriteMediumset_project_agent_roleWriteMediumset_release_groupWriteMediumset_reminder_preferencesWriteLowset_reports_toWriteMediumset_review_routing_ruleWriteMediumset_runner_sandbox_profileWriteMediumset_secret_safetyWriteMediumset_task_contractWriteMediumset_task_custom_fieldWriteMediumset_task_fieldsWriteMediumset_task_priority_metaWriteMediumset_task_workflow_stateWriteMediumset_terminal_notification_ruleWriteMediumset_verification_providerWriteMediumset_watch_preferencesWriteLowset_workspace_trustWriteMediumsnooze_reminderWriteLowstart_taskWriteMediumstart_task_runWriteMediumsteal_task_leaseWriteMediumstop_focus_sessionWriteLowsupersede_decision_recordWriteMediumsync_kgWriteMediumsync_todos_mdWriteMediumtrust_workspaceWriteMediumunarchive_agentWriteMediumunarchive_taskWriteMediumunlock_fileWriteMediumunlock_taskWriteMediumunsubscribe_resourceWriteLowunwatch_taskWriteLowupdate_agentWriteMediumupdate_changelogWriteMediumupdate_commentWriteMediumupdate_decision_recordWriteMediumupdate_labelWriteMediumupdate_milestoneWriteMediumupdate_planWriteMediumupdate_projectWriteMediumupdate_riskWriteMediumupdate_roadmapWriteMediumupdate_tagWriteMediumupdate_taskWriteMediumupdate_task_listWriteMediumupdate_templateWriteMediumupdate_watch_ruleWriteMediumupsert_taskWriteMediumupsert_task_findingWriteMediumwrite_template_libraryWriteMediumanalyze_branch_workReadLowanalyze_dependency_graphReadLowbootstrap_projectReadLowbuild_agent_context_packReadLowbuild_handoff_packetReadLowbuild_local_reportReadLowbuild_report_exportReadLowbulk_find_tasks_by_filesReadLowcapture_environment_snapshotReadMediumcheck_approval_gateReadLowcheck_file_lockReadLowcheck_local_integrityReadLowcheck_local_notificationsReadLowcheck_release_compatibilityReadLowcheck_runner_sandboxReadLowcheck_sandbox_commandReadLowcheck_schema_compatibilityReadLowcheck_task_done_contractReadLowcheck_task_lockReadLowcheck_workspace_permissionReadLowcompare_environment_snapshotsReadLowcrypto_statusReadLowdecrypt_local_valueReadLowdecrypt_metadata_fieldsReadLowdescribe_toolsReadLowdiscover_local_extensionsReadLowdiscover_workspaceReadLowencrypt_local_valueReadLowexpire_approval_gateReadLowexplain_policy_packReadLowexplain_runner_sandboxReadLowexport_activity_logReadLowexport_agent_reliability_scorecardsReadLowexport_artifactsReadLowexport_calendar_icsReadLowexport_decision_recordReadLowexport_handoffReadLowexport_knowledge_recordsReadLowexport_knowledge_snapshotReadLowexport_local_bundleReadMediumexport_plan_execution_contractReadLowexport_retrospectivesReadLowexport_risk_registerReadLowexport_roadmapReadLowexport_run_replayReadLowexport_templateReadLowexport_verification_evidenceReadLowfind_duplicate_tasksReadLowfind_pathReadLowfind_task_by_commitReadLowfind_tasks_by_fileReadLowfind_tasks_by_git_refReadLowformat_failure_triage_markdownReadLowformat_goal_handoffReadLowformat_handoff_packetReadLowformat_release_notes_markdownReadLowget_activity_timelineReadLowget_agentReadLowget_agent_adapter_docReadLowget_agent_metricsReadLowget_agent_reliability_scorecardReadLowget_agent_safe_queueReadLowget_agent_workflow_demo_docsReadLowget_archived_tasksReadLowget_audit_ledgerReadLowget_blocked_task_reportsReadLowget_blocked_tasksReadLowget_blocking_tasksReadLowget_board_snapshotReadLowget_bootstrap_statusReadLowget_branch_work_plan_docsReadLowget_capability_discoveryReadLowget_capable_agentsReadLowget_cli_mcp_parityReadLowget_cli_referenceReadLowget_commentsReadLowget_critical_pathReadLowget_decision_recordReadLowget_dependency_critical_pathReadLowget_encryption_statusReadLowget_failure_triage_reportReadLowget_feature_manifestReadLowget_feature_manifest_docsReadLowget_file_heat_mapReadLowget_focusReadLowget_goal_statusReadLowget_healthReadLowget_idle_focus_promptsReadLowget_impact_analysisReadLowget_inbox_itemReadLowget_json_schemaReadLowget_knowledge_snapshotReadLowget_labelReadLowget_latest_handoffReadLowget_leaderboardReadLowget_local_snapshotReadLowget_machine_topologyReadLowget_my_tasksReadLowget_my_workloadReadLowget_next_taskReadLowget_onboarding_fixtureReadLowget_org_chartReadLowget_planReadLowget_plan_execution_stateReadLowget_planning_forecastReadLowget_projectReadLowget_project_org_chartReadLowget_ready_tasksReadLowget_related_entitiesReadLowget_reminder_preferencesReadLowget_reminder_summaryReadLowget_resource_changesReadLowget_resource_snapshotReadLowget_review_queueReadLowget_roadmap_summaryReadLowget_run_recordReadLowget_scheduling_summaryReadLowget_secret_safetyReadLowget_shell_completionReadLowget_sla_breachesReadLowget_stale_task_reportReadLowget_stale_tasksReadLowget_statusReadLowget_tagReadLowget_taskReadLowget_task_commitsReadLowget_task_contractReadLowget_task_dependenciesReadLowget_task_fieldsReadLowget_task_gate_statusReadLowget_task_git_refsReadLowget_task_listReadLowget_task_relationshipsReadLowget_task_run_ledgerReadLowget_task_traceabilityReadLowget_task_watchersReadLowget_tasks_changed_sinceReadLowget_time_reportReadLowget_unlock_impactReadLowget_usage_ledgerReadLowget_verification_provider_capabilitiesReadLowget_watch_preferencesReadLowget_watch_statusReadLowget_workspace_trustReadLowinspect_git_commitReadLowinspect_local_extensionReadLowlist_access_profilesReadLowlist_active_filesReadLowlist_active_leasesReadLowlist_activityReadLowlist_agent_adapter_docsReadLowlist_agent_adaptersReadLowlist_agent_run_adaptersReadLowlist_agent_run_queueReadLowlist_agent_runsReadLowlist_agentsReadLowlist_approval_gatesReadLowlist_artifactsReadLowlist_audit_ledger_checkpointsReadLowlist_boardsReadLowlist_calendar_eventsReadLowlist_capacity_profilesReadLowlist_command_aliasesReadLowlist_commentsReadLowlist_decision_recordsReadLowlist_dispatchesReadLowlist_encryption_profilesReadLowlist_file_locksReadLowlist_focus_sessionsReadLowlist_handoffsReadLowlist_inbox_itemsReadLowlist_json_schemasReadLowlist_knowledge_recordsReadLowlist_knowledge_snapshotsReadLowlist_labelsReadLowlist_local_event_hooksReadLowlist_local_extensionsReadLowlist_local_report_typesReadLowlist_local_snapshotsReadLowlist_my_tasksReadLowlist_onboarding_fixturesReadLowlist_pending_approvalsReadLowlist_plansReadLowlist_policy_packsReadLowlist_project_agent_rolesReadLowlist_projectsReadLowlist_remindersReadLowlist_retrospectivesReadLowlist_review_queueReadLowlist_review_routing_rulesReadLowlist_risksReadLowlist_roadmapsReadLowlist_run_recordsReadLowlist_runner_sandbox_profilesReadLowlist_sandbox_profilesReadMediumlist_saved_viewsReadLowlist_search_viewsReadLowlist_secret_patternsReadLowlist_tagsReadLowlist_task_filesReadLowlist_task_findingsReadLowlist_task_listsReadLowlist_task_runsReadLowlist_tasksReadLowlist_template_libraryReadLowlist_templatesReadLowlist_terminal_notification_rulesReadLowlist_user_scaffoldsReadLowlist_verification_providersReadLowlist_verification_recordsReadLowlist_watch_rulesReadLowlist_webhooksReadLowlist_workflow_statesReadLowlist_workspace_trust_profilesReadLowmachines_listReadLowmachines_topologyReadLowmigration_dry_runReadLownotify_upcoming_deadlinesReadLowparse_mentionsReadLowpatrol_tasksReadLowpause_focus_sessionReadLowpoll_local_snapshotsReadLowpoll_watch_notificationsReadLowpreview_bundle_syncReadLowpreview_inbox_intakeReadLowpreview_issue_importReadLowpreview_natural_language_intakeReadLowpreview_nl_intakeReadLowpreview_retention_cleanupReadLowpreview_templateReadLowpreview_template_libraryReadLowquery_tasks_by_fieldsReadLowquery_tasks_by_workflow_stateReadLowread_handoffReadLowresolve_command_queryReadLowresolve_mentionReadLowresolve_mentionsReadLowresolve_mentions_in_textReadLowresource_diagnosticsReadLowrun_search_viewReadLowscan_file_for_secretsReadLowscan_secret_textReadLowscan_text_for_secretsReadLowscore_plan_healthReadLowscore_project_healthReadLowsearch_knowledge_recordsReadLowsearch_tasksReadLowsearch_toolsReadLowstandupReadLowsubscribe_resourceReadLowsuggest_agent_nameReadLowtask_contextReadLowtemplate_historyReadLowtodos_inboxReadLowtodos_retroReadLowunified_searchReadLowvalidate_bundleReadLowvalidate_policy_packReadLowvalidate_schema_payloadReadLowverify_audit_ledgerReadLowverify_local_backupReadLowverify_task_run_artifactsReadLowwatch_taskReadLow
Change history
No changes recorded since first scan. Watched servers surface a diff within the hour.
Recommended policy
apply_retention_cleanupdeny
begin_task_run_transactionrequire approval
acknowledge_handoffrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →
// RUNNING THIS SERVER
DIRECT INSTALL npx -y @hasna/todos

Installed this way, nothing enforces the recommended policy above — calls run exactly as the agent makes them.

// LOOK UP ANOTHER SERVER

Every MCP server has a record like this.

Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.