← Back to search

@dalmasonto/taskflow-mcp

dalmasonto Scanned 26d ago

MCP server for TaskFlow — manage projects, tasks, timers, analytics via AI agents

D
40 / 100

Versions

1.0.35latest
Apr 28, 2026
1.0.33
Apr 9, 2026
1.0.32
Apr 9, 2026
1.0.29
Apr 9, 2026
1.0.28
Apr 9, 2026
+ show 25 moreshow less
1.0.27
Apr 9, 2026
1.0.26
Apr 9, 2026
1.0.25
Apr 8, 2026
1.0.24
Apr 8, 2026
1.0.23
Apr 8, 2026
1.0.21
Apr 7, 2026
1.0.20
Apr 7, 2026
1.0.19
Apr 7, 2026
1.0.18
Apr 7, 2026
1.0.17
Apr 7, 2026
1.0.16
Apr 7, 2026
1.0.15
Apr 7, 2026
1.0.14
Apr 7, 2026
1.0.11
Mar 31, 2026
1.0.10
Mar 31, 2026
1.0.9
Mar 31, 2026
1.0.8
Mar 31, 2026
1.0.7
Mar 31, 2026
1.0.6
Mar 30, 2026
1.0.5
Mar 24, 2026
1.0.4
Mar 23, 2026
1.0.3
Mar 23, 2026
1.0.2
Mar 23, 2026
1.0.1
Mar 23, 2026
1.0.0
Mar 23, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 63

whoami
annotations: none low

Confirm which TaskFlow agent identity and project this credential maps to, plus the connection and terminal-mirror state. Connection and heartbeat are automatic — this confirms them, it does not establish them. mirror.state

select_profile
annotations: none low

Choose which agent identity this terminal is, when the repo defines several. Call this ONLY after asking your human which one to use — never guess. The choice is remembered for this terminal, so you will not be asked again after a reconnect.

list_tasks
annotations: none low

List tasks in the agent

status string assigned string
list_channels
annotations: none low

List the chat channels this agent can see in its project (shared rooms plus any DMs it is on the roster of).

list_agents
annotations: none low

List the other agents in this project so you know who to address.

create_task
annotations: none low

Create a task in the agent

claim boolean notes string title string description string
update_task
annotations: none low

Edit a task

task number notes string title string description string
update_task_status
annotations: none low

Advance a task

task number
claim_task
annotations: none low

Self-assign a task in this agent

task number
report_review
annotations: none low

Record a review verdict on a task (decision: approved | changes_requested). Reports back to the assigned agent and transitions the task. Consider the

body string task number
send_message
annotations: none low

Send a chat message as this agent into a channel. Use list_channels to find channel ids.

body string channel number
download_attachment
annotations: none low

Download a message attachment to disk and return its path. Get the `url` from an attachment on a message returned by check_messages. Returns a PATH, not the file

check_messages
annotations: none low

Check for messages addressed to you. Returns only what you have NOT yet marked read, across every channel you

limit number since number
mark_read
annotations: none low

Mark how far this agent has read in a channel (advance the read cursor forward).

channel number last_read_message number
register_session
annotations: none low

Register (or reconnect) a live session so humans see this agent online. Defaults the identifier to host:pid and cwd to the current directory.

cwd string session_identifier string
heartbeat
annotations: none low

Send a liveness heartbeat for the current session (auto-registers one if needed). Optional status hint: idle | busy.

capture_terminal
annotations: none low

Stream a chunk of terminal output into the current session (auto-registers one if needed). Humans can watch it live.

content string
log_activity
annotations: none low

Log a real activity event (e.g. an action you took). Optionally attach it to a task.

body string task number action string
get_activity
annotations: none low

Read recent activity in the project (newest first). Optional task filter and limit.

task number limit number
get_analytics
annotations: none low

Get a high-level analytics summary: total focused time, task completion rates, status distribution, and time per project. Useful for standup reports or understanding workload.

end_date string start_date string
get_timeline
annotations: none low

Get focused time grouped by day or week. Use for visualizing work patterns over time.

end_date string start_date string
get_tool_stats
annotations: none low

Get tool execution statistics: call count, success rate, average duration per tool. Shows which tools are used most and which are slow or failing.

since string tool_name string
get_task_cost
annotations: none low

Get per-task cost metrics: tool calls made during active timer sessions, total execution time, and tool breakdown. Useful for understanding which tasks consume the most resources.

task_id number project_id number
register_agent
annotations: none low

Register this agent with a custom name. Optional — agents auto-register on startup using the project folder name. Call this only if you want a specific name.

name string
delete_agent
annotations: none low

Delete a stale or disconnected agent entry from the registry. Only disconnected agents can be deleted. Use this to clean up ghost entries left by crashed or renamed sessions.

name string
ask_user
annotations: none low

Post a question to the TaskFlow Agent Inbox for the user to answer remotely. Returns immediately with the message ID. The question appears in the Agent Inbox UI with full context and optional quick-tap choices. After posting, use check_response to retrieve the user\

context string question string project_id number
check_response
annotations: none low

Check if a previously posted question (via ask_user or ask_agent) has been answered. Returns the response if answered, or status

message_id number
send_to_agent
annotations: none low

Send a message to another agent by name. Returns immediately. The recipient agent will receive the message in their terminal (if running in tmux).

context string message string recipient string
ask_agent
annotations: none low

Ask another agent a question and wait for their response. Like ask_user but targets an agent. Returns the message ID — use check_response to poll for the answer. The recipient agent receives the question in their terminal (if in tmux) and can respond with respond_to_message.

context string question string recipient string project_id number
respond_to_message
annotations: none low

Respond to a pending message addressed to this agent. Use check_messages to see incoming messages, then respond by message ID.

response string message_id number
broadcast_agents
annotations: none low

Send a question to multiple agents simultaneously. Creates a group message — each agent gets their own copy linked by a shared broadcast ID. Use check_broadcast to see all responses. Optional: omit agents list to broadcast to ALL connected agents.

context string question string project_id number
check_broadcast
annotations: none low

Check the status of a broadcast message — shows which agents have responded and their answers.

broadcast_id string
list_notifications
annotations: none low

List notifications. Check with unread_only=true at conversation start to surface important updates for the user.

limit number unread_only boolean
mark_notification_read
annotations: none low

Mark a notification as read after surfacing it to the user.

id number
mark_all_notifications_read
annotations: none low

Mark all unread notifications as read. Call after the user has been briefed on pending notifications.

clear_notifications
annotations: none low

Delete all notifications. Use with caution — this is irreversible.

start_timer
annotations: none low

Start a timer session for a task. Call this before beginning work on any task to track focused time. Automatically transitions the task to

task_id number
pause_timer
annotations: none low

Pause the active timer session for a task. Call when switching context or waiting for user input. The task transitions to

task_id number
stop_timer
annotations: none low

Stop the active timer and set a final status. Call when finishing work — use

task_id number
list_sessions
annotations: none low

List timer sessions with optional filters. Use to review time spent on a task or across a date range.

task_id number end_date string start_date string
send_keys
annotations: none low

Send raw keystrokes to an agent\

keys string enter boolean literal boolean agent_name string
get_agent_instructions
annotations: none low

**Call this at the start of every conversation.** Returns onboarding instructions, behavioral rules, and live project context for AI agents working with TaskFlow. This tool tells you how to proactively manage tasks, track time, and stay in sync with the project.

bootstrap
annotations: none low

**CALL THIS FIRST.** One-shot startup: returns your agent instructions, active project (auto-detected from folder name), open/blocked tasks, unread notifications, and registered agents — all in one call. Replaces the need to call get_agent_instructions + search_projects + list_tasks + list_notifications + list_agents separately.

project_name string
clear_data
annotations: none low

Delete ALL tasks, projects, sessions, notifications, and activity logs. Settings are preserved. Use with extreme caution — this is irreversible.

create_checkpoint
annotations: none low

Create a checkpoint snapshot of a task\

task_id number
get_checkpoint
annotations: none low

Get the latest checkpoint for a task. Returns the full task snapshot — useful for resuming work after an interruption.

task_id number
list_checkpoints
annotations: none low

List all available checkpoints for a task.

task_id number
get_setting
annotations: none low

Get a setting value by key. Server settings (port, host, databasePath, logLevel, agentLivenessInterval, maxPortAttempts) come from ~/.taskflow_config.json. UI settings (timerBarDisplayMode, notificationInterval, statusColors, operatorName, systemName, etc.) come from SQLite.

key string
update_setting
annotations: none low

Update a setting value. Server settings (port, host, databasePath, logLevel, agentLivenessInterval, maxPortAttempts) are written to ~/.taskflow_config.json and require a restart. UI settings are saved to the local SQLite database.

key string value unknown
get_activity_log
annotations: none low

Retrieve recent activity log entries. Shows what has changed — task completions, timer events, status transitions. Filter by action or entity type.

limit number action string entity_type string
clear_activity_log
annotations: none low

Delete all activity log entries. Use with caution — this is irreversible.

log_debug
annotations: none low

Log a debug entry to the activity log. Use this to record your work process — what you investigated, commands you ran, decisions you made, and findings. Entries appear in the Activity Pulse and on the project page. Link to a task (task_id) or project (project_id) for context.

detail string message string task_id number project_id number
compact_activity_log
annotations: none low

Compact old activity log entries into a summary. Keeps the most recent entries (default 50) and summarizes the rest. Use dry_run=true to preview what would be compacted. Runs automatically when log exceeds max_entries threshold.

dry_run boolean max_entries number preserve_recent number
create_project
annotations: none low

Create a new project. Projects group related tasks and track time across them.

name string color string description string
list_projects
annotations: none low

List all projects with task count. Call this at conversation start to understand the workspace.

get_project
annotations: none low

Get a project by ID with all its tasks. Use this to understand the full scope of a project before starting work.

id number
update_project
annotations: none low

Update project fields such as name, color, type, or description.

id number name string color string description string
delete_project
annotations: none low

Delete a project by ID. Tasks under this project will be unlinked (project_id set to NULL), not deleted.

id number
search_projects
annotations: none low

Search projects by name or description. Use this to find projects related to your current work.

query string
get_task
annotations: none low

Get a task by ID with time tracking info. Read the description carefully — it often contains implementation details and acceptance criteria.

id number
delete_task
annotations: none low

Delete a task by ID. Use sparingly — prefer updating status to

id number
bulk_create_tasks
annotations: none low

Create multiple tasks in a single transaction. Useful when breaking down a feature into subtasks.

title string project_id number description string
search_tasks
annotations: none low

Search tasks by title or description. Use this to find tasks related to your current work before creating duplicates.

query string

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 197

low
Tool 'whoami' has no annotations annotation_checker · 100%
low
Tool 'select_profile' has no annotations annotation_checker · 100%
low
Tool 'list_tasks' has no annotations annotation_checker · 100%
low
Tool 'list_channels' has no annotations annotation_checker · 100%
low
Tool 'list_agents' has no annotations annotation_checker · 100%
low
Tool 'create_task' has no annotations annotation_checker · 100%
low
Tool 'update_task' has no annotations annotation_checker · 100%
low
Tool 'update_task_status' has no annotations annotation_checker · 100%
low
Tool 'claim_task' has no annotations annotation_checker · 100%
low
Tool 'report_review' has no annotations annotation_checker · 100%
low
Tool 'send_message' has no annotations annotation_checker · 100%
low
Tool 'download_attachment' has no annotations annotation_checker · 100%
low
Tool 'check_messages' has no annotations annotation_checker · 100%
low
Tool 'mark_read' has no annotations annotation_checker · 100%
low
Tool 'register_session' has no annotations annotation_checker · 100%
low
Tool 'heartbeat' has no annotations annotation_checker · 100%
low
Tool 'capture_terminal' has no annotations annotation_checker · 100%
low
Tool 'log_activity' has no annotations annotation_checker · 100%
low
Tool 'get_activity' has no annotations annotation_checker · 100%
low
Tool 'get_analytics' has no annotations annotation_checker · 100%
low
Tool 'get_timeline' has no annotations annotation_checker · 100%
low
Tool 'get_tool_stats' has no annotations annotation_checker · 100%
low
Tool 'get_task_cost' has no annotations annotation_checker · 100%
low
Tool 'register_agent' has no annotations annotation_checker · 100%
low
Tool 'delete_agent' has no annotations annotation_checker · 100%
low
Tool 'ask_user' has no annotations annotation_checker · 100%
low
Tool 'check_response' has no annotations annotation_checker · 100%
low
Tool 'send_to_agent' has no annotations annotation_checker · 100%
low
Tool 'ask_agent' has no annotations annotation_checker · 100%
low
Tool 'respond_to_message' has no annotations annotation_checker · 100%
low
Tool 'broadcast_agents' has no annotations annotation_checker · 100%
low
Tool 'check_broadcast' has no annotations annotation_checker · 100%
low
Tool 'list_notifications' has no annotations annotation_checker · 100%
low
Tool 'mark_notification_read' has no annotations annotation_checker · 100%
low
Tool 'mark_all_notifications_read' has no annotations annotation_checker · 100%
low
Tool 'clear_notifications' has no annotations annotation_checker · 100%
low
Tool 'start_timer' has no annotations annotation_checker · 100%
low
Tool 'pause_timer' has no annotations annotation_checker · 100%
low
Tool 'stop_timer' has no annotations annotation_checker · 100%
low
Tool 'list_sessions' has no annotations annotation_checker · 100%
low
Tool 'send_keys' has no annotations annotation_checker · 100%
low
Tool 'get_agent_instructions' has no annotations annotation_checker · 100%
low
Tool 'bootstrap' has no annotations annotation_checker · 100%
low
Tool 'clear_data' has no annotations annotation_checker · 100%
low
Tool 'create_checkpoint' has no annotations annotation_checker · 100%
low
Tool 'get_checkpoint' has no annotations annotation_checker · 100%
low
Tool 'list_checkpoints' has no annotations annotation_checker · 100%
low
Tool 'get_setting' has no annotations annotation_checker · 100%
low
Tool 'update_setting' has no annotations annotation_checker · 100%
low
Tool 'get_activity_log' has no annotations annotation_checker · 100%
low
Tool 'clear_activity_log' has no annotations annotation_checker · 100%
low
Tool 'log_debug' has no annotations annotation_checker · 100%
low
Tool 'compact_activity_log' has no annotations annotation_checker · 100%
low
Tool 'create_project' has no annotations annotation_checker · 100%
low
Tool 'list_projects' has no annotations annotation_checker · 100%
low
Tool 'get_project' has no annotations annotation_checker · 100%
low
Tool 'update_project' has no annotations annotation_checker · 100%
low
Tool 'delete_project' has no annotations annotation_checker · 100%
low
Tool 'search_projects' has no annotations annotation_checker · 100%
low
Tool 'get_task' has no annotations annotation_checker · 100%
low
Tool 'delete_task' has no annotations annotation_checker · 100%
low
Tool 'bulk_create_tasks' has no annotations annotation_checker · 100%
low
Tool 'search_tasks' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 62 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Suspicious package name: react-is dependency_analyzer · 60%
medium
Suspicious package name: react-router dependency_analyzer · 60%
medium
Vulnerable dependency: vitest@4.1.10 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: xlsx@0.18.5 (GHSA-4r6h-8v6p-xvw6) dependency_analyzer · 95%
medium
Vulnerable dependency: xlsx@0.18.5 (GHSA-5pgg-2g8v-p4x9) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.0.0 (GHSA-29g2-3rmr-qm68) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.0.0 (GHSA-2crg-3p73-43xp) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.0.0 (GHSA-3f6h-2hrp-w5wx) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.0.0 (GHSA-6q87-84jw-cjhp) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.0.0 (GHSA-866w-xmhq-wj7x) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.0.0 (GHSA-g5m6-hxpp-fc49) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.0.0 (GHSA-mh2x-fcqh-fmqv) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.0.0 (GHSA-rjjv-87mx-6x3h) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.0.0 (GHSA-wqjv-9729-c5q2) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.0.0 (GHSA-crpf-4hrx-3jrp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.0.0 (GHSA-f7gr-6p89-r883) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.0.0 (GHSA-m56q-vw4c-c2cp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.0.0 (GHSA-phwv-c562-gvmh) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.0.0 (GHSA-pr6f-5x2q-rwfp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.0.0 (GHSA-rcqx-6q8c-2c42) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.0 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.0 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.0 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.0 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.0 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.0 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.0 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.3.0 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-2j2x-hqr9-3h42) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-337j-9hxr-rhxg) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-49rj-9fvp-4h2h) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-84g9-w2xq-vcv6) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-8646-j5j9-6r62) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-8x6r-g9mw-2r78) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-chx6-hx7r-mcp5) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-f22v-gfqf-p8f3) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-h8fp-f39c-q6mh) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-qwww-vcr4-c8h2) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-rxv8-25v2-qmq8) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@7.13.1 (GHSA-wrjc-x8rr-h8h6) dependency_analyzer · 95%
medium
Vulnerable dependency: @babel/core@7.29.0 (GHSA-4x5r-pxfx-6jf8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.1 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.1 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.1 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.1 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.1 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.0 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@latest (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@latest (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@latest (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: whoami manifest_parser · 70%
info
Tool: select_profile manifest_parser · 70%
info
Tool: list_tasks manifest_parser · 70%
info
Tool: list_channels manifest_parser · 70%
info
Tool: list_agents manifest_parser · 70%
info
Tool: create_task manifest_parser · 70%
info
Tool: update_task manifest_parser · 70%
info
Tool: update_task_status manifest_parser · 70%
info
Tool: claim_task manifest_parser · 70%
info
Tool: report_review manifest_parser · 70%
info
Tool: send_message manifest_parser · 70%
info
Tool: download_attachment manifest_parser · 70%
info
Tool: check_messages manifest_parser · 70%
info
Tool: mark_read manifest_parser · 70%
info
Tool: register_session manifest_parser · 70%
info
Tool: heartbeat manifest_parser · 70%
info
Tool: capture_terminal manifest_parser · 70%
info
Tool: log_activity manifest_parser · 70%
info
Tool: get_activity manifest_parser · 70%
info
Tool: get_analytics manifest_parser · 70%
info
Tool: get_timeline manifest_parser · 70%
info
Tool: get_tool_stats manifest_parser · 70%
info
Tool: get_task_cost manifest_parser · 70%
info
Tool: register_agent manifest_parser · 70%
info
Tool: delete_agent manifest_parser · 70%
info
Tool: ask_user manifest_parser · 70%
info
Tool: check_response manifest_parser · 70%
info
Tool: send_to_agent manifest_parser · 70%
info
Tool: ask_agent manifest_parser · 70%
info
Tool: respond_to_message manifest_parser · 70%
info
Tool: broadcast_agents manifest_parser · 70%
info
Tool: check_broadcast manifest_parser · 70%
info
Tool: list_notifications manifest_parser · 70%
info
Tool: mark_notification_read manifest_parser · 70%
info
Tool: mark_all_notifications_read manifest_parser · 70%
info
Tool: clear_notifications manifest_parser · 70%
info
Tool: start_timer manifest_parser · 70%
info
Tool: pause_timer manifest_parser · 70%
info
Tool: stop_timer manifest_parser · 70%
info
Tool: list_sessions manifest_parser · 70%
info
Tool: send_keys manifest_parser · 70%
info
Tool: get_agent_instructions manifest_parser · 70%
info
Tool: bootstrap manifest_parser · 70%
info
Tool: clear_data manifest_parser · 70%
info
Tool: create_checkpoint manifest_parser · 70%
info
Tool: get_checkpoint manifest_parser · 70%
info
Tool: list_checkpoints manifest_parser · 70%
info
Tool: get_setting manifest_parser · 70%
info
Tool: update_setting manifest_parser · 70%
info
Tool: get_activity_log manifest_parser · 70%
info
Tool: clear_activity_log manifest_parser · 70%
info
Tool: log_debug manifest_parser · 70%
info
Tool: compact_activity_log manifest_parser · 70%
info
Tool: create_project manifest_parser · 70%
info
Tool: list_projects manifest_parser · 70%
info
Tool: get_project manifest_parser · 70%
info
Tool: update_project manifest_parser · 70%
info
Tool: delete_project manifest_parser · 70%
info
Tool: search_projects manifest_parser · 70%
info
Tool: get_task manifest_parser · 70%
info
Tool: delete_task manifest_parser · 70%
info
Tool: bulk_create_tasks manifest_parser · 70%
info
Tool: search_tasks manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (18) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'start_timer': Cross-tool sequencing directive poisoning · 85%
info
SBOM generated: 882 components sbom_generator · 100%
critical
Database URL with Password found in dalmasonto-task_flow-1849f34/backend/docker-compose.yml secret_scanner · 85%
critical
AWS Secret Access Key found in dalmasonto-task_flow-1849f34/backend/umbral.toml secret_scanner · 90%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%