← Back to search

@davebream/bullet-mcp

GitHub Actions Scanned 13d ago

MCP server for the Bullet API (tasks, notes, events)

npm ↗
? Not scanned yet

Versions

1.2.0latest
May 12, 2026
1.1.0
May 12, 2026
1.0.3
May 12, 2026
1.0.0
May 12, 2026

Tools 10

list_tags
annotations: verified low

List all tags (labels for categorizing entries). Returns IDs needed for filtering entries by tag.

readOnlyHint true
get_tag
annotations: verified low

Get a single tag by ID.

readOnlyHint true
list_entries
annotations: mismatch low

List tasks, notes, and events from Bullet. Two modes: (1) use 'view' for presets (inbox=unscheduled, overdue=past-due), or (2) use period+date for calendar queries. Each mode has different valid filters — see parameter descriptions. Returns paginated results; use cursor for next page.

readOnlyHint true idempotentHint true destructiveHint true
list_current
annotations: mismatch low

Get scheduled entries for the current period plus any overdue items. Defaults to today. Use when the user asks what's on today, this week, this month, or wants a daily/weekly overview.

readOnlyHint true idempotentHint true destructiveHint true
create_entry
annotations: mismatch low

Create a task, note, or event in Bullet. Set 'start' to schedule it on a date/time, or omit 'start' to put it in the inbox. Tasks track completion status, notes don't, events support timezone-aware datetimes.

readOnlyHint true idempotentHint true destructiveHint true
get_entry
annotations: mismatch low

Get a single entry by ID with full details. Use expand to include the collection and/or tags inline instead of just IDs.

readOnlyHint true idempotentHint true destructiveHint true
update_entry
annotations: mismatch low

Update an entry's title.

readOnlyHint true idempotentHint true destructiveHint true
delete_entry
annotations: mismatch low

Soft-delete an entry. Idempotent — succeeds even if already deleted.

readOnlyHint true idempotentHint true destructiveHint true
list_collections
annotations: verified low

List all collections (folders for organizing entries). Returns IDs needed for filtering entries by collection.

readOnlyHint true
get_collection
annotations: verified low

Get a single collection by ID.

readOnlyHint true

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 33

medium
Tool 'list_entries' claims destructive but name implies read-only operation annotation_checker · 80%
medium
Tool 'list_current' claims destructive but name implies read-only operation annotation_checker · 80%
medium
Tool 'create_entry' claims readOnly but name implies write operation annotation_checker · 80%
medium
Tool 'get_entry' claims destructive but name implies read-only operation annotation_checker · 80%
medium
Tool 'update_entry' claims readOnly but name implies write operation annotation_checker · 80%
high
Tool 'delete_entry' claims readOnly but name implies destructive operation annotation_checker · 80%
info
Tool 'list_collections' annotations are consistent annotation_checker · 80%
info
Tool 'get_collection' annotations are consistent annotation_checker · 80%
info
Tool 'list_tags' annotations are consistent annotation_checker · 80%
info
Tool 'get_tag' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.1 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list_entries manifest_parser · 85%
info
Tool: list_current manifest_parser · 85%
info
Tool: create_entry manifest_parser · 85%
info
Tool: get_entry manifest_parser · 85%
info
Tool: update_entry manifest_parser · 85%
info
Tool: delete_entry manifest_parser · 85%
info
Tool: list_collections manifest_parser · 85%
info
Tool: get_collection manifest_parser · 85%
info
Tool: list_tags manifest_parser · 85%
info
Tool: get_tag manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 8 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%