4lador/leantime-mcp

github
github analyzed 9060dc5 no deep scan

Unofficial MCP server for Leantime: 42 agent-first tools, backup/restore, dry-run validation

maintainer
4lador
licence
—
first seen
2026-09-08
last seen
2026-09-08
releases · 30d
0
github stars
0 reported
short id

4lador/leantime-mcp is an MCP server distributed on github, maintained by 4lador, tracked here since September 2026. It has shipped 0 releases and exposes 42 tools. Tools include leantime_add_comment, leantime_backup_project, leantime_bulk_create_tickets, leantime_bulk_schedule_tickets, leantime_bulk_update_tickets, leantime_create_milestone, and 36 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — exfiltration combo and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 42 tools appear to reach filesystem, network, secrets and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-17: 2 tools added and 2 tools removed.

full security breakdown →

tools

20 of 42
  • leantime_add_comment Comment on a ticket (Markdown converted to rich HTML)
  • leantime_backup_project Dump a project to a timestamped local JSON file (milestones, tickets, sprints — the response is a summary only, not the data)
  • leantime_bulk_create_tickets Create up to 50 tickets — validated upfront, Markdown converted, per-item results (dryRun supported)
  • leantime_bulk_schedule_tickets Schedule up to 50 tickets (sprint, dates) via patch
  • leantime_bulk_update_tickets Update up to 50 tickets via patch — per-item results (dryRun supported)
  • leantime_create_milestone Create a milestone (Markdown description, mandatory assignment; dryRun supported)
  • leantime_create_project Create a project (Markdown details, clientId required)
  • leantime_create_sprint Create a sprint
  • leantime_create_ticket Create a ticket (Markdown description, mandatory assignment, subtasks via dependingTicketId; dryRun supported)
  • leantime_delete_comment Delete a comment (confirm-gated)
  • leantime_delete_milestone Delete a milestone (confirm-gated; its tickets are kept)
  • leantime_delete_ticket Delete a ticket (confirm-gated)
  • leantime_delete_timesheet_entry Delete a time entry (confirm-gated)
  • leantime_find_projects Search projects by name
  • leantime_get_current_sprint Sprint in progress (or next upcoming), computed from dates
  • leantime_get_milestone Get milestone details
  • leantime_get_milestone_progress Completion % (effort × priority weighted, Leantime's formula)
  • leantime_get_project Get project details
  • leantime_get_project_progress Get project progress metrics
  • leantime_get_statuses Get status labels for a project
All 42 tools →

release cadence · 90d

0 releases

No releases yet.

recent releases

last 0

No releases yet.