github TypeScript re-analysis due

ni-c/carddav-mcp

github

Model Context Protocol (MCP) server for CardDAV address books: contacts, groups and photos

maintainer
ni-c
licence
MIT
first seen
2026-09-06
last seen
2026-09-12
releases · 30d
4
short id

ni-c/carddav-mcp is an MCP server distributed on github, maintained by ni-c, tracked here since September 2026. It has shipped 4 releases and exposes 17 tools. Tools include create_contact, create_group, delete_contact, delete_group, export_contacts, get_contact, and 11 more. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 17 tools appear to reach network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 17
  • create_contact
  • create_group
  • delete_contact
  • delete_group
  • export_contacts
  • get_contact
  • get_contact_photo
  • get_group
  • get_server_info
  • list_address_books
  • list_changes
  • list_contacts
  • list_groups
  • move_contact
  • search_contacts
  • update_contact
  • update_group
release cadence · 90d 4 releases
06-15 00:00 07-29 00:00 now
recent releases last 4
version date src
v0.1.3 2026-09-08 github
v0.1.2 2026-09-07 github
v0.1.1 2026-09-06 github
v0.1.0 2026-09-06 github

view all →