npm analyzed 3.0.291

local-mcp

v3.0.291
npm

LMCP — connect Claude Desktop, Cursor, Windsurf to Mail, Calendar, Contacts, Teams, OneDrive on macOS. Privacy-first: all data stays on your Mac.

maintainer
lanchuske
license
SEE LICENSE IN LICENSE
first seen
2026-05-22
last seen
2026-06-17
releases · 30d
93
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

code evidence v3.0.291 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 3

  • fs package/download.js :10 const fs = require('fs')
  • fs package/index.js :18 const fs = require('fs')
  • fs package/setup.js :11 const fs = require('fs')

shell / exec 3

  • shell package/download.js :13 const { execFileSync, execSync } = require('child_process')
  • shell package/index.js :15 const { spawn, execFileSync, execSync } = require('child_process')
  • shell package/setup.js :14 const { execSync, execFileSync } = require('child_process')

network 3

  • net package/download.js :8 const https = require('https')
  • net package/index.js :19 const https = require('https')
  • net package/setup.js :344 const https = require('https')

secrets 1

  • secrets package/setup.js :356 const _preToken = process.env.LMCP_PRE_TOKEN || ''

install hooks 1

  • postinstall package/package.json :10 node postinstall.js