ai-smithery-mjucius-cozi-mcp
ToolProof Connection Signal
Review First
Do not connect casually. Review the exposed tools, credentials, network/file/API access, and approval path before giving an agent access.
Evidence Confidence86/100
Tools Inferred12
Control Signals0
Profile status
ToolProof reviewSnapshotEvidence-backed review from observed public information.
Owner statusUnclaimedOwner-provided details have not been maintained yet.
Watch statusNot monitoredEnable ToolProof Watch to monitor drift and freshness.
Last observed2026-06-07T19:20:29.209416+00:00MCP servers can change after observation.
Why this signal
- Source evidence fetched from 2 file(s).
- 12 MCP tool(s) inferred: add_item, create_appointment, create_list, delete_appointment, delete_list.
- No visible control signals were observed.
- 3 static finding(s) should be reviewed before connection.
What this server exposes
add_itemcreate_appointmentcreate_listdelete_appointmentdelete_listfamily_membersget_calendarget_list_itemsget_listsremove_itemsupdate_appointmentupdate_item
Source and observation
Source: https://github.com/mjucius/cozi_mcp
Observed: 2026-06-07T19:20:29.209416+00:00
Machine ID: mcp:ai-smithery-mjucius-cozi-mcp
Capabilities inferred
- destructive_capability
- critical_or_unmitigated_high
- {"has_packages": false, "has_remotes": true, "package_registry_types": [], "remote_types": ["streamable-http"], "requires_secret_header": true}
Controls observed
- No controls observed.
Recommended controls
- Install in a sandbox before team or production use.
- Pin the exact package/repository version.
- Review install scripts, Dockerfile behavior, and dependency pins.
- Do not use production credentials during first install.
- Restrict filesystem, repository, cloud, and database scope.
- Require human approval for destructive actions.
Open questions before connection
- What credentials or environment variables are required?
- What data can leave the local environment?
- What systems can the agent reach through this server?
- What actions should require human approval?
Findings and concerns
- Detected capability: shell_execution — src/cozi/models.ts:27
- Detected capability: environment_access — scripts/smoke-write.ts:25
- Install risk pattern: unpinned_dependency — package-lock.json:11
Claim or update this profile
Are you the owner of this MCP server? Submit official docs, intended use cases, support links, security contact, and recommended safe configuration.
Owner-provided information is shown separately from ToolProof evidence and does not change the connection signal unless reviewed.
Payment may buy review, monitoring, or sponsored visibility. It does not change the ToolProof connection signal.
Evidence fetched
- https://github.com/mjucius/cozi_mcp
- Registry entry: ai.smithery/mjucius-cozi_mcp 1.14.0