← Back to search

@instacodeio/icloud-calendar-mcp-server

GitHub Actions Scanned 30d ago

MCP server for iCloud Calendar via CalDAV

? Not scanned yet

Versions

No versions found.

Tools 5

icloud_list_calendars
annotations: verified low

List all calendars in the authenticated iCloud account. Returns each calendar's display name, URL (used as a stable identifier), color, and timezone if available. Use this when: - The user asks "what calendars do I have" - You need a calendar identifier to pass to other tools - Disambiguating between calendars with similar names

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
icloud_list_events
annotations: verified low

List events from a specific calendar within a time range. Args: - calendar: Display name (e.g. "Work") or full CalDAV URL - start: ISO 8601 datetime for range start - end: ISO 8601 datetime for range end Returns an array of events with uid, summary, start, end, location, description, allDay flag. The 'uid' is the stable identifier — use it for update/delete operations.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
icloud_create_event
annotations: verified low

Create a new event on the specified calendar. Args: - calendar: Display name or full CalDAV URL - summary: Event title (required) - start, end: ISO 8601 datetimes - description, location: optional - allDay: boolean (default false) Returns the created event's uid and CalDAV URL.

readOnlyHint false openWorldHint true idempotentHint false destructiveHint false
icloud_update_event
annotations: verified low

Update fields on an existing event by UID. Args: - calendar: Display name or full CalDAV URL where the event lives - uid: Event UID (from icloud_list_events) - Any of: summary, description, location, start, end, allDay (only provided fields are updated) Returns confirmation with the updated UID.

readOnlyHint false openWorldHint true idempotentHint true destructiveHint false
icloud_delete_event
annotations: verified low

Delete an event by UID. Args: - calendar: Display name or full CalDAV URL - uid: Event UID This is destructive. Confirm with the user before invoking.

readOnlyHint false openWorldHint true idempotentHint true destructiveHint true

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 19

info
Tool 'icloud_list_calendars' annotations are consistent annotation_checker · 80%
info
Tool 'icloud_list_events' annotations are consistent annotation_checker · 80%
info
Tool 'icloud_create_event' annotations are consistent annotation_checker · 80%
info
Tool 'icloud_update_event' annotations are consistent annotation_checker · 80%
info
Tool 'icloud_delete_event' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: icloud_list_calendars manifest_parser · 85%
info
Tool: icloud_list_events manifest_parser · 85%
info
Tool: icloud_create_event manifest_parser · 85%
info
Tool: icloud_update_event manifest_parser · 85%
info
Tool: icloud_delete_event manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 132 components sbom_generator · 100%
high
Hardcoded Password found in InstaCode-icloud-calendar-mcp-server-92a793d/README.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%