local-scheduler-mcp (MauricioPerera/local-scheduler-mcp) is an MCP server listed on the M8ven Trust Index. It scores 75 out of 100, grade B. It declares 14 tools. The publisher has proved control of what we score (Verified Publisher). It is connected through the M8ven GitHub App, so the listing is re-checked on every push.
Local scheduler MCP server for Codex - recurring automations and one-shot tasks with security validator
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Monitored 19 days · every push re-verified
Who stands behind it
gmail.com (@MauricioPerera) · Verified Publisher
Source: github_app_install
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
CODEX_HOMEData directory: ~/.codex/local-scheduler/ (or $/local-scheduler if set, or SCHEDULER_TEST_DIR during tests).SCHEDULER_ALLOWED_DIRS3. CWD allowlist: User home, ~/.codex, C:/temp, C:/tmp, and any directories set in env var (semicolon-separated).SCHEDULER_TEST_DIRData directory: ~/.codex/local-scheduler/ (or $CODEX_HOME/local-scheduler if set, or during tests).SCHEDULER_WEBHOOK_URLDefault webhook URL for notificationsTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
14/14 tools missing one or more hints — create_automation (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_templates (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); instantiate_template (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +11 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Destructive tools are labelled
2 tools perform destructive updates without destructiveHint — delete_automation deletes at line 173 (fs.unlinkSync(scriptPath)); delete_task deletes at line 315 (fs.unlinkSync(scriptPath))
Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Shell command execution
2 calls in production code run through a shell (server.js:267, server.js:330)
Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.
[](https://m8ven.ai/mcp/mauricioperera-local-scheduler-mcp-qgccbx)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check