addevent-mcp-server
MCP server that wraps the AddEvent Calendar & Events API v2, allowing Claude to create, search, retrieve, update, and delete events, calendars, and RSVP attendees, plus list timezones.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
UtahREIA
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
addevent_create_calendarCreates a new calendar (a container that events live inside). Args: - title (string, required): The calendar's title. - timezone, weekday_begin, description, internal_name, calendar_color, landing_page_template_id, embeddable_calendar_template_id, custom_data: optional fields. Returns: The cre…
addevent_search_calendarsSearches calendars you've previously created. Does NOT create or modify calendars. Args: - calendar_ids (string[], optional): Narrow to specific calendar IDs. - page (number, default 1), page_size (number, 1-20, default 10): Pagination. - sort_by ('created' | 'title'), sort_order ('asc' | 'de…
addevent_get_calendarRetrieves a single calendar by its calendar_id. Args: - calendar_id (string, required): The calendar to retrieve. Returns: The full calendar object as JSON. Error Handling: - Returns "Error: Not found..." (404) if the calendar_id doesn't exist.
addevent_update_calendarUpdates an existing calendar. Only the fields you provide are changed; everything else is left as-is. Args: - calendar_id (string, required): The calendar to update. - Any other field from addevent_create_calendar is optional here — include only what's changing. Returns: The updated calendar o…
addevent_delete_calendarPermanently deletes a calendar. This cannot be undone, and affects any events still on it. Args: - calendar_id (string, required): The calendar to delete. Returns: A confirmation message. Examples: - Before deleting, consider calling addevent_search_events with this calendar_id to check what'…
addevent_create_eventCreates a new event on an AddEvent calendar. Args: - title (string, required): The event's title. - calendar_id (string, optional): Target calendar. Defaults to the account's default calendar. Use addevent_search_calendars to find IDs. - datetime_start (string, required): Start date/time, e.g…
addevent_search_eventsSearches events you've previously created. Does NOT create or modify events. Args: - calendar_ids, event_ids (string[], optional): Narrow to specific calendars or events. - datetime_min, datetime_max (string, optional): Filter by date range. datetime_min matches events ending on/after that time…
addevent_get_eventRetrieves a single event by its event_id. Args: - event_id (string, required): The event to retrieve. Returns: The full event object as JSON. Examples: - "Show me the details for event evt_abc123" -> event_id: "evt_abc123". - Don't use when: you don't have the event_id yet (use addevent_sea…
addevent_update_eventUpdates an existing event. Only the fields you provide are changed; everything else is left as-is. Args: - event_id (string, required): The event to update. - Any other field from addevent_create_event (title, datetime_start, datetime_end, location, description, etc.) is optional here — include…
addevent_delete_eventPermanently deletes an event. This cannot be undone. Args: - event_id (string, required): The event to delete. Returns: A confirmation message. Examples: - "Delete the duplicate event we just created" -> event_id set. - Don't use when: you want to hide an event without losing it (there's no…
addevent_create_rsvpRegisters an RSVP attendee on an event. Only works on events created with rsvp_enabled: true. Args: - event_id (string, required): The event to RSVP to. - email (string, required): Attendee's email. Must be unique per event. - attending ('going' | 'maybe' | 'not-going', optional): Default 'go…
addevent_search_rsvpsSearches RSVP attendees you've previously created. Does NOT create or modify RSVPs. Args: - calendar_ids, event_ids (string[], optional): Narrow to attendees of these calendars or events. - attending (array of 'going' | 'maybe' | 'not-going', optional): Filter by response. - page (number, def…
addevent_get_rsvpRetrieves a single RSVP attendee by attendee_id. Args: - attendee_id (string, required): The RSVP attendee to retrieve. Returns: The full RSVP attendee object as JSON. Error Handling: - Returns "Error: Not found..." (404) if the attendee_id doesn't exist.
addevent_update_rsvpUpdates an existing RSVP attendee. Only the fields you provide are changed; everything else is left as-is. Args: - attendee_id (string, required): The RSVP attendee to update. - email, attending, rsvp_form_data: optional — include only what's changing. Returns: The updated RSVP attendee object…
addevent_delete_rsvpPermanently deletes an RSVP attendee. This cannot be undone. Args: - attendee_id (string, required): The RSVP attendee to delete. Returns: A confirmation message. Error Handling: - Returns "Error: Not found..." (404) if the attendee_id doesn't exist.
addevent_list_timezonesLists the timezone values supported by AddEvent's timezone field on events and calendars. Args: - search (string, optional): Filter results to timezone names containing this text. Returns: { "timezones": [...], "count": number } Examples: - "What timezone value should I use for Salt Lake City…
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
ADDEVENT_API_KEYcp .env.example .env # then paste your API key intoTRANSPORTPoint it at node dist/index.js (stdio) or http://localhost:3000/mcp (after running =http npm start locally).PORTTool inputs are validated
Only 0/16 tool handlers declare input schemas (0%)
Declare an inputSchema with zod/joi/yup on every tool definition.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Tests exist
No test files found
Add tests that exercise each declared tool.
Production dependencies are patched
0 critical, 15 high severity in production deps — @modelcontextprotocol/sdk@1.6.1 (high), @modelcontextprotocol/sdk@1.6.1 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/utahreia/addevent-mcp-server)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check