← Index

io.github.jztan/redmine-mcp-server

io.github.jztan/redmine-mcp-server·v2.3.0·Security

Production-ready MCP server for Redmine with security, pagination, and enterprise features

Trust verdict · v1 advisory · method
NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

Environment variables
REDMINE_URL
required

URL of your Redmine server (e.g., https://your-redmine-server.com)

REDMINE_USERNAME

Redmine username for authentication (alternative to API key)

REDMINE_PASSWORD
secret

Redmine password for authentication (alternative to API key)

REDMINE_API_KEY
secret

Redmine API key for authentication (alternative to username/password)

SERVER_HOST

Host address for the MCP server (default: 0.0.0.0)

SERVER_PORT

Port for the MCP server (default: 8000)

PUBLIC_HOST

Public hostname for file download URLs (default: localhost)

PUBLIC_PORT

Public port for file download URLs (default: 8000)

ATTACHMENTS_DIR

Directory for storing downloaded attachments (default: ./attachments)

AUTO_CLEANUP_ENABLED

Enable automatic cleanup of expired files (default: true)

CLEANUP_INTERVAL_MINUTES

Interval between cleanup runs in minutes (default: 10)

ATTACHMENT_EXPIRES_MINUTES

Default expiry time for attachments in minutes (default: 60)

MCP quality score · maturity, not trust · methodology
freshness
25
completeness
10
installability
25
documentation
15
stability
10
Alternatives in Security