MAG-Cie/mcp-microsoft-todo
MCP server for Microsoft To Do via Microsoft Graph API. Manage task lists, create, update, complete and delete tasks from Claude Code, Claude Desktop, or any MCP-compatible client. Stdio transport, MSAL device code auth, persisted token cache.
7 starsTypeScriptMITanthropicclaudeclaude-codemcp
VERIFIED91/100
Scanned 2026-07-08 · deepseek v1
Dimension breakdown
Security
85/100
5 findings
Quality
88/100
No findings
License
95/100
No findings
Completeness
98/100
No findings
Findings (5)
MEDIUM: 2LOW: 2INFO: 1
- MEDIUMsecurityPotential OData injection in search and filter parameters
- MEDIUMsecurityToken cache stored in plaintext JSON file
- LOWsecurityICS export does not sanitize task content for injection
- LOWsecurityNo input validation on extension data
- INFOsecurityUse of eval or unsafe deserialization not found
Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.
Maintainer of this repo?
Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.
Claim listingEmbed the badge.
Drop it into your README. Every view backlinks to this verification page.
Markdown
[](https://archimedes.market/r/MAG-Cie/mcp-microsoft-todo)HTML
<a href="https://archimedes.market/r/MAG-Cie/mcp-microsoft-todo"><img src="https://archimedes.market/api/badge/MAG-Cie/mcp-microsoft-todo.svg" alt="Archimedes Trust Verified"/></a>