Is io.github.kisasa/populi-mcp safe to use?

io.github.kisasa/populi-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.

How do I install io.github.kisasa/populi-mcp?

io.github.kisasa/populi-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.kisasa/populi-mcp?

io.github.kisasa/populi-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.kisasa/populi-mcp actively maintained?

io.github.kisasa/populi-mcp is actively maintained - last commit was 3 days ago.

io.github.kisasa/populi-mcp

@kisasa/populi-mcp

Populi API v2 for student information systems: search the API, read data, optionally write

508/wk GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 3d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

MCPpedia last refreshed this data 22h ago

Edit this pageView history

io.github.kisasa/populi-mcp is an MCP server that populi API v2 for student information systems: search the API, read data, optionally write. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 62/100 on MCPpedia's security, maintenance and efficiency rubric.

Education

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "populi": {
      "env": {
        "POPULI_API_KEY": "sk_sandbox_...",
        "POPULI_BASE_URL": "https://yourschool.populiweb.com"
      },
      "args": [
        "-y",
        "@kisasa/populi-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-kisasa-populi-mcp)](https://mcppedia.org/s/io-github-kisasa-populi-mcp)

Read me

What io.github.kisasa/populi-mcp does

Populi API v2 for student information systems: search the API, read data, optionally write

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

62/100across 5 weighted dimensions

How we score →

0255075100

−38

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @kisasa/populi-mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.kisasa/populi-mcp safe to use?: io.github.kisasa/populi-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.kisasa/populi-mcp?: io.github.kisasa/populi-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.kisasa/populi-mcp?: io.github.kisasa/populi-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.kisasa/populi-mcp actively maintained?: io.github.kisasa/populi-mcp is actively maintained - last commit was 3 days ago.

Similar servers

Others in education

View all →

io.github.mims-harvard/tooluniverse91

2,700+ scientific tools for AI scientists: life science, research, literature, and more.

1.8k 4

Auto Claude Code Research In Sleep91

ARIS ⚔️ (Auto-Research-In-Sleep) — Lightweight Markdown-only skills for autonomous ML research: cross-model review loops, idea discovery, and experiment automation. No framework, no lock-in — works with Claude Code, Codex, OpenClaw, or any LLM agent.

19.2k 5

Daofy90

Daofy for Delphi — MCP Server that compiles Delphi projects and queries knowledge base for AI assistants.

108 10

ai.achromat/mcp-server89

Recall and calibrate policy-compliant tool-call arguments before execution. Does not run the tool.

1 6

MCP Security Weekly

Get CVE alerts and security updates for io.github.kisasa/populi-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Education

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "populi": {
      "env": {
        "POPULI_API_KEY": "sk_sandbox_...",
        "POPULI_BASE_URL": "https://yourschool.populiweb.com"
      },
      "args": [
        "-y",
        "@kisasa/populi-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-kisasa-populi-mcp)](https://mcppedia.org/s/io-github-kisasa-populi-mcp)

Read me

What io.github.kisasa/populi-mcp does

Populi API v2 for student information systems: search the API, read data, optionally write

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

populi-mcp

MCP server for the Populi API v2. It lets Claude, Codex, Cursor and any other Model Context Protocol client look up people, admissions, academics and billing data in your Populi instance, and, if you opt in, make changes.

Package: @kisasa/populi-mcp on npm. Command: populi-mcp. Transports: stdio (local, the default) or Streamable HTTP with sign-in (--http, for Claude and ChatGPT connectors). Protocol: MCP 2026-07-28, plus the 2025-era initialize handshake for older clients, on both transports.

How it works

Populi's API has 697 routes across 180 models. Exposing each as its own tool would flood a model's context, so this server gives the model a small toolset plus the API reference itself:

Tool	What it does
`populi_search_api`	Keyword search over the bundled route catalog (`applications`, `invoice`, `enrollments`, ...).
`populi_describe_api`	Full reference for one route: path ids, required and optional fields with types, `expand` options, filter conditions, required Populi roles, docs link.
`populi_get`	`GET` any route. Supports `filter`, `expand`, `page`, `limit`, and `all_pages` to merge every page into one list.
`populi_download`	`GET` a route and save the response to a file instead of returning it. For PDF/XLS/CSV exports, transcripts, Data Slicer results, file and backup downloads, and for keeping a large export out of the conversation.
`populi_find_people`	Look up people by exact email and/or name.
`populi_status`	Shows the instance, key type (sandbox or live), whether writes are on, the files folder and the timeout. `verify: true` makes one live request to check the key.
`populi_write`	`POST` / `PUT` / `DELETE` any route, including multipart file uploads. Only exists when `POPULI_ALLOW_WRITES=true`.

Together they cover the whole API: all 492 documented GET routes, all 205 write routes, file uploads and file downloads. Routes that aren't in the bundled catalog work too, since the tools take any path.

A typical exchange: the model searches for the route, reads its parameters, then calls populi_get with a server-side filter.

The catalog is generated from the public API docs and ships inside the package, so searching and describing work offline and cost no API requests.

Configuration

Variable	Required	Description
`POPULI_BASE_URL`	yes	Your instance, e.g. `https://yourschool.populiweb.com`. A trailing `/api2` is fine and optional. Must be `https`.
`POPULI_API_KEY`	yes	An API key token. In Populi: Account & Settings > API > Keys (Account Administrator). Sent as a bearer token to `POPULI_BASE_URL` only.
`POPULI_ALLOW_WRITES`	no	Set to `true` to enable `populi_write`. Default: read-only.
`POPULI_FILES_DIR`	no	The one folder downloads are saved to and uploads are read from. Default: `~/populi-mcp-files`.
`POPULI_TIMEOUT_MS`	no	How long one Populi request may take, 1000 to 600000. Default: `120000` (two minutes). Each call can also pass `timeout_ms`.

The key's Populi roles decide what it can see. A route the key cannot reach returns a 403 naming the problem; populi_describe_api lists the roles each route needs.

Sandbox first

Populi issues separate sk_sandbox_... keys that only work against sandbox instances (live keys only work on live). Point this server at a sandbox while you evaluate it.

Read-only by default

With no POPULI_ALLOW_WRITES, the write tool is not registered at all, so the model cannot even attempt a change. When you enable it, populi_write is marked destructive, so clients that prompt for approval will ask before each call. DELETE in Populi is permanent.

Install

Requires Node.js 20 or newer. Every client below runs npx -y @kisasa/populi-mcp, so there is

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

62/100across 5 weighted dimensions

How we score →

0255075100

−38

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @kisasa/populi-mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.kisasa/populi-mcp safe to use?: io.github.kisasa/populi-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.kisasa/populi-mcp?: io.github.kisasa/populi-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.kisasa/populi-mcp?: io.github.kisasa/populi-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.kisasa/populi-mcp actively maintained?: io.github.kisasa/populi-mcp is actively maintained - last commit was 3 days ago.