Is io.github.WYRE-AI/gorelo-mcp safe to use?

io.github.WYRE-AI/gorelo-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access.

How do I install io.github.WYRE-AI/gorelo-mcp?

io.github.WYRE-AI/gorelo-mcp is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint instead of running it locally.

What can io.github.WYRE-AI/gorelo-mcp do?

io.github.WYRE-AI/gorelo-mcp provides 35 tools: gorelo_list_tickets, gorelo_get_ticket, gorelo_list_ticket_statuses, gorelo_list_ticket_tags, gorelo_list_ticket_types and 30 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.WYRE-AI/gorelo-mcp?

io.github.WYRE-AI/gorelo-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.WYRE-AI/gorelo-mcp actively maintained?

io.github.WYRE-AI/gorelo-mcp is actively maintained - last commit was 22 days ago.

io.github.WYRE-AI/gorelo-mcp

MCP server for Gorelo's PSA ticket, client, contact, contract, asset, and time-tracking APIs.

35 tools GitHub

No known CVEs

No license

Actively maintained

Last commit 22d ago

Works with most clients

Transport: stdio, sse, http

35 tools · ~1.1k tok

Grade B · 0.6% of 200K ctx

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.WYRE-AI/gorelo-mcp is an MCP server that MCP server for Gorelo's PSA ticket, client, contact, contract, asset, and time-tracking APIs. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 65/100 on MCPpedia's security, maintenance and efficiency rubric.

Analytics

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-wyre-ai-gorelo-mcp": {
      "url": "<see-readme-for-url>"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-wyre-ai-gorelo-mcp)](https://mcppedia.org/s/io-github-wyre-ai-gorelo-mcp)

Read me

What io.github.WYRE-AI/gorelo-mcp does

MCP server for Gorelo's PSA ticket, client, contact, contract, asset, and time-tracking APIs.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

65/100across 5 weighted dimensions

How we score →

0255075100

−35

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (35)

Click any tool to inspect its schema.

~1.1k tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.WYRE-AI/gorelo-mcp safe to use?: io.github.WYRE-AI/gorelo-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access.
How do I install io.github.WYRE-AI/gorelo-mcp?: io.github.WYRE-AI/gorelo-mcp is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint instead of running it locally.
What can io.github.WYRE-AI/gorelo-mcp do?: io.github.WYRE-AI/gorelo-mcp provides 35 tools: gorelo_list_tickets, gorelo_get_ticket, gorelo_list_ticket_statuses, gorelo_list_ticket_tags, gorelo_list_ticket_types and 30 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.WYRE-AI/gorelo-mcp?: io.github.WYRE-AI/gorelo-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.WYRE-AI/gorelo-mcp actively maintained?: io.github.WYRE-AI/gorelo-mcp is actively maintained - last commit was 22 days ago.

Similar servers

Others in analytics

View all →

io.github.PhilipAD/health-export-mcp92

Ask your agent about your own Apple Health data: 194 metrics, 22 tools, local, 0 deps.

11 6

io.github.dynatrace-oss/dynatrace-managed-mcp92

MCP server for Dynatrace Managed to access logs, events, and metrics.

34 2

io.github.PostHog/mcp91

Official PostHog MCP Server for product analytics, feature flags, experiments, and more.

40.8k 1

co.churnkey/churnkey91

Read and manage Churnkey cancel flows, retention metrics, and payment recovery

MCP Security Weekly

Get CVE alerts and security updates for io.github.WYRE-AI/gorelo-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Env var	Description
`GORELO_API_KEY`	Gorelo Public API key for stdio and `AUTH_MODE=env`. Not read by the gateway Compose service.
`GORELO_REGION`	`us` (default) or `au` - your account's regional API host. Not a credential.
`MCP_TRANSPORT`	`stdio` (default) or `http`.
`AUTH_MODE`	`env` (default, reads the vars above) or `gateway` (credentials arrive per-request via `X-Gorelo-*` headers, injected by the Conduit gateway). Gateway mode never falls back to `GORELO_API_KEY`. The container image and Compose default to `gateway`.
`CONDUIT_S2S_SECRET`	Required to start the HTTP transport. The process logs an error and exits non-zero when this is empty or a known placeholder (`changeme`, `change-me`, `secret`, `example`, `placeholder`, `replace-me`, `your-secret`, `your-s2s-secret`, `s2s-secret`, `replace-with-a-real-secret`). Compose will not start without it. Never commit a real value. The value is never logged.
`MCP_ALLOW_INSECURE_DEV`	Set to exactly `1` only for local development to start HTTP without `CONDUIT_S2S_SECRET`. The process logs a warning, does not enforce `X-Gateway-S2S`, and binds `127.0.0.1` only. A non-loopback `MCP_HTTP_HOST` is overridden and logged. A placeholder secret still refuses to start.
`MCP_HTTP_HOST`	Bind address when a secret is configured. Unset means `0.0.0.0`. The container image sets `0.0.0.0`. Ignored in favor of `127.0.0.1` when there is no secret.
`MCP_HTTP_PORT`	HTTP port. Defaults to `8080`.
`GORELO_PRESET`, `GORELO_ENABLE_DESTRUCTIVE`, `GORELO_ENABLE_BILLING_WRITES`, `GORELO_TOOLS_INCLUDE`, `GORELO_TOOLS_EXCLUDE`	Tool selection; see Tool selection.
`LOG_LEVEL`	`debug` \| `info` (default) \| `warn` \| `error`.

Env var	Description
`GORELO_API_KEY`	Gorelo Public API key for stdio and `AUTH_MODE=env`. Not read by the gateway Compose service.
`GORELO_REGION`	`us` (default) or `au` - your account's regional API host. Not a credential.
`MCP_TRANSPORT`	`stdio` (default) or `http`.
`AUTH_MODE`	`env` (default, reads the vars above) or `gateway` (credentials arrive per-request via `X-Gorelo-*` headers, injected by the Conduit gateway). Gateway mode never falls back to `GORELO_API_KEY`. The container image and Compose default to `gateway`.
`CONDUIT_S2S_SECRET`	Required to start the HTTP transport. The process logs an error and exits non-zero when this is empty or a known placeholder (`changeme`, `change-me`, `secret`, `example`, `placeholder`, `replace-me`, `your-secret`, `your-s2s-secret`, `s2s-secret`, `replace-with-a-real-secret`). Compose will not start without it. Never commit a real value. The value is never logged.
`MCP_ALLOW_INSECURE_DEV`	Set to exactly `1` only for local development to start HTTP without `CONDUIT_S2S_SECRET`. The process logs a warning, does not enforce `X-Gateway-S2S`, and binds `127.0.0.1` only. A non-loopback `MCP_HTTP_HOST` is overridden and logged. A placeholder secret still refuses to start.
`MCP_HTTP_HOST`	Bind address when a secret is configured. Unset means `0.0.0.0`. The container image sets `0.0.0.0`. Ignored in favor of `127.0.0.1` when there is no secret.
`MCP_HTTP_PORT`	HTTP port. Defaults to `8080`.
`GORELO_PRESET`, `GORELO_ENABLE_DESTRUCTIVE`, `GORELO_ENABLE_BILLING_WRITES`, `GORELO_TOOLS_INCLUDE`, `GORELO_TOOLS_EXCLUDE`	Tool selection; see Tool selection.
`LOG_LEVEL`	`debug` \| `info` (default) \| `warn` \| `error`.

io.github.WYRE-AI/gorelo-mcp

Install in your client

What io.github.WYRE-AI/gorelo-mcp does

Test This Server

Why this score

65/100across 5 weighted dimensions

Security

Tools (35)

Reviews

Frequently Asked Questions

Similar servers

Discussion

io.github.WYRE-AI/gorelo-mcp

Install in your client

What io.github.WYRE-AI/gorelo-mcp does

Test This Server

Gorelo MCP Server

Authentication

Configuration

HTTP authentication

Request limits

Tools

Why this score

65/100across 5 weighted dimensions

Security

Tools (35)

Reviews

Frequently Asked Questions

Similar servers

Discussion

Gorelo MCP Server

Authentication

Configuration

HTTP authentication

Request limits

Tools