Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"supathings": {
"args": [
"-y",
"supathings-mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
It was built to solve a practical gap: AI agents can write to Things via things:///, but they cannot reliably understand your real project structure from URL commands alone.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'supathings-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
Checked supathings-mcp against OSV.dev.
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in productivity
Dynamic problem-solving through sequential thought chains
Persistent memory using a knowledge graph
Local-first AI memory with knowledge graphs and hybrid search. 17+ AI tools via MCP. Free.
MCP server for monday.com integration.
MCP Security Weekly
Get CVE alerts and security updates for SupaThings MCP and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
SupaThings MCP is a Things 3 MCP server for macOS.
It was built to solve a practical gap: AI agents can write to Things via things:///, but they cannot reliably understand your real project structure from URL commands alone.
SupaThings combines SQLite-based reads with official URL-scheme writes, so agents can both understand and act safely.
npx -y supathings-mcp
npm install -g supathings-mcp
Alias also available:
things-mcp
npm install
npm run build
node dist/index.js
{
"mcpServers": {
"supathings": {
"command": "npx",
"args": ["-y", "supathings-mcp"]
}
}
}
Codex:
codex mcp add supathings -- npx -y supathings-mcp
Claude Code:
claude mcp add --transport stdio supathings -- npx -y supathings-mcp
Gemini CLI:
gemini mcp add -s user supathings npx -y supathings-mcp
MCP servers expose tools over a standard protocol so AI clients can call them programmatically.
In Things, there are two realities:
things:/// URL scheme is excellent for creating/updating/navigating items.SupaThings was built to bridge that split.
Technical approach:
things:/// URL actions for safe interoperability.Why this is useful in practice:
Current release: 0.4.0
Shipped scope today:
37 MCP toolsthings:/// URL schemeCurrent boundaries:
Three-layer model:
things:/// layer for writes, updates, moves, and navig