
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@astrocal/mcp-server
Advanced tools
MCP server for Astrocal scheduling API — manage bookings from AI agents via the Model Context Protocol
MCP server for the Astrocal scheduling API. Lets AI agents check availability, book meetings, cancel, reschedule, and list bookings via the Model Context Protocol.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"astrocal": {
"command": "npx",
"args": ["-y", "@astrocal/mcp-server"],
"env": {
"ASTROCAL_API_KEY": "ac_live_xxxxxxxxxxxxx"
}
}
}
}
Restart Claude Desktop and the tools will be available.
Install globally:
npm install -g @astrocal/mcp-server
Run:
ASTROCAL_API_KEY=ac_live_xxx astrocal-mcp
| Variable | Required | Description |
|---|---|---|
ASTROCAL_API_KEY | Yes | Your Astrocal API key (get from the dashboard) |
ASTROCAL_API_URL | No | API base URL (default: https://api.astrocal.dev) |
ASTROCAL_DEFAULT_EVENT_TYPE_ID | No | Default event type ID — skips needing to pass it to every tool call |
check_availabilityCheck available time slots for booking a meeting.
Input:
event_type_id (string, optional) — Event type to check. Optional if ASTROCAL_DEFAULT_EVENT_TYPE_ID is set.start_date (string, required) — Start date in ISO 8601 format (e.g., 2026-03-15)end_date (string, required) — End date in ISO 8601 format (e.g., 2026-03-22)timezone (string, optional) — IANA timezone (e.g., America/New_York). Defaults to UTC.create_bookingBook a meeting at a specific time.
Input:
event_type_id (string, optional) — Event type to book. Optional if default is set.start_time (string, required) — ISO 8601 datetime (e.g., 2026-03-15T14:00:00Z)invitee_name (string, required) — Full name of the person bookinginvitee_email (string, required) — Email address for calendar invitationinvitee_timezone (string, optional) — IANA timezone. Defaults to UTC.notes (string, optional) — Meeting notes (max 1000 characters)cancel_bookingCancel an existing booking. The invitee will be notified via email.
Input:
booking_id (string, required) — ID of the booking to cancelreason (string, optional) — Cancellation reason (max 500 characters)reschedule_bookingReschedule a booking to a new time. Check availability first.
Input:
booking_id (string, required) — ID of the booking to reschedulenew_start_time (string, required) — New time in ISO 8601 formatreason (string, optional) — Reason for rescheduling (max 500 characters)list_bookingsList bookings with optional filters.
Input:
status (string, optional) — Filter: confirmed, cancelled, or pending_paymentlimit (number, optional) — Max results (default: 10, max: 100)event_type_id (string, optional) — Filter by event typelist_event_typesList available event types that can be booked. No input required.
User: "What meetings can I book?"
Agent: calls
list_event_types— "You have two event types: a 30-minute consultation (free) and a 1-hour strategy session ($50)."User: "Check if next Tuesday at 2pm is free for a consultation"
Agent: calls
check_availability— "Tuesday at 2pm is available."User: "Book it for jane@example.com"
Agent: calls
create_booking— "Done! Meeting confirmed for Tuesday, March 17 at 2:00 PM UTC with Jane Doe. A calendar invitation has been sent."User: "Actually, move it to 3pm"
Agent: calls
reschedule_booking— "Rescheduled to 3:00 PM. Jane has been notified."
MIT
FAQs
MCP server for Astrocal scheduling API — manage bookings from AI agents via the Model Context Protocol
The npm package @astrocal/mcp-server receives a total of 108 weekly downloads. As such, @astrocal/mcp-server popularity was classified as not popular.
We found that @astrocal/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.