
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@siftable/mcp-server
Advanced tools
Siftable MCP server - human planning tasks, executable agent work queues, knowledge, code context, and automation tools
A Model Context Protocol server that exposes Siftable tools to IDE clients like Cursor, Claude Desktop, and VS Code.
mcp:* (or specific scopes like projects:read, tasks:write)Edit ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"siftable": {
"command": "npx",
"args": ["@siftable/mcp-server"],
"env": {
"SIFT_API_URL": "https://siftable.io",
"SIFT_PAT": "sift_pat_your_token_here"
}
}
}
}
Add to your Cursor MCP settings:
{
"siftable": {
"command": "npx",
"args": ["@siftable/mcp-server"],
"env": {
"SIFT_API_URL": "https://siftable.io",
"SIFT_PAT": "sift_pat_your_token_here"
}
}
}
Configure in your MCP extension settings.
After configuration, restart your IDE to load the MCP server.
| Tool | Description | Mutates |
|---|---|---|
project_list | List all projects with status filtering | No |
project_create | Create a new project | Yes |
project_update | Update project name, summary, status, emoji | Yes |
project_archive | Archive a project (destructive) | Yes |
project_get_context | Get full project context (tasks, notes, signals) | No |
| Tool | Description | Mutates |
|---|---|---|
task_list | List human planning tasks with project/status/phase/effort/title filters | No |
task_get | Get a single human planning task with full details | No |
task_create | Create a human planning task with priority, phase, effort, acceptance criteria | Yes |
task_update | Update human planning task fields (title, status, priority, phase, effort, scope) | Yes |
task_delete | Delete a task (destructive) | Yes |
task_bulk_delete | Preview or bulk delete tasks by IDs or filter | Yes |
task_complete | Mark a task as complete | Yes |
task_link_code | Link a task to a code file/commit | Yes |
| Tool | Description | Mutates |
|---|---|---|
agent_list | List user-visible agent aliases and capabilities | No |
agent_get | Get an agent alias by slug or ID | No |
agent_create | Create an agent alias | Yes |
agent_update | Update alias metadata, capabilities, or permissions | Yes |
agent_disable | Disable an alias without deleting history | Yes |
agent_work_list | List executable work assigned to an alias | No |
| Tool | Description | Mutates |
|---|---|---|
work_item_list | List work items with authoritative dependency claimability | No |
work_item_get | Get work details, dependencies, satisfaction, and claimability | No |
work_item_create | Create bounded work with optional UUID dependsOn edges | Yes |
work_item_dependencies_replace | Atomically replace a work item's UUID dependencies | Yes |
work_item_claim | Claim queued executable work with a lease | Yes |
work_dependency_policy_get | Get a project's default dependency gate | No |
work_dependency_policy_update | Set a project's default dependency gate | Yes |
work_item_start | Mark claimed work running | Yes |
work_item_heartbeat | Extend a lease | Yes |
work_item_block | Mark work blocked | Yes |
work_item_review | Mark work as needing review | Yes |
work_item_complete | Complete work with summary/artifacts | Yes |
work_item_fail | Mark work failed | Yes |
work_item_release | Release work back to the queue | Yes |
work_item_cancel | Cancel work | Yes |
| Tool | Description | Mutates |
|---|---|---|
note_list | List notes with type, project, archive, and title filters | No |
note_get | Get a single note with full content | No |
note_search | Semantic search across knowledge base | No |
note_create | Create a new note (markdown) | Yes |
note_update | Update note title, content, or type | Yes |
note_delete | Delete a note (destructive) | Yes |
note_bulk_delete | Preview or bulk delete notes by IDs or filter | Yes |
| Tool | Description | Mutates |
|---|---|---|
people_search | Search contacts with fuzzy or exact/prefix filters | No |
person_create | Create a contact | Yes |
person_update | Update a contact | Yes |
person_delete | Delete a contact (destructive) | Yes |
people_bulk_delete | Preview or bulk delete contacts by IDs or filter | Yes |
| Tool | Description | Mutates |
|---|---|---|
organization_search | Search organizations with fuzzy or exact/prefix filters | No |
organization_create | Create an organization | Yes |
organization_update | Update an organization | Yes |
organization_delete | Delete an organization (destructive) | Yes |
organization_bulk_delete | Preview or bulk delete organizations by IDs or filter | Yes |
| Tool | Description | Mutates |
|---|---|---|
calendar_list_events | List calendar events for a date range | No |
calendar_create_event | Create a new calendar event | Yes |
calendar_update_event | Update a calendar event | Yes |
calendar_delete_event | Delete a calendar event (destructive) | Yes |
| Tool | Description | Mutates |
|---|---|---|
codebase_list | List indexed repositories | No |
codebase_register | Register a new repository for indexing | Yes |
codebase_status | Check indexing status and stats | No |
codebase_snapshot_status | Get latest index snapshot for a repository | No |
codebase_materialize_snapshot | Download a snapshot archive | No |
codebase_index | Full index: scan and upload all files | Yes |
codebase_index_incremental | Incremental index: git-aware, changed files only | Yes |
codebase_delete | Delete a repository and all indexed data (destructive) | Yes |
codebase_search | Semantic search across indexed code, with repository/project scoping and CWD auto-scope | No |
| Tool | Description | Mutates |
|---|---|---|
code_who_knows | Find experts for a code area | No |
code_compute_expertise | Refresh the expertise index | Yes |
code_history | Get commit history for a repository | No |
git_blame_symbol | Run git blame on a local file range | No |
| Tool | Description | Mutates |
|---|---|---|
code_memory_store | Store a fact about the codebase | Yes |
code_memory_search | Search stored code facts | No |
code_memory_list | List all stored code memories | No |
code_memory_delete | Delete a code memory (destructive) | Yes |
| Tool | Description | Mutates |
|---|---|---|
vault_list | List vault entries (metadata only) | No |
vault_create | Store a new encrypted secret | Yes |
vault_update | Update vault entry metadata | Yes |
vault_search | Search vault entries by name/description | No |
| Tool | Description | Mutates |
|---|---|---|
entity_graph | Traverse the entity relationship graph | No |
schema_introspect | Discover the full data model and entity types | No |
| Tool | Description | Mutates |
|---|---|---|
upload_document | Upload a PDF, Markdown, or text file into Knowledge | Yes |
DATASETS_ENABLED=true)| Tool | Description | Mutates |
|---|---|---|
dataset_list | List datasets | No |
dataset_create | Create a dataset | Yes |
dataset_query | Query records by filters/sorts | No |
dataset_mutate | Create/update/delete records (destructive) | Yes |
dataset_schema_modify | Add/update/delete fields (destructive) | Yes |
dataset_summarize | Summarize schema and sample rows | No |
dataset_facets | Value distributions for fields | No |
dataset_quality_check | Null rates, duplicates, uniqueness violations | No |
dataset_aggregate | Grouped metrics (count, avg, sum, etc.) | No |
dataset_bucket | Bucket numeric/date fields into ranges | No |
dataset_rank | Rank records by sorts or weighted formula | No |
dataset_analyze | Generate natural-language insights | No |
dataset_compare | Compare metrics across segments | No |
dataset_export | Export records as CSV | No |
dataset_join_rows | Self-join with alias-scoped fields | No |
dataset_compute_fields | Compute derived columns (lag, diff, rolling) | No |
dataset_timeseries | Time series analysis with transforms | No |
dataset_materialize_result | Save derived result as a new dataset | Yes |
dataset_plot_result | Validate chart payload from derived result | No |
DATASET_ONTOLOGY_ENABLED=true)| Tool | Description | Mutates |
|---|---|---|
object_find | Find objects by type and property filters | No |
object_links | Traverse graph links for an object | No |
object_action_run | Run a declarative action on an object (destructive) | Yes |
User prompt: "Get context for my auth project and create a task to fix the token refresh bug"
Tools invoked:
project_list — Lists projects to find the auth projectproject_get_context — Retrieves tasks, notes, and signals for the projecttask_create — Creates a human planning task with title, description, and project linkageResult: The AI reads existing project context (open tasks, recent notes) to avoid duplicates, then creates a well-scoped task linked to the correct project.
To run an agent, create a linked executable work item with work_item_create and set taskId to the parent human task. Task tools should track planning state; work item tools should track execution, leases, artifacts, verification, and review state.
Dependencies are authoritative UUID references. Pass dependsOn as an array of { workItemId, requiredGate? }, where requiredGate is done or commands_passed. An omitted gate resolves through the project's work-dependency policy. List and get results expose the resolved dependencies projection and derived claimability (ready, waiting, or dependency_failed). Replace the complete edge set with work_item_dependencies_replace; use an empty array to remove every dependency. Historical verified gates are normalized to commands_passed during the verifier-retirement migration.
Lease-owned lifecycle calls (start, heartbeat, block, review, and fail) require both the claimOwner and claimToken returned by work_item_claim; release requires the active token. complete accepts credentials for lease-owned completion but leaves them optional so a human can resolve needs_review without a lease. cancel is likewise tokenless. Claim tokens remain omitted from get/list output and should not be logged or persisted by clients.
User prompt: "Find where we handle webhook signature verification"
Tools invoked:
codebase_search — Searches indexed code for "webhook signature verification"Result: Returns ranked code chunks with file paths, line numbers, and surrounding context. The AI can then read the matched files to answer follow-up questions.
User prompt: "Search for our deployment process and create a note summarizing the steps"
Tools invoked:
note_search — Searches the knowledge base for "deployment process"code_memory_search — Searches stored code facts for deployment-related memoriesnote_create — Creates a new note with a markdown summary of the deployment stepsResult: The AI synthesizes information from existing notes and code memories into a single reference note, linked to the relevant project.
The server also exposes project context bundles as MCP resources:
exf://projects/{id}/context - Full context bundle for a project| Variable | Required | Description |
|---|---|---|
SIFT_API_URL | Yes | Siftable API URL |
SIFT_PAT | Yes | Personal Access Token |
Legacy EXF_API_URL and EXF_PAT remain supported for existing MCP configs.
# Install dependencies
npm install
# Run in development mode
npm run dev
# Test with MCP Inspector
npm run inspect
# Build for production
npm run build
| Scope | Description |
|---|---|
mcp:* | All MCP operations (recommended for IDE use) |
projects:read | Read project data |
projects:write | Create/update projects |
tasks:read | Read tasks |
tasks:write | Create/update/complete tasks |
knowledge:read | Search/read notes |
knowledge:write | Create notes |
calendar:read | View calendar/free slots |
calendar:write | Create calendar events |
people:read | Search/view contacts |
people:write | Create/update contacts |
Make sure you've configured the env section in your MCP client config.
sift_pat_ or legacy exf_pat_npm run inspect to test the server directlyMIT
FAQs
Siftable MCP server - human planning tasks, executable agent work queues, knowledge, code context, and automation tools
The npm package @siftable/mcp-server receives a total of 1,091 weekly downloads. As such, @siftable/mcp-server popularity was classified as popular.
We found that @siftable/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.