
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
claudemaster
Advanced tools
Task management MCP server optimized for Claude Code - no API keys required
Task management MCP server optimized for Claude Code - No API keys required!
Transform your development workflow with intelligent task management designed specifically for Claude Code integration.
Claudemaster is a specialized MCP (Model Context Protocol) server that provides intelligent task management capabilities directly within Claude Code. Unlike traditional task management tools, Claudemaster:
# Install Claudemaster
npm install -g claudemaster
# In Claude Code, say:
"Initialize Claudemaster for my React project"
"Help me parse my PRD and create structured tasks"
"What should I work on next?"
"Break down this complex task into subtasks"
Add Claudemaster to your Claude Code configuration:
For global configuration (~/.claude/mcp.json):
{
"mcpServers": {
"claudemaster": {
"command": "npx",
"args": ["-y", "claudemaster"]
}
}
}
For project-specific configuration (.mcp.json in your project root):
{
"mcpServers": {
"claudemaster": {
"command": "npx",
"args": ["-y", "claudemaster"]
}
}
}
npm install -g claudemaster
Unlike other task management tools, Claudemaster requires zero configuration:
MCP (Model Control Protocol) lets you run Task Master directly from your editor.
| Editor | Scope | Linux/macOS Path | Windows Path | Key |
|---|---|---|---|---|
| Cursor | Global | ~/.cursor/mcp.json | %USERPROFILE%\.cursor\mcp.json | mcpServers |
| Project | <project_folder>/.cursor/mcp.json | <project_folder>\.cursor\mcp.json | mcpServers | |
| Windsurf | Global | ~/.codeium/windsurf/mcp_config.json | %USERPROFILE%\.codeium\windsurf\mcp_config.json | mcpServers |
| VS Code | Project | <project_folder>/.vscode/mcp.json | <project_folder>\.vscode\mcp.json | servers |
mcpServers){
"mcpServers": {
"taskmaster-ai": {
"command": "npx",
"args": ["-y", "--package=task-master-ai", "task-master-ai"],
"env": {
"ANTHROPIC_API_KEY": "YOUR_ANTHROPIC_API_KEY_HERE",
"PERPLEXITY_API_KEY": "YOUR_PERPLEXITY_API_KEY_HERE",
"OPENAI_API_KEY": "YOUR_OPENAI_KEY_HERE",
"GOOGLE_API_KEY": "YOUR_GOOGLE_KEY_HERE",
"MISTRAL_API_KEY": "YOUR_MISTRAL_KEY_HERE",
"OPENROUTER_API_KEY": "YOUR_OPENROUTER_KEY_HERE",
"XAI_API_KEY": "YOUR_XAI_KEY_HERE",
"AZURE_OPENAI_API_KEY": "YOUR_AZURE_KEY_HERE",
"OLLAMA_API_KEY": "YOUR_OLLAMA_API_KEY_HERE"
}
}
}
}
🔑 Replace
YOUR_…_KEY_HEREwith your real API keys. You can remove keys you don't use.
servers + type){
"servers": {
"taskmaster-ai": {
"command": "npx",
"args": ["-y", "--package=task-master-ai", "task-master-ai"],
"env": {
"ANTHROPIC_API_KEY": "YOUR_ANTHROPIC_API_KEY_HERE",
"PERPLEXITY_API_KEY": "YOUR_PERPLEXITY_API_KEY_HERE",
"OPENAI_API_KEY": "YOUR_OPENAI_KEY_HERE",
"GOOGLE_API_KEY": "YOUR_GOOGLE_KEY_HERE",
"MISTRAL_API_KEY": "YOUR_MISTRAL_KEY_HERE",
"OPENROUTER_API_KEY": "YOUR_OPENROUTER_KEY_HERE",
"XAI_API_KEY": "YOUR_XAI_KEY_HERE",
"AZURE_OPENAI_API_KEY": "YOUR_AZURE_KEY_HERE"
},
"type": "stdio"
}
}
}
🔑 Replace
YOUR_…_KEY_HEREwith your real API keys. You can remove keys you don't use.
Open Cursor Settings (Ctrl+Shift+J) ➡ Click on MCP tab on the left ➡ Enable task-master-ai with the toggle
In your editor's AI chat pane, say:
Change the main, research and fallback models to <model_name>, <model_name> and <model_name> respectively.
In your editor's AI chat pane, say:
Initialize taskmaster-ai in my project
For new projects: Create your PRD at .taskmaster/docs/prd.txt
For existing projects: You can use scripts/prd.txt or migrate with task-master migrate
An example PRD template is available after initialization in .taskmaster/templates/example_prd.txt.
[!NOTE] While a PRD is recommended for complex projects, you can always create individual tasks by asking "Can you help me implement [description of what you want to do]?" in chat.
Always start with a detailed PRD.
The more detailed your PRD, the better the generated tasks will be.
Use your AI assistant to:
Can you parse my PRD at scripts/prd.txt?What's the next task I should work on?Can you help me implement task 3?Can you help me expand task 4?More examples on how to use Task Master in chat
# Install globally
npm install -g task-master-ai
# OR install locally within your project
npm install task-master-ai
# If installed globally
task-master init
# If installed locally
npx task-master init
This will prompt you for project details and set up a new project with the necessary files and structure.
# Initialize a new project
task-master init
# Parse a PRD and generate tasks
task-master parse-prd your-prd.txt
# List all tasks
task-master list
# Show the next task to work on
task-master next
# Generate task files
task-master generate
task-master init doesn't respondTry running it with Node directly:
node node_modules/claude-task-master/scripts/init.js
Or clone the repository and run:
git clone https://github.com/eyaltoledano/claude-task-master.git
cd claude-task-master
node scripts/init.js
Task Master is licensed under the MIT License with Commons Clause. This means you can:
✅ Allowed:
❌ Not Allowed:
See the LICENSE file for the complete license text and licensing details for more information.
FAQs
Task management MCP server optimized for Claude Code - no API keys required
We found that claudemaster demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.