
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
safe-mind-mcp
Advanced tools
MCP server for Safe Mind - lets AI assistants (Claude, ChatGPT, Gemini, Cursor and any MCP client) create and manage psychological risk assessments (Gefährdungsbeurteilung psychischer Belastung).
MCP (Model Context Protocol) server for Safe Mind, the platform for the legally required psychological risk assessment (Gefährdungsbeurteilung psychischer Belastung, GBU Psyche) in Germany.
Lets AI assistants - Claude, ChatGPT, Gemini, Cursor and every other MCP client - set up companies, create survey drafts and read anonymity-protected results.
Claude Desktop / Claude Code (.mcp.json or claude mcp add):
{
"mcpServers": {
"safe-mind": {
"command": "npx",
"args": ["-y", "safe-mind-mcp"],
"env": { "SAFE_MIND_API_KEY": "sm_live_..." }
}
}
}
Get an API key with the safe-mind CLI
(safe-mind login) or let the assistant onboard you via the safe_mind_register,
safe_mind_verify_email and safe_mind_get_api_key tools.
| Tool | Purpose |
|---|---|
safe_mind_register / safe_mind_verify_email / safe_mind_get_api_key | Account onboarding |
safe_mind_me | Account + company info |
safe_mind_list_departments / safe_mind_create_department | Departments (Tätigkeitsbereiche) |
safe_mind_list_locations / safe_mind_create_location | Locations (Standorte) |
safe_mind_create_survey | Survey draft incl. auto-created departments |
safe_mind_list_surveys / safe_mind_get_survey | Status, timeframe, participation link |
safe_mind_get_analytics | Aggregated results, threshold-protected |
Segmented analytics never return groups below the minimum group size - the same anonymity rules as in the Safe Mind app apply.
FAQs
MCP server for Safe Mind - lets AI assistants (Claude, ChatGPT, Gemini, Cursor and any MCP client) create and manage psychological risk assessments (Gefährdungsbeurteilung psychischer Belastung).
We found that safe-mind-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.