
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
boardsesh-mcp
Advanced tools
Unofficial MCP server giving AI agents read-only access to your Boardsesh climbing logbook across Kilter, Tension, MoonBoard and more.
An unofficial MCP server that lets your AI agent read and analyse your Boardsesh climbing logbook — across every board you climb on: Kilter, Tension, MoonBoard, Decoy, Touchstone, So iLL, Woods and spray walls.
How did my last session go? Am I stronger on Kilter or on Tension? What are my projects at 40°? What should I try next at my level? Show my grade pyramid. Which holds do I avoid?
Read-only. Nothing is ever written to your Boardsesh account.
You do not need to give it a password. Boardsesh serves your logbook publicly, so your display name alone unlocks most of it. Credentials are optional and only add the extras.
Open your MCP config (command palette → Kiro: Open user MCP config (JSON)) and add:
{
"mcpServers": {
"boardsesh": {
"command": "uvx",
"args": ["boardsesh-mcp"],
"env": {
"BOARDSESH_USER": "Your Boardsesh Display Name"
},
"disabled": false,
"autoApprove": []
}
}
}
That is the whole setup. BOARDSESH_USER is the display name on your Boardsesh profile (or your
user id, if you prefer). Requires uv installed; uvx ships with
it.
Same three facts everywhere: command uvx, args ["boardsesh-mcp"], env BOARDSESH_USER.
Copy-paste configs for Claude Desktop, Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI
and Zed are in docs/clients.md.
Four tools need to know which physical board setup you use (layout, size, hold sets), which Boardsesh only tells the logged-in owner. Add your Boardsesh login to enable them:
"env": {
"BOARDSESH_USER": "Your Display Name",
"BOARDSESH_EMAIL": "${BOARDSESH_EMAIL}",
"BOARDSESH_PASSWORD": "${BOARDSESH_PASSWORD}"
}
Those four are boardsesh_recommend_climbs, boardsesh_search_climbs,
boardsesh_find_similar_climbs and boardsesh_get_hold_heatmap. Everything else works without
them. See how to set environment variables.
Sessions are grouped by calendar day in your timezone, detected from the machine running the
server. If that is wrong, add "BOARDSESH_TIMEZONE": "Europe/Rome" (any IANA name).
Summarise my Boardsesh logbook.
How did my last session go?
Compare my climbing on Kilter and Tension — where am I actually stronger?
What are my current projects, and which have I tried the most?
Show my grade pyramid and my flash rate per grade.
Have I improved over the last six months?
What should I try next at my level?
Find climbs similar to the one I sent yesterday.
Which holds show up most in climbs one grade above me?
Works with just BOARDSESH_USER:
| Tool | What it returns |
|---|---|
boardsesh_get_summary | Totals across all boards: sends, flashes, sessions, date range, hardest send |
boardsesh_get_ascents | Logbook entries, filterable by board, angle, outcome and date range |
boardsesh_get_sessions | Entries grouped by day |
boardsesh_get_projects | Climbs attempted but never sent, per board, climb and angle |
boardsesh_compare_boards | One row per board, with cross-board normalised grades |
boardsesh_get_grade_pyramid | Sends per grade with flash rates |
boardsesh_get_progression | Month-by-month or week-by-week trend |
boardsesh_get_grades | A board's grade scale (difficulty ids to labels) |
Needs BOARDSESH_EMAIL / BOARDSESH_PASSWORD:
| Tool | What it returns |
|---|---|
boardsesh_recommend_climbs | Climbs to try next: at your level, crowd favourites, hidden gems, fresh |
boardsesh_search_climbs | Catalogue search by name, grade range, benchmarks, popularity |
boardsesh_find_similar_climbs | Climbs sharing holds with a given climb |
boardsesh_get_hold_heatmap | Which holds the wall's climbs use, for spotting weaknesses |
status is authoritative: flash (sent first try), send (sent after attempts) or attempt
(not sent). It is never inferred from try counts.(board, climb, angle) you have attempted but not sent. Sending it at another
angle does not remove it.grade is the board's own grade and difficulty_id the raw id. Board grades are not
comparable between boards, so boardsesh_grade — Boardsesh's cross-board normalised number —
is what boardsesh_compare_boards uses. It is null when Boardsesh's confidence in it is not
backed by real ascents.ws.boardsesh.com and www.boardsesh.com. No telemetry.Troubleshooting: run uvx boardsesh-mcp --check with the same environment variables set. It
prints counts and configuration only, no entries and no secrets, so it is safe to paste into an
issue.
Boardsesh is an open-source (Apache-2.0) board-climbing app that aggregates logbooks across boards and publishes an API. This project is an independent MCP client for it, built at the suggestion of its maintainer, but it is not an official Boardsesh product and any bug here is mine, not theirs.
If you only climb on a Kilter Board and do not use Boardsesh, kilter-mcp talks to Kilter directly instead. boardsesh-mcp is the better choice if you use more than one board, because it can compare them.
Issues and pull requests welcome — see CONTRIBUTING.md. Security reports go through SECURITY.md.
FAQs
Unofficial MCP server giving AI agents read-only access to your Boardsesh climbing logbook across Kilter, Tension, MoonBoard and more.
The pypi package boardsesh-mcp receives a total of 26 weekly downloads. As such, boardsesh-mcp popularity was classified as not popular.
We found that boardsesh-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.