PushoverSAFE
A MCP implementation for sending notifications via Pushover
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://smithery.ai/server/@AshikNesin/pushover-mcp)
A Model Context Protocol implementation for sending notifications via Pushover.net.
Overview
This MCP enables AI agents to send notifications through Pushover.net. It implements the MCP specification, allowing seamless integration with MCP-compatible AI systems.
Configuration
You'll need:
- An application token from Pushover.net
- Your user key from Pushover.net
Get these from your Pushover.net dashboard.
Tool Schema
The MCP provides a single tool:
send
Sends a notification via Pushover.
{
message: string; // Required: The message to send
title?: string; // Optional: Message title
priority?: number; // Optional: -2 to 2 (-2: lowest, 2: emergency)
sound?: string; // Optional: Notification sound
url?: string; // Optional: URL to include
url_title?: string; // Optional: Title for the URL
device?: string; // Optional: Target specific device
}Example MCP Tool Call
{
"name": "send",
"params": {
"message": "Hello from AI",
"title": "AI Notification",
"priority": 1
}
}Installing
Using with Cursor
Method 1: Install Globally
Run the MCP server using npx:
npx -y pushover-mcp@latest start --token YOUR_TOKEN --user YOUR_USER
In your Cursor IDE
- Go to
Cursor Settings>MCP - Click
+ Add New MCP Server - Fill in the form:
- Name:
Pushover Notification(or any name you prefer) - Type:
command - Command:
npx -y pushover-mcp@latest start --token YOUR_TOKEN --user YOUR_USER
Method 2: Project-specific Configuration
Add an .cursor/mcp.json file to your project:
{
"mcpServers": {
"pushover": {
"command": "npx",
"a1e6e7326d1a7OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add pushover-mcp -- npx -y [email protected]
{
"mcpServers": {
"pushover-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (1)
0 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
send | write | Send a notification via Pushover |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (1)
@modelcontextprotocol/sdk, commander, zod, @types/node, tsx, typescript, vitest
Gates applied: no_behavioural_pass.
1e6e7326d1a7full audit observations/trust-audit/mcp-server/ashiknesin__pushover.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 1e6e7326d1a7 | SAFE | B | 89 | first audit |
Questions
What is the Pushover MCP server?
A MCP implementation for sending notifications via Pushover
What tools does Pushover expose?
1 in total: 0 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Pushover safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Pushover need?
No credential environment variables were found in its source, so it appears to need none.
How does Pushover run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as pushover-mcp at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (1e6e7326d1a7), read on 2026-10-08. The repository is watched and re-audited when it changes.