Atlas / MCP servers / paca-ai / Paca

PacaBLOCK

Name: Paca
Author: paca-ai

mcp/paca-ai/paca

MCP server by paca-ai · ai agent · bdd · clickup alternative · Audited 2026-10-12

AI-native, free, open-source alternative to Jira, Trello, ClickUp & Monday. Built for Scrum teams where humans and AI agents collaborate as equals — on the same board, the same sprints, the same goals. Self-hosted. Fully customizable via config and plugins.

Verdict

BLOCK

Grade

Trust score

49 /100

Exposed tools

96 47r · 34w · 15d

Transport

stdio · streamable-http

License

Apache-2.0

Stars

1,916

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Paca

AI-native. Free. Lightweight. Open-source.The fully customizable alternative to Jira, Trello, ClickUp, and Monday.

✨ Sponsored by

Getting Started · <

Read from source at commit f5e3f3a389b4OBSERVED · 2026-10-12

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add paca-realtime --env E2E_AGENT_API_KEY=${E2E_AGENT_API_KEY} --env E2E_PASSWORD=${E2E_PASSWORD} --env PACA_API_KEY=${PACA_API_KEY} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "paca-realtime": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "E2E_AGENT_API_KEY": "${E2E_AGENT_API_KEY}",
        "E2E_PASSWORD": "${E2E_PASSWORD}",
        "PACA_API_KEY": "${PACA_API_KEY}"
      }
    }
  }
}

Exposed tools (96)

47 read · 34 write · 15 destructive. Blast radius: 15 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`Admin`	read	Runs the project
`Alpha`	read	desc
`Backup`	read
`DEVELOPER`	read
`Developer`	read	Dev role
`EDITOR`	write	Can edit tasks
`LEAD`	read	keeps tasks moving
`Lead`	read
`REVIEWER`	read	reads everything
`ROOT`	read	Everything
`Reader`	read
`SUPER_ADMIN`	read
`add_doc_comment`	write	Add a comment to a document. ${MENTION_NOTE}
`add_project_member`	write	Add a member to a project
`add_task_comment`	write	Add a comment to a task
`bulk_move_tasks`	write	Bulk move tasks in a view
`clone_repository`	read	Clone a repository into your workspace so you can read and
`complete_sprint`	read	Mark a sprint as completed
`create_automation`	write	Create a new automation, optionally building out its whole graph in one call: nodes (triggers/conditions/actions) and edges between them. Starts in
`create_custom_field`	write	Create a new custom field definition
`create_project`	write	Create a new project
`create_project_role`	write	Create a new project role
`create_sprint`	write	Create a new sprint
`create_task`	write	Create a new task
`create_task_link`	write	Create a link between two tasks. Use
`create_task_status`	write	Create a new task status
`create_task_type`	write	Create a new task type
`create_view`	write	Create a new view. For a plugin-provided view (e.g. a plugin
`delete_automation`	destructive	Permanently delete an automation.
`delete_custom_field`	destructive	Delete a custom field definition
`delete_doc`	destructive	Delete a document or folder by path.
`delete_doc_comment`	destructive	Delete a document comment.
`delete_project`	destructive	Delete a project
`delete_project_role`	destructive	Delete a project role
`delete_sprint`	destructive	Delete a sprint
`delete_task`	destructive	Delete a task
`delete_task_attachment`	destructive	Delete an attachment from a task
`delete_task_comment`	destructive	Delete a task comment
`delete_task_link`	destructive	Remove a link between two tasks
`delete_task_status`	destructive	Delete a task status
`delete_task_type`	destructive	Delete a task type
`delete_view`	destructive	Delete a view
`get_annotation`	read	Get full detail for one page comment: the commented-on element, the full reply thread, and any captured console errors / failed network requests
`get_attachment_download_url`	read	Get a download URL for an attachment
`get_automation`	read	Get information about automations in a project. Pass automationId to fetch one automation
`get_custom_field`	read	Get details of a custom field definition
`get_my_project_permissions`	read	Get the IAM actions (e.g.
`get_project`	read	Get details of a specific project
`get_sprint`	read	Get details of a specific sprint
`get_task`	read	Get comprehensive details of a specific task including all properties, subtasks, attachments, and activities - everything that users can see in the task detail component of the web app
`get_task_by_number`	read	Get comprehensive details of a task by its number within a project including all properties, subtasks, attachments, and activities
`get_view`	read	Get details of a specific view
`list_annotations`	read	List page comments (annotations pinned to elements of a page via the browser extension) in a project, across every environment and port forward unless filtered
`list_custom_fields`	read	List all custom field definitions in a project
`list_doc_activities`	read	List all activity for a document (comments and system events), oldest first. Each entry includes actor_name and actor_username.
`list_docs`	read	List the documentation tree for a project, showing folders and documents in a filesystem-like hierarchy.
`list_project_members`	read	List all members of a project
`list_project_roles`	read	List all roles in a project
`list_projects`	read	List all projects accessible to the authenticated user
`list_repositories`	read	List all available repositories from all repository plugins
`list_sprints`	read	List all sprints in a project
`list_task_activities`	read	List all activities for a task
`list_task_attachments`	read	List all attachments for a task
`list_task_links`	read	List all links for a task, showing how it relates to other tasks (blocks, is blocked by, relates to, duplicates, is duplicated by)
`list_task_positions`	read	List task positions in a view
`list_task_statuses`	read	List all task statuses in a project
`list_task_types`	read	List all task types in a project
`list_tasks`	read	List tasks in a project with optional filters
`list_views`	read	List all views in a project. Use context=
`move_doc`	write	Move or rename a document or folder by specifying a source path and destination path.
`move_task`	write	Move a task within a view
`push_branch`	write	Push the current local branch to the remote repository. Call
`read_conversation`	read	Read another conversation
`read_doc`	read	Read the Markdown content of a document, either by its path (e.g.
`read_task_attachment`	read	Download and read the contents of a task attachment. Text-based files
`remove_project_member`	destructive	Remove a member from a project
`reorder_views`	read	Reorder views in a project
`search_docs`	read	Search a project
`search_tasks`	read	Search a project
`set_default_task_status`	write	Set a task status as the default for the project
`set_default_task_type`	write	Set a task type as the default for the project
`update_automation`	write	Update an automation: rename/describe it, change its lifecycle status, and/or edit its graph (nodes, edges) — all in one call. Use get_automation first to see the automation
`update_custom_field`	write	Update a custom field definition
`update_doc_comment`	write	Update a document comment.
`update_project`	write	Update an existing project
`update_project_member_role`	write	Replace the set of roles a project member holds in the project
`update_project_role`	write	Update an existing project role
`update_sprint`	write	Update an existing sprint
`update_task`	write	Update an existing task
`update_task_comment`	write	Update a task comment
`update_task_status`	write	Update an existing task status
`update_task_type`	write	Update an existing task type
`update_view`	write	Update an existing view
`upload_task_attachment`	write	Upload a local file as an attachment on a task. Reads the file at
`write_doc`	write	Create or update a document at the given path.
`x`	read

Trust audit

BLOCKgrade F · trust 49/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (11 observation(s))
Network: declared (10 observation(s))
Shell: declared (4 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

services/agent-runner/internal/sandbox/docker/manager.go:544

func (m *Manager) Exec(ctx context.Context, containerID string, cmd []string) (output string, exitCode int, err error) {

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

services/agent-runner/internal/sandbox/k8s/manager.go:511

func (m *Manager) Exec(ctx context.Context, containerID string, cmd []string) (output string, exitCode int, err error) {

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

services/agent-runner/internal/sandbox/sandbox.go:139

Exec(ctx context.Context, containerID string, cmd []string) (output string, exitCode int, err error)

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

services/api/internal/platform/authz/iam/scope.go:135

func (n *Node) Eval(attrs map[string][]string) bool {

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

apps/web/src/components/projects/environments/environment-connect.tsx:489

command={`ssh -i ~/.ssh/id_ed25519 -p ${sshPort} root@${host ?? "<bastion-host>"}`}