TistyCAUTION
Free, open source task manager and Markdown notes for Windows and macOS. An archive that keeps what each task taught you: plain files, no account, no server, MCP for your assistant.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
<img src="assets/icons/tisty-256.png" width="140" height="140" alt="Tisty — free open source notes, documents and tasks for Windows and macOS"/>
Tisty — Free Open Source Notes, Documents and Tasks
Notes, documents and tasks that stay yours: plain Markdown on your own disk, for Windows and macOS.Not a to-do list you empty — a record of what you worked out, searchable years later, with an MCP door for your assistant.No accounts. No subscriptions. No telemetry. No server.
English · Español
<img src="https://img.shields.io/github/v/release/rgdevment/Tisty?include_prereleases&style=flat-square&label=Latest&color=6C5CE7" alt="Latest release"/>
<img src="https://img.shields.io/badge/MCP-Official_Registry-6C5CE7?style=flat-square" alt="Tisty in the official MCP registry"/>
<img src="https://img.shields.io/badge/Platform-Windows%20%7C%20macOS-6C5CE7?style=flat-square" alt="Platform: Windows and macOS"/>
<img src="https://img.shields.io/github/license/rgdevment/Tisty?style=flat-square&color=lightgrey" alt="Licence AGPL-3.0"/>
<img src="https://img.shields.io/badge/Sponsor-EA4AAA?style=flat-square&logo=githubsponsors&logoColor=white" alt="Sponsor Tisty on GitHub"/>
<img src="https://img.shields.io/badge/Coffee-FFDD00?style=flat-square&logo=buy-me-a-coffee&logoColor=black" alt="Buy me a coffee"/>
f4bfd8c9ab64OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add tisty -- npx -y tisty
{
"mcpServers": {
"tisty": {
"command": "npx",
"args": [
"-y",
"tisty"
]
}
}
}Trust audit
CAUTIONgrade F · trust 42/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- declared (4 observation(s))
- Shell
- declared (1 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
icon.icns
"beacon",
const lines = text.replace(/^/, "").split("\n");"😶🌫️": [
"😮💨": [
"😵💫": [
"❤️🔥": [
r#"ANTHROPIC=sk-ant-api03-aaaaaaaaaaaaaaaaaaaaaaaaaaaa"#,
r#"DATABASE_URL=postgres://tisty:[email protected]:5432/prod
"# Despliegue\n\n> [!CAUTION]\n> Aqui hay algo que parece una credencial de verdad, no un ejemplo: GITHUB_TOKEN.\n\nPara publicar:\n\n```bash\nGITHUB_TOKEN=ghp_16C7e42F292c6912E7710c838347Ae178B4a\n``
"body": "# Despliegue\n\nEl token es GITHUB_TOKEN=ghp_16C7e42F292c6912E7710c838347Ae178B4a\n"
const A_SECRET: &str = "GITHUB_TOKEN=ghp_16C7e42F292c6912E7710c838347Ae178B4a";
let prefixed = told("ghp_1234567890abcdefghijklmnopqrstuvwx\n");r#"GITHUB=ghp_16C7e42F292c6912E7710c838347Ae178B4a"#,
"-----BEGIN RSA PRIVATE KEY-----\nMIIEpAIBAAKCAQEA\n-----END RSA PRIVATE KEY-----\n",
b"-----BEGIN RSA PRIVATE KEY-----\nMIIEpAIBAAKCAQEA\n",
let pem = wrote(at, "key.pem", b"-----BEGIN RSA PRIVATE KEY-----\nMIIEow\n");
b"-----BEGIN PRIVATE KEY-----\nMIIEvQIBADAN\n",
assert_eq!(told("-----BEGIN PRIVATE KEY-----\nMIIEow\n").len(), 1);locked-before-the-crypto-moved.tistyx
.markdownlint-cli2.jsonc
.markdownlint.jsonc
.store-id
.store-id
.store-id
Gates applied: no_behavioural_pass.
f4bfd8c9ab64full audit observations/trust-audit/mcp-server/rgdevment__tisty.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | f4bfd8c9ab64 | CAUTION | F | 42 | first audit |
Questions
What is the Tisty MCP server?
Free, open source task manager and Markdown notes for Windows and macOS. An archive that keeps what each task taught you: plain files, no account, no server, MCP for your assistant.
Is Tisty safe to connect to an agent?
With care. The audit graded it F (42/100) and found 25 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does Tisty need?
No credential environment variables were found in its source, so it appears to need none.
How does Tisty run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as tisty.
How current is this page?
The grade is for one exact copy of the source (f4bfd8c9ab64), read on 2026-10-12. The repository is watched and re-audited when it changes.