Back to Browse

Wilmai MCP Server

Developer ToolsLow Risk9.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

Finland's Wilma school system for parents and students: schedule, homework, exams and messages.

About

Finland's Wilma school system for parents and students: schedule, homework, exams and messages.

Security Report

9.7
Low Risk9.7Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. ⚠️ Package registry links to a different repository than scanned source. Imported from the Official MCP Registry. 1 finding(s) downgraded by scanner intelligence.

8 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "ai-wilm-wilma": {
      "args": [
        "-y",
        "@wilm-ai/wilma-cli"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

WilmAI

Wilma, Finland's school system, with AI. Two ways to use it, both free and open source:

For your AI assistant or agent An MCP server, a CLI and agent skills. Ask Claude, ChatGPT, Codex, OpenClaw, Grok Bot or Meta Muse about school in plain words, or let your agent post one briefing for the whole family every morning.

Set up your assistant →

WilmAI Home, the desktop app A fast, modern Wilma app for students and parents: lessons, messages, homework, exams and grades in one view, a notification when something needs you, and AI if you want it. Free and open, now in beta, for Mac and Windows.

Download WilmAI Home → · More

npm downloads GitHub stars npm version MIT license

wilm.ai (English and Finnish) · Set up · WilmAI Home, the desktop app · Changelog

You: What do the kids have at school tomorrow?

Your assistant: Kiia has crafts, geography and math, 8:30–14:00, and her English exam is on Thursday (units 7–9). Eino starts at 9:15 with swimming, so pack a swimsuit and a towel.

You: Is there anything I need to do this week?

Your assistant: Two things. Eino's trip on Friday needs your permission: return the form by Wednesday. And Kiia's art lesson on Monday is marked as an absence, so explain it in Wilma.

WilmAI connects Wilma, the system Finnish schools use for schedules, homework, exams, grades and messages, to the AI assistant or agent you already use. It's an MCP server, a command-line tool and two agent skills, free and open source. There's also WilmAI Home, a desktop app of its own for students and parents.

Disclaimer: This is an independent open-source project by a parent, not affiliated with, endorsed by, or connected to Visma or the official Wilma service.

What you get

  • 19 MCP tools. Summary, schedule, homework, exams, grades and the gradebook, lesson notes and absences, messages with replies, news with attachments, printouts, and a logout. One call covers every child, across every Wilma the family uses.
  • A CLI for people and agents. Text in a terminal, JSON when a program reads it: the same JSON as the MCP tools. wilma summary --since yesterday returns only what's new, for daily runs.
  • It all runs on your computer. No WilmAI server, no account, no telemetry. It logs in only to your school's Wilma and can't send messages or change anything there. The password goes into a local login page, never into a chat.
  • Agent skills. wilma teaches an agent the tools and commands; wilma-triage turns them into a morning briefing that flags what needs doing and puts exams in the family calendar.
  • Any school on Wilma. The login page finds your school's Wilma by city or school name. Two-step verification and families with several Wilmas work.
  • Students can use it too. With their own Wilma login, a student asks about their own lessons, homework and exams.

Try it in one line

# Claude Code
claude mcp add --scope user wilma -- npx -y @wilm-ai/wilma-cli@2 mcp

# Codex
codex plugin marketplace add aikarjal/wilmai && codex plugin add wilma@wilmai

# Any MCP client
npx -y @wilm-ai/wilma-cli@2 mcp

# Just the terminal (Node.js 20.18 or newer)
npm i -g @wilm-ai/wilma-cli && wilma login && wilma summary

Then ask about school. The first time, a login page opens in your browser: pick your school's Wilma and log in. The login is saved on your computer.

Add WilmAI to your assistant

Step-by-step guides for parents, in English and Finnish: wilm.ai.

AssistantHowGuide
Claude Desktop (Mac, Windows)Download wilmai.mcpb and open it; Claude asks whether to install itwilm.ai#claude
ChatGPT desktop app (Mac, Windows)In Work mode (not Chat), send ChatGPT one message and it installs the plugin itself; or add the MCP server npx -y @wilm-ai/wilma-cli@2 mcp yourselfwilm.ai#chatgpt
Grok BotSend one message; the bot installs the CLI and skill itselfwilm.ai#grok
Meta Muse (not in Finland yet)Send one message; Muse installs the CLI and skill itself, and asks you to save your Wilma login in its vaultwilm.ai#muse
OpenClawSend one message and OpenClaw installs the CLI and the wilma skill; a second one starts a daily briefing with wilma-triagewilm.ai#openclaw
Claude Codeclaude mcp add --scope user wilma -- npx -y @wilm-ai/wilma-cli@2 mcpwilm.ai#claude-code
Codexcodex plugin marketplace add aikarjal/wilmai, then codex plugin add wilma@wilmaiwilm.ai#codex
Terminalnpm i -g @wilm-ai/wilma-cli, then wilma loginwilm.ai#cli

Not supported: Claude and ChatGPT on the web and in the phone apps. Your login stays on your own devices and WilmAI runs no server in between; for updates on your phone, use an agent with its own computer, such as OpenClaw or Grok Bot. Not yet available in Finland: Meta Muse (US and Canada so far), Instinct, and OpenAI dots on consumer plans.

What you can ask

In your own words; every question covers all your children.

  • "What do my kids have going on at school this week?"
  • "Is there any homework for tomorrow?"
  • "Are there any exams coming up? What should she study?"
  • "Has any teacher left a note about Eino this month?"
  • "Any new messages from school? Read the attached letter too."
  • "How did the last exams go? What was on the spring report card?"

Or give an agent a routine: "Every weekday at 7, post a school briefing for both kids to the family channel, and put new exams in the family calendar." The wilma-triage skill does exactly that.

What's inside

  • packages/wilma-client – TypeScript Wilma client (auth + parsing + tenant list)
  • packages/wilma-cli – CLI (wilma), browser login (wilma login), and MCP server (wilma mcp)
  • skills/ – Agent skills (wilma, wilma-triage); also the plugin root for Claude Code and Codex
  • apps/site – wilm.ai (Next.js, built as static files and served by Cloudflare Workers)
  • apps/home – WilmAI Home, the desktop app (Tauri), and its eval suite

Logging in

wilma login

Opens a one-time page on 127.0.0.1 in your browser. Pick your school's Wilma, log in, and the verified login is saved to ~/.config/wilmai/config.json (or $XDG_CONFIG_HOME/wilmai/config.json; override with WILMAI_CONFIG_PATH). The password is entered on that page — never in an agent's chat.

Children on different Wilmas (say, a city school and a private school or lukio)? Press Add another school's Wilma on the same page, or run wilma login again. The page works like WilmAI Home's: one row per Wilma with its children, where you can untick a child Wilma lists twice, log in again or remove a Wilma. Every saved login is used together: every command covers all your children. wilma accounts lists the saved logins and wilma accounts remove <number> removes one. If a parent's login and a child's own login on the same Wilma are both saved (with wilma login --tenant), that child is read through the parent's.

Wilma allows one session per account: when WilmAI logs in, Wilma logs you out in your browser, and the other way round. WilmAI keeps its session and logs in again only when Wilma has ended it. To use Wilma in the browser, run wilma logout or ask your assistant to log out of Wilma (wilma_logout). That ends WilmAI's session and keeps the login; the next command or question logs in again.

Without a browser (scripts, agents on cloud computers), first find the Wilma address:

wilma find-school <city or school>

then:

WILMA_PASSWORD=... wilma login --tenant <city> --username you@example.com
printf '%s' "$PASSWORD" | wilma login --tenant https://<school>.inschool.fi --username you@example.com --password-stdin

Or skip the saved login entirely by setting environment variables, e.g. in an agent's secret settings:

VariableValue
WILMA_TENANTWilma address (https://<school>.inschool.fi) or city/school name
WILMA_USERNAMEWilma username
WILMA_PASSWORDWilma password
WILMA_TOTP_SECRETAuthenticator setup key, if the account uses two-step verification

Running wilma without arguments in a terminal opens an interactive menu.

MCP server

wilma mcp

A stdio MCP server with these tools: wilma_summary, wilma_schedule, wilma_homework, wilma_upcoming_exams, wilma_grades, wilma_gradebook, wilma_contacts, wilma_lesson_notes, wilma_lesson_notes_summary, wilma_list_messages, wilma_read_message, wilma_list_news, wilma_read_news, wilma_get_news_attachment, wilma_list_printouts, wilma_get_printout, wilma_account, wilma_find_school, wilma_login, wilma_logout. They only read from Wilma, except that wilma_logout ends WilmAI's Wilma session. Every tool covers all children unless student is given, and the JSON is the same as the CLI's. If nobody is logged in, tools open the browser login and tell the assistant what to relay.

Any MCP client can run it with npx -y @wilm-ai/wilma-cli@2 mcp. For Claude Code: claude mcp add --scope user wilma -- npx -y @wilm-ai/wilma-cli@2 mcp (--scope user makes it available in every project).

Build the Claude Desktop extension locally with pnpm --filter @wilm-ai/wilma-cli build:mcpb (output: packages/wilma-cli/build/wilmai.mcpb). The release workflow attaches it to each GitHub release.

CLI

npm i -g @wilm-ai/wilma-cli

wilma summary                 # daily briefing for every child
wilma schedule tomorrow
wilma exams
wilma notes --days 7          # absences and teachers' feedback
wilma messages 27164611       # one message with its replies
wilma news 73291 download 1   # a file linked from a bulletin
wilma help <command>

Every command covers all children (--student narrows), prints JSON when another program reads it and text in a terminal, and gives times in Finnish time. Commands continue the last Wilma session instead of logging in each time. See the CLI README.

News JSON includes structured resources for every link in a bulletin. Any resource can be downloaded with wilma news <news-id> download <resource-id> --output <directory>. Wilma-hosted files download through the authenticated session; external URLs are fetched with an isolated, unauthenticated request that never carries Wilma credentials. The CLI does not guess whether a URL is a file — it attempts the download and reports downloaded or not_a_file (a web page answered, e.g. a sign-in wall).

Skills

npx skills add aikarjal/wilmai

From source

pnpm install
pnpm --filter @wilm-ai/wilma-client build
pnpm --filter @wilm-ai/wilma-cli build
node packages/wilma-cli/dist/index.js

Working on WilmAI or releasing it: DEVELOPING.md. Tests: TESTING.md.

WilmAI Home, the desktop app

School, sorted. WilmAI Home is a fast, modern Wilma app for students and parents, free and open, now in beta: messages, timetables, homework, exams and grades for every child in one view, a notification when something new needs you, and optional AI that reads each new message and picks out what needs you and by when.

Download for Mac or Windows · What it does · Releases

  • Children at different schools. When your children's schools are on different Wilmas (another town, an upper secondary school, a private school), sign in to each one, and every view shows all the children together.
  • Reads and writes. Reply to teachers, write new messages, sign up for parents' evenings and report absences, without opening Wilma. Pin the messages you keep coming back to.
  • In your language. The app is in English, Finnish or Swedish, and with AI on it translates messages, bulletins and teachers' notes as they arrive, into Finnish, Swedish, English, Ukrainian or Arabic.
  • For a student too. Sign in with a student's own Wilma account and choose "A student": the app then reads things from the student's side.
  • AI is optional. No AI (the default), OpenAI with your own API key (usually tens of cents a month; the app stops at a monthly limit you set), or local AI on an Apple Silicon Mac with 16 GB of memory, where nothing goes to an AI service.
  • Stays on your computer. No WilmAI server and no tracking. Your Wilma password goes only to your school's Wilma; the app keeps it (scrambled) only if you turn on staying signed in.
  • Updates itself. New versions arrive in the app, signed with the project's update key; you choose when to install them.

Mac (Apple Silicon, macOS 13.3 or later) and Windows 10 or 11. The installers aren't signed by Apple or Microsoft yet, so the first start needs one extra step: on a Mac, System Settings → Privacy & Security → Open Anyway (the install window has a link); on Windows, More info → Run anyway. On Windows, notifications and local AI aren't there yet.

The source is in apps/home (Tauri, React and Rust), with its own README for building and the eval suite that measures how well the AI reads school messages.

Troubleshooting

fetch failed on a managed or corporate laptop

If any command fails with a TLS certificate error, your network is very likely intercepting TLS ("break-and-inspect") and re-signing certificates with a private root CA — standard on devices behind a corporate secure web gateway. Node ships its own CA bundle and ignores the operating system trust store, so a root your browser already trusts is invisible to Node.

The CLI reports the underlying cause code (for example UNABLE_TO_GET_ISSUER_CERT_LOCALLY) and the fix. In order of preference:

# 1. Node >=22.19 / >=24.6
NODE_USE_SYSTEM_CA=1 wilma summary

# 2. Node >=22.15 (the flag has wider version support than the env var)
node --use-system-ca "$(command -v wilma)" summary

# 3. Point Node at the proxy root explicitly
NODE_EXTRA_CA_CERTS=/path/to/root-ca.pem wilma summary

Never set NODE_TLS_REJECT_UNAUTHORIZED=0. It disables certificate verification entirely, on a network that is already inspecting your traffic.

Two things that make this hard to recognise:

  • A working npm install proves nothing. Inspection policies commonly exempt registry.npmjs.org, so installing the CLI succeeds while every Wilma request fails.
  • curl and your browser work fine, because they use the OS trust store. Only Node is affected, which makes the network look healthy.

Credentials & Privacy

Your Wilma login is stored locally in ~/.config/wilmai/config.json (or $XDG_CONFIG_HOME/wilmai/config.json), readable only by your user account. The password is obfuscated (not encrypted) for convenience — this is a personal productivity tool, not a vault. The current Wilma session is kept next to it (wilmai-sessions.json, same protection, at most 6 hours) so commands don't log in each time; set WILMAI_NO_SESSION_CACHE=1 to turn that off. wilma logout ends the session in Wilma and removes it, keeping the login; wilma config clear removes both.

The CLI, the MCP server and the Claude Desktop extension have no server behind them: they log in only to your school's Wilma. Besides Wilma, they open links from school bulletins when you ask for an attachment (only public websites, never with your Wilma login), and once a day they ask npm whether a newer version is out (not when started through npx, which fetches the newest version itself; WILMAI_NO_UPDATE_CHECK=1 turns it off). When an AI assistant uses WilmAI, the school information it reads goes to that assistant's provider, the same as pasting it into a chat; your password does not.

Do not share your config file. It accesses the same data as the official Wilma app or website; it is your responsibility to handle that data appropriately.

License

MIT. Questions, bugs and ideas: GitHub issues. If WilmAI is useful to you, a star helps other parents find it.

Reviews

No reviews yet

Be the first to review this server!