Back to Browse

Familyorg MCP Server

Developer ToolsModerate5.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

Cozi family members, lists and shared calendar, as MCP tools.

About

Cozi family members, lists and shared calendar, as MCP tools.

Security Report

5.7
Moderate5.7Moderate Risk

familyorg is a clean-room Cozi client with no shell execution, eval, or hardcoded secrets. Credentials come from environment variables, path parameters are URL-encoded, and read-only mode is enforced in both the tool list and the call handler. The main concerns are that COZI_API_URL can redirect username and password to any host without scheme validation, and that the Cozi wire format is an unverified reconstruction. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

What You'll Need

Set these up before or after installing:

COZI_USERNAMERequired
COZI_PASSWORDRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-familyorg": {
      "env": {
        "COZI_PASSWORD": "your-cozi-password-here",
        "COZI_USERNAME": "your-cozi-username-here"
      },
      "args": [
        "-y",
        "@reneturcios/familyorg"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

familyorg

Run a Cozi family account from an MCP client: who is in the family, the shopping and to-do lists everyone shares, and the family calendar with its appointments. familyorg is a clean-room rebuild of the documented surface of the unofficial cozi_mcp server, under a new name: fresh code written from the public tool spec, no copied code or branding.

This is an unofficial client. It is not affiliated with Cozi.

Tools (full documented set, 15)

Reads: family_members, get_lists, get_list_items, today, get_calendar, search_calendar.

Writes: create_list, rename_list, delete_list, add_item, update_item, remove_items, create_appointment, update_appointment, delete_appointment.

Notes on individual tools:

  • get_lists takes an optional list_type of shopping or todo; get_list_items takes a list_id and an optional include_completed.
  • today answers from the local clock only. It needs no Cozi credentials and makes no network call.
  • create_appointment takes subject, start, and end, plus optional attendees, all_day, notes, location, repeat, reminders, and notify. repeat is a generic object describing the recurrence (for example a frequency, an interval, weekdays, a monthly rule, and an until date).
  • update_appointment and delete_appointment are keyed by appointment_id, year, and month; updates send only the fields provided, and both accept scoping fields such as scope and occurrence_day for recurring appointments.

Setup

Authentication follows the Cozi web API pattern: a username and password are exchanged at login for a token, which is then sent with each request.

export COZI_USERNAME=you@example.com
export COZI_PASSWORD=your-password

Optionally override the API base with COZI_API_URL (default https://rest.cozi.com). Without the username or password, every tool except today fails with an error naming the missing variable.

Set COZI_READ_ONLY=true to run in read-only mode: the nine write tools disappear from the MCP tool list, and any write call is refused.

The request and response shaping against rest.cozi.com is a reconstruction from the documented tool surface; it has not been verified against a live Cozi account.

CLI

npx @reneturcios/familyorg get_calendar '{"year":2026,"month":11}'
npx @reneturcios/familyorg today '{}'
npx @reneturcios/familyorg mcp        # stdio MCP server

Each tool name is a subcommand taking one JSON object argument.

MCP client config

{
  "mcpServers": {
    "familyorg": {
      "command": "npx",
      "args": ["-y", "@reneturcios/familyorg", "mcp"],
      "env": {
        "COZI_USERNAME": "you@example.com",
        "COZI_PASSWORD": "your-password"
      }
    }
  }
}

Docker

docker run -i -e COZI_USERNAME -e COZI_PASSWORD ghcr.io/cloudcorprecords/familyorg

Development

npm install
npm run build
npm test

License

MIT

Reviews

No reviews yet

Be the first to review this server!