MCP.Market

lu MCP server

by adelaidasofia·io.github.adelaidasofia/luma-mcp·v0.1.0

lu.ma events MCP server with draft+confirm safety, audit logging, and prompt-injection scrubbing.…

B73/100grade B
What users say
No reviews yet
Be the first
Safety scan
B73/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed lu yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

lu tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • –Code scanpackage could not be scannedn/a
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 73/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How lu compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
73/100
higher than 42% of 4,464 AI and agents servers

Install lu in Claude Code, Cursor or VS Code

The registry entry has no remote endpoint or installable package.

What the publisher says

From the lu repository's README, as published. We do not edit it. Read it on GitHub

luma-mcp

<!-- mycelium-badges:start -->

<!-- mycelium-badges:end -->

lu.ma events MCP server. Create events, set ticket prices, issue coupon codes, list RSVPs, and email attendees. All writes go through draft+confirm so nothing posts to Luma until you explicitly approve. Built on the official Luma public API.

What it does

  • Create + update lu.ma events (name, date, timezone, capacity, meeting URL, visibility, cover image)
  • Set ticket types and pricing
  • Issue coupon codes (calendar-scoped or event-scoped, percentage or fixed-cents discounts, redemption caps)
  • List event guests / RSVPs
  • Send markdown emails to attendees (pre-work, day-of, follow-up)
  • Audit log of every API call (JSONL with key/token redaction)
  • Prompt-injection scrubber on user-supplied free-text fields

Tools (v0.1.0)

Reads (call API directly):

  • luma_health — auth check + draft store size
  • lumagetevent — fetch one event by ID
  • lumalistevents — paginated calendar listing
  • lumalistevent_guests — RSVPs filtered by status
  • lumalistcoupons — calendar or event-scoped

Writes (draft+confirm pairs):

  • lumacreateeventdraft / lumacreateeventconfirm
  • lumaupdateeventdraft / lumaupdateeventconfirm
  • lumacreatetickettypedraft / lumacreatetickettypeconfirm
  • lumacreatecoupondraft / lumacreatecouponconfirm
  • lumasendeventemaildraft / lumasendeventemailconfirm

Plus:

  • lumacanceldraft — cancel an unconfirmed draft (idempotent)

14 tools total.

Architecture

luma-mcp/
├── pyproject.toml
├── README.md
├── SETUP.md
├── LICENSE
├── .env.example
├── luma_mcp/
│   ├── __init__.py
│   ├── server.py             FastMCP entry point + .env loader
│   ├── client.py             HTTP wrapper around api.lu.ma/public/v1
│   ├── drafts.py             Thread-safe draft store with TTL
│   ├── audit.py              JSONL audit log with redaction
│   ├── scrubber.py           Prompt-injection neutralizer
│   ├── _shared/              Day-1 shared utilities
│   │   ├── normalize.py      Timezone alias + datetime helpers
│   │   └── types.py          Permissive typed shapes for API responses
│   └── tools/
│       ├── health.py         luma_health, luma_cancel_draft
│       ├── events.py         create / update / get / list events
│       ├── tickets.py        create ticket types
│       ├── coupons.py        create / list coupons
│       ├── guests.py         list event guests
│       └── emails.py         send email to attendees
└── tests/integration/
    └── test_full_pipeline.py 10-step bare-runnable verification

Safety patterns

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

lu: common questions

Is lu MCP server safe?
Mostly: it is graded B (73/100). Read the lu safety report
Does lu need an API key?
Yes. The registry entry asks for LUMA_API_KEY.
Is lu maintained?
The last commit was 42 days ago (2026-09-21). The latest release is v0.1.0.
What can I use instead of lu?
Servers from other publishers that do the same job: Shellward MCP server, Agent Security Scanner MCP server and Agent-Native Analytics MCP server.

Alternatives to lu

Same job from other publishers: the closest match first, then the best rated.

  • Shellward
    AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
    A
  • Agent Security Scanner
    Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
    C
  • Agent-Native Analytics
    Agent-Native Amplitude/Mixpanel - connect data sources, prompt for charts
    A
  • Image
    AI image generation and editing with prompt optimization and quality presets
    B
  • Godot MCP
    Agent-driven Godot playtesting: editor control, input injection, game-time stepping, live state.
    A

More from adelaidasofia →