lu MCP server
lu.ma events MCP server with draft+confirm safety, audit logging, and prompt-injection scrubbing.…
0 stars
Reviews
Write oneNobody has reviewed lu yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
lu tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- –Code scanpackage could not be scannedn/a
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 6 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How lu compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 73/100
- higher than 42% of 4,464 AI and agents servers
Install lu in Claude Code, Cursor or VS Code
The registry entry has no remote endpoint or installable package.
What the publisher says
From the lu repository's README, as published. We do not edit it. Read it on GitHub
luma-mcp
<!-- mycelium-badges:start -->
<!-- mycelium-badges:end -->
lu.ma events MCP server. Create events, set ticket prices, issue coupon codes, list RSVPs, and email attendees. All writes go through draft+confirm so nothing posts to Luma until you explicitly approve. Built on the official Luma public API.
What it does
- Create + update lu.ma events (name, date, timezone, capacity, meeting URL, visibility, cover image)
- Set ticket types and pricing
- Issue coupon codes (calendar-scoped or event-scoped, percentage or fixed-cents discounts, redemption caps)
- List event guests / RSVPs
- Send markdown emails to attendees (pre-work, day-of, follow-up)
- Audit log of every API call (JSONL with key/token redaction)
- Prompt-injection scrubber on user-supplied free-text fields
Tools (v0.1.0)
Reads (call API directly):
- luma_health — auth check + draft store size
- lumagetevent — fetch one event by ID
- lumalistevents — paginated calendar listing
- lumalistevent_guests — RSVPs filtered by status
- lumalistcoupons — calendar or event-scoped
Writes (draft+confirm pairs):
- lumacreateeventdraft / lumacreateeventconfirm
- lumaupdateeventdraft / lumaupdateeventconfirm
- lumacreatetickettypedraft / lumacreatetickettypeconfirm
- lumacreatecoupondraft / lumacreatecouponconfirm
- lumasendeventemaildraft / lumasendeventemailconfirm
Plus:
- lumacanceldraft — cancel an unconfirmed draft (idempotent)
14 tools total.
Architecture
luma-mcp/
├── pyproject.toml
├── README.md
├── SETUP.md
├── LICENSE
├── .env.example
├── luma_mcp/
│ ├── __init__.py
│ ├── server.py FastMCP entry point + .env loader
│ ├── client.py HTTP wrapper around api.lu.ma/public/v1
│ ├── drafts.py Thread-safe draft store with TTL
│ ├── audit.py JSONL audit log with redaction
│ ├── scrubber.py Prompt-injection neutralizer
│ ├── _shared/ Day-1 shared utilities
│ │ ├── normalize.py Timezone alias + datetime helpers
│ │ └── types.py Permissive typed shapes for API responses
│ └── tools/
│ ├── health.py luma_health, luma_cancel_draft
│ ├── events.py create / update / get / list events
│ ├── tickets.py create ticket types
│ ├── coupons.py create / list coupons
│ ├── guests.py list event guests
│ └── emails.py send email to attendees
└── tests/integration/
└── test_full_pipeline.py 10-step bare-runnable verificationSafety patterns
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
lu: common questions
- Is lu MCP server safe?
- Mostly: it is graded B (73/100). Read the lu safety report
- Does lu need an API key?
- Yes. The registry entry asks for
LUMA_API_KEY. - Is lu maintained?
- The last commit was 42 days ago (2026-09-21). The latest release is v0.1.0.
- What can I use instead of lu?
- Servers from other publishers that do the same job: Shellward MCP server, Agent Security Scanner MCP server and Agent-Native Analytics MCP server.
Alternatives to lu
Same job from other publishers: the closest match first, then the best rated.
- ShellwardAI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.not reviewedEstablishedA
- Agent Security ScannerSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.not reviewedEstablishedC
- Agent-Native AnalyticsAgent-Native Amplitude/Mixpanel - connect data sources, prompt for chartsnot reviewedEstablishedA
- ImageAI image generation and editing with prompt optimization and quality presetsnot reviewedEstablishedB
- Godot MCPAgent-driven Godot playtesting: editor control, input injection, game-time stepping, live state.not reviewedEstablishedA