Favro MCP server

favro-mcp

A Model Context Protocol server for Favro, written in Go.

It speaks MCP over stdio and exposes Favro's REST API as 85 typed tools. Beyond plain CRUD, it ships workflow tools built for natural-language use — search, name→ID resolution, surgical description edits — so an LLM can act on Favro without spending its rate-limit budget on lookup round-trips. Every mutating tool supports dry_run.

Unofficial. Not affiliated with or endorsed by Favro.

Requirements: Go 1.27 to build from source; a Favro account with an API token. See CHANGELOG.md for release history.

Installation

Claude Desktop bundle

Each tagged release publishes a favro-mcp_.mcpb on the GitHub Releases page. Opening it installs the server into Claude Desktop and prompts for the three values it needs — your Favro email, an API token, and the organization id — so there is no config file to hand-edit.

The bundle carries a macOS universal binary, a Windows amd64 binary, and both Linux architectures behind a launcher that picks at startup. It is listed in checksums.txt and covered by the release signature; see Verifying a download.

Cowork plugin (recommended)

Each tagged release publishes a single multi-arch favro-mcp.plugin zip on the GitHub Releases page. The bundle contains binaries for darwin amd64/arm64 and linux amd64/arm64, plus a launcher shim that picks the right one at runtime.

1. Download favro-mcp.plugin from the release.
2. Install it into your Cowork profile (drag-and-drop, or follow Cowork's plugin install flow).
3. Authenticate (see Authentication below).
4. Restart Cowork — the favro MCP server will appear with all tools registered.

The bundled .mcp.json points at ${CLAUDEPLUGINROOT}/bin/favro-mcp so the install is relocatable; no host paths to edit.

Standalone binary

For non-Cowork hosts (Claude Code via raw .mcp.json, MCP Inspector, custom integrations):

1. Download the matching favro-mcp___.tar.gz (or .zip on Windows) from the release.
2. Extract and place the favro-mcp binary somewhere on $PATH (or note its absolute path).
3. Authenticate.
4. Point your MCP host's config at the binary — see MCP host configuration below.

From source

git clone https://github.com/mmedum/favro-mcp
cd favro-mcp
make build       # → bin/favro-mcp

Requires Go 1.27, the version go.mod declares. Under the default GOTOOLCHAIN=auto an older toolchain downloads it on demand; under GOTOOLCHAIN=local the build fails instead of downgrading.

Verifying a download

Every release carries checksums.txt, an SBOM per archive, a keyless cosign signature over the checksum file, and build provenance attested by GitHub. The .mcpb bundle is in checksums.txt with the archives, so one signature covers all of it.

# 1. The file is what the release says it is.
sha256sum -c checksums.txt --ignore-missing

# 2. The checksum file came from this repository's release workflow.
cosign verify-blob checksums.txt \
  --bundle checksums.txt.bundle \
  --certificate-identity-regexp '^https://github\.com/mmedum/favro-mcp/' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Shortened. The full README is on GitHub.