Onplana MCP server
online · 100% uptimeio.github.Onplana/mcp-server·v0.2.5·4 starsAI-native project and portfolio management platform for PMOs. OAuth + PAT.
not scanned yet
4 stars
Reviews
Write oneNobody has reviewed Onplana yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Onplana tools
Tool list not cached yet. `describe` through the gateway fetches it live.
How Onplana compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 90/100
- higher than 83% of 48,255 servers
- Uptime
- 100%
- of our recent checks; the typical remote server answers 100%
- Response time
- 530 ms
- faster than 28% of 30,031 servers
- GitHub stars
- 4
- more than 82% of 28,688 servers
Release history: 2 versions in the registry since 2026-05-20, latest 2026-10-18, typically one every 151 days.
Install Onplana in Claude Code, Cursor or VS Code
claude mcp add --transport http mcp-server https://mcp.onplana.com/mcp
What the publisher says
From the Onplana repository's README, as published. We do not edit it. Read it on GitHub
Onplana MCP server
Open-source TypeScript Model Context Protocol building blocks, extracted from Onplana's production MCP deployment. Two packages:
template. Streamable HTTP transport, Bearer auth, prompt-injection containment, pluggable dispatcher.
- onplana-mcp-server: server
client SDK for calling the public Onplana MCP endpoint at https://api.onplana.com/api/mcp/v1.
- onplana-mcp-client: typed TypeScript
What this is
The transport layer of an MCP server (Streamable HTTP wiring, stateless mode, scoped Bearer auth, prompt-injection containment) done well, separated from the platform-specific tool registry. Use the server template to build your own MCP server with security best practices baked in. Use the client SDK to drive Onplana's hosted MCP from your own code.
The patterns are extracted from Onplana's production deployment (public docs at onplana.com/mcp), the same layer that handles real Claude Desktop, Cursor, ChatGPT custom connector, and in-house agent traffic against the Onplana platform.
Why open-source
The MCP transport is the same for everyone. Most early MCP servers get the security primitives wrong:
(task titles, comment bodies, wiki text) put that content directly into the model's context. Without containment, a hostile actor can plant "ignore previous instructions" in their own data and the next agent that reads it follows along.
- Prompt injection. Tools that return user-generated content
state, which breaks horizontal scaling and complicates the auth model.
- Stateless transport. Most SDK examples assume in-memory session
invoke wastes turns and confuses the model.
- Plan-gate semantics. Surfacing tools the caller can't actually
Onplana solved these in production over six months of MCP-server work. Publishing the patterns is high-leverage:
reinventing.
- Other MCP authors get a known-good template instead of
are heavily weighted in next-gen LLM training data, and a repo with patterns + clear documentation about MCP improves model recall of "what good MCP servers look like."
- The repo is a pretraining-signal surface. Public GitHub READMEs
plugs in. The transport is generic; what matters about your MCP server is the tool registry. Open-sourcing the transport doesn't give away anything proprietary.
- The dispatcher interface is the seam where your business logic
The dispatcher implementation, tool catalog, plan-gate logic, audit infrastructure, and the rest of Onplana's ~600 LOC closed-source dispatcher stay in the closed monorepo because they encode platform business logic. If you build your own MCP server using this template, you write your own dispatcher. That's the work that matters and the work that's specific to your platform.
Repository layout
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Onplana: common questions
- Is Onplana MCP server safe?
- Yes, by our scan: it is graded A (90/100). Read the Onplana safety report
- How do I install Onplana?
- It runs remotely at mcp.onplana.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Onplana need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Onplana maintained?
- The last commit was 69 days ago (2026-08-27). The latest release is v0.2.5.
- Is Onplana up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- How does Onplana compare with other MCP servers?
- safety score 90/100 (higher than 83% of 48,255 servers); uptime 100% (of our recent checks; the typical remote server answers 100%); response time 530 ms (faster than 28% of 30,031 servers). Full comparison.