Slotlock MCP server

by PILOTAAI·io.github.PILOTAAI/slotlock·v0.6.0

No reviews yet

Calendars for AI agents: free/busy, next free slot, and bookings PostgreSQL never double-books.

B70/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B70/100

not scanned yet

Adoption

New

0 stars

Reviews

Write one

Nobody has reviewed Slotlock yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Slotlock tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How Slotlock compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 70/100; higher than 35% of 48,255 servers

Release history: 6 versions in the registry since 2026-10-23, latest 2026-10-29, typically one every 1 day.

Install Slotlock in Claude Code, Cursor or VS Code

claude mcp add slotlock -- docker run -i --rm ghcr.io/pilotaai/slotlock:0.6.0

Add to Cursor

Slotlock: common questions

Is Slotlock MCP server safe?: Mostly: it is graded B (70/100). Read the Slotlock safety report
How do I install Slotlock?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Slotlock need an API key?: Yes. The registry entry asks for DATABASE_URL, SLOTLOCK_AUTH_TOKEN, SLOTLOCK_CONFIRMATION_SECRET, SLOTLOCK_METRICS_TOKEN and 1 more.
Is Slotlock maintained?: The last commit was 11 days ago (2026-10-23). The latest release is v0.6.0.

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 70/100
Stars: 0
Downloads/wk: –
Price: Free
Licence: Apache-2.0
Transport: Local · oci
Version: 0.6.0
Category: Everything else
Last release: 2026-10-23

Credentials it needs

DATABASE_URLsecretpostgres:// URL of a PostgreSQL 16 or newer database the container can reach, as a role that is not a superuser and has no BYPASSRLS: serve refuses one, since row-level security would not confine it. Without SLOTLOCK_MIGRATE_DATABASE_URL this role also applies the schema, so it must be able to create it.
SLOTLOCK_AUTH_TOKENsecretOptional bearer token for SLOTLOCK_TENANT, with read and write (never admin): at least 32 random characters (openssl rand -hex 32). Leave it unset to accept only API keys (slotlock key create).
SLOTLOCK_CONFIRMATION_SECRETsecretSigns pending write confirmations: at least 32 random characters, different from the token. Required unless SLOTLOCK_CONFIRM_WRITES is none.
SLOTLOCK_METRICS_TOKENsecretServes Prometheus metrics at /metrics to this bearer token: at least 32 random characters, different from every other secret. Off without it.
PORTPort the server listens on inside the container.
SLOTLOCK_MIGRATE_DATABASE_URLsecretpostgres:// URL of the schema owner. When set, migration runs as this role and grants the DATABASE_URL role only what it needs at runtime.
SLOTLOCK_CONFIRM_WRITESWrites that wait for a person to confirm them: none, all, or a comma-separated list of slotlock_create_event, slotlock_book_together, slotlock_book_pool, slotlock_update_event, slotlock_delete_event. Clients without MCP 2026-07-28 form elicitation have guarded writes refused.
SLOTLOCK_AVAILABILITYJSON array of weekly bookable-hours rules, e.g. [{"rrule":"FREQ=WEEKLY;BYDAY=MO,TU,WE,TH,FR","startMinutes":540,"durationMinutes":480}]. Without rules no slot is ever offered.
SLOTLOCK_REST_APIon: also serve the tools as a REST API under /v1, and the application API (resources, bookable hours, holds, reservations, coverage, maintenance) for admin keys, described by an OpenAPI 3.1 document at /openapi.json. Writes that wait for confirmation answer 428 there. off: MCP and A2A only.
SLOTLOCK_RETENTION_DAYSDays of history kept: the change feed (who made each change included) and how far back a cursor reaches, and ended waitlist entries; retried writes are answered for at least 30 days whatever it is. 1-3650; default 30.
SLOTLOCK_SHARED_LIMITSon: tenant request budgets (SLOTLOCK_LIMITS' tenant_* and app_*) are shared by every server of a deployment through PostgreSQL, so N servers allow a tenant its rate once, not N times. off: each server keeps its own.
SLOTLOCK_WEBHOOKSon: deliver each tenant's changes to its webhooks (POST /v1/webhooks), signed as Standard Webhooks; never to a private network address. private: those too, for testing. off: keep the change feed (GET /v1/changes), send nothing.
SLOTLOCK_TENANTThe tenant SLOTLOCK_AUTH_TOKEN acts in; API keys act in their own tenant.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/pilotaai-slotlock.svg)](https://mcp.market/server/pilotaai-slotlock)

How the badge works