Skip to main content
Glama
Sign In
deenesjakoruzh
librus-mcp

librus-mcp

by TechAdrianPro
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

librus-mcp

Local, read-only MCP server for a Librus Portal account. It uses the Portal login flow to obtain a short-lived Librus API token for a chosen Synergia account.

Security model

  • Credentials are read from LIBRUS_EMAIL and LIBRUS_PASSWORD only.

  • Cookies and tokens are kept in memory and are discarded when the process exits or librus_logout is called.

  • The server permits HTTPS requests only to portal.librus.pl and api.librus.pl.

  • It exposes an allowlist of read-only API resources; it cannot send messages, mark notices read, or submit arbitrary requests.

  • It deliberately writes no request, response, credential, token, or API payload to stdout/stderr. Stdout is reserved for MCP protocol traffic.

Do not put credentials in package.json, MCP configuration checked into git, or a tracked .env file.

Related MCP server: Librus Read-only MCP

Install and build

cd /home/xadix0wy/librus-mcp
npm install
npm run build

Configure an MCP host

Use environment variables in the host's private configuration or secret store:

{
  "mcpServers": {
    "librus": {
      "command": "node",
      "args": ["/home/xadix0wy/librus-mcp/dist/index.js"],
      "env": {
        "LIBRUS_EMAIL": "your-email@example.com",
        "LIBRUS_PASSWORD": "your-password"
      }
    }
  }
}

LIBRUS_CLIENT_ID is optional. The default is the public client ID from the legacy Librus mobile flow. It is not treated as a secret.

Tools

  • librus_profiles: lists the Synergia accounts linked to the Portal account.

  • librus_get: reads grades, attendance, timetable, homework, notices, school information and other supported API resources. Pass account_login from librus_profiles.

  • librus_logout: clears all in-memory authentication material.

The Portal can require reCAPTCHA or an account action. The server stops with a clear error in that case; complete the required action directly at https://portal.librus.pl or in the official app, then retry.

Compatibility

This relies on an undocumented Portal/API flow observed in the legacy Szkolny Android source. Librus can change or restrict it without notice. It is intended only for the account owner and should be used in accordance with Librus terms and school policy.

Available Tools

3 tools
librus_getB

Read a supported Librus API resource. This tool is read-only and accepts no arbitrary URL or write operation.

Inputs: resource (required), account_login (required), week_start.

librus_logoutA

Clear all in-memory Librus cookies and tokens. Nothing is persisted to disk.

Inputs: no named parameters.

librus_profilesA

List Librus Synergia accounts linked to the configured Librus Portal account. Use the returned login with librus_get.

Inputs: no named parameters.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.9/5.0

    Scored across 3 tools

    Disambiguation5/5

    Each tool has a clear, distinct responsibility: list linked accounts, read a specific API resource, and clear the session. The profiles tool explicitly points to librus_get, removing ambiguity.

    Naming Consistency4/5

    All tools share the consistent librus_ prefix and snake_case style, making them easy to recognize. There is a minor inconsistency between noun-based librus_profiles and verb-based librus_get/librus_logout.

    Tool Count5/5

    Three tools is a minimal but well-scoped set for a read-only, session-based Librus API bridge. Each tool serves a real workflow step: discovering accounts, reading data, and ending the session.

    Completeness3/5

    The session lifecycle is covered, but librus_get is generic and does not enumerate which resources are supported. An agent may struggle to know what API resources can actually be requested.

    Resources

    Related MCP Connectors

    Related MCP Servers

    • vklass-mcp

      perapp
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables guardians to securely query read-only Vklass data such as children, news, calendar entries, assignments, grades, meals, and notifications through MCP, with per-user BankID and OAuth 2.1 authentication.
      2
      MIT

    • Librus Read-only MCP

      nalancuchu
      F
      license
      A
      quality
      B
      maintenance
      Provides read-only access to Librus parent account data for multiple children, enabling retrieval of grades, attendance, timetable, calendar, homework, announcements, messages, and attachments via MCP.
      11
      1
      -

    • freestyle-libre-mcp

      osjayaprakash
      A
      license
      A
      quality
      B
      maintenance
      Provides read-only access to FreeStyle Libre CGM glucose readings via LibreLinkUp, enabling users to list patients, get current glucose with trend, view 12-hour graphs, and retrieve logbook events.
      4
      MIT