{
  "slug": "io-github-pilotaai-slotlock",
  "name": "io.github.PILOTAAI/slotlock",
  "title": "Slotlock",
  "description": "Calendars for AI agents: free/busy, next free slot, and bookings PostgreSQL never double-books.",
  "version": "0.4.1",
  "publishedAt": "2026-10-28T01:16:40.520309Z",
  "updatedAt": "2026-10-28T01:16:40.520309Z",
  "repoUrl": "https://github.com/PILOTAAI/slotlock",
  "websiteUrl": "https://slotlock.pylota.io",
  "namespace": {
    "type": "github",
    "owner": "PILOTAAI"
  },
  "kind": "local",
  "packages": [
    {
      "registryType": "oci",
      "identifier": "ghcr.io/pilotaai/slotlock:0.4.1",
      "version": null,
      "transport": "streamable-http",
      "runtimeHint": "docker"
    }
  ],
  "remotes": [],
  "envVars": [
    {
      "name": "DATABASE_URL",
      "isSecret": true,
      "isRequired": true,
      "description": "postgres:// URL of a PostgreSQL 16 or newer database the container can reach, as a role that is not a superuser and has no BYPASSRLS: serve refuses one, since row-level security would not confine it. Without SLOTLOCK_MIGRATE_DATABASE_URL this role also applies the schema, so it must be able to create it."
    },
    {
      "name": "SLOTLOCK_AUTH_TOKEN",
      "isSecret": true,
      "isRequired": false,
      "description": "Optional bearer token for SLOTLOCK_TENANT, with read and write (never admin): at least 32 random characters (openssl rand -hex 32). Leave it unset to accept only API keys (slotlock key create)."
    },
    {
      "name": "SLOTLOCK_CONFIRMATION_SECRET",
      "isSecret": true,
      "isRequired": false,
      "description": "Signs pending write confirmations: at least 32 random characters, different from the token. Required unless SLOTLOCK_CONFIRM_WRITES is none."
    },
    {
      "name": "PORT",
      "isSecret": false,
      "isRequired": false,
      "description": "Port the server listens on inside the container."
    },
    {
      "name": "SLOTLOCK_MIGRATE_DATABASE_URL",
      "isSecret": true,
      "isRequired": false,
      "description": "postgres:// URL of the schema owner. When set, migration runs as this role and grants the DATABASE_URL role only what it needs at runtime."
    },
    {
      "name": "SLOTLOCK_CONFIRM_WRITES",
      "isSecret": false,
      "isRequired": false,
      "description": "Writes that wait for a person to confirm them: none, all, or a comma-separated list of slotlock_create_event, slotlock_book_together, slotlock_book_pool, slotlock_update_event, slotlock_delete_event. Clients without MCP 2026-07-28 form elicitation have guarded writes refused."
    },
    {
      "name": "SLOTLOCK_AVAILABILITY",
      "isSecret": false,
      "isRequired": false,
      "description": "JSON array of weekly bookable-hours rules, e.g. [{\"rrule\":\"FREQ=WEEKLY;BYDAY=MO,TU,WE,TH,FR\",\"startMinutes\":540,\"durationMinutes\":480}]. Without rules no slot is ever offered."
    },
    {
      "name": "SLOTLOCK_REST_API",
      "isSecret": false,
      "isRequired": false,
      "description": "on: also serve the tools as a REST API under /v1, and the application API (resources, bookable hours, holds, reservations, coverage, maintenance) for admin keys, described by an OpenAPI 3.1 document at /openapi.json. Writes that wait for confirmation answer 428 there. off: MCP and A2A only."
    },
    {
      "name": "SLOTLOCK_SHARED_LIMITS",
      "isSecret": false,
      "isRequired": false,
      "description": "on: tenant request budgets (SLOTLOCK_LIMITS' tenant_* and app_*) are shared by every server of a deployment through PostgreSQL, so N servers allow a tenant its rate once, not N times. off: each server keeps its own."
    },
    {
      "name": "SLOTLOCK_WEBHOOKS",
      "isSecret": false,
      "isRequired": false,
      "description": "on: deliver each tenant's changes to its webhooks (POST /v1/webhooks), signed as Standard Webhooks; never to a private network address. private: those too, for testing. off: keep the change feed (GET /v1/changes), send nothing."
    },
    {
      "name": "SLOTLOCK_TENANT",
      "isSecret": false,
      "isRequired": false,
      "description": "The tenant SLOTLOCK_AUTH_TOKEN acts in; API keys act in their own tenant."
    }
  ],
  "category": "databases",
  "subcategory": "sql",
  "company": "",
  "categoryAuto": true,
  "checks": [
    {
      "id": "source-linked",
      "label": "Source repository linked",
      "result": "pass",
      "detail": "https://github.com/PILOTAAI/slotlock"
    },
    {
      "id": "version-pinned",
      "label": "Version pinned",
      "result": "pass",
      "detail": "Every package has an explicit version"
    },
    {
      "id": "secrets-requested",
      "label": "Secrets requested",
      "result": "warn",
      "detail": "Asks for 4 secrets: DATABASE_URL, SLOTLOCK_AUTH_TOKEN, SLOTLOCK_CONFIRMATION_SECRET, SLOTLOCK_MIGRATE_DATABASE_URL"
    },
    {
      "id": "known-registry",
      "label": "Known package registry",
      "result": "pass",
      "detail": "All packages come from npm, PyPI, OCI, NuGet or MCPB"
    },
    {
      "id": "namespace",
      "label": "Namespace ownership",
      "result": "info",
      "detail": "Name verified via GitHub account PILOTAAI"
    },
    {
      "id": "meta-text",
      "label": "Registry text aimed at the AI",
      "result": "pass",
      "detail": "Description and settings contain no hidden characters or instructions to the AI"
    },
    {
      "id": "code-flags",
      "label": "Code red flags",
      "result": "info",
      "detail": "oci packages are not read yet"
    }
  ],
  "scannedAt": "2026-10-29",
  "level": "Scanned",
  "install": [
    {
      "label": "Claude Desktop (oci)",
      "kind": "claude_desktop_json",
      "text": "{\n  \"mcpServers\": {\n    \"slotlock\": {\n      \"command\": \"docker\",\n      \"args\": [\n        \"run\",\n        \"-i\",\n        \"--rm\",\n        \"-e\",\n        \"DATABASE_URL\",\n        \"ghcr.io/pilotaai/slotlock:0.4.1\"\n      ],\n      \"env\": {\n        \"DATABASE_URL\": \"<your value>\"\n      }\n    }\n  }\n}"
    }
  ],
  "curated": true,
  "stars": 0,
  "archived": false,
  "pushedAt": "2026-10-28T20:38:50Z",
  "health": {
    "score": 39,
    "parts": {
      "popularity": 0,
      "activity": 0.6,
      "issues": null,
      "security": 0.8
    },
    "fail": 0,
    "warn": 1,
    "raw": {
      "stars": 0,
      "forks": 0,
      "downloads": null,
      "hn": null,
      "issuesOpen": 0,
      "issuesClosed": 0,
      "prsMerged": 122,
      "commits90": 0,
      "release": "2026-10-29T18:37:19Z",
      "pushed": "2026-10-28T20:38:50Z",
      "growth": null,
      "growthDays": null,
      "archived": false
    },
    "at": "2026-10-31T07:35:52.424Z"
  }
}