MCP CheckMattermost
io.github.vriesdemichael/mm-mcp
About Mattermost
Mattermost is an MCP server published by the GitHub account vriesdemichael. Read, search and post in Mattermost as yourself or a bot.
It runs on your own machine: your AI client starts it from the MCP bundle package mm-mcp_0.4.0_darwin_amd64.mcpb at version 0.4.0.
It asks for one secret: MM_TOKEN. Give it a key with the least access that still works.
It also needs MM_URL set before it starts.
Version 0.4.0 was published on 21 October 2026, and the source code is public, so you can read it before installing.
Written from the registry entry. 8 automated checks on the registry entry and the package code: 6 pass, 0 warn, 0 fail, 2 info. How we check.
What it asks for
| Variable | Required | Secret | Description |
|---|---|---|---|
MM_MCP_ALLOW_WRITES | No | No | Offer the tools that post and change things. Your client's own approval of each call decides, and mm-mcp checks what each change others see states before it acts. |
MM_MCP_CA_FILE | No | No | A PEM file of certificate authorities to trust beside your system's, for a Mattermost whose certificate your organisation signed itself. Leave it empty otherwise. |
MM_MCP_DOWNLOAD_DIR | No | No | Where save_file writes attachments. Leave it empty for your Downloads directory. |
MM_MCP_ELICITATION_OPT_IN | No | No | Your client's own approval of each call decides whether a post or another change others see goes ahead, and mm-mcp checks what each states. Turn this on to have mm-mcp ask you too, through a question your client shows: a convenience where it shows it, not a safeguard, since some clients answer it themselves. |
MM_MCP_FORCE_HUMAN_IN_THE_LOOP_IN_CLAUDE_CODE | No | No | Not with mm-mcp asks as well: marks each tool that changes what others see so that Claude Code asks a person on every call, whatever its permission mode or rules allow. An agent cannot post on its own while it is on. |
MM_MCP_MARK_AI_GENERATED | No | No | Mark every post and edit the model writes with Mattermost's own marker for text written with AI. |
MM_MCP_POST_FROM_VIEWS | No | No | Where your app shows mm-mcp's views, a post the model proposes as your draft can be posted from the view with Post. Off, the draft waits in Mattermost for you to send. |
MM_MCP_RESOURCE_MAX_MB | No | No | The most one message carrying an attached file as an MCP resource holds, a binary file counted as its base64. MCP sends a resource whole, and a client drops a message past its own limit, 10 MB for clients built on the TypeScript SDK. A larger one is refused, and read_file or save_file reads it instead. 0 is no limit. |
MM_TOKEN | No | Yes | A personal access token or a bot token. Where those are switched off, leave it empty after logging in once with mm-mcp login --url <address> in a terminal, which keeps your session in the system's credential store. |
MM_URL | Yes | No | The address you open Mattermost at, such as https://chat.example.com. |
Checks
| Check | Result | Detail |
|---|---|---|
| Source repository linked | Pass | https://github.com/vriesdemichael/mm-mcp |
| Version pinned | Pass | Every package has an explicit version |
| Secrets requested | Info | Asks for 1 secret: MM_TOKEN |
| Known package registry | Pass | All packages come from npm, PyPI, OCI, NuGet or MCPB |
| Namespace ownership | Info | Name verified via GitHub account vriesdemichael |
| Registry text aimed at the AI | Pass | Description and settings contain no hidden characters or instructions to the AI |
| Code red flags | Pass | Read 1 files in the bundle: no obfuscation, encoded execution, credential reads or data-collection endpoints found |
| Text aimed at the AI | Pass | No hidden characters or instructions to the AI in 1 files, including comments and the README |
Popularity & health: 49 / 100
Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.
0 forks, 38 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.
What people say
No Hacker News threads link to its source code.
Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.
Facts
| Registry name | io.github.vriesdemichael/mm-mcp |
|---|---|
| Publisher | GitHub account vriesdemichael |
| How the name is verified | Name verified via GitHub account vriesdemichael. The registry ties the name prefix to that account or domain; it does not check the code. |
| Type | Local: runs on your machine from a package |
| Packages | mcpb https://github.com/vriesdemichael/mm-mcp/releases/download/v0.4.0/mm-mcp_0.4.0_darwin_amd64.mcpb 0.4.0 (stdio)mcpb https://github.com/vriesdemichael/mm-mcp/releases/download/v0.4.0/mm-mcp_0.4.0_darwin_arm64.mcpb 0.4.0 (stdio)mcpb https://github.com/vriesdemichael/mm-mcp/releases/download/v0.4.0/mm-mcp_0.4.0_linux_amd64.mcpb 0.4.0 (stdio)mcpb https://github.com/vriesdemichael/mm-mcp/releases/download/v0.4.0/mm-mcp_0.4.0_linux_arm64.mcpb 0.4.0 (stdio)mcpb https://github.com/vriesdemichael/mm-mcp/releases/download/v0.4.0/mm-mcp_0.4.0_windows_amd64.mcpb 0.4.0 (stdio)mcpb https://github.com/vriesdemichael/mm-mcp/releases/download/v0.4.0/mm-mcp_0.4.0_windows_arm64.mcpb 0.4.0 (stdio) |
| Version | 0.4.0 |
| Published | |
| Last updated | |
| Source repository | https://github.com/vriesdemichael/mm-mcp |
| Website | None linked |
| Category | Email & messaging (assigned by keyword rule, not by hand) |
Related servers in Email & messaging
- Bot Rooms — Agent Conversations4/4Agent-to-agent chat: find rooms, read messages, post and reply.
- gmail-mcp2/2Multi-account Gmail on a Cloudflare Worker you deploy yourself:…
- Telegram MCP6/7Telegram for AI agents: messages, chats, media, and contacts in bot…
- Telegram Bot MCP Server7/8Self-hosted Telegram Bot MCP server for rich text, media and…
- Bale Bot7/7Private, local Bale bot for agents: read, search and answer…
- HammerTime3/3Generate Discord timestamps and manage your HammerTime bot settings.