Log inSubmit server
Dear User logo

Dear User

Audits Claude Code setups locally for collaboration quality, security issues, configuration conflicts, and system health.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Dear User

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "dear-user": {
      "command": "npx",
      "args": [
        "-y",
        "@poisedhq/dearuser-mcp@latest"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

We couldn’t confirm it starts correctly

We ran the install command but it didn't respond within our test window — this can mean a slow first-time install rather than a real problem.

npx -y @poisedhq/dearuser-mcp@latest

No response to initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 3d ago.

Overview

Dear User MCP server audits Claude Code setups locally through MCP tools for collaboration quality, security risks, configuration conflicts, and system health. It scans files such as CLAUDE.md, AGENTS.md, memory, skills, hooks, and session metadata, then stores results in a local SQLite database. Use it when you want scored recommendations, secret detection, setup diagnostics, or an optional shareable Wrapped card without requiring API keys. Only explicitly triggered feedback or Wrapped sharing sends data externally.

Use cases

  • Audit a Claude Code setup for collaboration friction
  • Scan agent files for leaked secrets and injection risks
  • Find conflicting rules, stale hooks, and orphaned tasks
  • Track setup scores and recommendation progress over time
  • Share an anonymized Wrapped collaboration card

Key features

  • Local collaboration scoring with persona detection
  • Secret and prompt-injection scanning
  • Semantic rule conflict detection
  • System health checks for skills, hooks, and scheduled tasks
  • SQLite history and recommendation tracking
  • Optional anonymized Wrapped sharing

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 2d ago

Recent health check succeeded.

7/7 checks healthy over the last 46d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 18h ago via OSV.dev · @poisedhq/dearuser-mcp@latest (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

npm downloads270Package downloads in the last 30 days.
Last commit2mo agoMost recent push to the default branch.
Install checkInconclusiveDidn't respond in our test window — often a slow first install.
Directory activity1 viewsConfig copies, upvotes, and views on AllMCPs.

How Dear User works

What Dear User MCP server does

The Dear User MCP server evaluates how an AI coding setup is configured and how effectively it supports collaboration. It works with Claude Code and Claude Desktop, and its AGENTS.md support also covers setups used with Cursor, Codex, Aider, Cline, and Zed. There is no graphical interface, account requirement, or mandatory cloud service.

The main reports are collaboration, security, health, and Wrapped. Collaboration analysis assigns a persona, scores seven categories from 0 to 100, identifies friction patterns, and produces prioritized recommendations. Security analysis looks for exposed credentials, prompt-injection surfaces, and contradictory rules. Health analysis checks structural issues such as orphaned scheduled work, overlapping skills, stale or dead hooks, and registration gaps. Wrapped turns selected scores and counts into an optional shareable card.

How it works

Dear User MCP server reads local configuration and project-support files, including CLAUDE.md or AGENTS.md, memory files, skills, hooks, and session metadata. It reads session counts and lengths rather than conversation text. Scanning, parsing, scoring, secret detection, conflict detection, persona detection, and recommendation generation happen locally.

Results are saved in ~/.dearuser/dearuser.db as a SQLite database. Later history queries can show previous reports and score changes without running another scan. A feedback loop records recommendation status so later reports can indicate which suggestions were implemented and how the score changed.

The default operation is local-only. The share_report action is a separate opt-in path for Wrapped results: it anonymizes paths, removes email addresses, and redacts detected secrets before uploading a card to dearuser.ai. The feedback tool sends only the message supplied to it to the project’s Supabase inbox.

Setup and configuration

Install the MCP package with the Claude Code command:

Terminal
claude mcp add --scope user dearuser -- npx -y @poisedhq/dearuser-mcp@latest

For Claude Desktop, add an MCP entry that runs npx with @poisedhq/dearuser-mcp as its argument. The repository also provides installation guidance for Cursor, Windsurf, Cline, and Zed. Restart the client after installation so the tools become available.

Optional slash commands can be installed with dearuser-install-skills. Sharing Wrapped cards requires DEARUSER_SUPABASE_URL and DEARUSER_SUPABASE_SERVICE_KEY; without them, sharing fails while the other functions continue to work. No API key is needed for local reports.

Tools and capabilities

The Dear User MCP server exposes these tools and helpers:

  • collab: generates a collaboration report, persona, score, friction findings, and recommendations.
  • security: scans supported agent files and related resources for secrets, injection surfaces, and rule conflicts.
  • health: checks setup structure, scheduled tasks, skills, hooks, and related consistency issues.
  • wrapped: creates local collaboration statistics for a Wrapped-style card.
  • share_report: optionally uploads an anonymized Wrapped card and can set an expiration time.
  • history: retrieves earlier reports and trends without rescanning.
  • onboard: guides a new user through seven setup steps.
  • implement_recommendation and dismiss_recommendation: manage pending suggestions.
  • feedback and help: send a note or list available functions.

Conflict detection can identify semantic contradictions, not only rules with matching words. The secret scanner covers provider-specific keys, private keys, generic environment secrets, and bearer tokens across the supported local files.

Limitations and notes

The Dear User MCP server does not automatically publish collaboration, security, or health findings. Those reports remain local because their details may expose project or business context. Wrapped sharing is the only report-upload path, and feedback is a separate explicit transmission.

The tool reads files and metadata from the local setup, so its findings depend on what is present and accessible. Sharing requires the two Supabase environment variables, while local scanning does not. The documentation names Claude Code, Claude Desktop, Cursor, Windsurf, Cline, and Zed installation paths; Aider is mentioned as an AGENTS.md-compatible environment rather than an installation target in the provided instructions.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Dear User

Dear User is an MCP server that connects Claude Code and compatible MCP clients to local setup files, memory, skills, hooks, and session metadata. Its main tools are collab for scoring collaboration, security for secret and conflict scans, health for structural checks, wrapped for summaries, and feedback for sending notes.

Install it in Claude Code with `claude mcp add --scope user dearuser -- npx -y @poisedhq/dearuser-mcp@latest`, then restart Claude Code. Claude Desktop uses an MCP configuration entry that runs `npx` with `@poisedhq/dearuser-mcp`; the repository also documents setup for Cursor, Windsurf, Cline, and Zed.

No, Dear User does not require API keys for local reports. The optional `share_report` function requires `DEARUSER_SUPABASE_URL` and `DEARUSER_SUPABASE_SERVICE_KEY`; without those variables, Wrapped sharing errors while local scanning and other tools continue to work.

Dear User scans CLAUDE.md or AGENTS.md, memory files, skills, hooks, and related session metadata. It checks these sources for secrets, prompt-injection surfaces, conflicting rules, and health issues, while reading session counts and lengths rather than conversation content.

No, collaboration, security, and health reports remain local. Only explicitly triggered actions transmit data: `share_report` uploads an anonymized Wrapped card, and `feedback` sends the written feedback message to the project inbox. Local results are stored in `~/.dearuser/dearuser.db`.

Related MCP servers

All in Conversational AI All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewDear User AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/dear-user?style=directory)](https://allmcps.com/mcp/dear-user)
HTML Embed
<a href="https://allmcps.com/mcp/dear-user"><img src="https://allmcps.com/api/badge/dear-user?style=directory" alt="Dear User on AllMCPs" /></a>