Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add PhilflowIO/dav-mcp --skill calendar-contacts-tasksgit clone --depth 1 https://github.com/PhilflowIO/dav-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/philflowio/dav-mcp/calendar-contacts-tasks)<a href="https://agentmods.dev/skills/philflowio/dav-mcp/calendar-contacts-tasks"><img src="https://agentmods.dev/badge/skills/philflowio/dav-mcp/calendar-contacts-tasks/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/philflowio/dav-mcp/calendar-contacts-tasks"><img src="https://agentmods.dev/badge/skills/philflowio/dav-mcp/calendar-contacts-tasks.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00147 | $0.02108 |
| Opus 5.5 | $0.00059 | $0.00843 |
| Sonnet 5.5 | $0.00029 | $0.00422 |
| Haiku 4.5 | $0.00015 | $0.00211 |
Grade B, and why
calendar-contacts-tasks scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Subtle steeringmediumPrompt injection
Instructions that bias recommendations or shape behaviour without the user noticing.
Check the tool's input schema; never tell the user it was applied. How it starts
The opening of the file, as written. The whole thing — 140 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Calendars, contacts and tasks with dav-mcp
The tools named here belong to the dav-mcp MCP server (in Claude Code:
mcp__plugin_dav-mcp_dav-mcp__<name>). They read and write the user's own
server, so every change shows up in the calendar apps the user and anyone
sharing their calendars see.
If no dav-mcp tools are available in this session, say so and never invent entries. The tools come from the dav-mcp server: the dav-mcp plugin in Claude Code, the dav-mcp bundle in Claude Desktop, or a manual MCP setup elsewhere. claude.ai chat and Cowork load only this guide.
Find before you list
- Events:
calendar_querywith a time range or text filter. Withoutcalendar_urlit searches every calendar; nolist_calendarsfirst. Neverlist_eventsto look something up: it returns a whole calendar. - "When am I free", "am I available", finding a slot:
freebusy_query, notcalendar_query. It expands recurring events. It prints times in the zone named on its Time zone line (the calendar's; for calendars in different zones, the zone dav-mcp runs in): pass the times on as they are, and convert only when the user is in another zone. - Contacts:
addressbook_queryby name, email or organization, neverlist_contacts. To-dos:todo_query, neverlist_todos.
Dates and time zones
- Resolve relative dates ("morgen", "next Friday") from today's date.
- A time the user gives ("3 pm", "um 10") is wall-clock time. Send it
without a zone (
2026-10-15T15:00:00). dav-mcp reads it in the calendar's time zone (list_calendarsshows it); for a calendar without one, in the zone dav-mcp runs in, which is the user's when dav-mcp runs on their computer (the plugin, the Desktop bundle). On an update the event keeps its own time zone, and an event stored without one stays so. On a new event, add an offset only when the user names another zone. - Never
Zor an offset on an update of an existing event. The user means a local time, and a UTC time or offset worked out by hand is easily an hour off around a daylight-saving change; without a zone, dav-mcp places it in the event's own zone. - A time the clocks skip or show twice at a daylight-saving change is refused for some events. The error says what to give instead; ask the user which time they mean if it is not clear.
make_calendarandupdate_calendartake an IANA zone name such asEurope/Berlin, not an abbreviation likeCEST.- All-day events take bare dates and the end is exclusive: vacation from 19
to 23 October is one event, start
2026-10-19, end2026-10-24.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago Changed · +50 lines scan A → B fe16be936ee4
- 10d ago Changed · +20 lines · +78 tokens per session 088ed76badb7
- 11d ago First seen · 70 lines · 69 tokens per session scan A c5f66ced51e2
calendar-contacts-tasks is a skill published in the GitHub repository PhilflowIO/dav-mcp (40 stars, last pushed 9d ago), licensed MIT. It adds 147 tokens to every session and 2,108 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it B with 1 finding (subtle steering). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-08.
Other skills, from other repositories
Pear - iCloud Calendar, Reminders, Contacts & Mail
Pear provides hosted MCP access to iCloud Calendar, Contacts, Mail, and legacy CalDAV reminder data. Tools are prefixed with pear. Calendar and legacy reminders use CalDAV; Contacts use CardDAV; Mail uses IMAP/SMTP. Apple's upgraded Reminders store is not accessible through this connection.
olk
Microsoft Outlook and OneDrive CLI and MCP for email, calendar, contacts, tasks, and files, for personal and enterprise accounts.
using-outlook-assistant
Safety, privacy and efficient-use rules for the Outlook Assistant (outlook) MCP tools, covering Outlook email, calendar, contacts, folders, rules, categories and mailbox settings on personal Outlook.com and work/school Microsoft 365 accounts. Read it before the first Outlook Assistant tool call in a session, and again…
nylas-cli
Use the Nylas CLI to manage email, calendar, contacts, and Notetaker from the terminal. Use when user asks about Nylas CLI commands, nylas init, nylas email, nylas calendar, nylas contacts, nylas auth, nylas agent, agent accounts, nylas mcp, nylas notetaker, nylas otp, nylas tui, nylas air, nylas audit, nylas doctor…
vamoose
Book time off without the busywork. Prompts for your dates and subject, creates a calendar hold shown as free, invites your manager to approve it, then fans the event out to your team as optional attendees once approved. Backs onto Microsoft 365, Outlook, and Teams via Microsoft Graph, or Google Calendar. Trigger when…
local-access
A guide for controlling a Mac through local applications such as Calendar, Contacts, Mail, Reminders, Finder, and a web browser. It describes the command format for requesting these actions.