One static Rust binary. Twenty typed tools, plus an opt-in escape hatch to every Moodle web service. Document conversion and an auth CLI in the box — speaking the Model Context Protocol over stdio.
Works with Claude Code, Codex, OpenCode, and pi · Moodle 3.7 → 5.x
22 human-shaped tools that mirror how you already click through Moodle — not a dump of 350 raw web-service functions.
Tools trade local file paths, not base64 blobs. Every result embeds the IDs for the next call. Errors suggest the fix.
Write tools ask before they act. Submissions stay drafts until you say finalize. Quiz-taking is intentionally missing.
youFinish my Information Security HW1: read the brief and the attached PDF, work through the problems, and submit a draft.
get_assignment brief + 2 attachments
fetch_file hw1.pdf → markdown (4,812 chars)
agent solving 3 problems → draft.md
upload_file draft.md → draft area
submit_assignment finalize=false
draft saved — nothing sent to your teacher yet
get_schedule · next 14 days
MON 20HW2 released
THU 23Quiz 3 closes 23:59
TUE 28Lab report due
FRI 31HW1 · final deadline
One call merges every due date, quiz close, and course event into a single timeline your agent can plan a study week around.
journey · brief → draft
✓ get_assignment brief + attachments
✓ fetch_file hw1.pdf → markdown
● agent drafting answers
○ upload_file draft.md
○ submit_assignment finalize=false
From brief to draft: read the assignment, convert the attached PDF, work the problems, upload, and submit a draft — then read it back to verify.
get_course_overview merges five endpoints into one markdown map, every ID and file URL embedded.
Assignment briefs become readable requirements — math, tables, and slides included.
Cross-course summaries or every grade item of one course, weights and comments included.
Catch up on announcement threads, then draft a message to your teacher — with confirmation.
Opt in with MOODLE_ENABLE_WS_FUNCTION=true and call_ws_function reaches every other enabled web-service function your token can call.
Built against Moodle 3.7 and designed through 5.x — response differences are absorbed for you.
moodle-mcp is MIT-licensed and built in the open. Its tests run fully offline; its release binaries are reproducible from CI.
moodle-mcp doesn't lock your agent into one vendor flow — it gives every MCP client typed tools that chain on their own.
One question, one call. The agent merges deadlines across every enrolled course into a plan that fits your week.
The full loop: read the brief, convert the attached PDF, work the problems, upload the solution, submit a draft, verify.
Missed a week? The agent reads notifications and forum threads, then hands you a digest with links back to the source.
Opt in with MOODLE_ENABLE_WS_FUNCTION=true and the escape hatch opens the full web-service surface your token allows — anything the curated tools don't cover.
get_schedule{ days: 14 }→6 deadlines · 2 quiz closes
get_course_overview{ course_id: 42 }→section map + materials
A study plan, balanced against real due dates.
get_assignment{ assignment_id: 917 }→brief + hw1.pdf
fetch_file{ url: …pluginfile… }→4,812 chars of markdown
upload_file{ path: 'draft.md' }→item_id 55210
submit_assignment{ finalize: false }→draft saved ✓
A draft in your draft area — final submit stays yours.
get_notifications{ limit: 20 }→3 announcements
get_forum_discussions{ forum_id: 301 }→12 threads
get_discussion_posts{ discussion_id: 5 }→thread as markdown
Every announcement, summarized and sourced.
list_ws_functions{ query: 'calendar' }→core_calendar_create_events …
call_ws_function{ wsfunction: …, params }→typed JSON, nulls stripped
~350 functions, PHP bracket notation handled.
Typed tools that mirror the student journey — courses, assignments, files, forums, grades, messaging — with an opt-in escape hatch for the rest.
Token owner identity + site release.
the agent, on your behalf
Enrolled courses, optional name filter.
the agent, on your behalf
Whole-course markdown map in one call.
the agent, on your behalf
Full assignment document: brief, files, state.
the agent, on your behalf
PDF/DOCX/PPTX/XLSX → markdown.
the agent, on your behalf
Raw bytes → a local path.
the agent, on your behalf
Local file → your private draft area.
the agent, on your behalf
Submit text and/or draft files; draft-first.
the agent, on your behalf
Thread list with opening-post previews.
the agent, on your behalf
Whole thread as markdown.
the agent, on your behalf
Start a thread.
the agent, on your behalf
Reply to a post or thread.
the agent, on your behalf
Cross-course summary or per-course items.
the agent, on your behalf
Merged deadline timeline, next 30 days.
the agent, on your behalf
Recent notifications, read filter.
the agent, on your behalf
Conversations with member ids.
the agent, on your behalf
Direct message — confirms with you first.
the agent, on your behalf
Attempt records, read-only.
the agent, on your behalf
Profile lookup.
the agent, on your behalf
User search.
the agent, on your behalf
Opt-in escape hatch: any enabled WS function.
the agent, on your behalf
Opt-in discovery: callable web-service functions by keyword.
the agent, on your behalf
The token is a live credential — it carries your full student permissions. The server treats it that way before your agent says a word.
The token is injected only into same-site pluginfile URLs, and redirects that leave your Moodle host are stopped. It never appears in tool output or errors.
Plain HTTP is rejected unless the host is loopback — or you set MOODLE_ALLOW_HTTP yourself, for isolated networks where you accept the risk.
100 MB inline fetches, 500 MB streamed downloads, 100 MB uploads. Downloads stream to disk, bounded by a read timeout so stalled connections still die.
MOODLE_READ_ONLY=1 removes every write tool before the agent ever sees them. Nothing you say in a prompt can bring them back.
tool output — redaction built in
error: request failed url=https://moodle.example.com/webservice/rest/server.php
&token=[REDACTED]→ hint: check MOODLE_URL has no trailing slash
stdout stays clean — logs go to stderr, data to stdout
Cleartext URLs are rejected; loopback test sites stay exempt.
A redirect off your Moodle host never carries the token, and site redirects never drop to plain http.
Any token in a rendered message becomes token=[REDACTED].
Uploads land in your draft area; finalizing is explicit.
Attempt records are readable; answering for you is not provided.
fetch_file and download_file stay on your site unless you opt out.
One env var hides all six write tools from the tool list.
Timestamps render in the zone Moodle itself uses for you.
A LETTER
Studying with an agent shouldn't mean five browser tabs, hand-download PDFs, and copy-pasted forum threads. moodle-mcp started as a way to hand my own coursework agent the same access the official mobile app has — no scraping, no browser automation, just the web services Moodle already exposes.
Everything ships in one static Rust binary: 22 typed tools, document conversion, and an auth CLI. Writes ask first, drafts come before finals, and quiz-taking stays out on purpose. If that trade sounds right to you, install it and ask your agent what's due.
G36maid
maintainer
Keep a Changelog format, semantic versioning, and multi-platform binaries built from every v-tag.
Per-school SSO drivers: auth replays a federated school's own login chain over plain HTTP — no browser, no token paste. Plus https-only transport, typo-failing env switches, and a security-review hardening pass.
get_course_overview now includes section summaries and surfaces availability restrictions and hidden states — restricted items no longer look freely available.
download_file no longer creates missing parent directories — it fails naming the folder and suggests the fix, following the explicit-action convention.
Moodle-native timezone detection, transfer size caps, tool hiding with MOODLE_DISABLE_TOOLS, and in-memory document conversion for fetch_file.
Single binary. Twenty tools. Zero browser tabs.
or cargo install moodle-mcp — needs Rust 1.88+