SproutLabs Run the bench

The Guide for the Agentic Parent

Draft · tools listed per their READMEs, not verified by us

Sprout Lab draft for review. Research snapshot: October 16, 2026.

Top agent, top tool, top builds

Top agent · Pickup Test, school errands

Muse and Claude lead, tied. ChatGPT is close behind.

  • MuseTied lead
  • ClaudeTied lead
  • ChatGPTClose
collecting · results with error bands soon See ParentBench
Top tool · US school apps first

The most agent-friendly US school connectors, by our reading of each README.

*Our reading of each README, not a test. Order: tools tied to the US in our data, or to no country, by README fit.

Outside the US (16)
How to pick a tool
Top builds · credited by name

The people building these connectors, led by chrischall's school suite.

Real names only where our sources state them; otherwise not stated.

Everyone we thank

README fit is our reading of each tool's README, not a ParentBench test result. We did not run the tools.

If you use an AI agent, it can probably write an email or plan a week. What it usually can't do is see the school portal, the team app or the pickup system, where the details of family life actually live. An agent connector is the bridge. It lets your agent read those apps, and sometimes act in them, on your behalf. Done well, "what's due this week for each kid?" gets a real answer. Done carelessly, software you've never read holds your school password and presses buttons for you. This guide is for getting the first without the second.

How we checked. Every tool here comes from our research list of 228 community repos. Dates are GitHub values from October 16, 2026. What we say about each tool's reading, writing and sign-in comes from its own README (the project's front page). We did not run the code, so read every capability as "the README says." Nothing here is an endorsement.

An agent connector, usually an MCP server, is a small program that lets your agent read one app, and sometimes act in it, on your behalf. Almost all of these tools are built by individual parents and developers, not by the app vendors.

More: what an agent connector isLess

An agent is an AI assistant that can take steps, not just chat: look something up, fill something in, then report back. On its own, it only knows what you paste into it.

A connector gives it a way in. Most of the connectors in this guide use MCP (Model Context Protocol), a shared plug format that many AI agents understand. An MCP server is a small program, often running on your own computer, that sits between your agent and one app, such as ParentSquare, TeamSnap or a district portal. The server offers the agent a short menu of "tools" (for example, "list assignments" or "RSVP to event"), and the agent picks from that menu.

Three ideas come up again and again:

  • Read-only means the connector can look but can't change anything. It can tell you what's on the calendar, but it can't add, cancel or send.
  • Write means it can change something in the real world: submit an RSVP, change a dismissal plan, send a message to a teacher.
  • A token is a long random string that works like a temporary key. Whoever holds it can act as you, within whatever limits the token carries, until it expires or you revoke it.

Some tools in our research aren't MCP servers but API clients (code libraries) or Home Assistant add-ons (for the open-source smart-home hub). They can feed an agent, with more setup.

Know this first: almost all of these tools are built by individual parents and developers, not by the app vendors. In our research the only vendor-published entries were Bellnote's plugin (its README is a near-stub), an official TeamSnap SDK, an Aeries district module, and Google's official Classroom MCP, which covers courses, coursework and guardian info. Everything else is community-built, often on unofficial or private APIs.

Is it safe?

Nobody can promise that, including us. Start with read-only tools, look for preview-then-confirm before any write, and keep your password out of plain config files.

Open the checklistClose the checklist

Nobody can promise that, including us. What you can do is check for habits careful builders already use. Each pattern below comes from a real README.

Before you connect anything, look for:

  • Read-only by default. Start with tools that can only look. wilmai by aikarjal (Wilma, Finland) describes 18 read-only tools. vigilo-mcp by kristoffervp (Vigilo, Norway) is read-only and has npm test.
  • A read-only switch, if writes are on. cozi_mcp by mjucius is read-write by default, but its README offers COZI_READ_ONLY=true. Turn it on until you need writes.
  • Preview, then confirm. TeamSnapMCP by mrelph makes writes default to preview: true, and destructive ones need confirm: true. schoolpass-mcp by chrischall shows a preview and needs a one-time confirm token before it writes.
  • An explicit confirm flag. iserv-mcp by chenning42 (IServ, Germany) only sends a sick note when the call carries confirmed=true.
  • One token per child. librus-readonly-mcp by nalancuchu (Librus, Poland) is read-only and uses a separate token for each child, so one kid's access doesn't open the other's.
  • Your password isn't stored. spond-mcp by kristoffervp takes your Spond password at login, doesn't save it, then works with tokens. spond-familie-mcp by Bendix-ai says the same.
  • If a password is kept, it's in the OS keychain, the locked password store built into your computer, not a plain config file. aula-mcp by Casperjuel keeps tokens in Keychain/AES; cozi_mcp keeps the password in the OS keychain.
  • No secrets in logs. librus-mcp by TechAdrianPro says it never logs secrets and uses a read-only allowlist. EcoleDirecteMCP by jeromeboivin redacts secrets in logs.
  • School messages treated as untrusted. A message from school is text someone else wrote, and an agent can be tricked by text that looks like instructions. edupage-mcp by avolaine-private says it treats message text as untrusted and keeps to 4 narrow tools.
  • Signs of upkeep: a recent update, tests, and a README that explains sign-in clearly. A thin README is a reason to wait.

Red flags:

  • A key or password pasted into the README. One repo in our research did this, and we left it out of this guide.
  • A tool that does schoolwork for the student. We left out one that advertised auto-solving and submitting homework.
  • Side effects outside the school app. schoology-homeroom-assistant also emails AI summaries and needs a Gmail app password; parenting-mcp sends WhatsApp summaries. Know it's happening.
  • Silence about writes. If the README doesn't mention preview, confirm or read-only, assume none exist.

Honest caveats that apply to almost everything here:

  • Community-built. Aula-mcp's author calls it a "hobby experiment." Projects get abandoned; 100 of the 186 repos with a star count have zero stars.
  • Some code is AI-written. The chrischall suite is marked AI-written in our data, and our notes say many of its repos are hours or days old. Treat it as fast-moving.
  • Scraping can break, and may break the rules. Many tools reuse your password or browser cookies against a private API. That is fragile and may break the app's terms of service.
  • It's your kids' data. Grades, messages and locations flow through these tools. Connect only what you'd be comfortable explaining to the school.

Five example errands

The first three match the three tops above. Each errand names a real tool, what the agent may do and what it must ask first. Tool behavior comes from READMEs; advice is marked Recommendation.

Top agent · the Pickup Test

1. "Change today's pickup: Grandma is getting our youngest"

This is the errand our Pickup Test is built around: a real family errand that needs a login, the right permissions and a write that matters.

  • The ask: change today's dismissal plan for one child, today only.
  • Which tool: pickuppatrol-mcp by chrischall reads and changes a parent's PickUp Patrol dismissal plans, both weekly defaults and day-by-day plans. schoolpass-mcp reads SchoolPass arrival and dismissal calendars, drivers and pickup changes, and makes confirm-gated dismissal changes. Both use a preview plus a confirm token, both sign in with your password, and both are marked AI-written. In Norway, vigilo-mcp reads after-school check-in status and can't change anything.
  • The agent may: read today's plan, draft the change, and show you a preview that names the child, the date and the new pickup.
  • The agent must ask first: before using the confirm token. You approve exactly what you were shown.
  • The agent must not: touch the weekly default when you asked about today, or change more than one child. Whether these tools can add an authorized driver is not stated. Recommendation: don't ask an agent to add a new person to the pickup list. Do that yourself, in the app. Also ask it for the school's same-day cutoff, if the app shows one, and tell your child and the teacher the old-fashioned way.
Top tool · gradebook-mcp

2. "What's due this week for each kid?"

  • The ask: list assignments and missing work per child, due this week.
  • Which tool: gradebook-mcp by songsterq for ParentVUE: read-only ("never writes to ParentVUE"), with a multi-child snapshot. It signs in with your password and protects the server with an MCP bearer token. For Infinite Campus, infinitecampus-mcp reads assignments, grades and attendance across several districts. In Poland, librus-readonly-mcp gives each child a separate token.
  • The agent may: read and summarize, child by child.
  • The agent must not: contact teachers or submit anything. These tools are read-only, so it can't. Recommendation: check surprises in the portal itself.
Top builds · TeamSnapMCP by mrelph

3. "RSVP yes to Saturday's game"

  • The ask: answer one event invitation for one child.
  • Which tool: TeamSnapMCP by mrelph: 21 read and 8 write tools, including RSVPs, snack and carpool assignments, and team messages, signed in with TeamSnap OAuth. For Spond, spond-familie-mcp covers all kids and teams and RSVPs with confirmation.
  • The agent may: find the event, check which child it's for, and prepare the RSVP as a preview.
  • The agent must ask first: before sending the RSVP. TeamSnapMCP previews by default and needs confirm: true for destructive changes.
  • The agent must not: sign you up for snacks or carpool, or message the team, unless you asked. Recommendation: if you only want to see the schedule, kristoffervp's spond-mcp is read-only and says it "cannot answer invitations."

4. "Where's the bus?"

  • The ask: is the bus late, and where is it now?
  • Which tool: alphaportal-mcp by chrischall, for the AlphaRoute school-bus app. Our notes say it covers students, stops, live bus location and notifications, needs a login, and is the only bus MCP we found. For Here Comes the Bus, Patrick Cartwright's Home Assistant integration offers bus sensors and a device tracker (not an MCP).
  • The agent may: read the location and tell you.
  • The agent must not: share your child's stop or the bus location with anyone else. Recommendation: location is the most sensitive thing on this list, so prefer read-only tools and don't connect location to an agent that also sends messages.

5. "Send a sick note: our son is home today"

  • The ask: tell school a child is out sick.
  • Which tool: iserv-mcp by chenning42, for IServ in Germany. It reads parent letters and timetables, and a sick note is a write that needs confirmed=true. Its sign-in method is not stated in our data. We found no US sick-note connector in our research.
  • The agent may: draft the note and show it to you.
  • The agent must ask first: before sending. A sick note goes to a real person at school.
  • The agent must not: add medical details you didn't give it, or send a note for a child you didn't name.

Picking a tool

  1. Start from the app your school actually uses. Coverage is uneven. Europe has the deepest bench: Wilma, EduPage, WebUntis, Spond, Librus, InfoMentor, Pronote, Smartschool and Aula each have several independent implementations. In the US, Google Classroom, Canvas, Schoology and Skylight have the most.
  2. Make sure it's built for parents. Many connectors are for students, teachers or admins, and they aren't parent picks. The most-starred repo we found, canvas-mcp by Vishal Sachdev, is strong engineering (tests and CI) but serves the student and teacher side. For a parent's view of Canvas, our data has canvas-parent-mcp, whose repo has no description, and Jacob Schwartz's (schwartzpub) Canvas Home Assistant integration.
  3. Prefer read-only for your first month. You learn what the agent gets right before it can change anything.
  4. Read how sign-in works. In rough order of care: the app's official login window, a token you can revoke, a password used once and not saved, a password in the OS keychain, a password in a config file, and last, copied browser cookies.
  5. Check that it's alive. Look at the last update and whether there are tests. psquare-mcp by Alexander Mohr (ParentSquare) has tests and CI; infinitecampus-mcp has tests with vitest. Several older libraries haven't been updated since 2024 or earlier.
  6. More than one kid? Look for explicit multi-child support, as in gradebook-mcp (ParentVUE), librus-mcp by krzysztofbury or mcp-pronotes. Otherwise, "not stated" usually means one child at a time.
  7. Connect one tool and live with it for a week. Compare its answers with the app itself.

Recommendation: pick the tool with the narrowest powers that answers your question, not the one with the most tools. The Canvas connectors in our data range up to 209 tools; you probably need three.

What changes on a phone

Sprout Lab is starting to look at these errands on mobile. What we know, and what we suspect:

  • Fact: many of these servers are built to run on a computer. EcoleDirecteMCP is a local server, kristoffervp's spond-mcp says it was tested on macOS, and avolaine-private's edupage-mcp keeps its session in the macOS keychain.
  • Fact: a few are built to run remotely, which a phone agent can reach: Google's official Classroom MCP, Smartschool-MCP (optional bearer token or OAuth 2.1 for remote use), and Ida-Untis (Docker plus a Cloudflare tunnel).
  • Fact: some connectors already come from phone apps. hcb_soap_client uses an API captured from the Here Comes the Bus Android app, and KinCube scrapes ParentSquare's mobile API. screenblock-mcp and Gatekeeper act on iPhone Screen Time itself.
  • Hypothesis: on a phone you'll have fewer choices, and the ones you have will hold your credentials on a server somewhere rather than on your laptop. A different risk, not a smaller one.
  • Hypothesis: on a small screen a preview is easy to tap through. Read the whole thing before confirming a pickup change.
  • Hypothesis: 2FA codes, SMS logins and national IDs (MitID, BankID) interrupt a phone agent more often, so expect it to stop and hand back to you.

What's missing today

  • No official parent-side MCP from the big school-communication vendors. We found community tools, plus Google's official Classroom MCP and Bellnote's hosted MCP. A parent posted on X that ClassDojo is preparing an MCP, and one research pass found a ClassDojo MCP page that lists no tools. Treat ClassDojo's MCP as unconfirmed. The only ClassDojo connector in our data, classdojo-mcp, is for teachers.
  • Childcare: Brightwheel has no public developer API (per this reference). For Procare, procare-mcp is read-only and uses the center-side API, not the parent's.
  • Messaging: no Remind connector beyond chrischall's remind-mcp, and nothing for Bloomz.
  • Sports: GameChanger has no public API and only a 2024 hobby client, gc-api. Nothing for SportsEngine.
  • Pickup and buses: nothing for PikMyKid or Stopfinder. Bus vendors are district-side only; parents get in only through reverse-engineered clients.
  • Lunch money: MySchoolBucks has only an old wrapper (PySchoolBucks, last updated 2021). Nothing for LINQ Connect, PaySchools or SchoolCafe.
  • PowerSchool's parent portal: the one community MCP, mcp-powerschool, needs an admin-installed plugin, so a parent can't set it up alone.
  • Write safety is rare. In our data, preview-and-confirm writes appear in only a handful of tools.
  • Nobody has tested these tools on real errands yet. That's what ParentBench is for. Results so far: collecting.

Glossary

Agent

an AI assistant that can take steps (look up, fill in, send) and report back.

MCP (Model Context Protocol)

a shared plug format many agents understand. An MCP server is the program that offers the agent a menu of tools for one app.

Read-only

can look, can't change anything.

Preview / confirm token / confirm flag

the tool shows what it's about to do, and only proceeds with a one-time code or a flag such as confirmed=true.

Token

a long random string that acts as a temporary key. A bearer token works for whoever holds it, so guard it like a password.

OAuth

a sign-in where you log in on the app's own page and the connector gets a token, not your password.

OS keychain

your computer's built-in locked password store.

Cookies / session scraping

reusing your logged-in browser session to read a site. Fragile, and may break terms of service.

Unofficial / private API

the app's internal interface, not one it publishes for others. It can change without warning.

2FA, MitID, BankID

extra sign-in steps (a code, or a national ID in Denmark or Sweden) that an agent usually can't complete alone.

Untrusted text / prompt injection

a message that contains instructions aimed at your agent. Careful tools treat all incoming text as data, not orders.

ParentBench

Sprout Lab's benchmark of AI agents on parent errands.

Pickup Test

the ParentBench test of logins, permissions and writes on a real family errand.

School Facts Test

the ParentBench test of public school facts, with no login.