Hubstaff Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Hubstaff Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server for Hubstaff API integration, enabling seamless time tracking, project management, and team collaboration through AI assistants.
uv add hubstaff-mcppip install hubstaff-mcpBefore using the server, you need to obtain a Personal Access Token from Hubstaff:
Set the following environment variable:
export HUBSTAFF_REFRESH_TOKEN="your_personal_access_token_here"Or create a .env file in your project root:
HUBSTAFF_REFRESH_TOKEN=your_personal_access_token_hereNote: The personal access token is used as a refresh token to obtain temporary access tokens for API calls. This approach provides better security by automatically handling token renewal.
hubstaff-mcpOr using uv:
uv run hubstaff-mcpAdd the following to your Claude Desktop configuration file (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):
#### Option 1: Using the installed package (Recommended)
{
"mcpServers": {
"hubstaff": {
"command": "hubstaff-mcp",
"env": {
"HUBSTAFF_REFRESH_TOKEN": "your_personal_access_token_here"
}
}
}
}#### Option 2: Using uv with project directory
{
"mcpServers": {
"hubstaff": {
"command": "uv",
"args": [
"--directory",
"/path/to/your/project",
"run",
"hubstaff-mcp"
],
"env": {
"HUBSTAFF_REFRESH_TOKEN": "your_personal_access_token_here"
}
}
}
}#### Option 3: Using uv run directly
{
"mcpServers": {
"hubstaff": {
"command": "uv",
"args": ["run", "hubstaff-mcp"],
"env": {
"HUBSTAFF_REFRESH_TOKEN": "your_personal_access_token_here"
}
}
}
}The server provides the following tools:
get_time_entries - Retrieve time entries with filtering optionscreate_time_entry - Create a new time entryupdate_time_entry - Update an existing time entrydelete_time_entry - Delete a time entryget_projects - List all projectsget_project_details - Get detailed project informationget_tasks - List tasks for a projectcreate_task - Create a new taskupdate_task - Update task detailsget_current_user - Get current user informationget_users - List organization usersget_organizations - List user organizationsget_teams - List organization teamsget_activities - Retrieve user activitiesget_screenshots - Get screenshots for time entriesget_timesheets - Generate timesheetsOnce configured with Claude Desktop, you can ask:
git clone https://github.com/yourusername/hubstaff-mcp
cd hubstaff-mcp
uv sync --devuv run pytestuv run black .
uv run ruff check .This MCP server covers the following Hubstaff API endpoints:
MIT License - see LICENSE file for details.
For issues and questions:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.