Ezatwork Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Ezatwork Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Connect EZ@Work — all-in-one business management for freelancers, lawyers, agencies, and service businesses — to Claude, Gemini, Cursor, and any MCP-compatible AI.
| Tool | Description | Type |
|---|---|---|
list_clients | List your clients/customers | Read |
list_projects | List your projects/cases/work orders | Read |
log_time_entry | Log billable hours to a project | Write |
create_invoice | Create a draft invoice (auto currency/language/VAT) | Write |
Settings → Connectors → Add custom connector
https://mcp.ezatwork.com/mcphttps://mcp.ezatwork.com/mcp with header Authorization: Bearer ezw_pat_...Local testing with MCP Inspector:
npx @modelcontextprotocol/inspectorConnect to http://localhost:8080/mcp with header Authorization: Bearer ezw_pat_...
https://www.ezatwork.com/privacy
EZ@Work adapts to your business type: a lawyer sees "cases," a freelancer sees "projects," a service business sees "work orders." Currency, language (24 supported), and tax rules auto-detect from your profile — no configuration needed in the MCP.
python -m venv .venv
source .venv/bin/activate # Windows: .venv\Scripts\activate
pip install -e .
cp .env.example .env
# Edit .env: EZ_API_BASE=http://localhost:5000 for local backend
python -m ezatwork_mcp.server
# Server starts at http://localhost:8080/mcppip install pytest pytest-asyncio
pytest tests/docker build -t ezatwork-mcp .
docker run -p 8080:8080 -e EZ_API_BASE=https://api.ezatwork.com ezatwork-mcpgcloud run deploy ezatwork-mcp \
--source . \
--region europe-west1 \
--project ezatwork-production \
--allow-unauthenticated \
--port 8080 \
--update-env-vars "EZ_API_BASE=https://api.ezatwork.com,MCP_BASE_URL=https://mcp.ezatwork.com" \
--update-secrets "GOOGLE_CLIENT_ID=ezmcp-google-client-id:latest" \
--update-secrets "GOOGLE_CLIENT_SECRET=ezmcp-google-client-secret:latest" \
--update-secrets "EZ_MCP_MASTER_TOKEN=ezmcp-master-token:latest"--allow-unauthenticated is correct — auth is enforced at the MCP layer (OAuth or API token), not at the Cloud Run IAM level./mcp endpoint)fastmcp 3.3.1GoogleProvider from fastmcp.server.auth.providers.googleget_http_headers() from fastmcp.server.dependenciesGOOGLE_CLIENT_ID + GOOGLE_CLIENT_SECRET + MCP_BASE_URL are setGET /api/users/me for locale; GET /api/internal/users/by-email for OAuth→user mappingPOST /api/timeentry with isBillable fieldPOST /api/invoices with computed dueDate and total per itemEZ@Work — the business OS for independents.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.