Tiktak Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Tiktak Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server for the TikTak time tracking and invoicing API. Connect your AI assistant to manage customers, track time, and create invoices.
32 tools across 7 categories:
| Category | Tools | Examples |
|---|---|---|
| Customers | 6 | List, create, bulk import, update, archive |
| Services | 5 | List, create, update, archive |
| Time Tracking | 9 | Start/stop/continue timers, log entries, running timers |
| Invoices | 8 | Create draft, edit line items, change status, view uninvoiced entries |
| Dashboard | 1 | Hours, revenue, top customers, daily breakdown |
| Exports | 2 | PDF/Excel for log entries and invoices |
| Settings | 1 | Company details, defaults (read-only) |
4 resources for ambient context: customers, services, running timers, settings.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"tiktak": {
"command": "npx",
"args": ["-y", "github:ideaCompany/tiktak-mcp-server"],
"env": {
"TIKTAK_API_KEY": "tk_your_api_key_here"
}
}
}
}claude mcp add tiktak -- npx -y github:ideaCompany/tiktak-mcp-serverThen set TIKTAK_API_KEY in your environment.
Use the same stdio pattern:
{
"command": "npx",
"args": ["-y", "tiktak-mcp-server"],
"env": {
"TIKTAK_API_KEY": "tk_your_api_key_here"
}
}npx github:ideaCompany/tiktak-mcp-server| Variable | Required | Default | Description |
|---|---|---|---|
TIKTAK_API_KEY | Yes | — | Your TikTak API key (tk_ prefixed) |
TIKTAK_API_URL | No | https://api.tiktakme.com | API base URL (for self-hosted or dev) |
"Here's my customer list: Acme Corp (VAT: BE0123456789, Brussels), Widget Inc (Amsterdam)..."
The AI will use create_customers_bulk to import them all at once.
"Start a timer for Acme Corp on the Consulting service"
Uses list_customers → list_services → start_timer.
"Stop my running timer"
Uses get_running_timers → stop_timer.
"Create an invoice for Acme Corp for all uninvoiced work"
Uses get_uninvoiced_entries → create_invoice (as Draft).
"How many hours did I track this month? What's my outstanding revenue?"
Uses get_dashboard_stats.
git clone https://github.com/user/tiktak-mcp-server.git
cd tiktak-mcp-server
npm install
npm run dev # requires TIKTAK_API_KEY env varnpx @modelcontextprotocol/inspector npx tiktak-mcp-servernpm run build # outputs dist/index.jstk_ prefix and are hashed (SHA256) server-sideMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.