
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@timesheet/mcp
Advanced tools
A Model Context Protocol (MCP) server that provides natural language access to the Timesheet API through standardized tools.
The easiest way to use the Timesheet MCP server is with npx (no installation required):
npx @timesheet/mcp
For frequent use, you can install globally:
npm install -g @timesheet/mcp
timesheet-mcp
For project-specific installation:
npm install @timesheet/mcp
Create a .env file with your API token:
TIMESHEET_API_TOKEN=your-api-token-here
Add to your Claude Desktop configuration file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"timesheet": {
"command": "npx",
"args": ["@timesheet/mcp-server"],
"env": {
"TIMESHEET_API_TOKEN": "your-api-token"
}
}
}
}
For a globally installed version:
{
"mcpServers": {
"timesheet": {
"command": "timesheet-mcp",
"env": {
"TIMESHEET_API_TOKEN": "your-api-token"
}
}
}
}
timer_start - Start timer for a projecttimer_stop - Stop the running timertimer_pause - Pause the timer (start break)timer_resume - Resume timer after breaktimer_status - Check current timer statustimer_update - Update running timer detailstask_add_note - Add note to current tasktask_add_expense - Add expense to current tasktask_add_pause - Add manual pause to current taskproject_list - List all projectsproject_create - Create new projectproject_update - Update existing projectproject_delete - Delete projecttask_list - List tasks with filterstask_create - Create new tasktask_update - Update existing tasktask_delete - Delete taskauth_configure - Set API authentication# Clone the repository
git clone https://github.com/timesheet/timesheet-mcp.git
cd timesheet-mcp
# Install dependencies
npm install
# Run in development mode
npm run dev
# Build for production
npm run build
# Run tests
npm test
MIT
For issues and feature requests, visit: https://github.com/timesheet/timesheet-mcp/issues
FAQs
Model Context Protocol server for Timesheet API
We found that @timesheet/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.