Is Kimai_mcp safe to use?

Kimai_mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install Kimai_mcp?

Kimai_mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can Kimai_mcp do?

Kimai_mcp provides 11 tools: Entity Tool, Timesheet Tool, Timer Tool, Rate Tool, Team Access Tool and 6 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with Kimai_mcp?

Kimai_mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is Kimai_mcp actively maintained?

Kimai_mcp is actively maintained — last commit was 28 days ago. It has 28 GitHub stars.

Kimai_mcp

Name: Kimai_mcp
Author: glazperle

kimai-mcp · by glazperle

A comprehensive Model Context Protocol (MCP) server for Kimai time-tracking integration. Provides tools for timesheet management, project tracking, team collaboration, and reporting with smart user selection and Claude Desktop integration.

28 11 tools GitHub PyPI

No known CVEs

MIT license

Actively maintained

Last commit 28d ago

Works with most clients

Transport: stdio, sse, http

11 tools · ~509 tok

Grade B · 0.3% of 200K ctx

Edit this pageView history

Productivity Analytics

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "kimai": {
      "url": "http://your-server:8000/sse",
      "headers": {
        "Authorization": "Bearer MCP-SERVER-TOKEN",
        "X-Kimai-Token": "YOUR-PERSONAL-KIMAI-TOKEN"
      }
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/kimai-mcp)](https://mcppedia.org/s/kimai-mcp)

Read me

What Kimai_mcp does

A comprehensive Model Context Protocol (MCP) server for integrating with the Kimai time-tracking API. This server allows AI assistants like Claude to efficiently interact with Kimai instances to manage time tracking, projects, activities, customers, users, teams, absences, and more.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'kimai-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked kimai-mcp against OSV.dev.

Inventory

Tools (11)

Click any tool to inspect its schema.

~509 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Kimai_mcp safe to use?: Kimai_mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Kimai_mcp?: Kimai_mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Kimai_mcp do?: Kimai_mcp provides 11 tools: Entity Tool, Timesheet Tool, Timer Tool, Rate Tool, Team Access Tool and 6 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Kimai_mcp?: Kimai_mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Kimai_mcp actively maintained?: Kimai_mcp is actively maintained — last commit was 28 days ago. It has 28 GitHub stars.

Similar servers

Others in productivity / analytics

View all →

Sequential Thinking MCP Server93

Dynamic problem-solving through sequential thought chains

87.9k 1

Qmd93

mini cli search engine for your docs, knowledge bases, meeting notes, whatever. Tracking current sota approaches while being all local

27.3k 4

Memory MCP Server93

Persistent memory using a knowledge graph

87.9k 5

com.monday/monday.com92

MCP server for monday.com integration.

412 4

MCP Security Weekly

Get CVE alerts and security updates for Kimai_mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Productivity Analytics

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "kimai": {
      "url": "http://your-server:8000/sse",
      "headers": {
        "Authorization": "Bearer MCP-SERVER-TOKEN",
        "X-Kimai-Token": "YOUR-PERSONAL-KIMAI-TOKEN"
      }
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/kimai-mcp)](https://mcppedia.org/s/kimai-mcp)

Read me

What Kimai_mcp does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'kimai-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

Kimai MCP Server

🚀 Quick Start

Local Installation (Single User)

# Install from PyPI
pip install kimai-mcp

# Run with your Kimai credentials
kimai-mcp --kimai-url=https://your-kimai.com --kimai-token=your-token

# Or use the interactive setup wizard
kimai-mcp --setup

🌐 Remote Server Deployment (Recommended for Teams)

For enterprise/team environments: Deploy the server once and let all users connect remotely!

Server Types

Server	Command	Best For
Local	`kimai-mcp`	Claude Desktop, single user, development
Streamable HTTP	`kimai-mcp-streamable`	Claude.ai Connectors (web/mobile), teams
SSE Server	`kimai-mcp-server`	Deprecated — do not use (see below)

Deprecation notice: The SSE server (kimai-mcp-server) is deprecated and not functional (the SSE transport was removed from the MCP specification). It prints a startup warning. Use the Streamable HTTP server (kimai-mcp-streamable) instead.

Quick Start with Docker (Streamable HTTP + OAuth)

Since v2.12.0 the Streamable HTTP server includes an OAuth 2.1 authorization server. Users authenticate with a user slug and a per-user auth_secret instead of a secret URL.

# 1. Generate a random slug and an auth_secret per user
python -c "import secrets; print(secrets.token_urlsafe(16))"   # slug
python -c "import secrets; print(secrets.token_urlsafe(32))"   # auth_secret

# 2. Create config file
mkdir config
cat > config/users.json << 'EOF'
{
  "xK9mP2qW7vL4aB8c": {
    "kimai_url": "https://your-kimai.com",
    "kimai_token": "your-api-token",
    "auth_secret": "long-random-oauth-login-secret"
  }
}
EOF

# 3. Start server
docker-compose up -d

Security Warning: Use random slugs, NOT usernames! The server warns at startup about low-entropy slugs (shorter than 16 characters or plain lowercase words). Slugs may only contain letters, digits, - and _.

Claude.ai Connectors Integration (OAuth)

The Streamable HTTP server works with Claude.ai custom connectors:

Set an auth_secret for each user in users.json (see above)

Run the server behind an HTTPS reverse proxy:

kimai-mcp-streamable \
  --users-config ./config/users.json \
  --public-url https://mcp.example.com \
  --trusted-proxy 127.0.0.1 \
  --oauth-state-file ./config/oauth_clients.json \
  --disable-legacy-slugs

In Claude.ai: Settings → Connectors → Add custom connector
Enter URL: https://mcp.example.com/mcp (no slug in the URL)
Claude.ai registers itself automatically (Dynamic Client Registration). When connecting, a login page appears — enter your user slug and auth_secret.

Access tokens are valid for 1 hour and refreshed automatically (refresh tokens up to 30 days). Tokens are kept in memory, so users must reconnect after a server restart.

Legacy endpoints: The previous per-user URLs /mcp/{slug} still work but are deprecated. Migrate to the OAuth endpoint /mcp and start the server with --disable-legacy-slugs.

OIDC federated login (optional)

Instead of the built-in slug + auth_secret form, the Streamable HTTP server can delegate user authentication to any standard OpenID Connect provider (Microsoft Ent

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked kimai-mcp against OSV.dev.

Inventory

Tools (11)

Click any tool to inspect its schema.

~509 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Kimai_mcp safe to use?: Kimai_mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Kimai_mcp?: Kimai_mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can Kimai_mcp do?: Kimai_mcp provides 11 tools: Entity Tool, Timesheet Tool, Timer Tool, Rate Tool, Team Access Tool and 6 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with Kimai_mcp?: Kimai_mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is Kimai_mcp actively maintained?: Kimai_mcp is actively maintained — last commit was 28 days ago. It has 28 GitHub stars.