MCP and AI clients

Time Trakkr runs a Model Context Protocol (MCP) server, so you can point an AI client such as Claude, Claude Code, or Cursor directly at your workspace. From there you can ask about tracked time and budgets, log time, run timers, and draft invoices in plain language — all governed by your role, the same as everywhere else in the app. The connection is set up from the Integrations page, in the Connect your AI (MCP) card.

The server URL

The card shows your Server URL, which is:

https://timetrakkr.com/api/mcp

Copy that URL; every client below needs it.

Connecting a client

1. claude.ai or Claude Desktop. Open Settings → Connectors → Add custom connector, paste the server URL, and sign in when prompted. This uses OAuth, so the connection acts as you, with your role.
2. Claude Code. Run claude mcp add --transport http timetrakkr https://timetrakkr.com/api/mcp, then run /mcp to authenticate.
3. Cursor. Add the same server URL as a custom MCP server in Cursor's settings and authenticate when prompted.

When you sign in over OAuth, the consent screen lets you choose read-only or read/write access, so you decide up front whether the client may change anything.

OAuth versus an API key

There are two ways to authenticate, and they behave differently:

• OAuth (recommended). The connection acts as you and carries your role. It can be read-only or read/write depending on what you approve on the consent screen. This is what the buttons above use.
• An API key. Keys created on the Developer page also work as a Bearer header, but over MCP they are read-only and belong to the organization rather than a person. Use one when you want a machine to read data without acting as any individual.

Why it is safe

Every call is scoped to your workspace and follows the same rules as the rest of Time Trakkr:

• Members never see rates or other money, in the AI client just as in the app. See roles and permissions for exactly who sees what.
• Draft invoices are never sent automatically — the assistant can only create a draft for you to review and send yourself.
• Access is revocable at any time by deleting the API key or disconnecting the OAuth connection.

For working with the built-in assistant inside Time Trakkr rather than an outside client, see the AI assistant. For the plain REST API and webhooks, see the API and webhooks.