71
/ 100
11 days ago
glama

eranfinish/ezatwork-mcp

MCP server for EZ@Work — manage clients, projects, time entries, and invoices from Claude through natural conversation. OAuth 2.1 with Google sign-in, multi-currency support.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
5 tools verified — handlers match their declared behaviour
2 read-only tools verified — handlers contain no write/delete/exec
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 2 credentials: EZ_MCP_MASTER_TOKEN, GOOGLE_CLIENT_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configEZ_API_BASEEdit .env: =http://localhost:5000 for local backend
🔐 secretEZ_MCP_MASTER_TOKENupdate-secrets "=ezmcp-master-token:latest"
configGOOGLE_CLIENT_IDupdate-secrets "=ezmcp-google-client-id:latest" \
🔐 secretGOOGLE_CLIENT_SECRETupdate-secrets "=ezmcp-google-client-secret:latest" \
configMCP_BASE_URLupdate-env-vars "EZ_API_BASE=https://api.ezatwork.com,=https://mcp.ezatwork.com" \
configPORT
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/eranfinish-ezatwork-mcp-19qbkj)](https://m8ven.ai/mcp/eranfinish-ezatwork-mcp-19qbkj)
commit: 2a587af3cab577b09e9cb34e2c8578b38b3fd161
code hash: f3f4b1820e80bc280c627b9042496ab6d7b6427eb6821dc49cd41ebe8cd6a05c
verified: 6/19/2026, 10:49:02 AM
view raw JSON →