74
/ 100
26 days ago
glama

Timely MCP Server

Exposes the Timely.mn v3 time-attendance API as MCP tools for Claude and other clients, allowing queries for company-wide attendance, employee profiles, and attendance reports.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: TIMELY_PASSWORD. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 2 credentials: TIMELY_MCP_AUTH_TOKEN, TIMELY_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configTIMELY_BASE_URLno Defaults to https://api.timely.mn
configTIMELY_COMPANY_REGISTERno Default 7-digit register
🔐 secretTIMELY_MCP_AUTH_TOKENyes (remote) Secret clients send as Bearer. The POST endpoint fails closed without it. Generate: openssl rand -hex 32
🔐 secretTIMELY_PASSWORDyes (for API calls) Timely API password
configTIMELY_USERNAMEyes (for API calls) Timely API login
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/naranmunkh-timely-mcp-1jzzxz)](https://m8ven.ai/mcp/naranmunkh-timely-mcp-1jzzxz)
commit: b995e87c716915bbc154b37c35653370288fc0ef
code hash: 300c6ee7739b65801af52b4b0092c22e5ab918e3d1174f77f433c73ae6999edd
verified: 6/11/2026, 10:59:51 AM
view raw JSON →