autotask-mcp (WYRE-AI/autotask-mcp) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 109 tools. No publisher has claimed this listing.

C
Warning
74/100

autotask-mcp

MCP server for Kaseya Autotask PSA — 39 tools for companies, tickets, projects, time entries, and more

Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

WYRE-AI

Source: github_topic · also listed on Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
🚨
Code appears obfuscated
1 file are unreadable to a human reviewer. Cannot audit what they do.
🔐
You'll be asked for 4 credentials: AUTOTASK_SECRET, CONDUIT_S2S_SECRET, X_API_KEY, X_API_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes109 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

autotask_test_connection

Test Autotask API connection

autotask_search_companies

Search companies by name or status. Max 200/page.

autotask_create_company

Create new company record

autotask_update_company

Update company record. invoiceTemplateID sets payment terms (103=Due on Receipt, 104=NET 30). Billing address fields separate from regular address.

autotask_get_company_site_configuration

Get company site configuration records. Call first to discover available fields.

autotask_update_company_site_configuration

Update company site configuration. Fields are tenant-defined; call get first.

autotask_search_contacts

Search contacts by name, email, or company. Max 200/page.

autotask_create_contact

Create new contact record

autotask_update_contact

Update contact record. Only provided fields are changed.

autotask_search_tickets

Search tickets by company, queue, status, priority. Use autotask_get_ticket_details for full data. Max 500/page.

autotask_get_ticket_details

Get full ticket details including notes, time entries, and custom fields.

autotask_create_ticket

Create new ticket record

autotask_update_ticket

Update ticket record. Only provided fields are changed.

autotask_get_ticket_charge

Get a specific ticket charge by ID

autotask_search_ticket_charges

Search ticket charges (materials, costs, expenses). Provide ticketId for best performance. Max 10 if unfiltered.

autotask_create_ticket_charge

Create charge on ticket for materials, costs, or expenses.

autotask_update_ticket_charge

Update an existing ticket charge. Only fields provided will be changed.

autotask_delete_ticket_charge
autotask_get_ticket_history

Get a single ticket history entry by ID. Each entry records one audited change to a ticket field (who, when, before/after).

autotask_search_ticket_history

Get the audit trail of field changes for a ticket (status transitions, assignment changes, priority edits, etc.). Use this to answer questions like "when did this ticket move from In Progress to Waiting Customer" or "who changed the priority". Returns entries ordered by Autotask; sort/filter client-

autotask_search_resource_roles

List the billing roles a resource (user) holds in Autotask, with names and role IDs. A ticket assigned to a resource and every ticket/task time entry need one of these role IDs; this is where to find them instead of guessing. Give resourceId or resourceName. Active roles only unless includeInactive

autotask_create_time_entry

Create a time entry in Autotask. Can be tied to a ticket or task, OR created as "Regular Time" (no parent) for meetings, admin work, etc. For Regular Time, specify a category like "Internal Meeting", "Office Management", "Training", etc.

autotask_search_projects

Search for projects in Autotask. Returns 25 results per page by default. Use page parameter for more results.

autotask_create_project

Create a new project in Autotask

autotask_update_project

Update an existing project in Autotask. Only the fields you provide will be updated. Common use case: set status=5 to mark a project Complete.

autotask_search_resources

Search for resources (users) in Autotask. Returns 25 results per page by default. Use page parameter for more results.

autotask_get_ticket_note

Get a specific ticket note by ticket ID and note ID

autotask_search_ticket_notes

Search for notes on a specific ticket. Iterating across many tickets trips Autotask's per-integration API threshold — scope the parent list first.

autotask_create_ticket_note

Create a new note for a ticket

autotask_search_ticket_checklist_items

List all checklist items on a ticket, including their completion status. Checklist items are a sub-resource of a ticket and cannot be queried without a ticket ID.

autotask_create_ticket_checklist_item

Add a new checklist item to a ticket.

autotask_update_ticket_checklist_item

Update a checklist item on a ticket — edit text, mark complete/incomplete, or change position.

autotask_delete_ticket_checklist_item
autotask_get_project_note

Get a specific project note by project ID and note ID

autotask_search_project_notes

Search for notes on a specific project. Fan-out across many projects trips Autotask's API threshold (see issue #69) — scope the parent list (status, company, date range) first.

autotask_create_project_note

Create a new note for a project

autotask_get_company_note

Get a specific company note by company ID and note ID

autotask_search_company_notes

Search for notes on a specific company. Iterating across many companies trips Autotask's API threshold — scope the parent list first.

autotask_create_company_note

Create a new note for a company

autotask_get_ticket_attachment

Get a ticket attachment. With includeData=false (default) returns metadata only — fast, suitable for browsing. With includeData=true returns the base64 binary content via the top-level /TicketAttachments/{id} endpoint (the child endpoint never populates data). The attachment is verified to belong to

autotask_search_ticket_attachments

Search for attachments on a specific ticket. Each parent triggers a separate query — scope the parent ticket list before iterating.

autotask_get_ticket_note_attachment

Get an attachment on a ticket NOTE (e.g. a pasted screenshot or file inside an internal note — distinct from attachments on the ticket itself). With includeData=false (default) returns metadata only — fast, suitable for browsing. With includeData=true returns the base64 binary content via the top-le

autotask_search_ticket_note_attachments

Search for attachments on a specific ticket note — use this when autotask_search_ticket_notes returns a note with an empty or unhelpful `description`, since the real content is often a pasted image or file living on the note rather than in its text. Each note triggers a separate query — scope the pa

autotask_create_ticket_attachment

Upload a file attachment to an existing ticket. The file content must be passed as a base64-encoded string in the `data` field (MCP is JSON-RPC, so binary bytes must be base64-encoded). Autotask enforces a 3 MB hard limit on ticket attachments; this tool validates the decoded size before calling the

autotask_get_expense_report

Get a specific expense report by ID

autotask_search_expense_reports

Search for expense reports with optional filters

autotask_create_expense_report

Create a new expense report

autotask_create_expense_item

Create an expense item on an existing expense report

autotask_get_quote

Get a specific quote by ID

autotask_search_quotes

Search for quotes with optional filters

autotask_create_quote

Create a new quote

autotask_get_opportunity

Get a specific opportunity by ID

autotask_search_opportunities

Search for opportunities with optional filters

autotask_create_opportunity

Create a new sales opportunity in Autotask

autotask_get_product

Get a specific product by ID

autotask_search_products

Search for products with optional filters

autotask_get_service

Get a specific service by ID

autotask_search_services

Search for services with optional filters

autotask_get_service_bundle

Get a specific service bundle by ID

autotask_search_service_bundles

Search for service bundles with optional filters

autotask_get_quote_item

Get a specific quote item by ID

autotask_search_quote_items

Search for quote items, typically filtered by quote ID

autotask_create_quote_item

Create a line item on a quote. Set exactly ONE item reference (serviceID, productID, or serviceBundleID). Required: quoteId, quantity. Defaults: unitDiscount=0, lineDiscount=0, percentageDiscount=0, isOptional=false.

autotask_update_quote_item

Update an existing quote item (quantity, price, etc.)

autotask_delete_quote_item
autotask_search_configuration_items

Search for configuration items in Autotask with optional filters

autotask_search_contracts

Search for contracts in Autotask with optional filters

autotask_get_contract

Get a single contract by ID (header fields only, no service lines)

autotask_search_contract_services

List the service line items on a contract (ContractServices): which catalog services are on the contract and at what contract-specific unit price. Read-only. Pair with autotask_search_contract_service_units for billed quantities, or use autotask_get_contract_recurring_lines for both in one call.

autotask_search_contract_service_units

Billed unit rows for a contract (ContractServiceUnits): the quantity and contract price of each service line over a date range. By default returns only rows active today, i.e. what is currently being invoiced. Read-only.

autotask_search_contract_service_bundles

List the service-bundle line items on a contract (ContractServiceBundles). Read-only.

autotask_search_contract_service_bundle_units

Billed unit rows for bundle lines on a contract (ContractServiceBundleUnits), active on a given day (default today). Read-only.

autotask_get_contract_recurring_lines

Recurring-revenue roll-up for one contract: every service and bundle line with units active on a day, joined to the catalog (service name, vendor, billing period) and normalized to a monthly total. Returns { contractID, contractName, companyID, companyName, activeOn, lines[], monthlyTotal, monthlyCo

autotask_list_expiring_contracts

List contracts whose end date falls within the next N days (expiring-contracts report). Optionally include already-expired contracts, and scope to one company or the whole org.

autotask_search_invoices

Search for invoices in Autotask with optional filters

autotask_get_invoice_details

Get a single Autotask invoice with its nested line items (billing items posted to the invoice). Use for finance workflows that need to see exactly what an invoice contains.

autotask_search_tasks

Search for tasks in Autotask. Returns 25 results per page by default. Use page parameter for more results.

autotask_create_task

Create a new task in Autotask

autotask_list_phases

List phases for a project in Autotask

autotask_create_phase

Create a new phase in an Autotask project

autotask_list_queues

List all available ticket queues in Autotask. Use this to find queue IDs for filtering tickets by queue.

autotask_list_ticket_statuses

List all available ticket statuses in Autotask. Use this to find status values for filtering or creating tickets.

autotask_list_ticket_priorities

List all available ticket priorities in Autotask. Use this to find priority values for filtering or creating tickets.

autotask_get_field_info

Get field definitions for an Autotask entity type, including picklist values. Useful for discovering valid values for any picklist field.

autotask_search_billing_items

Search for billing items in Autotask. Billing items represent approved and posted billable items from the "Approve and Post" workflow. Returns 25 results per page by default.

autotask_get_billing_item

Get detailed information for a specific billing item by ID

autotask_search_billing_item_approval_levels

Search for billing item approval levels. These describe multi-level approval records for Autotask time entries, enabling visibility into tiered approval workflows.

autotask_search_time_entries

Search for time entries in Autotask. Returns 25 results per page by default. Time entries can be filtered by resource, ticket, task, date range, or approval status. Use approvalStatus="unapproved" to find entries not yet posted. There is no project filter — Autotask time entries have no project fiel

autotask_list_categories

List available tool categories. Use this to discover what types of Autotask operations are available before loading specific tools.

autotask_list_category_tools

List tools in a specific category with full schemas. Use after autotask_list_categories to see available tools and their parameters.

autotask_execute_tool

Execute any Autotask tool by name. Use after discovering tools via autotask_list_category_tools.

autotask_router

Intelligent tool router - describe what you want to do and get the right tool suggestion with pre-filled parameters. Use this when unsure which tool to call.

autotask_get_service_call

Get a specific service call by ID

autotask_search_service_calls

Search for service calls in Autotask. Filter by company, status, or date range.

autotask_create_service_call

Create a new service call in Autotask. Service calls are used to schedule and plan work on tickets.

autotask_update_service_call

Update an existing service call. Use this to change status, times, or description. To complete/close a service call, set complete: true or update the status.

autotask_delete_service_call
autotask_search_service_call_tickets

Search for ticket associations on service calls. Use this to find which tickets are linked to a service call, or which service calls contain a specific ticket.

autotask_create_service_call_ticket

Link a ticket to a service call. This associates the ticket with the service call for scheduling purposes.

autotask_delete_service_call_ticket

9 further tools are not listed here. The complete surface is in the source.

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configAUTH_MODE
configAUTOTASK_API_URLAutotask API endpoint URL
configAUTOTASK_ENHANCE_CONCURRENCYMax concurrent Autotask API calls used to resolve company/resource names on search results. Kept low to stay under Autotask's concurrent-thread limit.
configAUTOTASK_IMPERSONATION_RESOURCE_ID
configAUTOTASK_INTEGRATION_CODEAutotask integration code
🔐 secretAUTOTASK_SECRETAutotask API secret key
configAUTOTASK_USERNAMEAutotask API username (email)
🔐 secretCONDUIT_S2S_SECRET
configLAZY_LOADING
configLOG_FORMATLog output format
configLOG_LEVELLogging level
configMCP_HTTP_HOSTHTTP transport bind address
configMCP_HTTP_PORTHTTP transport port
configMCP_SERVER_NAMEMCP server name
configMCP_SERVER_VERSION
configMCP_TRANSPORTThe server supports the MCP Streamable HTTP transport for remote deployments (e.g., Docker, cloud hosting). Set =http to enable it.
🔐 secretX_API_KEY
🔐 secretX_API_SECRET
configX_API_URL
configX_IMPERSONATION_RESOURCE_ID
configX_INTEGRATION_CODE
// quality suggestions

Tool annotations

7/109 tools have annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

103/109 tools missing one or more hints — autotask_test_connection (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); autotask_search_companies (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); autotask_create_company (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +100 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

38/109 tools referenced in tests (35%)

Write tests that reference each tool by name so every tool has at least one test.

Readable source code

1 file are minified or bundled, which is usually build output rather than concealment

Ship unminified, readable source.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/wyre-ai/autotask-mcp?variant=verified)](https://m8ven.ai/mcp/wyre-ai/autotask-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 6779ab1fd9656ad63a919367c4a74ca6448ee65d
code hash: 0366e35274e1c025501269ab12dfd97d8f7a4ed4db6a84038932861c34c48152
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client