clio-mcp

MCP server for Clio Manage that enables interaction with legal practice data including matters, contacts, activities, communications, tasks, documents, calendar entries, and bills via natural language.

→ wyre-technology/clio-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: CLIO_ACCESS_TOKEN, CLIO_CLIENT_SECRET, CLIO_REFRESH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

lowtsup@8.0.0GHSA-3mv9-4h5g-vhg3

tsup DOM Clobbering vulnerability

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAUTH_MODE— Gateway mode (=gateway, MCP_TRANSPORT=http -- the Docker image's default): credentials

🔐 secretCLIO_ACCESS_TOKEN— export =...

configCLIO_CLIENT_ID— export =... # optional, required alongside a refresh token

🔐 secretCLIO_CLIENT_SECRET— export =... # optional, required alongside a refresh token

🔐 secretCLIO_REFRESH_TOKEN— export =... # optional

configCLIO_REGION— export =us # optional, defaults to us

configLOG_LEVEL

configMCP_HTTP_HOST

configMCP_HTTP_PORT

configMCP_TRANSPORT— Gateway mode (AUTH_MODE=gateway, =http -- the Docker image's default): credentials

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/wyre-technology-clio-mcp-kan0fs)](https://m8ven.ai/mcp/wyre-technology-clio-mcp-kan0fs)

commit: c2ac8390f79060370c035bdc7812b7270753e9e5

code hash: fed1f9b055e4d93e0b0d7dfbbfcbf3de104b2d8ebab23ac9ae91d86d6d4ac9a0

verified: 7/16/2026, 8:40:07 AM

view raw JSON →