Back to Home
iflorit icon

mcp-woffu-server

Verified Safe

by iflorit

Overview

A Model Context Protocol (MCP) server for Woffu time tracking integration, enabling AI assistants to manage clock-in/out and time tracking operations.

Installation

Run Command
npx github:iflorit/mcp-woffu-server

Environment Variables

  • WOFFU_TOKEN
  • WOFFU_USER_ID
  • WOFFU_BASE_URL

Security Notes

The server primarily relies on environment variables (`WOFFU_TOKEN`, `WOFFU_USER_ID`, `WOFFU_BASE_URL`) for configuration, which is a good practice for sensitive data. It uses the `fetch` API to interact with the Woffu service. The primary security risk involves providing a malicious `WOFFU_BASE_URL` or an exposed `WOFFU_TOKEN` by the user, but the server itself does not introduce new vulnerabilities like code execution or direct file system access beyond its intended scope. Input validation for `completeDay` parameters (date and time formats) is present. As an MCP server, it's designed for local integration with an AI agent, limiting its external attack surface.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens500
Stars0
Forks0
Last Update2025-11-24

Tags

time-trackingWoffuMCPAI integrationworkforce management