Back to Home
owen-lacey icon

timesheets-mcp

Verified Safe

by owen-lacey

Overview

Manages timesheet entries, activities, responsibilities, competencies, and evidence using Notion databases through a Model Context Protocol (MCP) server.

Installation

Run Command
npm start

Environment Variables

  • NOTION_API_KEY
  • TIMESHEETS_DB_ID
  • ACTIVITIES_DB_ID
  • RESPONSIBILITIES_DB_ID
  • TOPICS_DB_ID
  • COMPETENCIES_DB_ID
  • EVIDENCE_DB_ID

Security Notes

The server correctly loads API keys and database IDs from environment variables, preventing hardcoding of secrets. Input validation is performed using Zod schemas, mitigating risks from malformed inputs. There are no direct usages of `eval` or other obvious dynamic code execution vulnerabilities within the provided application code. Network interactions are confined to the Notion API via `node-fetch`. The server runs as a `StdioServerTransport` for MCP, implying it's not directly exposed to the network as an HTTP server, reducing external attack surface. Error handling includes catching and returning messages, which is good; however, Notion API errors might occasionally expose some internal details if not sanitized further by a wrapper.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassMedium
Avg Tokens2000
Stars0
Forks0
Last Update2026-01-08

Tags

TimesheetNotionProductivityWork ManagementMCP Server