trackyourtimeBLOCK
Self-hostable time tracker for freelancers. Track time from the web app, your browser or Raycast, then turn the hours into reports and invoices.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Free, open-source time tracking for freelancers and small teams who bill by the hour.
Start a timer in the web app, the Chrome extension, Raycast on your Mac, or the iPhone and Android apps. Each one keeps counting without a connection and sends your changes when the connection comes back. Stop the timer on your phone, and your laptop shows it stopped.
At the end of the month, the hours become a report, a PDF invoice, or a ZUGFeRD or XRechnung e-invoice. Invite colleagues, and each person sees only their own time until you let them see more. Import a CSV from another tracker, take everything out as JSON or CSV, or connect other tools through the REST API.
There's no paid plan, now or later. Use the hosted version at , or run the same app on your own server from one compose file. The extensions and the phone apps work with either, because each one asks for a server address.
The Chrome extension is in the Chrome Web Store. Self-host images are published through v0.1.2. Desktop downloads remain in draft releases, and the phone apps are in testing channels. Release readiness records the remaining distribution checks.
[](LICENSE) [](https://github.com/trebeljahr/trackyourtime/actions/workflows/build-and-deploy.yml?query=branch%3Amain)
The product was called tracktime until September 2026. The repository, images, bundle ids and every other identifier were renamed to trackyourtime before the first release.
The hosted web app is at , with the API on its own host at . The API reference and OpenAPI document describe its public routes. [`do
132b7c032fb9OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add shared --env CRON_SECRET=${CRON_SECRET} --env E2E_DISABLE_AUTH_RATE_LIMIT=${E2E_DISABLE_AUTH_RATE_LIMIT} --env GH_TOKEN=${GH_TOKEN} --env LISTMONK_API_TOKEN=${LISTMONK_API_TOKEN} -- npx -y @starter/[email protected]{
"mcpServers": {
"shared": {
"command": "npx",
"args": [
"-y",
"@starter/[email protected]"
],
"env": {
"CRON_SECRET": "${CRON_SECRET}",
"E2E_DISABLE_AUTH_RATE_LIMIT": "${E2E_DISABLE_AUTH_RATE_LIMIT}",
"GH_TOKEN": "${GH_TOKEN}",
"LISTMONK_API_TOKEN": "${LISTMONK_API_TOKEN}"
}
}
}
}Exposed tools (29)
21 read · 8 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
blank | read | A blank invoice: no billed range, so no BillingSpecifiedPeriod, and delivery on the issue date; two manual lines at 19 %. |
create_client | write | Create a client. A colour is assigned when none is given. |
create_project | write | Create a project, optionally under a client (clientId from list_clients), with an hourly rate, a billable default, estimated hours or a budget. |
create_tag | write | Create a tag. Entries can carry several tags, and reports can group by them. |
create_task | write | Create a workspace-wide task, a name for a kind of work that any project |
escaping | read | Markup characters, non-Latin-1 text, an emoji, CR/LF, a tab and a control character. |
get_running_timer | read | Return the timer currently running in this token |
get_token_info | read | Confirm the MCP server can reach Track Your Time, and show the token |
legacy-attached | read | An invoice created before e-invoicing, filled from the current business profile and client billing details. |
list_clients | read | List the workspace |
list_entries | read | List time entries that overlap a date range, newest first, with project, client and task names. Filter by project, client, task, tag, billable flag, or a text |
list_projects | read | List projects with their client, hourly rate, total tracked time and budget progress. Narrow to one client with clientId. Archived projects are left out unless includeArchived is true. |
list_tags | read | List tags with how many entries carry each one and their total time. |
list_tasks | read | List tasks. A task is a workspace-wide kind of work (for example \ |
log_time_entry | write | Create a finished time entry with an explicit start and end, for work that was not timed. |
long-500 | read | 500 lines: multi-page PDF and performance. No goldens (too large to review). |
manual-lines | read | Tracked hours (HUR) beside a workshop billed by the day (DAY) and a licence by the piece (C62), all at 19 %. |
mixed-19-7 | read | 19 % and 7 % on one invoice: two breakdown rows, VAT ties rounded away from zero, a 6-dp quantity. |
not-subject-chf | write | The Swiss category O service invoiced in CHF: a plain credit transfer (BT-81 \ |
not-subject-o | read | Service not subject to VAT for a Swiss buyer: category O, no VAT ids emitted (BR-O-02), no line rate (BR-O-05). |
reduced-7 | read | One line at the reduced 7 % rate. |
reverse-charge-ae | read | Reverse charge to an Austrian business: category AE, buyer VAT id (BR-AE-02), VATEX-EU-AE. |
small-business-e | read | § 19 UStG small business: category E, no VAT id, tax number plus seller identifier (BR-CO-26), German texts. |
standard-19 | read | Two hourly lines at 19 %: the business content of the validated research sample. |
start_timer | write | Start a timer now (or at |
stop_timer | write | Stop the timer running in this workspace, now or at |
summary_report | read | Total, billable time and amount for a date range, broken down by project, client, task or tag (or by day, week or month), plus a daily series. Grouped by tag, each entry counts fully toward every tag it carries, so tag rows can add up to more than the total. Refused when the token |
xrechnung-leitweg | read | A public buyer: Leitweg-ID as buyer reference and as electronic address (scheme 0204). |
zero-rated | read | Category Z at 0 %: no exemption reason (BR-Z-10). |
Trust audit
BLOCKgrade F · trust 31/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (11 observation(s))
- Network
- declared (5 observation(s))
- Shell
- declared (3 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
b64decode( ... subprocess.
return { name: basename(file), text, feed: yaml.load(text) };staged.push({ name, text: next, feed: yaml.load(next) });const esmImport = new Function(
--insecure | -k)
echo "Usage: scripts/selfhost-check.sh <domain> [--token tt_...] [--insecure]" >&2
skip "HTTPS certificate is not trusted, accepted because of --insecure"
gradle-wrapper.jar
console.log(JSON.stringify({ email: EMAIL, password: PASSWORD, entries: created, invoice: invoice.number }, null, 2));# http://localhost and http://127.0.0.1 are two different deployments as far
"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUtsVmu2FXo99hXcLk0ot48DeRuxmTV1+K8sVul2GjdQEy0gxAUNtiRcd/+/4/wZSqwyRqQVia65AVavVfKtJNXqCd3yUxNrVrrdEEOxOedXuQb7RZ/ZIWeU2f6nhyNxJaKXYwrKvE9DvdgSxXmLvQccXLp
text.replace(/^[]+/, "");
password: "desktop-e2e-password-1",
body: JSON.stringify({ name: "MCP Test", email, password: "correct-horse-battery" }),secret: "account-deletion-integration-secret-0123456789",
secret: "admin-cli-integration-secret-0123456789abcdef",
secret: "email-link-test-secret-0123456789abcdef",
assert.equal(containsPrivateKey("-----BEGIN PRIVATE KEY-----\nabc"), true);assert.equal(containsPrivateKey("-----BEGIN RSA PRIVATE KEY-----"), true);invitations.test.ts
.env.selfhost.example
.hatchkit.json
.prettierignore
const feed = yaml.load(first.text);
assert.deepEqual(feed.files, yaml.load(FEED).files);
Gates applied: critical_finding, no_behavioural_pass.
132b7c032fb9full audit observations/trust-audit/mcp-server/trebeljahr__trackyourtime.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 132b7c032fb9 | BLOCK | F | 31 | first audit |
Questions
What is the trackyourtime MCP server?
Self-hostable time tracker for freelancers. Track time from the web app, your browser or Raycast, then turn the hours into reports and invoices.
What tools does trackyourtime expose?
29 in total: 21 read-only, 8 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is trackyourtime safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (31/100) and found 7 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does trackyourtime need?
It reads CRON_SECRET, E2E_DISABLE_AUTH_RATE_LIMIT, GH_TOKEN, LISTMONK_API_TOKEN, NEWSLETTER_TOKEN_SECRET and WINGET_PKGS_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does trackyourtime run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @starter/shared at 0.3.0.
How current is this page?
The grade is for one exact copy of the source (132b7c032fb9), read on 2026-10-11. The repository is watched and re-audited when it changes.