Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Decknote

REMOTE · DECKNOTE.APP

Kanban boards your AI agent can use: add, complete, move and recall tasks with your team.

Available components

+3 this week 87 Trust /100

Last scanned (5 hours ago)

Scores higher than 94% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Project Management

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security89
Transport & Reachability100
Schema Quality & AI Usability78
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 28095 tokens (~131/item across 213 items; 211 tools + 2 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
  • Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage89
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 67% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 38 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 213 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities73
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
  • Supports UI / widget rendering.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 +1
    • Tool “share_board” rewrote its description, which is the text the model reads security
  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 70 to 73. That category is still filling its 30-day observation window: 21 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

  • 29 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

  • 28 Oct 26 0
    • Tool “email_invoice” rewrote its description, which is the text the model reads security
  • 27 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.

  • 25 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.

  • 23 Oct 26 +1
    • New tool “add_expense_receipt”, which the server declares destructive security
    • New tool “approve_time_off”, which the server declares destructive security
    • New tool “approve_timesheet”, which the server declares destructive security
    • New tool “convert_estimate_to_project”, which the server declares destructive security
    • New tool “create_webhook”, which the server declares destructive security
    • New tool “delete_expense_receipt”, which the server declares destructive security
    • New tool “delete_webhook”, which the server declares destructive security
    • New tool “reject_time_off”, which the server declares destructive security
    • New tool “reject_timesheet”, which the server declares destructive security
    • New tool “submit_timesheet”, which the server declares destructive security
    • New tool “test_webhook”, which the server declares destructive security
    • New tool “update_webhook”, which the server declares destructive security
    • New tool “withdraw_timesheet”, which the server declares destructive security
    • Tool “add_time_off” rewrote its description, which is the text the model reads security
    • Tool “get_profitability_report” rewrote its description, which is the text the model reads security
    • Tool “list_time_off” rewrote its description, which is the text the model reads security
    • Tool “update_time_off” rewrote its description, which is the text the model reads security
    • Schema quality: 25131 → 28016 ▼ functional
    • New tool “get_assignments_report” functional
    • New tool “get_invoice_pdf” functional
    • New tool “list_timesheets” functional
    • New tool “list_webhooks” functional
    • “list_time_off” added an optional parameter “status” cosmetic
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://decknote.app/api/v1/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=decknote.app CN=YR1,O=Let's Encrypt,C=US 5 Sept 2026 4 Dec 2026 RSA 4096 SHA256-RSA 55b40f7bd6ba9822ba45d7f1e82b2b9f873
SANs: decknote.app, notes.devcloudsoftware.com, www.decknote.app
CN=YR1,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA a20253f15f2691c05dc1ce13b9bcca4e
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of decknote.app. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
app. present 23684 8 Verified
decknote.app. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Challenged, unverified

The endpoint asked for a token, but we could not retrieve and validate the RFC 9728 metadata that tells a client how to obtain one.

Result Challenged, unverified
Enforced On tool calls
HTTP status 200

WWW-Authenticate challenge Bearer realm="Decknote MCP"

Bearer realm="Decknote MCP"
Header Value
strict-transport-security max-age=31536000
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://region1.google-analytics.com https://www.google.com/g/collect https://jentry.devcloudsoftware.com https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com; worker-src 'self'; manifest-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=(), interest-cohort=()

Protected resource metadata

Retrieved No
Problem no_resource_metadata

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://decknote.app/api/v1/mcp Verified 200
http (plaintext) http://decknote.app/api/v1/mcp HTTPS enforced 302 https://decknote.app/api/v1/mcp
MCP tools · 211 exposed · ~27,349 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
import_trello_board ~88

Creates a board from a Trello JSON export (in Trello: Menu → Print, export and share → Export as JSON): lists, cards with Markdown descriptions, dates, labels, checklists, comments and links. Counts toward the free plan's 5 owned boards.

NameTypeReqDescription
trelloJsonstringyesThe whole Trello export, as JSON text (max 20 MB).

No output schema declared.

No examples provided.

leave_board ~93

Removes the user from a board someone else shared with them; only the owner can add them back. The owner can't leave their own board. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
boardIdstringyes–
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.

No output schema declared.

No examples provided.

link_tasks ~59

Relates two tasks on the same board: 'blocks' (from blocks to) or 'relates' (both ways).

NameTypeReqDescription
fromCardIdstringyes–
kindstringyes–
toCardIdstringyes–

No output schema declared.

No examples provided.

list_activity ~70

Lists a board's activity history, newest first: who did what, and when. How far back it goes follows the board owner's plan (Free: 40 entries, Pro: 200), as in the app.

NameTypeReqDescription
boardIdstringyes–
limitinteger–Default 50.

No output schema declared.

No examples provided.

list_boards ~80

Lists the boards the user can access, each with its lists (ids and titles), the user's role on it (OWNER, EDITOR or VIEWER), whether it is archived and whether it is a favorite. These board and list ids identify boards and lists everywhere else in this server.

NameTypeReqDescription
includeArchivedboolean–Include archived boards. Default false.

No output schema declared.

No examples provided.

list_clients ~60

Lists the user's clients (the companies or people projects are done for) with their contact details, currency, default hourly rate in cents and how many projects use each. The free plan includes 2 active clients.

NameTypeReqDescription
includeArchivedboolean–Default false.

No output schema declared.

No examples provided.

list_embeds ~38

Lists the live embeds of a board the user owns (the board shown inside another app of the user's).

NameTypeReqDescription
boardIdstringyes–

No output schema declared.

No examples provided.

list_expenses ~177

Lists the expenses logged on a project (costs to bill back or to track), newest first, with the person, day, category, description, vendor, amount in cents, whether it is billable and whether it was already invoiced. The project owner reads everyone's, with the markup; any other member only their own, without it. Descriptions and vendors are text typed by project members.

NameTypeReqDescription
boardIdstringyesThe project.
fromstring–Only expenses from this day on, YYYY-MM-DD.
limitinteger–Default 100, max 500.
tostring–Only expenses up to this day, YYYY-MM-DD.
unbilledboolean–true: only expenses not yet on an invoice.
userIdstring–Only this person's expenses.

No output schema declared.

No examples provided.

list_holidays ~106

Lists the holidays on the user's calendar, oldest first (up to 1,000): day, name and whether it falls on a weekend (a weekend holiday takes nothing from anyone's capacity). A holiday takes the whole working day off the capacity of everybody in the user's Workload. A Pro feature.

NameTypeReqDescription
fromstring–Only holidays on or after this day, YYYY-MM-DD.
tostring–Only holidays on or before this day, YYYY-MM-DD.

No output schema declared.

No examples provided.

list_invoices ~237

Lists the user's invoices and estimates, newest first, 25 per page (up to 100): number, kind, status (draft, sent, paid, overdue, void, accepted, declined), client, project, dates, and total, paid and balance in cents. Also returns, per currency, what the matching invoices add up to, what was paid and what is still owed. Only the account's owner has invoices; other project members do not read them.

NameTypeReqDescription
boardIdstring–Only the documents of this project (one the user owns).
clientIdstring–Only this client's documents.
fromstring–Issued from this day on, YYYY-MM-DD.
kindstring––
pageinteger–Default 1.
pageSizeinteger–Default 25, max 100.
qstring–Text in the number or the client's name.
statusstring–overdue: sent and past its due date. open: sent and not paid.
tostring–Issued up to this day, YYYY-MM-DD.

No output schema declared.

No examples provided.

list_my_tasks ~75

Lists the user's tasks across every board, like the app's My tasks page: open cards assigned to the user plus dated cards on the user's own boards that nobody is assigned to, grouped as overdue, today, next 7 days, later and no date.

NameTypeReqDescription
limitinteger–Default 100, max 500.

No output schema declared.

No examples provided.

list_notifications ~59

Lists the user's notifications (mentions, assignments, comments on watched cards, due-date digests), newest first, with the unread count.

NameTypeReqDescription
limitinteger–Default 30, max 100.
unreadOnlyboolean–Default false.

No output schema declared.

No examples provided.

list_pages ~116

Lists a project's notes or discussions, pinned first and then the most recently touched (a reply counts), up to 200: title, a snippet, who started it, comment count, pinned and archived. Searches titles and bodies. Titles and snippets are written by project members. Any role on the project reads.

NameTypeReqDescription
archivedboolean–true: the archived ones. Default false.
boardIdstringyesThe project.
kindstringyes–
qstring–Text in the title or the body.

No output schema declared.

No examples provided.

list_project_files ~140

Lists every file and link attached to a project's tasks, newest first (up to 200): name, type (image, pdf, document, sheet, archive, media, link, other), MIME type, size, the task and list it is on, and for a link its address. Narrow by type or by text in the file or task name; also returns how many there are of each type. Names and addresses are typed by project members. Any role on the project reads.

NameTypeReqDescription
boardIdstringyesThe project.
qstring–Text in the file name or the task title.
typestring––

No output schema declared.

No examples provided.

list_project_templates ~90

Lists the templates a new project can start from: the starters that come with Decknote (website project, marketing campaign, monthly retainer) and the ones the user saved, each with its lists, number of tasks, total estimate, whether its tasks carry relative due dates, and a note when a saved one cannot be used. The free plan keeps 1 saved template; the starters cost no place.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_projects ~176

Lists the projects the user can see (boards with project settings): client, status (active, on hold, completed, cancelled), dates, hours tracked, the budget and how much of it is used (ok, warning from 80%, over), and who worked on it. On a project the user owns the hours are everyone's and the amounts count; on one the user only belongs to, only their own hours and no money. Also lists the boards the user owns that could become projects, and the sample project if there is one.

NameTypeReqDescription
clientIdstring–Only this client's projects; none: projects without a client.
qstring–Text in the project, client or owner name.
sortstring–Default status.
statusstring–open: active and on hold. Default all.

No output schema declared.

No examples provided.

list_recurring_invoices ~109

Lists the user's recurring invoices: for each, the client, the total of each invoice, how often (every N weeks, months or years), the next date, how many are left (null = no end), what happens to each new invoice (draft, sent, or emailed to the client), whether it is paused, the last invoice it made and the reason its last run could not finish, if any. Client names and line descriptions are text typed by the user and their clients.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_reminders ~55

Lists the user's pending reminders, soonest first, optionally on one board, with each task's title and due date.

NameTypeReqDescription
boardIdstring––
limitinteger–Default 50, max 200.

No output schema declared.

No examples provided.

list_team_rates ~87

Lists the user's team (themselves, the people on their projects and whoever logged time on them) with each person's default hourly rate, what an hour of theirs costs the user, their weekly capacity and on how many projects they are. Amounts in cents. The cost is only the user's: nobody else reads it. Names and emails are typed by other people. A Pro feature.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_time_entries ~157

Lists the time entries of a project, newest first, with who logged each, the task, the day, the minutes and whether it is billable. The project owner reads everyone's entries, with their hourly rates in cents; any other member reads only their own, without rates. Also returns the total minutes of everything the filters match.

NameTypeReqDescription
boardIdstringyesThe project.
cardIdstring–Only this task.
fromstring–Only entries from this day on, YYYY-MM-DD.
limitinteger–Default 100, max 500.
tostring–Only entries up to this day, YYYY-MM-DD.
userIdstring–Only this person's entries.

No output schema declared.

No examples provided.

list_time_imports ~79

Lists the user's time imports, newest first (the last 30): the source (toggl, harvest, clockify, generic), the file name, whether it is done or was undone, how many entries and how many minutes it brought, how many rows were skipped as duplicates or failed, and when. The sample project is not listed.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_time_off ~253

Lists time off (vacation, sick leave, other), soonest first (up to 500): the user's own and, on Pro, that of the editors of the projects the user owns. Each has the person, the kind, the first and last day, the minutes off each day (null is the whole working day), the number of days and its status: pending (asked for and waiting for an owner of the person's projects), approved (it lowers the capacity) or rejected, with who decided, when and their note, and whether the user can approve or reject it. The person's own note comes only with the user's own time off. Person names and notes are typed by people. Optionally one person's, one status, or what overlaps a range of days.

NameTypeReqDescription
fromstring–Only time off that reaches this day or later, YYYY-MM-DD.
statusstring–Only time off in this status (pending: waiting for approval).
tostring–Only time off that starts on or before this day, YYYY-MM-DD.
userIdstring–Only this person's time off: the user's own or an editor of one of the user's projects (Pro).

No output schema declared.

No examples provided.

list_timesheets ~224

Lists the weeks of hours handed in for approval, newest week first (up to 100 of each): toReview, the weeks the people on the user's projects submitted to the user, and mine, the weeks the user submitted to the owners of the projects they work on. Each week has its status (submitted: waiting; approved; rejected: open again), the hours when it was submitted and now, the owner's note, and the hours by project and task for each day from Monday to Sunday. While a week is submitted or approved its hours are closed to the person who submitted it; the project owner can still change them. Names, titles and notes are typed by other people.

NameTypeReqDescription
fromstring–Only weeks that start on or after the week of this day, YYYY-MM-DD.
statusstring–Only weeks in this status. Default: all.
tostring–Only weeks that start on or before this day, YYYY-MM-DD.
userIdstring–Only this person's weeks, among those handed to the user.

No output schema declared.

No examples provided.

list_unbilled_work ~113

Lists what a project could still bill: its finished billable time entries (person, task, day, minutes and the rate each will be priced at, in cents) and its billable expenses not yet on an invoice. Only the project owner. Expense descriptions and task titles are text typed by project members.

NameTypeReqDescription
boardIdstringyesThe project.
fromstring–From this day on, YYYY-MM-DD.
tostring–Up to this day, YYYY-MM-DD.

No output schema declared.

No examples provided.

list_webhooks ~95

Lists the account's webhooks and Slack channels: kind (slack or json), a shortened address, the board it listens to (null: every board the user owns, plus invoices and estimates), the event types it sends, whether it is on, and how its last delivery went (lastStatus, lastError, lastSentAt; it turns itself off after 20 failures in a row). Signing secrets are not listed.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

log_time ~209

Adds hours by hand to a project, or to one of its tasks. The entry takes the project's hourly rate (or the client's) and is billable according to the task's setting, else the project's, unless billable is given. Needs the editor role on the project.

NameTypeReqDescription
billableboolean–Default: the task's setting, else the project's.
boardIdstring–The project. Optional when cardId is given.
cardIdstring–The task the time was spent on.
daystring–The day worked, YYYY-MM-DD. Default: today in the user's time zone.
durationstringyesA duration the way a person writes it: 90, 90m, 1h, 1h30, 1:30 or 1.5h. A bare number is minutes. Up to 24 hours per entry.
notestring–What was done, up to 500 characters.

No output schema declared.

No examples provided.

mark_client_comments_read ~76

Marks the client's portal comments as read, and clears the bell notices about them: those of one task (cardId) or every one of the project (boardId). Give exactly one of the two. Only the project owner.

NameTypeReqDescription
boardIdstring–The project.
cardIdstring–The task.

No output schema declared.

No examples provided.

mark_notifications_read ~78

Marks notifications as read: one (notificationId, which also marks the others about the same card, as opening it in the app does), every one about a card (cardId), or all of them (all: true).

NameTypeReqDescription
allboolean––
cardIdstring––
notificationIdstring––

No output schema declared.

No examples provided.

move_task ~116

Moves a task to another list: on the same board, optionally to a position (index 0 = top), or on another board the user can edit (it lands at the end). Moving to another board drops the old board's labels and the assignees and watchers who can't see the new board, as in the app.

NameTypeReqDescription
cardIdstringyes–
indexinteger–Position in the target list, 0 = top. Default: the end.
listIdstringyesTarget list id.

No output schema declared.

No examples provided.

open_billing_portal ~49

Creates a link to Stripe's billing portal, where the user manages their Pro subscription: payment card, invoices, monthly or yearly billing, cancellation. Changes happen there, made by the user.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

overview ~71

Snapshot of the user's Decknote account: plan and limits, recent boards, what needs attention (overdue and due-today tasks, unread notifications, upcoming reminders), sharing (pending invitations, shared boards, public links, live embeds) and suggested next steps. Useful at the start of a conversation about the user's work.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

preview_invoice_from_work ~517

Shows the lines and totals an invoice made from a project's unbilled work would have, without creating anything or taking any hours: finished billable time and billable expenses, grouped per task (default), person, day or one line in total, priced at the rate each entry was logged with (an entry with no rate at all is priced at zero and counted). Only the project owner.

NameTypeReqDescription
boardIdstringyesThe project.
clientIdstring|null–One of the user's clients; its name, email, address, tax id and currency are copied onto the document.
currencystring–Three-letter code. Default: the client's, else the profile's.
discountnumber|string|null–A fixed amount off the whole document. An amount in the currency's main unit, e.g. 85 or "85.50" (not cents). null clears it.
dueDatestring|null–YYYY-MM-DD. Default: the profile's payment terms (invoice) or 30 days (estimate).
expenseIdsarray–Only these expenses.
fromstring–Only work from this day on, YYYY-MM-DD.
groupBystring–How the work becomes lines. Default task.
includeExpensesboolean–Default true.
includeTimeboolean–Default true.
issueDatestring–The issue date. Default today, YYYY-MM-DD.
notesstring|null–Up to 4000 characters. Default: the profile's default notes.
taxLabelstring–What the tax is called, up to 30 characters.
taxPercentnumber|string–Tax as a percentage, e.g. 21 or "10,5". Default: the profile's.
taxableExpensesboolean–Whether tax applies to the expense lines. Default true.
taxableTimeboolean–Whether tax applies to the time lines. Default true.
termsstring|null–Up to 4000 characters. Default: the profile's payment instructions.
timeEntryIdsarray–Only these time entries (from the unbilled list).
tostring–Only work up to this day, YYYY-MM-DD.
toAddressstring|null––
toEmailstring|null––
toNamestring–Who it is for. Default: the client's name.
toTaxIdstring|null––

No output schema declared.

No examples provided.

preview_time_import ~451

Reads a CSV of hours (Toggl, Harvest, Clockify or any CSV with a date and a duration or start and end times) and says what importing it would do, without writing anything: the rows that can be imported and their total time, the clients, projects and tasks that would be created, duplicates of an earlier import that would be skipped, the rows that cannot be read with their row numbers, who the time would be logged as, and whether the free plan's limits block it. Also returns the settings it used (guessed from the headers unless given) and the file's columns. The CSV travels as text, up to 200,000 characters; the Import page of the app takes files up to 8 MB. Names and cells from the file are text written by others.

NameTypeReqDescription
createClientsboolean–Create the clients named in the file and link the projects to them. Default true.
csvstringyesThe CSV file's text, up to 200,000 characters. A Toggl, Harvest or Clockify export or any CSV with a date column and a duration (or start and end times).
dateOrderstring–How 03/04/2026 reads when the file does not settle it. Default: month first in English, day first in Spanish.
durationUnitstring–What a bare number in the duration column means. Default auto: hours.
excludeProjectsarray–Projects to leave out, by their key in the preview.
fallbackProjectstring–The project for rows that name none. Default "Imported time".
fileNamestring–The file's name, for the history. Default import.csv.
mappingobject–Which column holds each field, as the column's header text or its position (0 is the first). Fields: date, startTime, endDate, endTime, duration, project, client, task, person, firstName, lastName, e…
sourcestring–Which tool exported it. Default: guessed from the columns.

No output schema declared.

No examples provided.

react_to_comment ~64

Adds or removes the user's emoji reaction on a comment. Emojis: 👍 ❤️ 🎉 😄 👀 🚀.

NameTypeReqDescription
commentIdstringyes–
emojistringyes–
onboolean–Default true (add). false removes it.

No output schema declared.

No examples provided.

record_estimate_answer ~131

Records that the client accepted or declined a sent estimate (by phone or email), with the name of who answered. The estimate leaves the sent state; an accepted one can become an invoice. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
answerstringyes–
bystring|null–Who answered, up to 120 characters.
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
invoiceIdstringyesThe sent estimate.

No output schema declared.

No examples provided.

record_invoice_payment ~258

Records that the client paid, fully or in part, on a sent invoice: the amount, the day (default today, not in the future), the method (bank, card, cash, paypal, other) and a note. It records that the client paid; it does not charge or move money. The invoice becomes paid when the payments cover the total. A payment above the balance needs confirmOverpay. Needs confirm: true; without it the result is a preview with the balance.

NameTypeReqDescription
amountnumber|stringyesWhat the client paid. An amount in the currency's main unit, e.g. 85 or "85.50" (not cents).
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
confirmOverpayboolean–Record it even though it is more than the balance.
daystring–The day it was received. Default today, YYYY-MM-DD.
invoiceIdstringyesThe invoice or estimate.
notestring|null–Up to 500 characters.
paymentMethodstring–How it was received. Default other.

No output schema declared.

No examples provided.

regenerate_client_portal_link ~128

Replaces the secret in a project's client portal link: the old link stops working at once, for anyone who has it, and the new link lets whoever holds it read the portal. The portal's settings, tasks and comments stay. The portal has to exist. Only the project owner. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
boardIdstringyesThe project.
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.

No output schema declared.

No examples provided.

regenerate_invoice_link ~116

Replaces the public link of a document with a new one: the old link stops working at once for anyone who has it, and the new one lets anyone who holds it read the document. Not for a voided document. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
invoiceIdstringyesThe invoice or estimate.

No output schema declared.

No examples provided.

reject_time_off ~161

Rejects a time off an editor of a project the user owns asked for, or one approved before: it no longer lowers that person's capacity. The note is read by the person, who gets a notification. A Pro feature (the team calendar). Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
notestring–Up to 300 characters for the person (why it was rejected). The person and the owners read it.
timeOffIdstringyesA time off of the user or of an editor of one of the user's projects.

No output schema declared.

No examples provided.

reject_timesheet ~158

Sends back a week of hours a person submitted to the user, or reopens one the user approved: its hours open again for that person, who can change them and submit the week again. The note goes to the person with the notification. Available on every plan. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
notestring–Up to 500 characters, sent to the person with the notification.
timesheetIdstringyesA week handed in for approval (the user's own, or one handed to the user).

No output schema declared.

No examples provided.

remove_holiday ~97

Removes a holiday from the user's calendar: that day counts as a working day again in everybody's capacity. Needs confirm: true; without it the result is a preview. A Pro feature.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
holidayIdstringyesA holiday of the user's calendar.

No output schema declared.

No examples provided.

remove_invoice_payment ~117

Deletes a recorded payment from an invoice, as if it had not been written down; a paid invoice that is no longer covered goes back to sent. It undoes a note in the books; no money moves. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
paymentIdstringyesA payment of one of the user's invoices.

No output schema declared.

No examples provided.

remove_member ~102

Removes someone from a board the user owns: they lose access, and their assignments, watches and reactions on it are removed (their comments stay). Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
boardIdstringyes–
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
userIdstringyes–

No output schema declared.

No examples provided.

remove_reminder ~24

Deletes one of the user's reminders.

NameTypeReqDescription
reminderIdstringyes–

No output schema declared.

No examples provided.

remove_time_off ~116

Deletes a time off (the user's own, or on Pro one of an editor of the user's projects): those days count as working days again in the Workload. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
timeOffIdstringyesA time off of the user or of an editor of one of the user's projects.

No output schema declared.

No examples provided.

rename_attachment ~34

Renames an attachment; a file keeps its extension.

NameTypeReqDescription
attachmentIdstringyes–
namestringyes–

No output schema declared.

No examples provided.

rename_project_template ~75

Changes the name and description of a saved template (also one that is damaged and cannot be used). The description is cleared when not given.

NameTypeReqDescription
descriptionstring–Up to 300 characters.
namestringyesUp to 100 characters.
templateIdstringyesA saved template of the user.

No output schema declared.

No examples provided.

reopen_task ~25

Marks a completed task as not done again.

NameTypeReqDescription
cardIdstringyes–

No output schema declared.

No examples provided.

reply_to_client ~155

Posts an answer from the team under a task on the client portal, shown to anyone who has the portal link under the studio name (not the user's own name) and marking the client's comments on that task as read. It is not emailed. Up to 2000 characters. The portal has to exist. Only the project owner. Needs confirm: true; without it the result is a preview with the exact text.

NameTypeReqDescription
cardIdstringyesThe task.
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
textstringyesThe answer, up to 2000 characters.

No output schema declared.

No examples provided.

reprice_time ~232

A rate or a cost is frozen on each hour when it is logged, so one set today does not reach last month's hours. This gives the hours logged on or after `from` (not invoiced, not running, not on a closed day) the rate and cost a new hour would get now: only the empty ones unless overwrite is true, and it does not clear a value. It changes numbers in the user's reports, so it needs confirm: true; without it the result is a preview with the counts. Only the user's own projects and team. A Pro feature.

NameTypeReqDescription
boardIdstring–Only this project (one the user owns).
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
fromstringyesThe first day to re-price as YYYY-MM-DD.
overwriteboolean–Also replace rates and costs that are already there. Default false: only fill the empty ones.
userIdstring–Only this person's hours.

No output schema declared.

No examples provided.

Install

How do I install the Decknote MCP server?

Decknote is a hosted endpoint at https://decknote.app/api/v1/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · decknote.app

# add to Claude Code
claude mcp add --transport http app-decknote-decknote 'https://decknote.app/api/v1/mcp'
Common questions

What is the Decknote MCP server?

Decknote is an MCP server listed in the public MCP registry as app.decknote/decknote. Kanban boards your AI agent can use: add, complete, move and recall tasks with your team. This page covers its hosted endpoint (https://decknote.app/api/v1/mcp).

Is the Decknote MCP server safe to use?

Decknote scores 87 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Decknote MCP server expose?

Decknote exposes 211 tools: overview, list_boards, create_board, create_list, search_tasks, and 206 more. Their descriptions and schemas cost roughly 27,349 tokens of context every time the server is loaded.

Does the Decknote MCP server require authentication?

Yes. Decknote asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the Decknote MCP server still maintained?

Decknote is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.