Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Decknote

REMOTE · DECKNOTE.APP

Kanban boards your AI agent can use: add, complete, move and recall tasks with your team.

Available components

+3 this week 87 Trust /100

Last scanned (6 hours ago)

Scores higher than 94% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Project Management

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security89
Transport & Reachability100
Schema Quality & AI Usability78
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 28095 tokens (~131/item across 213 items; 211 tools + 2 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
  • Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage89
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 67% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 38 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 213 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities73
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
  • Supports UI / widget rendering.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 +1
    • Tool “share_board” rewrote its description, which is the text the model reads security
  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 70 to 73. That category is still filling its 30-day observation window: 21 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.

  • 29 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

  • 28 Oct 26 0
    • Tool “email_invoice” rewrote its description, which is the text the model reads security
  • 27 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.

  • 25 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.

  • 23 Oct 26 +1
    • New tool “add_expense_receipt”, which the server declares destructive security
    • New tool “approve_time_off”, which the server declares destructive security
    • New tool “approve_timesheet”, which the server declares destructive security
    • New tool “convert_estimate_to_project”, which the server declares destructive security
    • New tool “create_webhook”, which the server declares destructive security
    • New tool “delete_expense_receipt”, which the server declares destructive security
    • New tool “delete_webhook”, which the server declares destructive security
    • New tool “reject_time_off”, which the server declares destructive security
    • New tool “reject_timesheet”, which the server declares destructive security
    • New tool “submit_timesheet”, which the server declares destructive security
    • New tool “test_webhook”, which the server declares destructive security
    • New tool “update_webhook”, which the server declares destructive security
    • New tool “withdraw_timesheet”, which the server declares destructive security
    • Tool “add_time_off” rewrote its description, which is the text the model reads security
    • Tool “get_profitability_report” rewrote its description, which is the text the model reads security
    • Tool “list_time_off” rewrote its description, which is the text the model reads security
    • Tool “update_time_off” rewrote its description, which is the text the model reads security
    • Schema quality: 25131 → 28016 ▼ functional
    • New tool “get_assignments_report” functional
    • New tool “get_invoice_pdf” functional
    • New tool “list_timesheets” functional
    • New tool “list_webhooks” functional
    • “list_time_off” added an optional parameter “status” cosmetic
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://decknote.app/api/v1/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=decknote.app CN=YR1,O=Let's Encrypt,C=US 5 Sept 2026 4 Dec 2026 RSA 4096 SHA256-RSA 55b40f7bd6ba9822ba45d7f1e82b2b9f873
SANs: decknote.app, notes.devcloudsoftware.com, www.decknote.app
CN=YR1,O=Let's Encrypt,C=US (CA) CN=Root YR,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 RSA 2048 SHA256-RSA a20253f15f2691c05dc1ce13b9bcca4e
CN=Root YR,O=ISRG,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 RSA 4096 SHA256-RSA f24b6d17f9d9ad7cb1c9fea78782699f

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of decknote.app. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
app. present 23684 8 Verified
decknote.app. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Challenged, unverified

The endpoint asked for a token, but we could not retrieve and validate the RFC 9728 metadata that tells a client how to obtain one.

Result Challenged, unverified
Enforced On tool calls
HTTP status 200

WWW-Authenticate challenge Bearer realm="Decknote MCP"

Bearer realm="Decknote MCP"
Header Value
strict-transport-security max-age=31536000
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://region1.google-analytics.com https://www.google.com/g/collect https://jentry.devcloudsoftware.com https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com; worker-src 'self'; manifest-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=(), interest-cohort=()

Protected resource metadata

Retrieved No
Problem no_resource_metadata

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://decknote.app/api/v1/mcp Verified 200
http (plaintext) http://decknote.app/api/v1/mcp HTTPS enforced 302 https://decknote.app/api/v1/mcp
MCP tools · 211 exposed · ~27,349 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
restore_board ~28

Restores an archived board the user owns to everyone's dashboard.

NameTypeReqDescription
boardIdstringyes–

No output schema declared.

No examples provided.

restore_client ~39

Brings an archived client back to the active list. The free plan's limit of 2 active clients applies.

NameTypeReqDescription
clientIdstringyes–

No output schema declared.

No examples provided.

restore_task ~26

Puts an archived task back on its list.

NameTypeReqDescription
cardIdstringyes–

No output schema declared.

No examples provided.

revoke_access ~136

Revokes one of the user's API tokens (apiTokenId) or disconnects a connected app (appClientId), as listed in the account. Whatever used it stops working at once, including this connection if it is the one in use. Needs confirm: true; without it the result is a preview. New tokens are only created by the user, in Settings.

NameTypeReqDescription
apiTokenIdstring––
appClientIdstring––
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.

No output schema declared.

No examples provided.

revoke_embed ~85

Turns off one of a board's embeds: the app showing it loses access at its next request. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
embedIdstringyes–

No output schema declared.

No examples provided.

revoke_invoice_link ~99

Turns a document's public link off: the client can no longer open the document until a new link is made. The document itself is unchanged. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
invoiceIdstringyesThe invoice or estimate.

No output schema declared.

No examples provided.

save_project_as_template ~156

Saves a project's shape as a template: its lists, open tasks (title, estimate, billable, labels, checklists with the items unticked, due dates as days from the start), labels and billable default. Its people, comments, logged time, descriptions, attachments and client are left out. The budget and the hourly rate are saved only with includeMoney. Only the project owner. The free plan keeps 1 saved template; Pro has no limit.

NameTypeReqDescription
boardIdstringyesThe project.
descriptionstring–Up to 300 characters.
includeMoneyboolean–Keep the budget and the hourly rate. Default false.
namestringyesUp to 100 characters.

No output schema declared.

No examples provided.

save_task_as_template ~41

Saves a task's description and labels as a reusable card template on its board.

NameTypeReqDescription
cardIdstringyes–
namestringyes–

No output schema declared.

No examples provided.

search ~51

Searches the open and completed cards of every board the user can access by text in title and description. Returns card ids, titles (with the board) and links.

NameTypeReqDescription
querystringyesWhat to look for.

No output schema declared.

No examples provided.

search_tasks ~180

Searches the user's tasks (cards) across boards by free text in title and description, and by board, list, status (open, completed, all or archived) and due date. Answers questions like what is still open, what was noted about something, or what is due soon.

NameTypeReqDescription
boardIdstring––
dueBeforestring–ISO 8601; only tasks due before this instant.
includearray–Extra fields on each task. 'location' adds the names of its board (board) and list (list).
limitnumber–Max results, 1–100. Default 20.
listIdstring––
querystring–Free text; matches card title and description.
statusstring–Default 'open'. 'archived' finds archived tasks.

No output schema declared.

No examples provided.

send_invoice ~192

Marks a draft as sent, gives it the next number and publishes its link: anyone who has the link can read the document (lines, amounts, the user's business details), and for an estimate answer it. Nothing is emailed. After that only the notes and the due date change. The draft needs a client name, at least one line and a total above zero. Needs confirm: true and amount equal to the total; without them the result is a preview.

NameTypeReqDescription
amountnumber|string–The document's total in the currency's main unit, repeated from the preview (e.g. 220 or "220.00"). Must equal the total or nothing is done.
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
invoiceIdstringyesThe invoice or estimate.

No output schema declared.

No examples provided.

set_automation_enabled ~36

Turns a board rule on or off without deleting it.

NameTypeReqDescription
automationIdstringyes–
enabledbooleanyes–

No output schema declared.

No examples provided.

set_board_preferences ~59

Sets the user's own preferences for a board: favorite (starred) and muted (no notifications from it). Affects only the user.

NameTypeReqDescription
boardIdstringyes–
favoriteboolean––
mutedboolean––

No output schema declared.

No examples provided.

set_member_rate ~121

Sets what one person is billed at on one project the user owns, over the project's, the client's and their default. null goes back to those. It applies to hours logged from then on. The person must be able to log time there. A Pro feature.

NameTypeReqDescription
boardIdstringyesThe project.
hourlyRatenumber|string|nullyesIn the currency's main unit: 85, "85.50", "1.250,50". null clears it.
userIdstringyesA person on the user's team.

No output schema declared.

No examples provided.

set_my_weekly_capacity ~94

Sets how many hours a week the user can work, which the workload view compares their planned work with: 40, 37.5 or 37:30; 0 for someone who is away, at most 168. Only the user's own: there is no way to set another person's.

NameTypeReqDescription
hoursnumber|stringyesHours a week, e.g. 40 or "37:30".

No output schema declared.

No examples provided.

set_page_archived ~59

Archives a page (it leaves the list, becomes read-only and loses its pin) or restores it. Only the project owner.

NameTypeReqDescription
archivedbooleanyes–
pageIdstringyesThe page (a note or a discussion).

No output schema declared.

No examples provided.

set_page_pinned ~60

Pins a page to the top of its list, or unpins it. Only the project owner; an archived page cannot be pinned.

NameTypeReqDescription
pageIdstringyesThe page (a note or a discussion).
pinnedbooleanyes–

No output schema declared.

No examples provided.

set_public_link ~130

Turns a board's public read-only link on or off, or issues a new one so the old one stops working. Anyone with the link can view the board without an account. Owner only. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
boardIdstringyes–
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
enabledbooleanyes–
regenerateboolean–Issue a new link, so the old one stops working.

No output schema declared.

No examples provided.

set_task_assignees ~124

Assigns or unassigns board members on a task. Assigning someone other than the user sends them a push and an email, as in the app, so it needs confirm: true and returns a preview without it; self-assigning and unassigning don't.

NameTypeReqDescription
addarray––
cardIdstringyes–
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
removearray––

No output schema declared.

No examples provided.

set_task_billable ~83

Sets whether time logged on a task is billable to the client (true or false), or makes it follow the project's default (null). Applies to time logged from then on; entries already logged keep their setting. Needs the editor role on the project.

NameTypeReqDescription
billableboolean|nullyesnull follows the project's default.
cardIdstringyes–

No output schema declared.

No examples provided.

set_task_estimate ~106

Sets how long a task is expected to take, or clears it with null. Written with a unit: 4h, 1h30, 90m, 1.5h (a bare number is minutes); up to 10,000 hours. Needs the editor role on the project.

NameTypeReqDescription
cardIdstringyes–
estimatestring|nullyesThe estimate, e.g. 4h or 1h30; null clears it.

No output schema declared.

No examples provided.

set_task_field ~82

Sets a custom field's value on a task, or clears it with null. text: any text; number: a number; select: one of its options; checkbox: true or false; date: YYYY-MM-DD.

NameTypeReqDescription
cardIdstringyes–
fieldIdstringyes–
valuestring|number|boolean|nullyes–

No output schema declared.

No examples provided.

set_task_labels ~63

Adds and/or removes labels of the task's board on a task. Adding a label runs the board's 'label added' rules, as in the app.

NameTypeReqDescription
addarray––
cardIdstringyes–
removearray––

No output schema declared.

No examples provided.

set_task_visible_to_client ~148

Shows a task on the project's client portal, or stops showing it. Visitors read the task's title, whether it is done, in progress or late, and its due date, and can comment on it; descriptions, files, people, time and money are not shown. Making it visible needs confirm: true (without it the result is a preview); hiding it does not. Needs the editor role on the project.

NameTypeReqDescription
cardIdstringyesThe task.
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
visiblebooleanyes–

No output schema declared.

No examples provided.

set_team_rate ~212

Sets what a person is billed at by default on the user's projects (hourlyRate) and what an hour of theirs costs the user (hourlyCost), per hour. They apply to hours logged from then on: each hour keeps the rate and cost it had when it was logged, unless the user applies the new ones to the hours already logged. null clears a value. The rate is the last resort: the person's rate on a project, then the project's, then the client's come first. A Pro feature.

NameTypeReqDescription
hourlyCostnumber|string|null–What an hour costs the user (salary and overhead). In the currency's main unit: 85, "85.50", "1.250,50". null clears it.
hourlyRatenumber|string|null–Default hourly rate. In the currency's main unit: 85, "85.50", "1.250,50". null clears it.
userIdstringyesA person on the user's team.

No output schema declared.

No examples provided.

set_time_rules ~268

Sets the rules that close logged hours on all the projects the user owns, which change what every person on them can do: lockedUntil, a day (YYYY-MM-DD, up to today) closes every day on or before it for everybody, the user included, until the date is changed; editWindowDays, a whole number of days (0 to 366), limits how far back people other than the user can fix their own hours (0 = only today). null clears a rule; a field left out stays. Setting rules is a Pro feature; turning them off is allowed on every plan, and rules already set keep protecting the hours if the plan lapses. Needs confirm: true; without it the result is a preview that says how many hours get frozen.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
editWindowDaysinteger|null–Days back that people other than the owner can still change their hours (0 to 366; 0 = only today); null = no limit.
lockedUntilstring|null–The last day that is closed, YYYY-MM-DD, not later than today; null reopens everything.

No output schema declared.

No examples provided.

set_timer_alert ~99

Sets after how many hours a running timer sends the user a notification (and a push to their devices), once per timer: 0 turns it off; otherwise between 0.5 and 24 hours (the Time page offers 4, 8, 10 and 12). It only tells the user: the timer keeps running. Available on every plan.

NameTypeReqDescription
hoursnumberyesHours before the alert; 0 = off.

No output schema declared.

No examples provided.

share_board ~149

Shares a board the user owns with someone by email, as EDITOR or VIEWER. People with an account get access right away; others get an invitation link by email and join when they open it. Decknote emails them either way, so it needs confirm: true; without it the result is a preview. Sharing is a Pro feature on the web (one flat price, not per person).

NameTypeReqDescription
boardIdstringyes–
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
emailstringyes–
rolestring–Default EDITOR.

No output schema declared.

No examples provided.

show_board ~102

Shows a board as an interactive kanban that updates live while the conversation is open: lists and cards with labels, due dates, checklist progress and assignees, where the user can drag cards between lists, complete them and add new ones. Without boardId it shows the board the user changed most recently. Clients that can't display it get the same board as JSON.

NameTypeReqDescription
boardIdstring–The board to show. Default: the most recently changed one.

No output schema declared.

No examples provided.

sort_list ~56

Reorders a list's cards by due date (soonest first, undated last), by title (A to Z) or by creation (newest first).

NameTypeReqDescription
bystringyes–
listIdstringyes–

No output schema declared.

No examples provided.

start_pro_checkout ~183

Starts an upgrade to Decknote Pro (14-day free trial, then US$9/month or US$90/year) by creating a Stripe Checkout link where the user pays; this tool charges nothing. Without confirm: true it returns the exact price and changes nothing; with confirm: true, amount has to equal that price. Accounts billed through Shopify are upgraded from the Shopify admin, not here.

NameTypeReqDescription
amountnumber|string–The price the user agreed to, in US$ (e.g. 9 or 90).
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
intervalstring–Default month.
offerstring–A founder-offer code from Decknote's email, if the user has one.

No output schema declared.

No examples provided.

start_timer ~134

Starts the user's time tracker on a project, optionally on one of its tasks. There is one timer per person: a timer already running is stopped and its time kept first (a timer stopped within 30 seconds is dropped as an accidental click). The hours are the time elapsed when it stops, rounded to the minute and capped at 16 hours. Needs the editor role on the project.

NameTypeReqDescription
boardIdstring–The project. Optional when cardId is given.
cardIdstring–The task to track time on.
notestring–What is being done, up to 500 characters.

No output schema declared.

No examples provided.

stop_timer ~45

Stops the user's running timer and keeps the elapsed time as a time entry. A timer stopped within 30 seconds is dropped as an accidental click. Says so when no timer was running.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

submit_timesheet ~239

Hands in the user's week of hours (give any day of it; weeks run Monday to Sunday) for approval to each owner of the projects the user logged hours on that week, or only to ownerId. From then on the user cannot add, change or delete their hours of that week on those projects until the owner rejects it or the user withdraws it, and an approved week stays closed. A week can be submitted from its Monday on, a timer running in that week has to be stopped first, and a week already submitted or approved stays as it is. Each owner gets a notification. The owner's plan has to include it (Pro). Needs confirm: true; without it the result is a preview with the hours for each owner.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
ownerIdstring–Only to this owner (one of the owners of the projects the user logged hours on that week).
weekstringyesAny day of the week to submit, YYYY-MM-DD.

No output schema declared.

No examples provided.

test_webhook ~128

Sends a test to one of the account's webhooks now and returns how it went (ok, HTTP status, error): a sample of the first event type it sends, marked "test": true (a Slack channel gets a line saying it is connected). Needs confirm: true, since it sends to an address outside Decknote; without it the result is a preview.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
webhookIdstringyes–

No output schema declared.

No examples provided.

transfer_board ~110

Hands a board the user owns to one of its members: they become the owner (their plan then decides the board's Pro features) and the user stays on as an editor. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
boardIdstringyes–
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
newOwnerIdstringyes–

No output schema declared.

No examples provided.

undo_time_import ~132

Takes an import back: deletes its time entries and the clients, projects and tasks it created that nobody has used since (those that were used are kept, and the result counts them). Refused when some of the time was already invoiced, when it was already undone, and for the sample project. Needs confirm: true; without it the result is a preview.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
importIdstringyesAn import of the user.

No output schema declared.

No examples provided.

unlink_tasks ~23

Removes a relation between two tasks.

NameTypeReqDescription
linkIdstringyes–

No output schema declared.

No examples provided.

update_account ~102

Changes the user's settings: display name, language (en, es, fr), time zone (IANA, e.g. America/Argentina/Buenos_Aires; the daily digest goes out in the user's morning) and which notifications they get (mention, assigned, comment, due; email turns emails on or off).

NameTypeReqDescription
languagestring––
namestring––
notificationsobject––
timeZonestring––

No output schema declared.

No examples provided.

update_billing_profile ~374

Sets or changes the user's billing details: business name (required the first time), address, tax id, email, phone, currency, prefixes and next numbers of invoices and estimates, default tax (percentage and name), payment terms in days, payment instructions and default notes; null clears an optional text. New documents copy these; documents already issued keep what they had.

NameTypeReqDescription
addressstring|null––
autoRemindersboolean–Pro. When on, the client of every sent invoice that is past due and unpaid gets a reminder email 3, 7 and 14 days after the due date, in the user's daytime.
businessNamestring–Up to 120 characters.
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
currencystring–Three-letter code, e.g. USD.
defaultNotesstring|null–Printed on each new document as its notes.
defaultTaxLabelstring–e.g. VAT. Up to 30 characters.
defaultTaxPercentnumber|string–e.g. 21 or "10,5".
emailstring|null–Where clients reply to.
estimatePrefixstring–e.g. EST-
invoicePrefixstring–e.g. INV-
nextEstimateNumberinteger|string––
nextInvoiceNumberinteger|string––
paymentInstructionsstring|null–Printed on each new document as its terms.
paymentTermsDaysinteger|string–Days from the issue date to the due date, 0 to 365.
phonestring|null––
taxIdstring|null––

No output schema declared.

No examples provided.

update_board ~127

Changes a board's title, icon (one emoji), cover color or background image (Pro; PNG, JPEG, WEBP or GIF up to 5 MB, base64-encoded), or removes the background. Needs edit access to the board.

NameTypeReqDescription
backgroundImageBase64string–A new background image, base64-encoded (Pro).
boardIdstringyes–
coverColorstring|null––
iconstring|null–One emoji, or null to remove it.
removeBackgroundboolean––
titlestring––

No output schema declared.

No examples provided.

update_checklist ~51

Renames a checklist or moves it among the task's checklists (index 0 = top).

NameTypeReqDescription
checklistIdstringyes–
indexinteger––
titlestring––

No output schema declared.

No examples provided.

update_checklist_item ~45

Checks or unchecks a checklist item, or changes its text.

NameTypeReqDescription
doneboolean––
itemIdstringyes–
textstring––

No output schema declared.

No examples provided.

update_client ~174

Changes a client's name, contact details, currency, default hourly rate or notes; null clears an optional field. A new rate applies to time logged from then on: entries already logged keep the rate they were logged with.

NameTypeReqDescription
addressstring|null––
clientIdstringyes–
currencystring–Three-letter code, e.g. USD or ARS. Default USD.
emailstring|null––
hourlyRatenumber|string|null–Default hourly rate for this client's projects. An amount in the currency's main unit, e.g. 85 or "85.50" (not cents). null clears it.
namestring––
notesstring|null––
phonestring|null––
taxIdstring|null––

No output schema declared.

No examples provided.

update_client_portal ~307

Turns a project's client portal on or off and sets what it shows: tasks, hours (hours only; rates and money are left out), the list of sent documents, whether clients may comment, a welcome text and the studio name shown on the page and on answers. The first time it creates the portal and its link, on. Turning it on or changing what an enabled portal shows publishes that to anyone with the link and needs confirm: true (without it the result is a preview); turning it off does not. A Pro feature, except turning an existing portal off. Only the project owner.

NameTypeReqDescription
allowCommentsboolean–Let visitors comment on the visible tasks.
boardIdstringyesThe project.
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
enabledboolean–Whether the link works. Turning it off keeps the link for when it is turned on again.
showHoursboolean–Show hours tracked against the hours budget.
showInvoicesboolean–Show the project's sent documents (links, no amounts on the portal page).
showTasksboolean–Show the tasks marked visible to the client.
studioNamestring–Up to 60 characters. An empty text clears it.
welcomestring–Up to 2000 characters. An empty text clears it.

No output schema declared.

No examples provided.

update_custom_field ~105

Renames a custom field or changes a select field's options. Removing an option that cards use clears it from them, which needs confirm: true; without it the result is a preview.

NameTypeReqDescription
confirmboolean–true performs the action. Without it (or with any value other than the boolean true) nothing changes and the result is a preview of the effects.
fieldIdstringyes–
namestring––
optionsarray––

No output schema declared.

No examples provided.

update_expense ~166

Changes an expense that is not yet on an invoice: description, amount, day, category, vendor, billable, markup (project owner only) or its task (null removes it). The person who logged it and the project owner can change it.

NameTypeReqDescription
amountnumber|string–An amount in the currency's main unit, e.g. 85 or "85.50" (not cents).
billableboolean––
cardIdstring|null––
categorystring––
daystring–The day it was spent, YYYY-MM-DD.
descriptionstring––
expenseIdstringyesThe expense.
markupPercentnumber|string|null––
vendorstring|null––

No output schema declared.

No examples provided.

update_invoice ~414

Changes a document. A draft takes every field (client, dates, currency, tax, discount, notes, terms, who it is for, project and the whole list of lines, which replaces the current ones); once sent only the notes and the due date change; once paid or answered, only the notes. Totals are recomputed on the server. null clears an optional field.

NameTypeReqDescription
boardIdstring|null–A project the user owns.
clientIdstring|null–One of the user's clients; its name, email, address, tax id and currency are copied onto the document.
currencystring–Three-letter code. Default: the client's, else the profile's.
discountnumber|string|null–A fixed amount off the whole document. An amount in the currency's main unit, e.g. 85 or "85.50" (not cents). null clears it.
dueDatestring|null–YYYY-MM-DD. Default: the profile's payment terms (invoice) or 30 days (estimate).
invoiceIdstringyesThe invoice or estimate.
issueDatestring–The issue date. Default today, YYYY-MM-DD.
linesarray–The whole list (replaces the current lines). At most 500.
notesstring|null–Up to 4000 characters. Default: the profile's default notes.
taxLabelstring–What the tax is called, up to 30 characters.
taxPercentnumber|string–Tax as a percentage, e.g. 21 or "10,5". Default: the profile's.
termsstring|null–Up to 4000 characters. Default: the profile's payment instructions.
toAddressstring|null––
toEmailstring|null––
toNamestring–Who it is for. Default: the client's name.
toTaxIdstring|null––

No output schema declared.

No examples provided.

update_label ~48

Renames or recolors a label; the change shows on every card that has it.

NameTypeReqDescription
colorstring––
labelIdstringyes–
namestring––

No output schema declared.

No examples provided.

update_list ~103

Renames a list, sets its WIP limit (Pro; null clears it) or moves it to another position among the board's lists (index 0 = first). Needs edit access to the board.

NameTypeReqDescription
indexinteger–New position among the lists, 0 = first.
listIdstringyes–
titlestring––
wipLimitinteger|null–Max cards before the list warns (Pro), or null.

No output schema declared.

No examples provided.

Install

How do I install the Decknote MCP server?

Decknote is a hosted endpoint at https://decknote.app/api/v1/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · decknote.app

# add to Claude Code
claude mcp add --transport http app-decknote-decknote 'https://decknote.app/api/v1/mcp'
Common questions

What is the Decknote MCP server?

Decknote is an MCP server listed in the public MCP registry as app.decknote/decknote. Kanban boards your AI agent can use: add, complete, move and recall tasks with your team. This page covers its hosted endpoint (https://decknote.app/api/v1/mcp).

Is the Decknote MCP server safe to use?

Decknote scores 87 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Decknote MCP server expose?

Decknote exposes 211 tools: overview, list_boards, create_board, create_list, search_tasks, and 206 more. Their descriptions and schemas cost roughly 27,349 tokens of context every time the server is loaded.

Does the Decknote MCP server require authentication?

Yes. Decknote asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the Decknote MCP server still maintained?

Decknote is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.