Kintai Plus (unofficial)
NPM · KINTAI-PLUS-MCP
Unofficial MCP server for Money Forward Cloud Kintai Plus (AKASHI): punches, records, man-hours
Available components
Last scanned (7 hours ago)
Scores higher than 87% of npm servers
Category Productivity and Notes
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 0 of 16 dependencies flagged as unhealthy. View diagnostics → Pass
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to atzzCokeK/kintai-plus-mcp). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 2 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability79
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3646 tokens (~191/item across 19 items; 16 tools + 3 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management17
- Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 97% of tool parameters carry a description.Partial
- Structured output schemas are declared (6% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 18 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 4 Nov 26 +27
- Malware scan: unverified → pass ▲ security
- Known CVEs: unverified → pass ▲ security
- Dependency health: unverified → 1.00 ▲ functional
- 3 Nov 26 −12
- Known CVEs: pass → unverified ▼ security
- Schema quality: 123 → 191 ▼ functional
- Dependency health: 1.00 → unverified ▼ functional
- Tool coverage: 91% → 97% ▲ functional
- First check of Tool coverage: 6 functional
- Schema quality: good → excellent functional
- Package version: 0.1.3 → 1.1.0 functional
- 2 Nov 26 −14
- Malware scan: pass → unverified ▼ security
- Stability: unverified → 0.07 ▲ functional
- Package version: 0.1.2 → 0.1.3 functional
- 1 Nov 26 +16
- Malware scan: unverified → pass ▲ security
- Security disclosure: unverified → pass ▲ functional
- 31 Oct 26 67
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/kintai-plus-mcp@1.1.0
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | atzzCokeK/kintai-plus-mcp |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/atzzCokeK/kintai-plus-mcp/.github/workflows/release.yml@refs/heads/main |
| Rekor log index | 3656734301 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:f60a1acfb5110cac808aafc796db21b12bf681a9810ed0c384db2ad31906e55dd894a65c095cc539fe8ceb4308914395da46abedb88e5a2223abefed3 |
Background: How many MCP packages publish verified provenance →
Dependencies 16 packages
| Packages resolved | 16 |
|---|---|
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
check_attendance_issues Check my attendance for issues ~227
Raw punch issues for yourself (打刻漏れチェック): missing clock-out/in, break left open, no punches on a workday, days over 12 hours, rest under 11 hours (勤務間インターバル), holiday work. Does NOT check Labor Standards Act break length (6h/45min, 8h/60min), man-hours, or the monthly overtime trajectory — close_out does, in one call. A missing punch is suppressed when the working record already has that time. Defaults: the 1st of this month through yesterday (on the 1st, the previous month), Japan time, YYYY-MM-DD, max 93 days. Today is excluded because the day may still be open. Overnight shifts are recognized. Leave is invisible, so "no punches" may be a day off. Fixing punches is 修正申請 in the web UI, not punch.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | Start date (YYYY-MM-DD). |
| to | string | – | End date, inclusive (YYYY-MM-DD). Defaults to yesterday. |
No output schema declared.
No examples provided.
close_out Close out my day or month ~442
One read-only call for what you still need to do before closing a day or a month (1日の締め / 月末の締め). Returns a priority list: missing clock-out or break-end (退勤・休憩戻), a break shorter than the Labor Standards Act (over 6h worked needs 45 min, over 8h needs 60 min — a 3-minute lunch punch is not enough), man-hours missing or not matching time worked (工数), the monthly overtime estimate (法定時間外の目安), and alerts. Use this INSTEAD OF chaining get_today_status, check_attendance_issues, get_manhours, summarize_working_hours, and get_alerts. scope "day" (default) is one day, default today in Japan (Asia/Tokyo). scope "month" is that month through today, or the whole month if it has ended. Dates are YYYY-MM-DD. Months are YYYY-MM (01-12). When ok is true and items is empty, tell the user nothing else is required (headline says 対応は不要). Follow items in priority order. If action says 修正申請, do NOT call punch — the API cannot edit past stamps. This tool never punches or saves. Writes still need punch / save_manhours / delete_manhours after the user confirms.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | scope=day only. YYYY-MM-DD in Japan time. Defaults to today. Future dates are rejected. Do not pass this with scope=month. |
| month | string | – | scope=month only. YYYY-MM (month 01-12) in Japan time. Defaults to the current month. Future months are rejected. Do not pass this with scope=day. |
| scope | string | – | day (default): one day. month: the whole month up to today, or through month-end if that month is already over. |
| thresholdHours | integer | – | Monthly statutory-overtime estimate that counts as a problem, in hours. Default 45 (the standard 36-agreement month). The figure is still only an estimate. |
| Name | Type | Req | Description |
|---|---|---|---|
| alerts | object | yes | – |
| counts | object | yes | – |
| date | string | – | – |
| disclaimer | string | yes | – |
| from | string | yes | – |
| headline | string | yes | – |
| items | array | yes | – |
| month | string | yes | – |
| note | string | yes | – |
| ok | boolean | yes | – |
| overtime | object | yes | – |
| readyToClose | boolean | yes | – |
| scope | string | yes | – |
| timezone | string | yes | – |
| to | string | yes | – |
| today | string | yes | – |
| todayStatus | object | – | – |
No examples provided.
delete_manhours Delete my man-hours ~234
WRITE. Delete YOUR man-hours (工数) for one date (YYYY-MM-DD, Japan time) and projectId. If taskId is omitted, ALL tasks of that project on that day are deleted — confirm that explicitly with the user. Idempotent: deleting what is already gone returns deleted:false and changes nothing. Closed (締め) or fixed (確定) days cannot be changed; do not retry. If this tool is not listed, the server is read-only (KINTAI_PLUS_READ_ONLY).
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Set true to apply this write when the client cannot show a confirmation dialog. If confirmation is required and this is omitted, the tool returns a preview and changes nothing. Ignored when this call… |
| date | string | yes | Date (YYYY-MM-DD, Japan time). Required. |
| projectId | integer | yes | Project whose man-hours to delete. From get_manhours or get_my_projects. |
| taskId | integer | – | One task to delete. Omit only when the user wants every task of this project on that day removed. |
No output schema declared.
No examples provided.
get_alerts Get my attendance alerts ~160
Raw attendance alerts (アラート) Kintai Plus already raised for you: 打刻忘れ, 欠勤疑い, 遅刻, 早退, 残業時間閾値超え, 36協定, 工数未入力, 休憩不足, and others. The API cannot filter; month (YYYY-MM, Japan time) is applied here. Omit month for every month the API returns. close_out already folds the relevant alerts into a prioritized list — call get_alerts only when you need the raw rows.
| Name | Type | Req | Description |
|---|---|---|---|
| month | string | – | Only alerts for this month (YYYY-MM, month 01-12, Japan time). Omit for all months returned by the API. |
No output schema declared.
No examples provided.
get_attendance_guide Explain attendance rules and punch types ~146
Static rules for this server (not your live data): punch types (打刻種別: 出勤 clock_in, 退勤 clock_out, 直行 direct_in, 直帰 direct_out, 休憩入 break_start, 休憩戻 break_end), why a punch cannot be edited via the API (修正申請), and the statutory break (法定休憩: over 6h needs 45 min, over 8h needs 60 min). Same text as the kintai://guide resource. For today, call get_today_status. For the day or month checklist, call close_out. No arguments.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_manhours Get my man-hours ~164
Your man-hours (工数) per day, project, and task, in minutes, with names when the directory can be loaded. Defaults: from=the 1st of this month, to=the end of that month (Japan time, YYYY-MM-DD), max 93 days. closed (締め) or fixed (確定) days cannot be changed with save_manhours or delete_manhours. close_out says which days are missing or off; call this to see the entries before changing them.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | Start date (YYYY-MM-DD). Defaults to the 1st of this month. |
| to | string | – | End date, inclusive (YYYY-MM-DD). Defaults to the end of the month of `from`. |
No output schema declared.
No examples provided.
get_my_profile Get my profile ~95
Who is signed in, and what is today in Japan? Returns staff ID, name, organization (所属), and role (company_admin 企業管理者 / admin 一般管理者 / employee 従業員), plus today (YYYY-MM-DD) and timezone Asia/Tokyo. Call this to learn the role before assuming admin tools exist. For what to do before leaving or at month-end, use close_out instead.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_my_projects Get my projects ~63
Projects you belong to (参加プロジェクト), with names. Prefer this over list_projects when entering your own man-hours. If a name is missing, the project list could not be loaded; the projectId is still valid for list_tasks and save_manhours.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_stamps Get my punch history ~163
Raw punch history (打刻履歴) for yourself: clock_in 出勤, clock_out 退勤, direct_in/out 直行/直帰, break_start/end 休憩入/休憩戻. Defaults: from=today, to=from, Japan time (YYYY-MM-DD). Max 366 days, fetched in chunks. Use get_today_status for today's state in one glance, and close_out for what to fix. Use this when you need the timestamps. Location and IP are omitted unless KINTAI_PLUS_INCLUDE_LOCATION=true.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | Start date (YYYY-MM-DD, Japan time). Defaults to today. |
| to | string | – | End date, inclusive (YYYY-MM-DD). Defaults to `from`. |
No output schema declared.
No examples provided.
get_today_status Get today's work status ~146
Live status for today only (Japan time, Asia/Tokyo): not_started 未出勤 / working 勤務中 / on_break 休憩中 / finished 退勤済み, minutes worked so far (breaks excluded), break minutes, and today's punches. No arguments; "today" is never a date you pass. Call this immediately before punch to see which type is legal. For the end-of-day checklist (short breaks, man-hours, overtime, alerts), use close_out scope=day instead of chaining tools. Not 勤務処理 labels such as 欠勤 or 出張 — that admin tool is get_working_treatments.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_working_records Get my working records ~312
Daily working records (勤務実績): day category (労働日 / 所定休日 / 法定休日), start/end, punch times. staffIds is optional and defaults to yourself (omit it for the signed-in person; the response then has no staffId, same as before). Admins may pass staff they manage (from list_staff), up to 50 per request. When the API returns net minutes, actualWorkingMinutes is that value. When it does not, actualWorkingMinutes stays the elapsed start-to-end and estimatedNetMinutes subtracts known breaks or, if breaks are missing, the statutory minimum (over 6h → 45 min, over 8h → 60 min). That second figure is an estimate (estimateNote). Defaults: the 1st of this month through today (Japan time, YYYY-MM-DD). Split into 31-day requests (max 366 days). No overtime field — summarize_working_hours for your totals, close_out for what you should fix, team_close_out for the team. Do not call this once per person to close a team.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | Start date (YYYY-MM-DD). Defaults to the 1st of this month. |
| staffIds | array | – | Staff IDs to include. Omit for yourself only. Admins: IDs from list_staff. Unknown IDs are rejected when the staff list is complete. |
| to | string | – | End date, inclusive (YYYY-MM-DD). Defaults to today. |
No output schema declared.
No examples provided.
list_projects List projects ~126
Search the company project list (プロジェクト) used for man-hours (工数). Prefer get_my_projects when logging your own time; use this to search by name or code, or to see projects you might not belong to. activeOn is YYYY-MM-DD (Japan time) and keeps projects whose period includes that date. projectId goes to list_tasks and save_manhours.
| Name | Type | Req | Description |
|---|---|---|---|
| activeOn | string | – | Only projects whose period includes this date (YYYY-MM-DD). |
| query | string | – | Case-insensitive text to match in name, short name, or code. |
No output schema declared.
No examples provided.
list_tasks List tasks of a project ~98
Tasks (タスク) of one projectId from get_my_projects or list_projects. Call this before save_manhours so taskId is real. Finished tasks (終了) are hidden unless includeFinished is true. estimatedMinutes is minutes (estimatedHours is the same value as H:MM).
| Name | Type | Req | Description |
|---|---|---|---|
| includeFinished | boolean | – | Include finished tasks. Default false. |
| projectId | integer | yes | Project ID from list_projects or get_my_projects. |
No output schema declared.
No examples provided.
punch Punch the time clock ~341
WRITE now (打刻). type is required: clock_in 出勤, clock_out 退勤, direct_in 直行, direct_out 直帰, break_start 休憩入, break_end 休憩戻. Recorded at the time Kintai Plus receives it. CANNOT be edited, deleted, or backdated — a mistake needs 修正申請 in the web UI, not another punch. Not idempotent: every successful call adds a stamp. Confirm the type with the user. Call get_today_status or close_out first. Conflicts with today (for example clock_in while already working, or clock_out while on a break) are refused; the error names the legal next type. force: true only when the user explicitly insists. If this tool is not listed, the server is read-only (KINTAI_PLUS_READ_ONLY) — tell the user, do not retry.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Set true to apply this write when the client cannot show a confirmation dialog. If confirmation is required and this is omitted, the tool returns a preview and changes nothing. Ignored when this call… |
| force | boolean | – | Punch even if it conflicts with today's punch history. Use only when the user explicitly asks. |
| telework | boolean | – | Mark as telework (テレワーク). Only valid with clock_in. |
| type | string | yes | Required. clock_in 出勤, clock_out 退勤, direct_in 直行, direct_out 直帰, break_start 休憩入, break_end 休憩戻. There is no default. |
No output schema declared.
No examples provided.
save_manhours Save my man-hours ~243
WRITE. Create or update YOUR man-hours (工数) for one date (YYYY-MM-DD, Japan time): minutes per project task. Only the tasks you list are overwritten; other tasks that day are kept. Removing an entry is delete_manhours, not a zero. Confirm the project, task, and minutes with the user before calling. Idempotent for the same entries. Refuses a day that is closed (締め) or fixed (確定) — do not retry; it must be reopened in the web UI. Find IDs with get_my_projects (prefer it over list_projects) and list_tasks. close_out tells you which dates are missing. If this tool is not listed, the server is read-only (KINTAI_PLUS_READ_ONLY).
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Set true to apply this write when the client cannot show a confirmation dialog. If confirmation is required and this is omitted, the tool returns a preview and changes nothing. Ignored when this call… |
| date | string | yes | Date to save (YYYY-MM-DD, Japan time). Required. No default. |
| entries | array | yes | – |
No output schema declared.
No examples provided.
summarize_working_hours Summarize my working hours ~165
Totals for yourself over a period: working minutes, work days (出勤日数), holiday-work days (休日出勤), and an ESTIMATE of statutory overtime (法定時間外の目安), per month. Defaults: the 1st of this month through today, Japan time, YYYY-MM-DD (max 366 days). Always repeat disclaimer to the user; the number is not an official overtime total. Team risk is find_overtime_risks (admin). What the employee should fix is close_out, which already includes this estimate.
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | Start date (YYYY-MM-DD). Defaults to the 1st of this month. |
| to | string | – | End date, inclusive (YYYY-MM-DD). Defaults to today. |
No output schema declared.
No examples provided.
How do I install the Kintai Plus (unofficial) MCP server?
Kintai Plus (unofficial) runs locally as an npm package, launched with npx -y kintai-plus-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · kintai-plus-mcp
claude mcp add atzzcokek-kintai-plus-mcp -- npx -y kintai-plus-mcp
What is the Kintai Plus (unofficial) MCP server?
Kintai Plus (unofficial) is an MCP server listed in the public MCP registry as io.github.atzzCokeK/kintai-plus-mcp. Unofficial MCP server for Money Forward Cloud Kintai Plus (AKASHI): punches, records, man-hours. This page covers its npm package (kintai-plus-mcp).
Is the Kintai Plus (unofficial) MCP server safe to use?
Kintai Plus (unofficial) scores 85 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Kintai Plus (unofficial) MCP server expose?
Kintai Plus (unofficial) exposes 16 tools: get_my_profile, get_today_status, close_out, get_attendance_guide, punch, and 11 more. Their descriptions and schemas cost roughly 3,125 tokens of context every time the server is loaded.
Is the Kintai Plus (unofficial) MCP server still maintained?
Kintai Plus (unofficial) is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Kintai Plus (unofficial) MCP server under?
Kintai Plus (unofficial) declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.