Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.chrischall/honeybook-mcp

NPM · HONEYBOOK-MCP

HoneyBook client-portal MCP — vendor contracts, invoices, messages, meetings and payments

Available components

0 this week 93 Trust /100

Last scanned (8 hours ago)

Scores higher than 96% of npm servers

Category CRM and Sales

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security100
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 0 of 9 dependencies flagged as unhealthy. View diagnostics → Pass
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to chrischall/honeybook-mcp). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 0 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability71
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 3804 tokens (~172/item across 22 items; 22 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety88
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 1 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "pay_invoice" implies "pay" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Partial
  • An AI judge read all 22 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 +11
    • Known CVEs: unverified → pass ▲ security
    • Dependency health: unverified → 1.00 ▲ functional
  • 4 Nov 26 −11
    • Known CVEs: pass → unverified ▼ security
    • Stability: pass → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • Dependency health: 1.00 → unverified ▼ functional
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • Package version: 1.2.8 → 1.3.1 functional
    • Package version: 1.2.8 → 1.3.0 functional
  • 22 Oct 26 0
    • Package version: 1.2.6 → 1.2.8 functional
  • 21 Oct 26 0
    • Package version: 1.2.6 → 1.2.8 functional
  • 18 Oct 26 +15
    • Malware scan: unverified → pass ▲ security
  • 17 Oct 26 −11
    • Malware scan: pass → unverified ▼ security
    • Known CVEs: partial → pass ▲ security
    • Stability: 0.90 → pass security
    • Dependency health: partial → 1.00 functional
    • Package version: 1.2.7 → 1.2.8 functional
  • 16 Oct 26 −5
    • Stability: pass → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • Known CVEs: pass → partial ▼ security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • Dependency health: 1.00 → partial functional
    • Stability: pass → 0.90 functional
    • Package version: 1.2.6 → 1.2.7 functional
  • 14 Oct 26 +45
    • Injection markers: unverified → pass ▲ security
    • Stability: unverified → pass ▲ security
    • Tool coverage: unverified → 100 ▲ functional
    • MCP protocol: unverified → pass ▲ functional
    • Destructive annotations: 1 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "pay_invoice" implies "pay" and declares readOnlyHint instead, contradicting what its own name says it does. functional
    • Package version: 1.2.4 → 1.2.6 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed npm/honeybook-mcp@1.3.1

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo chrischall/honeybook-mcp
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/chrischall/honeybook-mcp/.github/workflows/release-please.yml@refs/heads/main
Rekor log index 3691535322
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:8477f4eb465b62d2189aaced02c26fcc8fc26c23dbf5b299f740140eb90d5f2704efb507ed7064586f1f3c92857caa413b66b5129860b639c2803e9ae

Background: How many MCP packages publish verified provenance →

Dependencies 9 packages
Packages resolved 9
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 22 exposed · ~3,804 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
get_flow ~253

Read a HoneyBook questionnaire (flow) — its pages, questions and any answers already submitted — using a credential captured by `use_flow_link`. Requires a flow credential; a client-portal session will NOT work here, and vice versa. Defaults to the most recently captured flow. Makes two calls: the public /api/v2/flow/<id>/minimal for the vendor company id, then /api/v2/client/flow/<id>/active, passing that id as ?ctxc= when /minimal supplied one. A questionnaire larger than the default ceiling answers with its size and top-level keys instead; call again with view="raw" for the whole thing.

NameTypeReqDescription
flow_idstring–Flow id to read. Omit to use the most recently captured flow credential. Run `list_active_sessions` to see the active flow ids.
viewstring–Response shape: "compact" (default) drops fields the response already carries elsewhere; "raw" returns the upstream payload unprojected. compact returns the questionnaire unless it exceeds a byte cei…

No output schema declared.

No examples provided.

get_message ~121

Read one message in full: body (plain text by default, or the original HTML), sender, recipients, attachments and per-recipient delivery status.

NameTypeReqDescription
formatstring–Body format. Default "text".
message_idstringyesThe message _id from list_messages.
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
workspace_idstringyesThe workspace _id (from list_projects, or .workspace._id on any workspace_file).

No output schema declared.

No examples provided.

get_project ~186

Project details — the portal's Overview "Project details" card plus the people on it: name, date, time, timezone, location, guest count, custom fields, cover image, and each participant's name / email / phone / role. view="raw" returns the untrimmed response (large: it embeds the vendor's account).

NameTypeReqDescription
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
project_idstringyesThe project (event) _id from list_projects.
viewstring–Response shape: "compact" (default) drops fields the response already carries elsewhere; "raw" returns the upstream payload unprojected. compact returns the Overview card plus participants; "raw" ret…

No output schema declared.

No examples provided.

get_workspace ~87

Get full detail for a workspace (vendor project). Includes status flags like has_sent_files, has_signed_files, has_paid_payments.

NameTypeReqDescription
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
workspace_idstringyesThe workspace _id (found on any workspace_file under .workspace._id).

No output schema declared.

No examples provided.

get_workspace_file ~192

Get detail for one workspace file. Returns a compact summary by default (metadata, vendor, event, pricing totals, payment schedule, agreement presence). Use `section` to drill into a specific part of the file: "pricing" for full line items + tax/svc detail, "agreement" for contract HTML + signatures, "payments" for full payment-schedule detail, "all" for the pruned full response, or "raw" for the entirely-unpruned response (may exceed MCP size limits on proposal-class files).

NameTypeReqDescription
file_idstringyesThe file _id from list_workspace_files.
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
sectionstring–Which view to return. Default "summary" (~5-15 kB). Others return focused sections of the raw response.

No output schema declared.

No examples provided.

honeybook_healthcheck ~104

Resolves the credential the way real tools do, then makes one authenticated request to api.honeybook.com. Reports which source supplied the credential, whether api.honeybook.com accepted it, the round-trip time, and a plain-English hint distinguishing 'no credential' from 'credential rejected' from 'a api.honeybook.com-side problem'. Read-only; never returns the credential itself. Call this when a real tool fails and you want to know which hop broke.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_active_sessions ~77

List the HoneyBook credentials currently active in this MCP, split by kind: `portalSessions` (captured via use_magic_link — read workspaces, files, invoices, payment methods) and `flowCredentials` (captured via use_flow_link — weak auth scoped to ONE questionnaire). The two are not interchangeable. No API call.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_attachments ~84

Loose images, files and bookmarks shared in a workspace — the portal's Files tab, minus the contracts/invoices/proposals that list_workspace_files covers.

NameTypeReqDescription
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
workspace_idstringyesThe workspace _id (from list_projects).

No output schema declared.

No examples provided.

list_meetings ~105

Meetings the vendor has scheduled in a workspace (consultations, Zoom calls, walkthroughs): title, start/end, timezone, join link and password. Derived from the workspace feed, so a rescheduled meeting shows its latest time. Sorted by start.

NameTypeReqDescription
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
workspace_idstringyesThe workspace _id (from list_projects).

No output schema declared.

No examples provided.

list_messages ~174

List the messages (and optionally the activity log) in a workspace — the portal's Activity tab. Returns compact cards (sender, subject, preview, seen state, attachments), newest first; call get_message for a full body. Reading does NOT mark anything as seen.

NameTypeReqDescription
kindstring–"messages" (default): emails and portal messages. "activity": everything else — meetings scheduled, files signed, payments, reminders, AI recaps. "all": both.
limitinteger–Max items to return (default 50).
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
workspace_idstringyesThe workspace _id (from list_projects, or .workspace._id on any workspace_file).

No output schema declared.

No examples provided.

list_notes ~78

Notes the vendor has shared with you in a workspace (meeting notes, AI recaps) — the portal's Notes tab.

NameTypeReqDescription
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
workspace_idstringyesThe workspace _id (from list_projects).

No output schema declared.

No examples provided.

list_payment_methods ~154

List saved payment methods for your client account with a vendor: id, type, brand, last 4, expiry and whether it is the default. Empty array if none are saved. view="raw" returns the untrimmed records (billing name/address and Stripe references).

NameTypeReqDescription
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
viewstring–Response shape: "compact" (default) drops fields the response already carries elsewhere; "raw" returns the upstream payload unprojected. compact returns only the card-on-file fields; "raw" returns th…

No output schema declared.

No examples provided.

list_payments ~195

Payment schedule for a workspace — the portal's Payments tab: each file's payments with amount, due date, paid/pending state, how it was paid and the invoice number, plus paid/unpaid totals per currency. To pay one, use pay_invoice.

NameTypeReqDescription
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active, or when workspace_id is a listed project name.
viewstring–"full" (default): the files, payments and per-currency totals. "brief": one line per payment — file: description (amount) — due <ISO date or "no date"> — <paid|pending|overdue|unpaid>, inside the unt…
workspace_idstringyesThe workspace _id (from list_projects).

No output schema declared.

No examples provided.

list_projects ~91

List your projects with a vendor (HoneyBook calls them events): name, date, booked flag and the workspace_id that every other workspace tool takes. This is the portal's project switcher.

NameTypeReqDescription
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
pageinteger–Page number; omit for the first page.

No output schema declared.

No examples provided.

list_tasks ~139

Tasks the vendor has assigned to you in a workspace — the portal's Tasks tab — with the today / this week / overdue / completed counts and any task groups. Sorted by due date.

NameTypeReqDescription
curr_datestring–YYYY-MM-DD the counts are bucketed against (default: today).
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
pageinteger–Page number (default 1).
per_pageinteger–Page size (default 50).
workspace_idstringyesThe workspace _id (from list_projects).

No output schema declared.

No examples provided.

list_workspace_files ~209

List all files a vendor has shared with you (contracts, invoices, brochures, proposals). Optionally filter by file_type. Follows every page; returns { files, complete } — complete:false means some files could not be fetched. Each file is a light summary row by default (id, title, type, status, sent date, workspace, payment/acceptance flags); call get_workspace_file with its _id for pricing, contract or payments, or pass view="all" for every pruned file object (large).

NameTypeReqDescription
file_typestring–Filter to one file type. Omit to return all.
originstring–Portal origin (e.g. https://<vendor>.hbportal.co) to target. Optional — defaults to the most recently activated session.
viewstring–Default "summary": one light row per file. "all": each file object with the heavy vendor-side company fields pruned (can be hundreds of kB per proposal).

No output schema declared.

No examples provided.

mark_messages_seen ~108

Mark feed items as seen (what the portal does when you open the Activity tab). list_messages and get_message never do this on their own.

NameTypeReqDescription
message_idsarrayyesFeed item _ids from list_messages.
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
workspace_idstringyesThe workspace _id (from list_projects, or .workspace._id on any workspace_file).

No output schema declared.

No examples provided.

pay_invoice ~231

Pay an invoice from a vendor. In v1 this returns a deep link to the HoneyBook portal instead of paying headlessly — it moves no money itself; the user pays in their browser. It still asks the user to confirm before handing over the link: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken, and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE).

NameTypeReqDescription
confirmTokenstring–ONLY for the two-step confirmation fallback (a client without MCP elicitation). The confirmToken from this same tool's phase-1 "confirmation-required" response, passed back ONLY after the user has se…
file_idstringyesThe invoice file _id from list_workspace_files (file_type=invoice).
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.

No output schema declared.

No examples provided.

send_message ~397

Send a message to the vendor (and the other members of the workspace) through the HoneyBook portal, exactly as the Activity tab composer does. HoneyBook emails it to every recipient. Pass reply_to_message_id to reply in-thread (the subject is inherited). Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken, and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). If HoneyBook has not finished sending within about a minute the result has status "pending" and a task_id; if it did not answer the send request at all the status is "unknown". Either way the message may still be delivered, so check list_messages before resending.

NameTypeReqDescription
bodystringyesMessage text. Plain text is sent as-is (line breaks preserved). Simple HTML formatting (p, br, b, i, a href, lists, tables) is kept; other tags are shown as text and attributes other than an http(s)/…
confirmTokenstring–ONLY for the two-step confirmation fallback (a client without MCP elicitation). The confirmToken from this same tool's phase-1 "confirmation-required" response, passed back ONLY after the user has se…
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.
reply_to_message_idstring–A message _id from list_messages to reply to.
subjectstring–Required for a new message; optional on a reply.
workspace_idstringyesThe workspace _id (from list_projects, or .workspace._id on any workspace_file).

No output schema declared.

No examples provided.

sign_contract ~232

Sign a contract you received from a vendor. In v1 this returns a deep link to the HoneyBook portal instead of signing headlessly — it signs nothing itself; the user signs in their browser. It still asks the user to confirm before handing over the link: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken, and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE).

NameTypeReqDescription
confirmTokenstring–ONLY for the two-step confirmation fallback (a client without MCP elicitation). The confirmToken from this same tool's phase-1 "confirmation-required" response, passed back ONLY after the user has se…
file_idstringyesThe agreement file _id from list_workspace_files (file_type=agreement).
originstring–Portal origin (e.g. https://<vendor>.hbportal.co). Optional when only one session is active.

No output schema declared.

No examples provided.

use_flow_link ~297

Capture a HoneyBook QUESTIONNAIRE (flow) credential via the ContextMint Bridge browser extension. Use this for a link shaped https://<vendor>.hbportal.co/flow/<flowId>?hash=… — for a client-portal link (/app/link/resolve/…) use `use_magic_link` instead. Prerequisites: install the ContextMint Bridge extension, open the questionnaire link in that browser and let the page render, then run this tool. It snapshots localStorage["HONEYBOOK_REACT_WEAK_AUTH_<flowId>"] into ~/.honeybook-mcp/flows.json. A flow credential is HoneyBook's 'weak auth': it is scoped to that ONE questionnaire and cannot read portal workspaces, files, invoices or payment methods. Because the storage key contains the flow id, the extension asks you to re-approve the scope once per new questionnaire.

NameTypeReqDescription
flow_link_urlstringyesQuestionnaire link, e.g. https://<vendor>.hbportal.co/flow/<flowId>?hash=…&userId=… Only the /flow/<flowId> segment is required: the credential is read out of the open page's localStorage, so the rew…

No output schema declared.

No examples provided.

use_magic_link ~290

Capture a HoneyBook client-portal session via the ContextMint Bridge browser extension. Prerequisites: install the ContextMint Bridge extension in Chrome (Safari isn't available yet), then open the vendor's magic-link URL in that browser so you're signed into their portal and leave that tab open. This tool then snapshots the auth fields out of the page's localStorage["HONEYBOOK_REACT_CURR_USER"] into ~/.honeybook-mcp/sessions.json. The tab only needs to be open and signed in — nothing is sniffed off a live request, so it does not matter whether the page is idle. All other tools use the most-recently-activated session by default. The magic_link_url arg is used only to derive the portalOrigin (cache key) — the tool does NOT open or navigate to it. For a QUESTIONNAIRE link (https://<vendor>.hbportal.co/flow/<flowId>?hash=…) use `use_flow_link` instead — that link writes a different, flow-scoped credential and this tool refuses it.

NameTypeReqDescription
magic_link_urlstringyesFull magic-link URL from the vendor's HoneyBook email, e.g. https://<vendor>.hbportal.co/app/workspace_file/<id>/... Used only to derive the portal origin; you must already have this URL open in a C…

No output schema declared.

No examples provided.

Install

How do I install the io.github.chrischall/honeybook-mcp server?

io.github.chrischall/honeybook-mcp runs locally as an npm package, launched with npx -y honeybook-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · honeybook-mcp

# add to Claude Code
claude mcp add chrischall-honeybook-mcp -- npx -y honeybook-mcp
Common questions

What is the io.github.chrischall/honeybook-mcp server?

io.github.chrischall/honeybook-mcp is listed in the public MCP registry as io.github.chrischall/honeybook-mcp. HoneyBook client-portal MCP, vendor contracts, invoices, messages, meetings and payments. This page covers its npm package (honeybook-mcp).

Is the io.github.chrischall/honeybook-mcp server safe to use?

io.github.chrischall/honeybook-mcp scores 93 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.chrischall/honeybook-mcp server expose?

io.github.chrischall/honeybook-mcp exposes 22 tools: use_magic_link, list_active_sessions, use_flow_link, get_flow, list_workspace_files, and 17 more. Their descriptions and schemas cost roughly 3,804 tokens of context every time the server is loaded.

Is the io.github.chrischall/honeybook-mcp server still maintained?

io.github.chrischall/honeybook-mcp is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.chrischall/honeybook-mcp server under?

io.github.chrischall/honeybook-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.