# Tradify by Cotlet (pypi · tradify-api-mcp)

Jobs, quotes, invoices and schedule in Tradify.

- Trust score: 63/100 (medium)
- Change this week: −15
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `cotlet.dev`: 72/100, [markdown](https://verifymcp.io/servers/dev-cotlet-tradify/mcp-v1-tradify.md), [page](https://verifymcp.io/servers/dev-cotlet-tradify/mcp-v1-tradify)
- remote · `cotlet.dev`: 40/100, [markdown](https://verifymcp.io/servers/dev-cotlet-tradify/mcp-v1-tradify-connect.md), [page](https://verifymcp.io/servers/dev-cotlet-tradify/mcp-v1-tradify-connect)
- pypi · `tradify-api-mcp`: 63/100 (this document), [markdown](https://verifymcp.io/servers/dev-cotlet-tradify/tradify-api-mcp.md), [page](https://verifymcp.io/servers/dev-cotlet-tradify/tradify-api-mcp)

## Channel facts

- Registry: `pypi`
- Package: `tradify-api-mcp`
- Version: `1.0.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Supply Chain Security**: 50/100
  - Malware scan not yet available for this package.
  - No known CVEs affecting this package version or its production dependencies.
  - Runs hatchling.build at install time, a recognised build step with no custom scripting around it.
  - 0 of 35 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 84/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to cotletdev/tradify-api-mcp-server).
  - License check failed: the license (PolyForm-Noncommercial-1.0.0) isn't a recognized OSI-approved license.
  - Actively maintained (last published 8 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 76/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 2692 tokens (~158/item across 17 items; 15 tools + 2 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 95/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 84% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### How do I install the Tradify by Cotlet MCP server?

Tradify by Cotlet runs locally as a PyPI package, launched with uvx tradify-api-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add dev-cotlet-tradify -- uvx tradify-api-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "dev-cotlet-tradify": {
      "command": "uvx",
      "args": [
        "tradify-api-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "dev-cotlet-tradify": {
      "command": "uvx",
      "args": [
        "tradify-api-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add dev-cotlet-tradify -- uvx tradify-api-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dev-cotlet-tradify": {
      "type": "local",
      "command": [
        "uvx",
        "tradify-api-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add dev-cotlet-tradify --command uvx --arg tradify-api-mcp
```

### Hermes

```yaml
mcp_servers:
  dev-cotlet-tradify:
    command: "uvx"
    args: ["tradify-api-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "dev-cotlet-tradify": {
      "Transport": "stdio",
      "Command": "uvx",
      "Arguments": [
        "tradify-api-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add dev-cotlet-tradify -t stdio -c uvx -a tradify-api-mcp
```

### Other

```json
{
  "mcpServers": {
    "dev-cotlet-tradify": {
      "command": "uvx",
      "args": [
        "tradify-api-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 63, −15)

- [security regression] Malware scan: pass → unverified

### 2026-11-03 (score 78, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-11-02 (score 63, −15)

- [security regression] Malware scan: pass → unverified

### 2026-10-29 (score 78, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-10-24 (score 63)

First indexed and scored.

## MCP tools (15)

### `create_customer` (~159 tokens)

Create customer

New customer profile, optionally with contact details and a physical address.

Creates an active customer with the company's default price group, document theme and tax settings, as the New Customer form does. email may hold several addresses separated by commas; quotes and invoices go there. It reaches no one and stays inside Tradify.

Input parameters:

- `address` (string): Street address.
- `city` (string)
- `contact` (string): Contact person. Default: the name.
- `email` (string): Email for quotes and invoices; commas for more.
- `mobile` (string)
- `name` (string, required): Customer or company name.
- `phone` (string)
- `postal_code` (string)
- `state` (string): State or region.

### `create_invoice_from_quote` (~214 tokens)

Create invoice from quote

Draft invoice from an approved or accepted quote, for all of it or part of it.

Creates a draft invoice from a quote, as Create Invoice > From Quote does, linked to the quote and its job. mode entire copies every line; line_items copies the lines at the positions in lines; percentage invoices amount percent of the quote total; fixed_amount invoices amount (with tax); remaining invoices what the quote's earlier invoices did not. A part is one line at the quote's tax rate. Due date follows the customer's or your payment terms. The invoice stays a draft until send_invoice. Needs a plan with progress invoicing (Pro) for the part modes.

Input parameters:

- `amount` (number): percentage: percent of the quote total (e.g. 50). fixed_amount: amount with tax.
- `lines` (array): line_items: positions of the quote's lines to invoice, 1 for the first.
- `mode` (string, required)
- `quote_id` (string, required): Quote ID from list_quotes.

### `create_job` (~158 tokens)

Create job

New job for a customer. It starts as Unassigned.

Creates a job for a customer, as New Job does, and Tradify gives it the next job number. It starts Unassigned; schedule_appointment books staff on it. Contact, phone and site address default to the customer's. It reaches no one and stays inside Tradify.

Input parameters:

- `contact` (string): Job contact. Default: the customer's.
- `contact_phone` (string): Default: the customer's phone.
- `customer_id` (string, required): From list_customers or create_customer.
- `description` (string, required): What the work is.
- `reference` (string): Your reference, e.g. a PO number.
- `site_address` (string): Default: the customer's address.

### `create_quote` (~224 tokens)

Create quote

Draft quote with line items. Nothing is sent until you call send_quote.

Creates a draft quote for a customer, as New Quote does. Each line is misc (description, quantity, unit_price) or time (hours at a billing rate; the price comes from the customer's price group unless unit_price is given). Tax uses the default rate, or tax_rate by name; amounts, tax and totals are worked out as Tradify does. job_id links it to a job of the same customer. Expiry defaults to your expiry days setting. Price list items and kits are not supported yet. The quote stays a draft until send_quote.

Input parameters:

- `customer_id` (string, required): From list_customers or create_customer.
- `description` (string): Shown on the quote.
- `expiry_date` (string): Default: your expiry days setting.
- `job_id` (string): Link the quote to this customer's job (list_jobs).
- `line_items` (array, required)
- `reference` (string): Customer reference.
- `tax_inclusive` (boolean): Prices include tax.

### `get_job` (~106 tokens)

Get job

Full job: description, site, tasks, notes, appointments, costs, linked quotes and invoices.

Returns one job: customer, contact, site address, status, reference and description, the staff on it, its tasks and notes, the Scheduler appointments (times with the company's UTC offset), the costs logged on it (products and misc costs) and the quotes and invoices linked to it. Read it before changing a job.

Input parameters:

- `job_id` (string, required): Job ID from list_jobs.

### `list_appointments` (~136 tokens)

List appointments

Scheduler appointments in a date range, with staff, job, times and notes.

Returns the Scheduler's job appointments that fall between from and to (both days included, at most 31 days), each with its job, customer, staff member, start and end (ISO 8601 with the company's UTC offset), notes and status (accepted, unconfirmed, declined, cancelled). staff keeps only those people, by full name.

Input parameters:

- `from` (string, required): First day.
- `staff` (array): Only these staff members, by full name.
- `to` (string, required): Last day, up to 31 days after from.

### `list_customers` (~125 tokens)

List customers

Customer profiles with contact details and sites.

Lists customers by name with contact, email (may be a comma list), phone, mobile, physical address and sites. search matches name, contact, email or phone, so use it to find the customer_id before creating a job or quote. archived lists archived customers instead. Pass next_cursor back as cursor.

Input parameters:

- `archived` (boolean): List archived customers instead.
- `cursor` (string): next_cursor from the previous call.
- `limit` (integer)
- `search` (string): Matches name, contact, email or phone.

### `list_invoices` (~185 tokens)

List invoices

Invoices with customer, job, due date, total, amount paid and amount due.

Lists invoices, newest first, with customer, jobs, invoice and due dates, total, paid and due (total minus payments and credits). status approved (default) is every approved invoice not fully paid; overdue is the ones past their due date; paid, draft, cancelled and all as named. customer_id lists that customer's invoices, and status then filters the page you get. Pass next_cursor back as cursor.

Input parameters:

- `cursor` (string): next_cursor from the previous call.
- `customer_id` (string): Only this customer's invoices (list_customers).
- `limit` (integer)
- `search` (string): Matches number, reference or customer.
- `status` (string): approved (sent, not fully paid; default), overdue, paid, draft, cancelled or all.

### `list_jobs` (~175 tokens)

List jobs

Jobs with number, customer, site address, status and assigned staff.

Lists jobs, newest number first. By default only active jobs (every status marked active, built-in or custom); status all, a built-in status or the name of a custom status narrows it. customer_id lists that customer's jobs, and status then filters the page you get. Pass next_cursor back as cursor.

Input parameters:

- `cursor` (string): next_cursor from the previous call.
- `customer_id` (string): Only this customer's jobs (list_customers).
- `limit` (integer)
- `search` (string): Matches job number, customer or reference.
- `status` (string): active (default), all, unassigned, assigned, scheduled, in_progress, to_invoice, on_hold, complete, cancelled or the name of a custom status.

### `list_quotes` (~172 tokens)

List quotes

Quotes with customer, total, quote date, expiry date and status.

Lists quotes, newest quote date first, with customer, linked job, total (with tax), quote, expiry and accepted dates and status. By default the quotes awaiting acceptance; expired is the ones awaiting acceptance past their expiry date. since keeps quotes dated on or after that day, so use status accepted with since to find what was won in a period. Pass next_cursor back as cursor.

Input parameters:

- `cursor` (string): next_cursor from the previous call.
- `limit` (integer)
- `search` (string): Matches number, reference or customer.
- `since` (string): Only quotes dated on or after this day.
- `status` (string): awaiting_acceptance (default), draft, accepted, expired, cancelled, declined or all.

### `record_payment` (~175 tokens)

Record payment

Record a payment received against an invoice and reduce the amount due.

Adds a payment you already received to an approved invoice, as Add Payment does: amount, date, method (by name, from Settings > Payment Methods) and a reference. It charges nobody and emails nobody. The amount cannot exceed what is due; paying it all marks the invoice paid. If an accounting app is connected, Tradify syncs the payment to it.

Input parameters:

- `amount` (number, required): Amount received, at most the amount due.
- `date` (string): Payment date. Default: today.
- `invoice_id` (string, required): Invoice ID from list_invoices.
- `method` (string): Payment method name, e.g. Bank Deposit, Cash, Credit Card. Default: Unknown.
- `reference` (string): e.g. the check number.

### `schedule_appointment` (~202 tokens)

Schedule appointment

Book a job appointment on the Scheduler for staff, optionally emailing the customer a confirmation.

Books the job on the Scheduler from start to end for each staff member named (by full name; default the signed-in user), as the Scheduler does. Each staff member gets Tradify's "You've been scheduled" notice, and an Unassigned or Assigned job becomes Scheduled. email_customer also sends the customer the appointment confirmation email, with customer_message in it.

Input parameters:

- `customer_message` (string): Extra text in that email.
- `email_customer` (boolean): Email the customer a confirmation.
- `end` (string, required): ISO 8601; without a zone, company time.
- `job_id` (string, required): Job ID from list_jobs.
- `notes` (string): Notes for the crew.
- `staff` (array): Staff member names, one appointment each. Default: you.
- `start` (string, required): ISO 8601; without a zone, company time.

### `send_invoice` (~184 tokens)

Send invoice

Approve the invoice and email it to the customer, with payment reminders if enabled.

Approves a draft invoice (Tradify gives it its number) and emails it from Tradify with the link to view and pay it; payment reminders follow if you enabled them. Without to it goes to the customer's email. Subject and text default to your invoice email template. An approved invoice can be sent again. Tradify sends this mail only when the login has 2-Step Security set up; otherwise the call stops before approving.

Input parameters:

- `invoice_id` (string, required): Invoice ID from list_invoices or create_invoice_from_quote.
- `message` (string): Email text. Default: your invoice template.
- `send_me_a_copy` (boolean)
- `subject` (string): Default: your invoice email template.
- `to` (array): Recipient emails. Default: the customer's email.

### `send_quote` (~176 tokens)

Send quote

Approve the quote and email it to the customer with a link to accept or decline online.

Approves a draft quote (it becomes awaiting acceptance) and emails it from Tradify with the link where the customer accepts or declines it online. Without to it goes to the customer's email. Subject and text default to your quote email template. An approved quote can be sent again. Tradify sends this mail only when the login has 2-Step Security set up; otherwise the call stops before approving.

Input parameters:

- `message` (string): Email text. Default: your quote template.
- `quote_id` (string, required): Quote ID from list_quotes or create_quote.
- `send_me_a_copy` (boolean)
- `subject` (string): Default: your quote email template.
- `to` (array): Recipient emails. Default: the customer's email.

### `update_job_status` (~137 tokens)

Update job status

Set a status on a job, built-in or one of your custom statuses.

Sets a job's status, as Change Status on the Jobs list does: to_invoice, on_hold, complete, cancelled, the others of the built-in list, or the name of a custom status from Settings > Jobs > Job Statuses (spaces as underscores). It reaches no one, and one more call sets it back.

Input parameters:

- `job_id` (string, required): Job ID from list_jobs.
- `status` (string, required): unassigned, assigned, scheduled, in_progress, to_invoice, on_hold, complete, cancelled or the name of a custom status.

## Diagnostics

Captured diagnostic sections: Provenance, Install scripts, Dependencies. The full working is on the page: https://verifymcp.io/servers/dev-cotlet-tradify/tradify-api-mcp#diagnostics

## Score history

- 2026-11-05: 63
- 2026-11-04: 78
- 2026-11-03: 78
- 2026-11-02: 63
- 2026-11-01: 78
- 2026-10-31: 78
- 2026-10-30: 78
- 2026-10-29: 78
- 2026-10-28: 63
- 2026-10-27: 63
- 2026-10-26: 63
- 2026-10-25: 63
- 2026-10-24: 63

## Common questions

### What is the Tradify by Cotlet MCP server?

Tradify by Cotlet is an MCP server listed in the public MCP registry as dev.cotlet/tradify. Jobs, quotes, invoices and schedule in Tradify. This page covers its PyPI package (tradify-api-mcp).

### Is the Tradify by Cotlet MCP server safe to use?

Tradify by Cotlet scores 63 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Tradify by Cotlet MCP server expose?

Tradify by Cotlet exposes 15 tools: create_customer, create_invoice_from_quote, create_job, create_quote, get_job, and 10 more. Their descriptions and schemas cost roughly 2,528 tokens of context every time the server is loaded.

### Is the Tradify by Cotlet MCP server still maintained?

Tradify by Cotlet is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the Tradify by Cotlet MCP server under?

Tradify by Cotlet declares the PolyForm-Noncommercial-1.0.0 licence, which is not on the OSI-approved list. Read the terms before using it at work, and note this covers the source only, not the cost of any service it calls.

## Links

- PyPI project: https://pypi.org/project/tradify-api-mcp/
- Socket report: https://socket.dev/pypi/package/tradify-api-mcp
- Repository: https://github.com/cotletdev/tradify-api-mcp-server
- Website: https://cotlet.dev/integrations/tradify-api-mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/dev-cotlet-tradify/tradify-api-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/dev-cotlet-tradify/tradify-api-mcp.json
- HTML version of this page: https://verifymcp.io/servers/dev-cotlet-tradify/tradify-api-mcp