Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Autotask

OCI · GHCR.IO/WYRE-AI/AUTOTASK-MCP

MCP server for Kaseya Autotask PSA — companies, tickets, projects, time entries, and more.

+40 this week 49 Trust /100

Last scanned (12 hours ago)

Scores higher than 71% of OCI servers

Category Project Management

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
Provenance & Transparency45
Schema Quality & AI Usability81
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 15370 tokens (~130/item across 118 items; 110 tools + 8 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management57
  • Stability observed for 17 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage97
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 92% of tool parameters carry a description.Partial
Tool Safety90
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 6 of 10 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "autotask_get_ticket_charge" implies "charge" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Partial
  • An AI judge read all 112 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
  • Supports UI / widget rendering.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 18 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

  • 16 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.

  • 15 Oct 26 +38
    • Injection markers: unverified → pass ▲ security
    • Tool coverage: unverified → 100 ▲ functional
    • Schema quality: unverified → 100 ▲ functional
    • MCP protocol: unverified → pass ▲ functional
    • Stability: unverified → 0.47 ▲ functional
    • Package version: v2.39.0 → v2.39.7 functional
  • 14 Oct 26 0
    • Package version: v2.39.5 → v2.39.7 functional
    • Package version: v2.39.5 → v2.39.6 functional
  • 13 Oct 26 0
    • Package version: v2.39.0 → v2.39.5 functional
  • 12 Oct 26 0
    • Package version: v2.39.4 → v2.39.5 functional
  • 10 Oct 26 0
    • Package version: v2.39.2 → v2.39.4 functional
  • 7 Oct 26 −32
    • Tool safety: pass → unverified ▼ security
    • Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • Schema quality: 100 → unverified ▼ functional
    • Package version: v2.39.0 → v2.39.2 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 18 Oct 2026 · Analysed oci/ghcr.io/wyre-ai/autotask-mcp@v2.39.7

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem oci
Reason No attestation published

Background: How many MCP packages publish verified provenance →

MCP tools · 110 exposed · ~14,716 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
autotask_update_contact ~242

Update contact record. Only provided fields are changed.

NameTypeReqDescription
addressLinestring–Address line (primary)
addressLine1string–Address line 1 (secondary)
citystring–City
countryIDnumber–Country ID (Autotask Countries entity)
emailAddressstring–Primary email address
firstNamestring––
idnumberyesContact ID to update
isActiveboolean–Whether the contact is active
lastNamestring––
mobilePhonestring–Mobile phone number
phonestring–Primary phone number
primaryContactboolean–Whether this contact is the primary contact for their company
statestring–State/province
titlestring–Job title
userDefinedFieldsarray–User-defined (custom) fields for the contact, as an array of { name, value } objects matching the Autotask REST API shape. Contacts support UDFs (hasUserDefinedFields: true).
zipCodestring–Postal/ZIP code

No output schema declared.

No examples provided.

autotask_update_contract ~485

Update an existing Contract in Autotask (PATCH). Pass only fields you want to change; everything except id is optional. status: 1=In Effect, 0=Inactive.

NameTypeReqDescription
billToCompanyContactIDnumber–Bill-to contact ID
billToCompanyIDnumber–Bill-to company ID
billingPreferencenumber–Billing preference picklist ID
companyIDnumber–Company ID
contactIDnumber–Primary contact ID
contractCategorynumber–Contract category picklist ID
contractExclusionSetIDnumber–Contract exclusion set ID
contractNamestring–Contract name
contractNumberstring–External-facing contract number
contractPeriodTypenumber–Period type picklist ID
contractTypenumber–Contract type picklist ID
descriptionstring–Contract description / notes
endDatestring–Contract end date (ISO YYYY-MM-DD)
estimatedCostnumber–Estimated cost
estimatedHoursnumber–Estimated hours
estimatedRevenuenumber–Estimated revenue
exclusionContractIDnumber–Exclusion contract ID
idnumberyesContract ID to update
internalCurrencyOverageBillingRatenumber–Overage rate in internal currency
internalCurrencySetupFeenumber–Setup fee in internal currency
isDefaultContractboolean–Whether this is the default contract for the company
opportunityIDnumber–Originating opportunity ID
organizationalLevelAssociationIDnumber–Org level association ID
overageBillingRatenumber–Overage billing rate
purchaseOrderNumberstring–Customer purchase order number
renewedContractIDnumber–ID of the contract this renewed
serviceLevelAgreementIDnumber–SLA ID
setupFeenumber–Setup fee amount
setupFeeBillingCodeIDnumber–Billing code ID for the setup fee
startDatestring–Contract start date (ISO YYYY-MM-DD)
statusnumber–Contract status (1=In Effect, 0=Inactive)
timeReportingRequiresStartAndStopTimesnumber–Whether time entries require start/stop times

No output schema declared.

No examples provided.

autotask_update_contract_service ~146

Update an existing ContractService line on a Contract. Pass only fields you want to change.

NameTypeReqDescription
adjustedPricenumber–Adjusted price
contractIDnumberyesParent Contract ID
idnumberyesContractService record ID to update
internalCurrencyUnitPricenumber–Unit price in internal currency
invoiceDescriptionstring–Override invoice description for this line
quoteItemIDnumber–Originating quote item ID
serviceIDnumber–Service catalog ID
unitCostnumber–Unit cost for the service line
unitPricenumber–Unit price for the service line

No output schema declared.

No examples provided.

autotask_update_opportunity ~690

Update an existing opportunity in Autotask. Only the fields you provide will be updated. Autotask derives amount (total revenue) and cost from the per-period fields (onetimeRevenue, monthlyRevenue, onetimeCost, monthlyCost, etc.), so change revenue and cost through those. Setting amount or cost directly replaces the whole breakdown: the total becomes one-time and any recurring revenue or cost is cleared. Setting useQuoteTotals=true replaces revenue and cost with the primary quote's totals.

NameTypeReqDescription
amountnumber–Total revenue. Setting this replaces the revenue breakdown: onetimeRevenue becomes this value and recurring revenue is cleared. To keep recurring revenue, set the per-period fields instead.
contactIDnumber–Contact ID. Must be an active contact at the opportunity's company.
costnumber–Total cost. Setting this replaces the cost breakdown: onetimeCost becomes this value and recurring cost is cleared. To keep recurring cost, set the per-period fields instead.
descriptionstring–Opportunity description
lossReasonnumber–Loss reason picklist value ID, for a lost opportunity (use autotask_get_field_info to find valid values)
lossReasonDetailstring–Loss reason detail (max 500 characters)
monthlyCostnumber–Monthly cost
monthlyRevenuenumber–Monthly revenue
nextStepstring–Next step (max 500 characters)
onetimeCostnumber–One-time cost
onetimeRevenuenumber–One-time revenue
opportunityCategoryIDnumber–Opportunity category picklist value ID
opportunityIdnumberyesThe ID of the opportunity to update
ownerResourceIDnumber–Owner resource ID (the sales rep or account manager)
probabilitynumber–Win probability percentage (0-100)
projectedCloseDatestring–Projected close date (YYYY-MM-DD). Must not be before the start date.
quarterlyCostnumber–Quarterly cost
quarterlyRevenuenumber–Quarterly revenue
semiannualCostnumber–Semi-annual cost
semiannualRevenuenumber–Semi-annual revenue
stagenumber–Stage picklist value ID (use autotask_get_field_info to find valid values)
statusnumber–Status: 0=Not Ready To Buy, 1=Active, 2=Lost, 3=Closed, 4=Implemented
titlestring–Opportunity name/title
totalAmountMonthsnumber–Number of months the recurring revenue/cost is totalled over (e.g., 12 for annual)
useQuoteTotalsboolean–Take revenue and cost from the primary quote. Setting true overwrites every revenue and cost field; with no quote attached, they all become 0.
userDefinedFieldsarray–User-defined field values to set on the opportunity (Autotask REST-native shape)
winReasonnumber–Win reason picklist value ID, for a won opportunity (use autotask_get_field_info to find valid values)
winReasonDetailstring–Win reason detail (max 500 characters)
yearlyCostnumber–Yearly cost
yearlyRevenuenumber–Yearly revenue

No output schema declared.

No examples provided.

autotask_update_project ~278

Update an existing project in Autotask. Only the fields you provide will be updated. Common use case: set status=5 to mark a project Complete.

NameTypeReqDescription
assignedResourceIDnumber–Primary assigned resource (project manager) ID. Note: Autotask may also require assignedResourceRoleID to be set alongside this field.
assignedResourceRoleIDnumber–Role ID for the assigned resource. Required by Autotask when assignedResourceID is provided.
departmentIDnumber–Department ID owning the project
descriptionstring–Project description
endDateTimestring–Project end date/time (ISO 8601)
estimatedTimenumber–Estimated time for the project, in hours
projectIdnumberyesThe ID of the project to update
projectLeadResourceIDnumber–Project lead resource ID
projectNamestring–Project name
startDateTimestring–Project start date/time (ISO 8601)
statusnumber–Project status (1=New, 2=In Progress, 5=Complete). Set to 5 to mark the project complete.
userDefinedFieldsarray–User-defined field values to set on the project (Autotask REST-native shape)

No output schema declared.

No examples provided.

autotask_update_quote_item ~115

Update an existing quote item (quantity, price, etc.)

NameTypeReqDescription
isOptionalboolean–Updated optional status
lineDiscountnumber–Updated line discount
percentageDiscountnumber–Updated percentage discount
quantitynumber–Updated quantity
quoteItemIdnumberyesThe quote item ID to update
sortOrderIDnumber–Updated sort order
unitDiscountnumber–Updated per-unit discount
unitPricenumber–Updated unit price

No output schema declared.

No examples provided.

autotask_update_service_call ~138

Update an existing service call. Use this to change status, times, or description. To complete/close a service call, set complete: true or update the status.

NameTypeReqDescription
completeboolean–Set to true to mark the service call as complete/closed
descriptionstring–Updated description
endDateTimestring–Updated end date/time (ISO 8601 format)
serviceCallIdnumberyesThe service call ID to update
startDateTimestring–Updated start date/time (ISO 8601 format)
statusnumber–Updated status picklist ID

No output schema declared.

No examples provided.

autotask_update_ticket ~367

Update ticket record. Only provided fields are changed.

NameTypeReqDescription
assignedResourceIDnumber–Assigned resource ID. Autotask also requires that resource's role: pass assignedResourceRoleID or assignedResourceRoleName, or omit both and the resource's only active role is used (several roles = a…
assignedResourceRoleIDnumber–Role ID for the assigned resource — one of that resource's roles (see autotask_search_resource_roles). Resolved automatically when omitted.
assignedResourceRoleNamestring–Name of the assigned resource's role, e.g. "Help Desk", used instead of assignedResourceRoleID when the resource holds several roles.
contactIDnumber–Contact ID for the ticket
descriptionstring––
dueDateTimestring–Due date and time in ISO 8601 format (e.g. 2026-03-15T17:00:00Z)
issueTypenumber–First-level issue type ID (picklist). Required context for subIssueType. Use autotask_get_field_info (entityType "Tickets", fieldName "issueType") to discover valid values.
prioritynumber–Ticket priority ID (use autotask_list_ticket_priorities to find valid IDs)
statusnumber–Ticket status ID (use autotask_list_ticket_statuses to find valid IDs)
subIssueTypenumber–Sub issue type ID (picklist). Must be valid for the selected issueType. Use autotask_get_field_info (entityType "Tickets", fieldName "subIssueType") to discover valid values.
ticketIdnumberyesThe ID of the ticket to update
titlestring––

No output schema declared.

No examples provided.

autotask_update_ticket_charge ~111

Update an existing ticket charge. Only fields provided will be changed.

NameTypeReqDescription
billableToAccountboolean–Updated billable status
chargeIdnumberyesThe charge ID to update
descriptionstring–Updated description
namestring–Updated charge name
statusnumber–Updated status
unitCostnumber–Updated unit cost
unitPricenumber–Updated unit price
unitQuantitynumber–Updated quantity

No output schema declared.

No examples provided.

autotask_update_ticket_checklist_item ~105

Update a checklist item on a ticket — edit text, mark complete/incomplete, or change position.

NameTypeReqDescription
isCompletedboolean–Mark the item complete (true) or incomplete (false)
itemIdnumberyesThe checklist item ID to update
itemNamestring–New text for the checklist item
positionnumber–New ordering position for the item
ticketIdnumberyesThe parent ticket ID

No output schema declared.

No examples provided.

Install

How do I install the Autotask MCP server?

Autotask runs locally as a container image, launched with docker run --rm -i -e AUTOTASK_USERNAME -e AUTOTASK_SECRET -e AUTOTASK_INTEGRATION_CODE -e AUTOTASK_API_URL -e MCP_TRANSPORT -e AUTH_MODE -e LOG_LEVEL ghcr.io/wyre-ai/autotask-mcp:v2.39.7. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

oci · ghcr.io/wyre-ai/autotask-mcp

# add to Claude Code
claude mcp add wyre-ai-autotask-mcp -- docker run --rm -i -e AUTOTASK_USERNAME -e AUTOTASK_SECRET -e AUTOTASK_INTEGRATION_CODE -e AUTOTASK_API_URL -e MCP_TRANSPORT -e AUTH_MODE -e LOG_LEVEL ghcr.io/wyre-ai/autotask-mcp:v2.39.7

This image reads AUTOTASK_USERNAME, AUTOTASK_SECRET, AUTOTASK_INTEGRATION_CODE, AUTOTASK_API_URL, MCP_TRANSPORT, AUTH_MODE and LOG_LEVEL. Set them in your client's env block for this server; docker run -e passes each one through to the container.

Common questions

What is the Autotask MCP server?

Autotask is an MCP server listed in the public MCP registry as io.github.WYRE-AI/autotask-mcp. MCP server for Kaseya Autotask PSA, companies, tickets, projects, time entries, and more. This page covers its container image (ghcr.io/wyre-ai/autotask-mcp).

Is the Autotask MCP server safe to use?

Autotask scores 49 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Autotask MCP server expose?

Autotask exposes 110 tools: autotask_test_connection, autotask_search_companies, autotask_create_company, autotask_update_company, autotask_get_company_site_configuration, and 105 more. Their descriptions and schemas cost roughly 14,716 tokens of context every time the server is loaded.

Is the Autotask MCP server still maintained?

Autotask is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Autotask MCP server under?

Autotask declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.