EZ@Work MCP Server (io.github.eranfinish/ezatwork)

The EZ@Work MCP server connects EZ@Work business management to MCP-compatible AI tools. It manages clients, projects, time, and invoices for freelancers, lawyers, agencies, and service businesses, exposing read tools for listing records and write tools for logging time and creating invoice drafts.

🛠️ Key Features

Manage clients/customers via list_clients (Read)
Manage projects/cases/work orders via list_projects (Read)
Log billable hours to a project via log_time_entry (Write)
Create a draft invoice via create_invoice (Write); auto currency/language/VAT

🚀 Use Cases

Retrieve client and project lists for reference in AI workflows
Record billable time against existing projects
Generate draft invoices aligned with EZ@Work settings

⚡ Developer Benefits

MCP tool integration for listing and write operations
Tool create_invoice supports auto currency/language/VAT for invoices

⚠️ Limitations

Documented tools are limited to v1: list_clients, list_projects, log_time_entry, create_invoice

EZ@Work MCP Server

Connect EZ@Work — all-in-one business management for freelancers, lawyers, agencies, and service businesses — to Claude, Gemini, Cursor, and any MCP-compatible AI.

Tools (v1)

Tool	Description	Type
`list_clients`	List your clients/customers	Read
`list_projects`	List your projects/cases/work orders	Read
`log_time_entry`	Log billable hours to a project	Write
`create_invoice`	Create a draft invoice (auto currency/language/VAT)	Write

Setup

Claude Desktop / Claude.ai (OAuth — recommended)

Settings → Connectors → Add custom connector

URL: https://mcp.ezatwork.com/mcp
Authentication: OAuth (automatic)

Claude Code / Cursor / MCP Inspector (API token)

Create a free EZ@Work account at https://app.ezatwork.com
Generate an API token at https://app.ezatwork.com/settings/api-tokens
Connect to https://mcp.ezatwork.com/mcp with header Authorization: Bearer ezw_pat_...

Local testing with MCP Inspector:

bash

npx @modelcontextprotocol/inspector

Connect to http://localhost:8080/mcp with header Authorization: Bearer ezw_pat_...

Security

Your data stays in your EZ@Work account
OAuth mode: Google identity → EZ@Work account lookup; no credentials stored in the MCP
API token mode: scoped permissions — grant only what you need; mandatory expiration
Authorization is verified on every request

Privacy Policy

https://www.ezatwork.com/privacy

Universal Design

EZ@Work adapts to your business type: a lawyer sees "cases," a freelancer sees "projects," a service business sees "work orders." Currency, language (24 supported), and tax rules auto-detect from your profile — no configuration needed in the MCP.

Development

Run locally

bash

python -m venv .venv
source .venv/bin/activate  # Windows: .venv\Scripts\activate
pip install -e .

cp .env.example .env
# Edit .env: EZ_API_BASE=http://localhost:5000 for local backend

python -m ezatwork_mcp.server
# Server starts at http://localhost:8080/mcp

Run tests

bash

pip install pytest pytest-asyncio
pytest tests/

Docker

bash

docker build -t ezatwork-mcp .
docker run -p 8080:8080 -e EZ_API_BASE=https://api.ezatwork.com ezatwork-mcp

Deploy to Cloud Run

bash

gcloud run deploy ezatwork-mcp \
  --source . \
  --region europe-west1 \
  --project ezatwork-production \
  --allow-unauthenticated \
  --port 8080 \
  --update-env-vars "EZ_API_BASE=https://api.ezatwork.com,MCP_BASE_URL=https://mcp.ezatwork.com" \
  --update-secrets "GOOGLE_CLIENT_ID=ezmcp-google-client-id:latest" \
  --update-secrets "GOOGLE_CLIENT_SECRET=ezmcp-google-client-secret:latest" \
  --update-secrets "EZ_MCP_MASTER_TOKEN=ezmcp-master-token:latest"

--allow-unauthenticated is correct — auth is enforced at the MCP layer (OAuth or API token), not at the Cloud Run IAM level.

Technical notes

Transport: Streamable HTTP (/mcp endpoint)
Library: fastmcp 3.3.1
Auth (OAuth): GoogleProvider from fastmcp.server.auth.providers.google
Auth (token): get_http_headers() from fastmcp.server.dependencies
Dual-auth: OAuth active when GOOGLE_CLIENT_ID + GOOGLE_CLIENT_SECRET + MCP_BASE_URL are set
Backend: GET /api/users/me for locale; GET /api/internal/users/by-email for OAuth→user mapping
Time entries: POST /api/timeentry with isBillable field
Invoices: POST /api/invoices with computed dueDate and total per item

Built by

EZ@Work — the business OS for independents.

EZ@Work