Skip to content
anlyon.dev

io.github.theluckystrike/pomodoro-timer

io.github.theluckystrike/pomodoro-timertheluckystrikestreamable-httpv0.22.0Scanned

Pomodoro work sessions from your AI chat: timed focus blocks, session logs.

20 tools: 1 can delete or cancel things, 4 do something that can't be undone, 11 change things and 4 only read.

Tools: 1 delete, 4 irreversible, 11 write, 4 read.
  • Reads private data · 2
  • Reads text others write · 1
  • Can send data out · 4
  • 3 findings

Tools listed without sign-in. Remote posture

Anlyon alternative

16 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

20 tools

Deletes or cancels 1Claude Code: deny
  • entry_deleteDelete one logged entry by id and report the project and hours removed.No findings

    Why it is in this group

    • The name "entry_delete" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete one logged entry by id and report the project and hours removed. It never touches a running timer. A billed entry goes too, losing the invoice record, so correct one with entry_edit instead.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
Can't be undone 4Claude Code: ask
  • entry_mark_billedClose the loop after an invoice is issued: stamp the tracked hours that went on it with the invoice number, so report and invoice_summary stop offering them and the same hours are …Can send data outNo findings

    Why it is in this group

    • The name "entry_mark_billed" says "mark": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.
    Description, as the server wrote it
    Close the loop after an invoice is issued: stamp the tracked hours that went on it with the invoice number, so report and invoice_summary stop offering them and the same hours are never billed twice.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • export_csvCall this tool to export the timesheet to a CSV file (excel-friendly) you can hand to a bookkeeper: one row per entry with hours, billable, rate, currency and amount.Can send data outNo findings

    Why it is in this group

    • The description's first verb is "call": a word for a change.
    • The input addresses people (input.to): what it sends cannot be taken back.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.
    Description, as the server wrote it
    Call this tool to export the timesheet to a CSV file (excel-friendly) you can hand to a bookkeeper: one row per entry with hours, billable, rate, currency and amount. Returns the file path written.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • invoice_summaryTurn tracked billable time into invoice lines for one project: hours, hourly rate, amount per task and the total, one line per rate so two rates never average.Can send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "invoice_summary" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Turn tracked billable time into invoice lines for one project: hours, hourly rate, amount per task and the total, one line per rate so two rates never average. Hours already marked billed are left out. Free: last 7 days.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • reportTimesheet report: total tracked hours and billable money for a period, optionally grouped by (group by) project, day, task or tag - hours per project, how much to bill.Can send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "report" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Timesheet report: total tracked hours and billable money for a period, optionally grouped by (group by) project, day, task or tag - hours per project, how much to bill. Omit group_by for the plain total per currency.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 11Claude Code: ask
  • entry_addLog time already worked as one entry and return its id, duration and amount.No findings

    Why it is in this group

    • The name "entry_add" says "add": a word for a change.
    Description, as the server wrote it
    Log time already worked as one entry and return its id, duration and amount. Give start plus end or minutes. rate is hourly in MAJOR units and is frozen on the entry, so a later rate change never moves it.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • entry_editChange one logged entry by id; only the fields you pass move.No findings

    Why it is in this group

    • The name "entry_edit" says "edit": a word for a change.
    Description, as the server wrote it
    Change one logged entry by id; only the fields you pass move. minutes keeps start and moves end, an end at or before start is refused, tags REPLACES the list, and rate is hourly in MAJOR units.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • entry_logLog work time for a client/project in one step: minutes worked plus an optional note.Reads private data1 finding

    Why it is in this group

    • The name "entry_log" says "log": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    What it can reach

    • private-dataThe description's first sentence says "log" and "note": it reads notes.

    Findings

    • Warn

      The server marks "entry_log" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "entry_log" says "log": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Log work time for a client/project in one step: minutes worked plus an optional note. The entry starts now minus the minutes, so it lands on today's day and week summaries.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • license_activateTurn Pro on for this connection with key, an MCPL1.<payload>.<signature> issued at checkout for this server or the bundle.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Turn Pro on for this connection with key, an MCPL1.<payload>.<signature> issued at checkout for this server or the bundle. Data under your token stays; a wrong or expired key changes nothing. license_status confirms it.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • project_set_rateSet the hourly rate and currency used to turn tracked hours into money for a project or client.No findings

    Why it is in this group

    • The name "project_set_rate" says "set": a word for a change.
    Description, as the server wrote it
    Set the hourly rate and currency used to turn tracked hours into money for a project or client. Returns the new rate and, when re-rating is asked for, how many already logged entries changed.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • summary_clientAll-time totals for one client/project: hours, entry count and billable amount, with a per-day breakdown.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    All-time totals for one client/project: hours, entry count and billable amount, with a per-day breakdown.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • summary_dayTotal hours logged for one calendar day (local date, default today), broken down per project.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Total hours logged for one calendar day (local date, default today), broken down per project.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • summary_weekTotal hours logged in the week containing today (Mon-Sun, local dates), broken down per project.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Total hours logged in the week containing today (Mon-Sun, local dates), broken down per project.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • target_setSet a weekly hours goal used by target_check.No findings

    Why it is in this group

    • The name "target_set" says "set": a word for a change.
    Description, as the server wrote it
    Set a weekly hours goal used by target_check. Stored locally.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • timer_startStart a stopwatch for work on a project and return the start time.No findings

    Why it is in this group

    • The name "timer_start" says "start": a word for a change.
    Description, as the server wrote it
    Start a stopwatch for work on a project and return the start time. Only one runs at a time: a new one stops and logs the previous, naming it. rate is an hourly rate in MAJOR units for this timer only.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • timer_stopStop the running timer and log it as one entry.No findings

    Why it is in this group

    • The name "timer_stop" says "stop": a word for a change.
    Description, as the server wrote it
    Stop the running timer and log it as one entry. Returns the duration, the money at the rate in force and the new entry id. With no timer running it says so and writes nothing.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 4Show 4 read-only tools
  • entry_listList logged entries as a table of id, day, start, project, task, hours, billable, tags and note, newest first, with total hours.Reads private dataNo findings

    Why it is in this group

    • The name "entry_list" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "table": it reads databases.
    Description, as the server wrote it
    List logged entries as a table of id, day, start, project, task, hours, billable, tags and note, newest first, with total hours. Free reads the last 7 days and says so; Pro reads the whole history.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • license_statusReport this endpoint's licence state for your token as JSON: the product, the tier free or pro, why it is not Pro, and the checkout URL.Reads text others writeNo findings

    Why it is in this group

    • The name "license_status" says "status": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Report this endpoint's licence state for your token as JSON: the product, the tier free or pro, why it is not Pro, and the checkout URL. Call it to explain a free-tier refusal. No arguments, nothing changes.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • target_checkCompare hours logged this week (Mon-Sun, local dates) against the weekly target from target_set.No findings

    Why it is in this group

    • The description's first verb is "compare": a word for reading.
    Description, as the server wrote it
    Compare hours logged this week (Mon-Sun, local dates) against the weekly target from target_set.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • timer_statusReport the running timer and today's total hours.No findings

    Why it is in this group

    • The name "timer_status" says "status": a word for reading.
    Description, as the server wrote it
    Report the running timer and today's total hours. Today is the local calendar day, so a timer started at 23:30 yesterday contributes only the minutes since midnight. No arguments, and it writes nothing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

8 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 untrusted-input tool breaks every one.

Reads private data2
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write1
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out4
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__pomodoro-timer__license_status"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Tools listed without sign-in

Looked at Oct 22, 2026, 15:28 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
16
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
not observed
RFC 9728 protected resource metadata
https://mcp.zovo.one/.well-known/oauth-protected-resource
Authorization servers
https://mcp.zovo.one
Legacy HTTP+SSE transport
no
Dynamic client registration
yes
Client ID metadata documents
no
  • HighThe whole server

    The endpoint served tools/list without credentials, and the list has 16 tools that change things (1 destructive, 4 irreversible, 11 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://mcp.zovo.one/mcp/pomodoro-timer: tools/list returned 20 tools to an anonymous client, including entry_delete (destructive), report (irreversible), export_csv (irreversible), entry_mark_billed (irreversible), invoice_summary (irreversible) and 11 more

    What this check looks for

Findings

Matches of fixed checks, with the text they matched.

3 warn
  • Warnentry_log

    The server marks "entry_log" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "entry_log" says "log": a word for reading.

    What this check looks for
  • Warnreport

    The server marks "report" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • Warninvoice_summary

    The server marks "invoice_summary" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.22.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http pomodoro-timer https://mcp.zovo.one/mcp/pomodoro-timer --header 'Authorization: <your-authorization>'
claude mcp add --transport http pomodoro-timer https://mcp.zovo.one/mcp/pomodoro-timer --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__pomodoro-timer__license_status",
      "mcp__pomodoro-timer__timer_status",
      "mcp__pomodoro-timer__target_check",
      "mcp__pomodoro-timer__entry_list"
    ],
    "ask": [
      "mcp__pomodoro-timer__license_activate",
      "mcp__pomodoro-timer__timer_start",
      "mcp__pomodoro-timer__timer_stop",
      "mcp__pomodoro-timer__entry_add",
      "mcp__pomodoro-timer__entry_log",
      "mcp__pomodoro-timer__summary_day",
      "mcp__pomodoro-timer__summary_week",
      "mcp__pomodoro-timer__summary_client",
      "mcp__pomodoro-timer__target_set",
      "mcp__pomodoro-timer__entry_edit",
      "mcp__pomodoro-timer__project_set_rate",
      "mcp__pomodoro-timer__report",
      "mcp__pomodoro-timer__export_csv",
      "mcp__pomodoro-timer__entry_mark_billed",
      "mcp__pomodoro-timer__invoice_summary"
    ],
    "deny": [
      "mcp__pomodoro-timer__entry_delete"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as pomodoro-timer. Review it before you use it.

Capability tags behind 7 rules
  • mcp__pomodoro-timer__license_status untrusted-input
  • mcp__pomodoro-timer__entry_log private-data
  • mcp__pomodoro-timer__entry_list private-data
  • mcp__pomodoro-timer__report outbound
  • mcp__pomodoro-timer__export_csv outbound
  • mcp__pomodoro-timer__entry_mark_billed outbound
  • mcp__pomodoro-timer__invoice_summary outbound

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.theluckystrike/pomodoro-timer/verify?hash=6a8187a16cbbc83d23e2d091853c5406b05e38839900b5b15d40e60d680b37c5" | jq -e '.changed == false'

Pinned hash 6a8187a16cbb, from Oct 21, 2026, 19:37 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.theluckystrike/pomodoro-timer/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.github.theluckystrike/pomodoro-timer
[![anlyon.dev](https://anlyon.dev/badge/io.github.theluckystrike/pomodoro-timer.svg)](https://anlyon.dev/servers/io.github.theluckystrike/pomodoro-timer)

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:50 UTC.