Teamleader Focus MCP by usefulapi

io.usefulapi/teamleader-focususefulapi.iostreamable-httpv1.0.0Scanned 1 hour ago

Read Teamleader Focus contacts, companies, deals, invoices, projects; create deals, tasks.

22 tools: 5 can delete or cancel things and 17 only read.

Reads private data · 6
Reads text others write · 22
Can send data out · 0
No findings

Anlyon alternative

5 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

22 tools

Deletes or cancels 5Removes, cancels or revokes something.Claude Code: deny

teamleader_add_noteWRITE: add a note to a contact, company, deal, invoice, quotation, project and more, e.g.Reads text others writeNo findings
Why it is in this group
- The name "teamleader_add_note" says "add": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: add a note to a contact, company, deal, invoice, quotation, project and more, e.g. a call summary. Optionally notify colleagues. Returns the new note's id. Teamleader: notes.create.
Annotations the server declares
- title: Add a note
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
teamleader_create_companyWRITE: create a new company in Teamleader.Reads text others writeNo findings
Why it is in this group
- The name "teamleader_create_company" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: create a new company in Teamleader. Only name is required. Returns the new company's id. Teamleader: companies.add.
Annotations the server declares
- title: Create a company
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
teamleader_create_contactWRITE: create a new contact (person) in Teamleader.Reads text others writeNo findings
Why it is in this group
- The name "teamleader_create_contact" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: create a new contact (person) in Teamleader. Only last_name is required. Returns the new contact's id. Teamleader: contacts.add.
Annotations the server declares
- title: Create a contact
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
teamleader_create_dealWRITE: create a new deal for an existing contact or company.Reads text others writeNo findings
Why it is in this group
- The name "teamleader_create_deal" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: create a new deal for an existing contact or company. Requires the customer and a title; optionally a phase (see teamleader_list_deal_phases), value, probability and expected closing date. Returns the new deal's id. Teamleader: deals.create.
Annotations the server declares
- title: Create a deal
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
teamleader_create_taskWRITE: create a task (to-do).Reads text others writeNo findings
Why it is in this group
- The name "teamleader_create_task" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: create a task (to-do). Requires a title, a due date and a work type id (see teamleader_list_work_types). Optionally assign it to a user or team and link a customer, deal, project or ticket. Returns the new task's id. Teamleader: tasks.create.
Annotations the server declares
- title: Create a task
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true

Only reads 17Looks things up and changes nothing.Show 17 read-only tools

teamleader_get_companyFetch one company in full: addresses, VAT number, responsible user, related contacts and companies, tags, custom fields and remarks.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "teamleader_get_company" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "fetch" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Fetch one company in full: addresses, VAT number, responsible user, related contacts and companies, tags, custom fields and remarks. Teamleader: companies.info.
Annotations the server declares
- title: Get a company
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_get_contactFetch one contact in full: emails, telephones, addresses, linked companies (with position), tags, custom fields and remarks.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "teamleader_get_contact" says "get": a word for reading.
What it can reach
- private-dataThe name "teamleader_get_contact" says "get" and "contact": it reads contacts.
- private-dataThe description's first sentence says "fetch" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "fetch" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Fetch one contact in full: emails, telephones, addresses, linked companies (with position), tags, custom fields and remarks. Teamleader: contacts.info.
Annotations the server declares
- title: Get a contact
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_get_current_userFetch the Teamleader user the sign-in belongs to: name, email, account id, language, time zone and teams.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "teamleader_get_current_user" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "fetch" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "fetch" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Fetch the Teamleader user the sign-in belongs to: name, email, account id, language, time zone and teams. A cheap way to confirm the connection works. Teamleader: users.me.
Annotations the server declares
- title: Get the current user
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_get_dealFetch one deal in full: lead (customer + contact person), value, probability, current phase, phase history, linked quotations, responsible users, lost reason and custom fields.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "teamleader_get_deal" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "fetch" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Fetch one deal in full: lead (customer + contact person), value, probability, current phase, phase history, linked quotations, responsible users, lost reason and custom fields. Teamleader: deals.info.
Annotations the server declares
- title: Get a deal
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_get_invoiceFetch one invoice in full: invoicee, grouped line items, discounts, totals and taxes, payment term, payments received, payment reference and Peppol status.Reads text others writeNo findings
Why it is in this group
- The name "teamleader_get_invoice" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Fetch one invoice in full: invoicee, grouped line items, discounts, totals and taxes, payment term, payments received, payment reference and Peppol status. Teamleader: invoices.info.
Annotations the server declares
- title: Get an invoice
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_companiesList or search companies (organisations).Reads text others writeNo findings
Why it is in this group
- The name "teamleader_list_companies" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List or search companies (organisations). Filter by search term, primary email, VAT number, tags, status or last update. Teamleader: companies.list.
Annotations the server declares
- title: List companies
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_contactsList or search contacts (people).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "teamleader_list_contacts" says "list": a word for reading.
What it can reach
- private-dataThe name "teamleader_list_contacts" says "list" and "contact": it reads contacts.
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List or search contacts (people). Filter by search term, primary email, linked company, tags, status or last update. Teamleader: contacts.list.
Annotations the server declares
- title: List contacts
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_deal_phasesList the phases (stages) of deal pipelines, in flow order, with their probability.Reads text others writeNo findings
Why it is in this group
- The name "teamleader_list_deal_phases" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the phases (stages) of deal pipelines, in flow order, with their probability. Use a phase id when creating a deal. Teamleader: dealPhases.list.
Annotations the server declares
- title: List deal phases
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_deal_pipelinesList the sales pipelines; the reply's meta names the default pipeline.Reads text others writeNo findings
Why it is in this group
- The name "teamleader_list_deal_pipelines" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "reply": it reads comments, which other people can write.
Description, as the server wrote it
List the sales pipelines; the reply's meta names the default pipeline. Use a pipeline id with teamleader_list_deal_phases. Teamleader: dealPipelines.list.
Annotations the server declares
- title: List deal pipelines
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_dealsList or search deals (sales opportunities).Reads text others writeNo findings
Why it is in this group
- The name "teamleader_list_deals" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List or search deals (sales opportunities). Filter by customer, phase, pipeline, status, responsible user, expected closing date or last update. Teamleader: deals.list.
Annotations the server declares
- title: List deals
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_invoicesList or search outgoing invoices.Reads text others writeNo findings
Why it is in this group
- The name "teamleader_list_invoices" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List or search outgoing invoices. Filter by term, invoice number, status (draft / outstanding / matched = paid), customer, deal, project, invoice date range or last update. Returns totals, due date and paid state. Teamleader: invoices.list.
Annotations the server declares
- title: List invoices
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_projectsList projects (the projects module).Reads text others writeNo findings
Why it is in this group
- The name "teamleader_list_projects" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List projects (the projects module). Filter by term, status, customer or deal. Returns budget, time tracked, billed/unbilled amounts, dates and owners. Teamleader: projects-v2/projects.list.
Annotations the server declares
- title: List projects
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_tasksList tasks (to-dos).Reads text others writeNo findings
Why it is in this group
- The name "teamleader_list_tasks" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List tasks (to-dos). Filter by assigned user, completed, scheduled, due date range, search term or customer. Teamleader: tasks.list.
Annotations the server declares
- title: List tasks
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_ticketsList support tickets: subject, status, assignee, customer, project and last message time.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "teamleader_list_tickets" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "message": it reads messages.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe name "teamleader_list_tickets" says "list" and "ticket": it reads issues, which other people can write.
- untrusted-inputThe description's first sentence says "list" and "ticket": it reads issues, which other people can write.
Description, as the server wrote it
List support tickets: subject, status, assignee, customer, project and last message time. Filter by customer, project or assignee. Teamleader: tickets.list.
Annotations the server declares
- title: List tickets
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_time_trackingList tracked time entries: who, when, duration (seconds), work type, subject, invoiceable flag and hourly rate.Reads text others writeNo findings
Why it is in this group
- The name "teamleader_list_time_tracking" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List tracked time entries: who, when, duration (seconds), work type, subject, invoiceable flag and hourly rate. Filter by user, start range or subject. Teamleader: timeTracking.list.
Annotations the server declares
- title: List time tracking
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_usersList the users (colleagues) in the Teamleader account.Reads text others writeNo findings
Why it is in this group
- The name "teamleader_list_users" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the users (colleagues) in the Teamleader account. Use it to find a user id to assign deals or tasks to. Teamleader: users.list.
Annotations the server declares
- title: List users
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
teamleader_list_work_typesList work types (e.g.Reads text others writeNo findings
Why it is in this group
- The name "teamleader_list_work_types" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List work types (e.g. Design, Development), alphabetically. A work type id is REQUIRED to create a task. Teamleader: workTypes.list.
Annotations the server declares
- title: List work types
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data6: Reads files, mail, messages, databases, secrets, calendars or repositories.; teamleader_get_company
teamleader_get_contact
teamleader_get_current_user
teamleader_get_deal
teamleader_list_contacts
teamleader_list_tickets
Reads text others write22: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; teamleader_add_note
teamleader_create_company
teamleader_create_contact
teamleader_create_deal
teamleader_create_task
teamleader_get_company
teamleader_get_contact
teamleader_get_current_user
teamleader_get_deal
teamleader_get_invoice
teamleader_list_companies
teamleader_list_contacts
and 10 more
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http teamleader-focus https://teamleader-focus.usefulapi.io/mcp

claude mcp add --transport http teamleader-focus https://teamleader-focus.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__teamleader-focus__teamleader_get_current_user",
      "mcp__teamleader-focus__teamleader_list_users",
      "mcp__teamleader-focus__teamleader_list_contacts",
      "mcp__teamleader-focus__teamleader_get_contact",
      "mcp__teamleader-focus__teamleader_list_companies",
      "mcp__teamleader-focus__teamleader_get_company",
      "mcp__teamleader-focus__teamleader_list_deals",
      "mcp__teamleader-focus__teamleader_get_deal",
      "mcp__teamleader-focus__teamleader_list_deal_pipelines",
      "mcp__teamleader-focus__teamleader_list_deal_phases",
      "mcp__teamleader-focus__teamleader_list_invoices",
      "mcp__teamleader-focus__teamleader_get_invoice",
      "mcp__teamleader-focus__teamleader_list_projects",
      "mcp__teamleader-focus__teamleader_list_tasks",
      "mcp__teamleader-focus__teamleader_list_time_tracking",
      "mcp__teamleader-focus__teamleader_list_tickets",
      "mcp__teamleader-focus__teamleader_list_work_types"
    ],
    "ask": [],
    "deny": [
      "mcp__teamleader-focus__teamleader_create_contact",
      "mcp__teamleader-focus__teamleader_create_company",
      "mcp__teamleader-focus__teamleader_create_deal",
      "mcp__teamleader-focus__teamleader_create_task",
      "mcp__teamleader-focus__teamleader_add_note"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as teamleader-focus. Review it before you use it.

Capability tags behind 22 rules

mcp__teamleader-focus__teamleader_get_current_user private-data, untrusted-input
mcp__teamleader-focus__teamleader_list_users untrusted-input
mcp__teamleader-focus__teamleader_list_contacts private-data, untrusted-input
mcp__teamleader-focus__teamleader_get_contact private-data, untrusted-input
mcp__teamleader-focus__teamleader_list_companies untrusted-input
mcp__teamleader-focus__teamleader_get_company private-data, untrusted-input
mcp__teamleader-focus__teamleader_list_deals untrusted-input
mcp__teamleader-focus__teamleader_get_deal private-data, untrusted-input
mcp__teamleader-focus__teamleader_list_deal_pipelines untrusted-input
mcp__teamleader-focus__teamleader_list_deal_phases untrusted-input
mcp__teamleader-focus__teamleader_list_invoices untrusted-input
mcp__teamleader-focus__teamleader_get_invoice untrusted-input
mcp__teamleader-focus__teamleader_list_projects untrusted-input
mcp__teamleader-focus__teamleader_list_tasks untrusted-input
mcp__teamleader-focus__teamleader_list_time_tracking untrusted-input
mcp__teamleader-focus__teamleader_list_tickets private-data, untrusted-input
mcp__teamleader-focus__teamleader_list_work_types untrusted-input
mcp__teamleader-focus__teamleader_create_contact untrusted-input
mcp__teamleader-focus__teamleader_create_company untrusted-input
mcp__teamleader-focus__teamleader_create_deal untrusted-input
mcp__teamleader-focus__teamleader_create_task untrusted-input
mcp__teamleader-focus__teamleader_add_note untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/teamleader-focus/verify?hash=eab394222607975838317a6afd427b6b2c4723215ddcb5ba4881c6ac2a188389" | jq -e '.changed == false'

Pinned hash eab394222607, from Oct 23, 2026, 16:25 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/teamleader-focus/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/teamleader-focus.svg)](https://anlyon.dev/servers/io.usefulapi/teamleader-focus)

Source: MCP Registry · repository. Synced Oct 23, 2026, 16:25 UTC.