Skip to main content
Glama
borgels

mcp-server-productive

by borgels

mcp-server-productive

MCP server for the Productive.io API v2 — projects, tasks, time tracking, resource planning, financials, CRM and reports for one organization.

Productive exposes about 650 operations over 132 resources. Turning those into 650 MCP tools would swamp any client's tool list, so this server is twelve tools driven by a generated registry: the tools are generic, and the registry knows what each resource really accepts.

Tools

Discoveryproductive_search_capabilities, productive_describe_resource, productive_check_connection, productive_describe_custom_fields

Readproductive_list (filters, sorts, includes, paging, and the 26 report endpoints with grouping), productive_get

Writeproductive_create, productive_update, productive_delete, productive_run_action (150 named verbs: archive, restore, approve, close, copy, finalize, send…), productive_track_time, productive_commit_operation

Per-user auth (opt-in)productive_connect, productive_status, productive_disconnect — see Authentication

Start with productive_search_capabilities. Productive's resource names are its own — a budget is a deal, a board column is a workflow_status, a timesheet approval lives on time_entries — and guessing costs calls.

Related MCP server: productive-mcp-rb2

The registry

src/productive/registry.generated.ts is derived from Productive's published OpenAPI document by scripts/generate-registry.mjs and committed, so CI never needs the network and a spec change shows up as a reviewable diff. For every resource it records the filter fields, sort keys, report group keys, includable relationships, the writable attributes for create and update with the required ones marked, and each named action.

That is what lets twelve tools stay honest. productive_describe_resource hands back the exact contract for one resource, and every argument is checked against it before a request goes out.

Regenerate with npm run registry:generate (add a path argument to use a local copy of the spec). The generator fails the build if a hand-written classification — a risk tier, an outward-facing flag, a blocked operation — no longer matches any path in the spec, so a rename upstream cannot silently drop a guard.

What the API does, as measured

Everything here was verified against a live organization, because the spec and the API disagree in places that matter.

Time is minutes. Money is minor units. A time entry of 2 is two minutes. Both come back that way too.

Unknown filters, sorts and includes fail loudly. HTTP 400 with unsupported_filter, sort_param_unsupported, unsupported_include. So validating those here is a better error, not a safety net.

Unknown write attributes fail silently. PATCH with a misspelled attribute returns HTTP 200 and changes nothing — indistinguishable from success. This server therefore refuses an attribute the resource does not declare, rather than reporting a write that did not happen. It is the single most useful thing the registry does.

There are exactly six filter operators, on every field: contains, eq, gt, lt, not_contain, not_eq. The spec lists four per field and omits gt/lt, which do work; gte, lte, in, not_in, starts_with, ends_with, blank and present are all refused with unsupported_filter_operation. There is no inclusive comparison, so an inclusive range needs the resource's own after/before or <field>_after/<field>_before filter fields.

page[size] caps at 200 and clamps silently. Asking for 500 returns 200 with no error. Results carry total and nextPage so a page is not mistaken for the whole answer.

PATCH is genuinely partial. Omitted attributes keep their values; there is no need to resend a whole record.

data.type is not checked. Patching a task with type: "projects" succeeds and applies the change. This server sends the correct type anyway.

A 403 saying the organization id "has to be provided" may mean it was wrong, not missing. The same no_organization_id code covers a missing header and an organization the token cannot reach.

A missing feature answers 404, not 403. /boards 404s on an organization without it, which reads like a broken path.

Deletes may be restorable. A deleted task appears in deleted_items with item_type and item_id and can be restored through that resource's restore action. Verified for tasks only — do not assume it holds for every type.

GET /users is the only caller-scoped endpoint. It returns exactly one record — you — and is how this server identifies a token's owner. There is no /users/me; that path 404s. Beware /organization_memberships: it is not scoped to the pinned organization, but lists the caller's memberships across every organization they belong to, so its row count is not a headcount.

No rate-limit headers. Only x-request-id, which errors from this server quote. Back off on 429 rather than probing for the limit.

Permissions

Four switches, all off by default. A read-only server is the useful, safe default.

Switch

Covers

PRODUCTIVE_ENABLE_WRITES

Master switch. Nothing is mutated without it.

PRODUCTIVE_ENABLE_FINANCIALS

Money, pricing, payroll, documents a customer receives: invoices, line items, payments, bills, expenses, purchase orders, proposals, contracts, prices, rate cards, salaries, overheads, tax rates, bank accounts, subsidiaries.

PRODUCTIVE_ENABLE_ADMIN

Access and organization-wide configuration: people, memberships, permission sets, teams, invitations, custom fields, webhooks, integrations, approval and time-tracking policies.

PRODUCTIVE_ENABLE_DELETES

Deletes, on top of the tier gate.

One master switch is not enough for Productive: the same API moves a task, issues an invoice and grants a permission set, and those are three different decisions. A server trusted to run project work should not thereby be able to send an invoice.

PRODUCTIVE_ALLOWED_RESOURCES / PRODUCTIVE_DENIED_RESOURCES narrow an instance further, and apply to reads as well — an instance scoped to time tracking should not read salaries either.

Never exposed at all, regardless of switches: passwords, sessions, organization_subscriptions, the unauthenticated public/* share links, and PATCH /users/{id}/update_password. These are absent from the registry rather than gated, so no policy bug can re-open them.

Two-step writes

Ordinary project work — a task, a time entry, a booking, a comment — is written in one call. Requiring a handshake around every time entry would make the server unusable for the thing people do most.

Everything with a wider blast radius is staged: the tool returns the exact request plus a hash and sends nothing, and productive_commit_operation runs it only if the operation comes back unaltered. That covers the financial and admin tiers, every delete, anything that leaves the organization, and every bulk_* action — those act on all records a filter matches, so they also refuse to run without an explicit filter.

Six operations are flagged outward because they reach somebody outside the organization the moment they run: invoices.send, invoices.send_einvoice, people.invite, people.resend, organizations.resend_code, and creating an invitation.

Authentication

Two modes. PRODUCTIVE_ORGANIZATION_ID is required in both, and is never a tool argument.

Each person links their own Productive token, so Productive applies their permissions and records their name on what they do.

This matters more on Productive than on most systems. Productive attributes work to people: a time entry belongs to a person_id, and every change is stamped with the token's owner in the activity log — which is the record a client invoice gets defended with. On one shared token, that log says the service account did everything.

PRODUCTIVE_PER_USER_AUTH=true
PRODUCTIVE_TRUST_FORWARDED_USER=true
PRODUCTIVE_ENCRYPTION_KEY=<min 16 chars>
PRODUCTIVE_STORE_PATH=/data/store.json
PRODUCTIVE_PUBLIC_BASE_URL=https://productive.example.com
# PRODUCTIVE_API_TOKEN deliberately unset

The flow:

  1. The caller runs productive_connect and gets a single-use link, valid 10 minutes, bound to their identity.

  2. They open it and paste a token they created in Productive under Settings → API integrations. The token goes from their browser straight to the server, so it never enters the conversation transcript — a Productive token is bearer-equivalent to their whole account, and, as measured below, commonly reaches more than one organization.

  3. Before storing it, the server calls GET /users with that token and this organization's id. One call proves three things: the token is valid, it can reach this organization, and who it belongs to. The page then confirms which account was linked.

  4. Tokens are encrypted at rest with AES-256-GCM, one row per verified identity.

Sharp edges:

  • Identity comes only from the gateway. X-MCP-User is read only when PRODUCTIVE_TRUST_FORWARDED_USER=true, never from anything the MCP client controls. Enable it only behind a gateway that sets the header from a validated token and strips a client-supplied copy — otherwise a caller can name any identity and act as them.

  • No fallback. An un-enrolled caller gets NOT_CONNECTED, never the shared token, even if PRODUCTIVE_API_TOKEN happens to be set. A fallback would hand them borrowed rights, which is the failure this mode exists to remove.

  • /productive/enroll must be reachable by the user's browser, bypassing the MCP gateway — a browser cannot carry the gateway's bearer token. Route /productive/* on PRODUCTIVE_PUBLIC_BASE_URL straight to the container. Its security is the single-use, identity-bound state token.

  • Persist PRODUCTIVE_STORE_PATH on a volume, and keep PRODUCTIVE_ENCRYPTION_KEY stable — change it and every stored token becomes undecryptable.

  • If a token's own Productive email differs from the caller's directory address, that is reported loudly on the page and in productive_status, and connected anyway. Set PRODUCTIVE_REQUIRE_EMAIL_MATCH=true to refuse instead. It is off by default because whoever pastes another person's token already holds it, so refusing buys little security, while a Productive account under a different address is entirely plausible.

  • Per-user auth separates permissions and attribution, not organizations. The organization pin still applies to everyone.

Shared token

Set PRODUCTIVE_API_TOKEN to one token. Simple, and right for stdio or a single operator — but every caller then acts as that token's owner, with their permissions, and Productive's activity log credits every change to them.

PRODUCTIVE_TRUST_FORWARDED_USER still helps here: person-shaped writes (a time entry, a booking) default to the resolved caller rather than the token's owner, and the server refuses to guess when the address matches nobody or more than one person. productive_check_connection names the token's owner either way, so the attribution is never a surprise.

Multi-organization

One instance serves exactly one organization. X-Organization-Id comes from the environment and is never a tool argument, so no code path — including the generic tools — can reach another tenant. Run a second instance for a second organization; the image is the same.

This is not theoretical. A single token routinely reaches several organizations: on the account this was developed against, GET /organizations returned three, and switching only the header moved between them (the other two answered 403 subscription_expired, not "not found"). The header is the whole boundary, which is why it is pinned rather than passed in — and why an enrolled per-user token is verified against this organization before it is stored.

Configuration

See .env.example. The two required variables are PRODUCTIVE_API_TOKEN (Settings → API integrations in Productive; it inherits the creating user's permissions) and PRODUCTIVE_ORGANIZATION_ID (the numeric id in your Productive URL).

Set PRODUCTIVE_AUDIT_LOG to append one JSON line per mutation attempt, including the ones policy refused. Request bodies are deliberately not recorded: they carry salaries, rates and personal data, and an audit trail that must be guarded as closely as the source system tends not to get read.

Run

npm install
npm run dev          # stdio
npm run dev:http     # streamable HTTP on :3000/mcp (stateless), /healthz open
npm test
npm run smoke:live   # reads a real organization; stages one write, commits nothing

Docker images: ghcr.io/borgels/mcp-server-productive (published on push to main).

Licence

Apache-2.0.

Available Tools

12 tools
productive_check_connectionCheck connectionA
Read-only

Verify the token and organization and report what this deployment may do. Also names the person the token belongs to — every change Productive records is credited to them, whoever asked — and the caller identity, when a gateway forwards one.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already signals safety, and the description adds relevant behavioral context: token identity is attributed to every recorded change, and caller identity may be forwarded by a gateway. This goes beyond the annotation without contradicting it.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with the core action first, followed only by consequential detail about attribution and caller identity. There is no fluff or repetition of the title.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a parameterless tool, the description conveys the main outputs: deployment capabilities, token owner, and caller identity. It does not specify exact response formatting or failure behavior, but the tool's simplicity and readOnly annotation make this a minor gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and the empty schema fully describes the input surface, so there is nothing for the description to add about parameter semantics. The baseline of 4 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Verify the token and organization' and states what the tool reports (deployment capabilities, token owner, caller identity). This makes its role distinct from sibling data-operation tools like productive_get or productive_create.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly establishes the context — validating the Productive token and organization and surfacing what the deployment can do — so an agent knows to call it for connection/auth checks. It does not explicitly name alternatives or when-not conditions, but the absence of parameters and the verification purpose make the intended use obvious.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

productive_commit_operationCommit a staged operationA

Execute a write that a prepare step staged. Pass the operation object back exactly as it was returned: it is hashed, and an altered operation is refused rather than run. Show the change to the person who asked for it before committing.

ParametersJSON Schema
NameRequiredDescriptionDefault
operationYes

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the minimal readOnlyHint=false annotation, the description discloses two important behaviors: the operation is hashed and altered operations are refused, and the change must be shown to the requester before committing. This is valuable safety-relevant context for an agent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short, purposeful sentences with no fluff. Purpose, usage constraint, and mandatory approval step are all front-loaded and directly actionable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers what matters most for a commit operation: exact object reuse, hash enforcement, and user approval. It does not describe the success response or explicitly name a prepare tool, but the workflow is sufficiently constrained for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 0% description coverage, and the single nested 'operation' parameter has no field-level documentation. However, the description compensates by instructing the agent to pass the exact object back and explaining the hash invariant, which materially reduces the risk of misuse despite lacking field-by-field semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description states a specific verb and resource: 'Execute a write that a prepare step staged.' This clearly identifies the tool as the commit step for a staged operation, distinguishing it from direct create/update/delete siblings by the staged-operation framing.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives clear usage context: use after a prepare step, pass the operation object back exactly as returned, and show the change before committing. It does not explicitly name alternatives or say when not to use it, but the staged-operation workflow is unmistakable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

productive_createCreate a recordA

Create a record on any writable resource. Required attributes are checked first, and so is every attribute name. On a financial or administrative resource this returns a staged operation to review rather than creating anything — pass it to productive_commit_operation to go through with it.

ParametersJSON Schema
NameRequiredDescriptionDefault
resourceYes
attributesNoAttributes to write, by their Productive names. Validated against the resource contract first, because Productive answers 200 and ignores an unknown attribute rather than reporting it. Custom-field values go in a nested `custom_fields` object keyed by field id.
relationshipsNoJSON:API relationships, where the resource accepts them. Most links are set through an `_id` attribute instead.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only mark readOnlyHint=false, so the description carries the burden of explaining mutation nuance. It discloses the staging behavior, the validation-before-write behavior, and the fact that commit is required on certain resources. This is meaningful behavioral context beyond the schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, no filler, with the core action first, then validation, then the exception case. Every sentence adds actionable information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a create tool with no output schema, it explains the essential invocation path, including when commit is required. It could say more about return shape or failure behavior, but the description and schema together cover the necessary details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already describes attributes and relationships in detail, covering 2 of 3 parameters. The tool-level description adds no parameter-specific detail; `resource` remains minimally described, though it is self-evident and explained at a high level as 'any writable resource.'

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States exactly what it does: create a record on any writable resource. The explicit mention of productive_commit_operation distinguishes it from update/delete/list/get siblings. No ambiguity about the operation performed.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explains the resource-type condition that changes behavior: financial/administrative resources stage an operation rather than creating, and directs the agent to productive_commit_operation to finalize. It doesn't enumerate exclusions versus update/delete, but for a create tool this is sufficient guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

productive_deleteDelete a recordA
Destructive

Delete a record. Needs its own switch beyond ordinary writes, and always returns a staged operation first. Many Productive types are meant to be archived rather than deleted — check productive_describe_resource for an archive action before reaching for this.

ParametersJSON Schema
NameRequiredDescriptionDefault
idYes
resourceYes

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and readOnlyHint=false, so the description need not restate that. It adds non-obvious behavioral facts: deletion requires a separate switch and always returns a staged operation first. This goes beyond annotations and meaningfully sets expectations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three concise sentences with the core purpose first, followed by two high-value caveats. Every sentence earns its place; there is no filler or repetition of schema/annotations.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive tool with two simple parameters and no output schema, the description provides essential behavior: staged operation first, archive exception, and switch requirement. The main gap is parameter semantics, but the operational guidance is strong enough to make the tool safely invocable.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not define the `resource` or `id` parameters. 'Delete a record' hints that resource is the record type and id is its identifier, but this is too vague to clarify valid resource types or how the id is used. The description adds minimal value beyond the parameter names.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('Delete') and resource ('a record'), making the tool's purpose clear. It also distinguishes the tool from create/update operations and explicitly references the archive alternative, differentiating it from a sibling behavior.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly instructs the agent to check productive_describe_resource for an `archive` action before using delete, giving clear when-to-use-vs-alternative guidance. It also notes the requirement for a special switch beyond ordinary writes, which is a practical precondition for invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

productive_describe_custom_fieldsDescribe custom fieldsA
Read-only

List the organization's custom fields with the id each value is written under, the object it applies to, and its options. Custom-field values are keyed by numeric id, not by display name — a name used as a key is accepted with 200 and stored nowhere.

ParametersJSON Schema
NameRequiredDescriptionDefault
appliesToNoNarrow to fields on one object, matched against Productive's own wording for it. That wording is not this server's resource key — fields on people report "employees" — so call this without an argument first and pick from appliesToValues.

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint annotation, the description discloses a critical behavioral quirk: custom-field values are keyed by numeric id, not display name, and using a name as a key is silently accepted with 200 but stored nowhere. This is exactly the kind of non-obvious behavior that prevents an agent from making a subtle mistake.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no filler. It front-loads the purpose and return fields, then adds the essential behavior warning. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only listing tool with one optional parameter, the description is complete: it names the resource, lists the output components, and flags the keying gotcha. The absence of an output schema is mitigated by the explicit statement of what is returned, and the readOnlyHint annotation covers safety expectations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage and already explains appliesTo in detail, including the 'employees' example and the instruction to call without an argument first. The tool description itself adds no additional parameter semantics beyond the schema, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List'), names the resource ('organization's custom fields'), and specifies what is returned: id, object, and options. It clearly distinguishes this from siblings like productive_describe_resource, which would describe a resource's schema rather than enumerate custom fields.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies its usage context clearly: call it to list custom fields and understand how values are keyed. The input schema adds explicit guidance to call without an argument first and then pick from appliesToValues, which is practical usage direction. It does not explicitly name alternative tools or state when not to use it, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

productive_describe_resourceDescribe a resourceA
Read-only

The exact contract for one resource, derived from Productive's own OpenAPI document: every filter field, the operators any field accepts, sort keys, report group keys, includable relationships, the writable attributes for create and update with the required ones marked, and any named actions. Read this before writing — it is the difference between a write that lands and a 200 that changed nothing.

ParametersJSON Schema
NameRequiredDescriptionDefault
resourceYesResource key, e.g. "tasks", "time_entries", "reports/time_reports".

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the safety profile is covered. The description adds valuable behavioral context: output is derived from Productive's own OpenAPI document and includes specific contract elements, plus a warning about write no-ops that goes beyond the annotation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but efficient: one sentence enumerates the full contract contents, and a second short sentence delivers a high-impact usage warning. Every phrase contributes meaning, with no filler or repetition of the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple one-parameter read-only introspection tool, the description fully specifies what output the agent should expect and when to call it. The lack of an output schema is compensated by the detailed enumeration of returned contract components.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the schema already documents the single 'resource' parameter with examples. The description adds no additional syntax, validation, or format details for the parameter, so it stays at the baseline where the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a precise verb-object relationship: it provides 'the exact contract for one resource' and enumerates the concrete contents such as filter fields, operators, sort keys, and writable attributes. This clearly distinguishes it from siblings like productive_get, productive_list, and productive_describe_custom_fields.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly tells the agent to 'Read this before writing' and contrasts a successful write with 'a 200 that changed nothing,' giving a clear trigger for use. It does not explicitly name alternative tools or when not to use it, but the intended context is unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

productive_getGet one recordA
Read-only

Read one record by id, optionally pulling related records in the same call rather than following relationship stubs one at a time.

ParametersJSON Schema
NameRequiredDescriptionDefault
idYes
rawNo
includeNo
resourceYes

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already establishes safety, and the description adds meaningful behavior: optional eager-loading of related records in the same call. It does not explain raw mode or default include behavior, but the core read semantics are transparent and align with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, well-structured sentence that front-loads the core purpose and then adds the key optional behavior. There is no redundant or filler language.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and no parameter descriptions, the description is too sparse to fully support correct invocation. The agent still has to guess what 'resource' values are valid, what 'raw' does, and what the response shape looks like. The relationship-include guidance is helpful but not enough.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate for all four parameters. It explains the purpose of 'id' and loosely hints at 'include', but it never clarifies 'resource' or 'raw', which are both undocumented in the schema and the description. This is a significant gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Read') and clear object ('one record by id'), which distinguishes it from sibling tools like productive_list and productive_create. The added phrase about pulling related records also separates it from naive relationship-stub traversal.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description conveys when to use the tool: when you need a single record by id and optionally want related records in one call rather than following stubs. It does not explicitly exclude alternatives like productive_list for multiple records, so it stops short of full when-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

productive_listList recordsA
Read-only

List any Productive resource with server-side filtering, sorting, includes and paging. Also how the 26 report endpoints are read: use resource "reports/time_reports" (and the rest) with group to get aggregated rows instead of records. Results are flattened out of JSON:API — attributes hoisted, included records inlined into their relationship — with total and nextPage so a page is never mistaken for the whole answer.

ParametersJSON Schema
NameRequiredDescriptionDefault
rawNoReturn Productive's JSON:API envelope untouched instead of flat records.
pageNo
sortNoSort keys; prefix with "-" for descending, e.g. ["-created_at"].
groupNoReport aggregation key. Only the reports/* resources accept one.
filtersNoServer-side filters. A bare value means equality: {"assignee_id":"5"}. An array is comma-joined: {"id":["1","2"]}. An operator object narrows further: {"created_at":{"gt":"2026-01-01"}} — the ONLY operators Productive accepts are contains, eq, gt, lt, not_contain, not_eq. There is no gte/lte, so for an inclusive date range use the resource's own after/before filter fields instead. Logical groups nest: {"$op":"and","0":{"assignee_id":{"eq":"5"}},"1":{"company_id":{"eq":"7"}}}. Field names are validated against the resource — call productive_describe_resource for the list.
includeNoRelationships to pull in the same call, e.g. ["assignee","project"].
resourceYesOne of 132 resource keys; see productive_search_capabilities.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds significant behavioral detail beyond the readOnlyHint annotation: results are flattened out of JSON:API, attributes are hoisted, included records are inlined, and responses include total and nextPage so the agent understands pagination is partial. It also clarifies that report resources return aggregated rows rather than records. This goes well beyond the minimal safety signal.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise at three sentences and front-loads the core purpose. Each sentence provides meaningful information, though the phrase 'Also how the 26 report endpoints are read' is slightly awkward and could be streamlined. Overall it is efficient without unnecessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description explains the return shape well: flattened records, inlined relationships, total, and nextPage. It also covers the special report behavior and aggregated rows. For a complex 7-parameter listing tool with 132 possible resources, this is sufficiently complete to guide correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 86%, so the input schema already documents most parameters well. The description adds a little context around group for report endpoints, but it mostly summarizes capabilities like filtering and paging rather than meaningfully extending the schema's parameter documentation. Baseline 3 is appropriate because the schema carries the parameter-semantic burden.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists any Productive resource with filtering, sorting, includes, and paging. It also explicitly handles the special behavior of the 26 report endpoints, distinguishing this from siblings like productive_get and productive_search_capabilities. The verb 'List' and resource scope are unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear guidance on when to use this tool, including the specific instruction to use resource 'reports/time_reports' with group for aggregated report rows. It provides the main usage context but does not explicitly enumerate exclusions or alternatives such as 'use productive_get for a single record.' The context is clear enough that an agent can choose correctly in most cases.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

productive_run_actionRun a named actionA

Run one of Productive's named verbs: archive, restore, close, open, approve, reject, copy, finalize, send, reposition and the rest. Actions named bulk_* act on every record the filter matches rather than one, and refuse to run without an explicit filter. productive_describe_resource lists the actions a resource has.

ParametersJSON Schema
NameRequiredDescriptionDefault
idNoRequired for actions that act on one record.
actionYesAction name, e.g. "archive", "approve", "send".
filtersNoServer-side filters. A bare value means equality: {"assignee_id":"5"}. An array is comma-joined: {"id":["1","2"]}. An operator object narrows further: {"created_at":{"gt":"2026-01-01"}} — the ONLY operators Productive accepts are contains, eq, gt, lt, not_contain, not_eq. There is no gte/lte, so for an inclusive date range use the resource's own after/before filter fields instead. Logical groups nest: {"$op":"and","0":{"assignee_id":{"eq":"5"}},"1":{"company_id":{"eq":"7"}}}. Field names are validated against the resource — call productive_describe_resource for the list.
resourceYes
attributesNoAttributes to write, by their Productive names. Validated against the resource contract first, because Productive answers 200 and ignores an unknown attribute rather than reporting it. Custom-field values go in a nested `custom_fields` object keyed by field id.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only provide readOnlyHint=false, so the description carries the behavioral burden. It discloses two non-obvious behaviors: bulk_* actions operate on every record the filter matches, and they refuse to run without an explicit filter. The schema also surfaces that Productive answers 200 and silently ignores unknown attributes, adding important behavioral context beyond the annotation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences with no filler. It front-loads the core purpose, then immediately covers the most dangerous edge cases (bulk scope and filter requirement), and ends with a useful discovery pointer. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex 5-parameter tool with nested filter objects and no output schema, the description and schema together cover the essential invocation details: valid action classes, bulk semantics, filter requirements, field validation, and discovery via productive_describe_resource. The only notable gap is the lack of any mention of what the response looks like or error behavior beyond the silent-attribute-ignore note, which is a minor omission for an action-triggering tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is roughly 80%, and the schema already provides rich semantics for filters, attributes, and id. The description adds the bulk-vs-single distinction and the explicit-filter requirement, which complements the filters parameter. Given this high schema coverage, the baseline of 3 is appropriate; the description does not need to re-document each parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ('Run') and a clear resource class ('one of Productive's named verbs'), then lists concrete examples: archive, restore, close, open, approve, reject, copy, finalize, send, reposition. It also distinguishes single-record actions from bulk_* actions, so the tool's purpose is unmistakable and well differentiated from the sibling CRUD tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly states that bulk_* actions require an explicit filter and calls out productive_describe_resource as the way to discover which actions a resource supports. It does not, however, give explicit when-not-to-use guidance against siblings like productive_update or productive_delete, so it falls short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

productive_search_capabilitiesSearch capabilitiesA
Read-only

Find the right resource, tool or guide for a subject. Start here: Productive names its resources its own way (a budget is a deal, a person is a person, a board column is a workflow_status), and guessing wastes calls. Returns matching tools, workflow guides, and resources with the operations each supports.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNo
queryYesSubject to search for, e.g. "invoice", "capacity", "custom field", "time".

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With readOnlyHint=true already in annotations, the description adds useful behavioral context: it returns matching tools, workflow guides, and resources along with the operations they support. It also discloses the important quirk that resource names may not match user expectations. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the core purpose, and every sentence adds value: what it finds, where to start, and what it returns. The naming examples are illustrative without being verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only search tool with only two parameters and no output schema, the description covers purpose, scoping context, and return categories well. It does not detail result shape or empty-result behavior, but those are not critical for selecting and invoking this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description reinforces that 'query' is a subject to search for, but the schema already covers that with examples. The 'limit' parameter is not described in the description, and with only 50% schema description coverage, the description does not fully compensate. The parameter is simple enough that the gap is moderate rather than severe.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Find') and resource ('resource, tool or guide for a subject') and clearly distinguishes this as the starting point for discovery. It explains the tool's role relative to siblings by highlighting Productive's naming conventions, so an agent knows this is a search/capability lookup, not a data operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Start here' explicitly tells the agent when to use this tool, and the mention of Productive's non-obvious naming ('a budget is a deal') explains why guessing would waste calls. It does not name alternative sibling tools or state when not to use it, but the contextual guidance is clear enough.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

productive_track_timeTrack timeA

Log a time entry without looking up what Productive insists on. Time is stored in MINUTES — pass hours and it converts. The service (the budget line the work bills to, not the task) is resolved from the task when not given, and the person is resolved from the authenticated caller, so time lands on the right person even though the server holds one shared token.

ParametersJSON Schema
NameRequiredDescriptionDefault
dateYesDate of the work, YYYY-MM-DD.
noteNo
hoursNoTime worked in hours; converted to minutes.
taskIdNoTask worked on. Also used to resolve the service.
minutesNoTime worked, in minutes.
personIdNoWhose time this is. Defaults to the resolved caller.
serviceIdNoService (budget line) to bill to; overrides the task lookup.
billableMinutesNoBillable portion, if it differs from the time worked.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With only readOnlyHint=false in annotations, the description carries the full burden of behavioral disclosure. It clearly reveals that hours are converted to minutes, the service is derived from the task when absent, and the person is resolved from the authenticated caller despite a shared server token. This is specific and valuable transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, each earning its place: the first states the action, the second explains the critical unit conversion, and the third clarifies lookup defaults and authentication behavior. It is dense without being bloated, and the essential action is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an 8-parameter tool with no output schema, the description covers the core call flow well: what to log, how units are handled, which IDs can be omitted, and how resolution works. It does not describe the return value or what happens when conflicting inputs like hours and minutes are both supplied, but these are minor gaps given how much is already explained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 88%, so the schema already documents most parameters. The description adds real value by explaining the hours-to-minutes conversion, the distinction between service and task, and the fallback resolution behavior for serviceId and personId. It does not explain every edge case, such as providing both hours and minutes, but it meaningfully supplements the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Log a time entry.' It goes beyond the title by explaining the key behavior that makes this tool distinct from generic create/list tools: it avoids manual lookups and handles conversions, making the intent unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear practical context: service can be omitted and is resolved from the task, person can be omitted and is resolved from the caller. This tells an agent when it can avoid passing certain parameters, though it does not explicitly name alternatives or state when not to use the tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

productive_updateUpdate a recordA

Update a record. PATCH semantics, verified live: attributes you omit keep their values, so there is no need to resend the whole record. On a financial or administrative resource this returns a staged operation instead of writing.

ParametersJSON Schema
NameRequiredDescriptionDefault
idYes
resourceYes
attributesNoAttributes to write, by their Productive names. Validated against the resource contract first, because Productive answers 200 and ignores an unknown attribute rather than reporting it. Custom-field values go in a nested `custom_fields` object keyed by field id.
relationshipsNo

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With only readOnlyHint=false provided by annotations, the description carries a meaningful behavioral burden and does well: it discloses PATCH semantics, confirms omitted fields are retained, and warns that certain resources return a staged operation instead of writing. It does not cover permissions or reversibility, but it adds real behavioral facts beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded with the key PATCH behavior. The first sentence duplicates the title, which costs a little, but every other sentence carries useful operational meaning without padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers core PATCH semantics and the staged-operation caveat, but it does not explain what a staged operation should be followed by, especially given the sibling productive_commit_operation. There is also no output schema and the description does not say what a normal update returns, and relationships remain undocumented. This leaves the agent needing to infer important follow-up behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is low at 25%, and the description does add value for the attributes parameter by explaining that omitted attributes keep their values. However, it gives no semantic guidance for resource, id, or relationships, and the custom_fields nesting behavior lives only in the schema, not the description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear action on a record and immediately clarifies PATCH semantics, which distinguishes it from read-only siblings like productive_get and productive_list. It is slightly repetitive with the title but unambiguous about the operation's purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives useful context: partial updates preserve omitted attributes, so no full resend is needed, and financial/admin resources return staged operations instead of writing. However, it does not explicitly say when to choose this over productive_create, productive_delete, or productive_run_action, so usage versus alternatives is mostly implied.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 12 tool updatesv0.2.0
    • First observedproductive_check_connection
    • First observedproductive_commit_operation
    • First observedproductive_create
    • First observedproductive_delete
    • First observedproductive_describe_custom_fields
    • First observedproductive_describe_resource
    • First observedproductive_get
    • First observedproductive_list
    • First observedproductive_run_action
    • First observedproductive_search_capabilities
    • First observedproductive_track_time
    • First observedproductive_update

TDQS

A4.3/5.0
Disambiguation5/5

Each tool targets a distinct operation: reading one record, listing, creating, updating, deleting, running a named action, staging/committing writes, tracking time, or performing a meta/introspection task. Even the closer pairs like get/list and describe_resource/describe_custom_fields are clearly separated by resource scope and purpose.

Naming Consistency5/5

All tools follow the snake_case productive_<verb> pattern, with most using verb_noun (productive_check_connection, productive_run_action) and a few using bare verbs (productive_get, productive_list). This is consistent and predictable, with no style mixing or vague duplicate verbs.

Tool Count5/5

Twelve tools is well within the ideal scope for a broad API integration server. The set covers generic CRUD, named actions, time tracking, staged writes, and meta/discovery tools without ballooning into redundant or overly granular endpoints.

Completeness5/5

The server provides full lifecycle coverage: read, list, create, update, delete, run actions, and commit staged operations, plus support for custom fields and resource contracts. The meta tools fill the gaps that typically cause agent failures, such as knowing resource-specific filters, writable attributes, and custom-field keying.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/borgels/mcp-server-productive'

If you have feedback or need assistance with the MCP directory API, please join our Discord server