Home / MCP registry index / ai.timix/time-tracking
Timix.AI
ai.timix/time-tracking in the official MCP registry.
Endpoint https://api.timix.ai/api/integration/v1/mcp.
The registry describes it as: Time tracking, live project budgets, and billing exports for service firms.
We read its 114 tools on 2026-10-22. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
get_hours_summary get_dashboard_metrics get_customer_info get_project_status get_billing_report get_budget_alerts list_customers list_projects get_my_time_entries get_resource_utilization get_unbilled_time get_budget_health get_employee_timesheet list_my_time_entries find_billing_work get_project_team log_time suggest_holiday_profile create_holiday_profile create_customer create_project create_task create_subtask invite_user assign_user_to_project update_org_settings update_customer update_project update_task update_subtask create_time_report update_time_report bulk_create_time_reports bulk_update_time_reports copy_period start_timer stop_timer cancel_timer submit_timesheet recall_timesheet assign_user_to_customer remove_user_project enable_user resend_invite set_budget_thresholds update_user_profile update_user_preferences set_user_cost_rate bulk_update_cost_rates create_custom_field update_custom_field set_custom_field_value set_org_work_schedule manage_user_work_schedule update_holiday_profile delete_customer close_month delete_project delete_task delete_subtask and 54 more
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/ai-timix-time-tracking)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.