How do I install Otis?

Otis is a remote plugin. You do not need to install anything locally. Add the server URL to your AI app's MCP configuration and you are ready to go.

Yes. Otis passed MCP Marketplace's automated security scan with a score of 10/10 (low risk). Every server on MCP Marketplace is security-scanned before it's listed; see the full security report on this page for the findings and permissions.

What AI apps work with Otis?

Otis uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Otis MCP Server

by Otisbase

Developer ToolsLow Risk10.0MCP RegistryRemote

Free

Server data from the Official MCP Registry

Free client billing for AI assistants: hours, expenses, timers, invoices and payments.

About

Free client billing for AI assistants: hours, expenses, timers, invoices and payments.

Remote endpoints: streamable-http: https://mcp.otisbase.com/mcp

Security Report

10.0

Low Risk10.0Low Risk

Valid MCP server (2 strong, 2 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry. Trust signals: 4 highly-trusted packages.

Endpoint verified · Requires authentication · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Found in Source Code

Found by scanning the linked source code. This listing connects to a hosted endpoint, so none of this runs on your machine: it describes what the server software does where it is hosted.

file_system

Applies to the server that hosts this plugin, not to your machine.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Applies to the server that hosts this plugin, not to your machine.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "com-otisbase-otis": {
      "url": "https://mcp.otisbase.com/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Otis MCP

The source code of Otisbase, a free MCP server for client billing, built for consultants and small agencies.

Otis has no app or dashboard. Your AI assistant is the interface: it records clients, work, expenses and payments in Otis, and issues the invoices you approve. Otis stores the records and enforces the rules. It numbers invoices, calculates totals, requires your exact total before it issues an invoice, and never rewrites an issued invoice. Otis runs no AI model; every result comes from the records and the rules in this repository.

This repository is the complete service that runs at mcp.otisbase.com: the MCP server, email sign-in and the storage layer. It runs on Cloudflare Workers. The otisbase.com website is maintained separately.

Use the hosted service

Add this URL as a remote MCP server in your assistant:

https://mcp.otisbase.com/mcp

Sign-in uses OAuth with an email code, so there is no API key. How to install has a guide for Claude, ChatGPT, Claude Code, Codex, Cursor, Muse, Grok Bot and Mistral Vibe. The hosted service is free. Records are stored in the EU.

MCP docs: the endpoint, the rules and every tool.
Otis Plugins: the plugin for Claude and Codex: a menu and nine workflow skills.
Skills: what each skill does.

What Otis records

Area	Records
Business	Business details, tax settings and invoice numbering, used by its owner
Clients	Clients and their billing details
Work	Billable time, services, reported AI usage and expenses
Invoices	Drafts, issued invoices with immutable contents, discounts and tax
Payments	Full and partial payments, with references that prevent duplicates
Export	A complete export of the business records

How it works

Part	Implementation
Runtime	One Cloudflare Worker (`src/index.ts`)
MCP server	`@modelcontextprotocol/server` over Streamable HTTP at `/mcp` (`src/mcp.ts`)
Sign-in	`@cloudflare/workers-oauth-provider` with an email code (`src/auth.ts`)
Business records	SQLite in one Durable Object per business (`src/business-store.ts`)
Accounts and sign-ins	Durable Objects (`src/account-store.ts`, `src/sign-in-store.ts`)
OAuth state	Workers KV
Email	Cloudflare Email Sending, for sign-in codes and security notices
Data location	Durable Objects in the EU jurisdiction (`src/regions.ts`)
Sign-in pages	Server-rendered HTML with its own small stylesheet (`src/html.ts`, `src/shell.ts`)

Every business operation checks the caller's current membership. Amounts are integers in minor units. Writes take a request ID, so a retried call does not record the same fact twice.

Repository layout

Path	Contents
`src/`	Worker, MCP tools, sign-in, storage, billing rules and public docs
`test/`	Integration tests in Cloudflare's local runtime
`scripts/`	Live endpoint checks and the plugin generator

Read the MCP docs before you change behavior. The rules agents follow are in src/docs.ts, src/descriptions.ts and src/workflows.ts, and the tests in test/ show the rules the server enforces.

Develop

You need Node 24 or newer.

npm ci
npm run check
npm test

Tests run in Cloudflare's local runtime. Email delivery is simulated in tests.

To run the Worker locally:

npm run dev -- --local --ip 127.0.0.1 --port 8788

Then open http://127.0.0.1:8788/health. The local runtime uses local storage only.

npm run plugins:build generates the Claude and Codex plugins into plugins/ from src/workflows.ts. They are published to otisbase/otis-plugins.

Self-host

You can run your own copy on a Cloudflare account. Edit wrangler.jsonc before you deploy:

Set account_id to your Cloudflare account.
Create a KV namespace for OAuth state and put its ID in kv_namespaces. For EU storage, create it in the EU jurisdiction.
Replace the two routes with your own domains.
Set the vars:
- ORIGIN: the URL of the MCP host.
- SITE_ORIGIN: the URL of your website. Website pages opened on the MCP host redirect there, and the sign-in pages link to its Terms and Privacy Policy.
- EMAIL_FROM: the sender for sign-in codes. The domain must be set up for Cloudflare Email Sending.
- FEEDBACK_TO: the address that receives feedback sent through the feedback_send tool.
- DO_JURISDICTION: eu keeps Durable Objects in the EU. Remove it to let Cloudflare choose.
- SIGN_IN_ENABLED: true to allow sign-in.
Set ratelimits.namespace_id to an ID that is unique in your account.

Then deploy:

npx wrangler login
npm run deploy

The sign-in pages and emails name Otisbase. Change them in src/html.ts, src/auth.ts and src/notify.ts, and publish your own terms and privacy policy, before you offer your copy to other people.

Contribute

Bug reports, fixes and ideas are welcome. See CONTRIBUTING.md. To report a security problem, see SECURITY.md. You can also send feedback from your assistant: ask it to send feedback to Otis.

License

The code is released under the MIT License.

These items are not covered by the MIT License:

The Otisbase and Otis names and logos.
The Geist fonts in src/fonts/, under the SIL Open Font License.

The copy and check icons in src/html.ts come from Phosphor Icons (MIT).

Reviews

No reviews yet

Be the first to review this server!

4.7

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

Stars

177

Installs