{ "slug": "io-github-oktopeak-clio-mcp", "name": "io.github.oktopeak/clio-mcp", "title": "clio-mcp", "description": "Connect Claude to Clio: 34 tools for matters, custom fields, notes, documents, folders, billing.", "version": "2.2.0", "publishedAt": "2026-09-02T12:05:14.604048Z", "updatedAt": "2026-09-02T12:05:14.604048Z", "repoUrl": "https://github.com/oktopeak/clio-mcp", "websiteUrl": "https://oktopeak.com/clio-mcp/", "namespace": { "type": "github", "owner": "oktopeak" }, "kind": "local", "packages": [ { "registryType": "npm", "identifier": "@oktopeak/clio-mcp", "version": "2.2.0", "transport": "stdio", "runtimeHint": null }, { "registryType": "npm", "identifier": "@oktopeak/clio-mcp", "version": "2.2.0", "transport": "stdio", "runtimeHint": null } ], "remotes": [], "envVars": [ { "name": "CLIO_CLIENT_ID", "isSecret": false, "isRequired": true, "description": "Client ID from your Clio developer application (Settings → Developer Applications)" }, { "name": "CLIO_CLIENT_SECRET", "isSecret": true, "isRequired": true, "description": "Client Secret from your Clio developer application" }, { "name": "ENCRYPTION_KEY", "isSecret": true, "isRequired": false, "description": "Optional. Leave unset to auto-generate a key stored in the OS keychain (or ~/.clio-mcp/key.hex as fallback on headless Linux/WSL2). If set, must be a 64-character hex string — it will be migrated to the OS keychain on first use." }, { "name": "CLIO_REDIRECT_PORT", "isSecret": false, "isRequired": false, "description": "Local port for the OAuth callback listener (default: 5678). Change if 5678 is in use." }, { "name": "CLIO_REGION", "isSecret": false, "isRequired": false, "description": "Clio data region: 'us' (default, app.clio.com), 'eu' (eu.app.clio.com), 'au' (au.app.clio.com), or 'ca' (ca.app.clio.com). Controls the API and OAuth base URLs. Fixed at Clio account creation; must match the server your firm logs in to. Any other value stops startup." }, { "name": "READ_ONLY", "isSecret": false, "isRequired": false, "description": "Optional. 'true', '1' or 'yes' leaves the nine write tools (create_matter, create_note, create_task, update_task, complete_task, create_calendar_entry, log_time_entry, create_activity, upload_document) unregistered so Claude can read Clio but never change it. Works on both transports." }, { "name": "CLIO_API_BASE", "isSecret": false, "isRequired": false, "description": "Advanced override for the Clio API base URL (e.g. https://eu.app.clio.com/api/v4). Takes precedence over CLIO_REGION." }, { "name": "CLIO_AUTH_URL", "isSecret": false, "isRequired": false, "description": "Override the OAuth authorization endpoint (e.g. https://eu.app.clio.com/oauth/authorize)." }, { "name": "CLIO_TOKEN_URL", "isSecret": false, "isRequired": false, "description": "Override the OAuth token endpoint (e.g. https://eu.app.clio.com/oauth/token)." }, { "name": "TOKEN_BROKER_URL", "isSecret": false, "isRequired": true, "description": "URL of Oktopeak's hosted token broker for the Clio App Directory listed install. Do not set CLIO_CLIENT_ID/CLIO_CLIENT_SECRET alongside this — the shared app's secret lives only on the broker, never on this machine." } ], "category": "files-docs", "subcategory": "local", "company": "", "categoryAuto": true, "checks": [ { "id": "source-linked", "label": "Source repository linked", "result": "pass", "detail": "https://github.com/oktopeak/clio-mcp" }, { "id": "version-pinned", "label": "Version pinned", "result": "pass", "detail": "Every package has an explicit version" }, { "id": "secrets-requested", "label": "Secrets requested", "result": "info", "detail": "Asks for 2 secrets: CLIO_CLIENT_SECRET, ENCRYPTION_KEY" }, { "id": "known-registry", "label": "Known package registry", "result": "pass", "detail": "All packages come from npm, PyPI, OCI, NuGet or MCPB" }, { "id": "namespace", "label": "Namespace ownership", "result": "info", "detail": "Name verified via GitHub account oktopeak" }, { "id": "meta-text", "label": "Registry text aimed at the AI", "result": "pass", "detail": "Description and settings contain no hidden characters or instructions to the AI" }, { "id": "install-scripts", "label": "Install scripts", "result": "pass", "detail": "@oktopeak/clio-mcp@2.2.0 runs nothing at install" }, { "id": "code-flags", "label": "Code red flags", "result": "pass", "detail": "Read 68 files in @oktopeak/clio-mcp@2.2.0: no obfuscation, encoded execution, credential reads or data-collection endpoints found" }, { "id": "ai-text", "label": "Text aimed at the AI", "result": "pass", "detail": "No hidden characters or instructions to the AI in 68 files, including comments and the README" } ], "scannedAt": "2026-10-29", "level": "Scanned", "install": [ { "label": "Claude Desktop (npm)", "kind": "claude_desktop_json", "text": "{\n \"mcpServers\": {\n \"clio-mcp\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@oktopeak/clio-mcp@2.2.0\"\n ],\n \"env\": {\n \"CLIO_CLIENT_ID\": \"\",\n \"CLIO_CLIENT_SECRET\": \"\",\n \"TOKEN_BROKER_URL\": \"\"\n }\n }\n }\n}" }, { "label": "Claude Desktop (npm)", "kind": "claude_desktop_json", "text": "{\n \"mcpServers\": {\n \"clio-mcp\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@oktopeak/clio-mcp@2.2.0\"\n ],\n \"env\": {\n \"CLIO_CLIENT_ID\": \"\",\n \"CLIO_CLIENT_SECRET\": \"\",\n \"TOKEN_BROKER_URL\": \"\"\n }\n }\n }\n}" } ], "curated": true, "stars": 26, "archived": false, "pushedAt": "2026-10-19T14:08:58Z", "health": { "score": 68, "parts": { "popularity": 0.4163382976189881, "activity": 0.9372261973790023, "issues": null, "security": 1 }, "fail": 0, "warn": 0, "raw": { "stars": 27, "forks": 16, "downloads": 426, "hn": { "n": 1, "pts": 1, "t": [ [ "47926395", "Clio MCP Open-source Claude connector for law firms", 1, 0, "2026-04-27" ] ] }, "issuesOpen": 1, "issuesClosed": 3, "prsMerged": 23, "commits90": 31, "release": "2026-09-09T06:42:38Z", "pushed": "2026-10-19T14:08:58Z", "growth": null, "growthDays": null, "archived": false }, "at": "2026-10-31T07:42:38.200Z" } }