Read your Pyunto Time Management schedule and log time from an AI assistant. E2EE project planning.
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
PYUNTO_TM_API_KEYAPI keyrequiredAPI key (ptm_...) minted in Settings → Account → API keys
PYUNTO_TM_PASSWORDAPI keyoptionalAccount password; unwraps the private key locally so E2EE project and task names decrypt
PYUNTO_TM_PASSWORD_FILEAPI keyoptionalPath to a file holding the account password, instead of PYUNTO_TM_PASSWORD
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
whoamiWho this MCP server is connected as: account email, API key name, grantedWho this MCP server is connected as: account email, API key name, granted
No input schema was published for this tool.
list_projectsList every project the account can see, with id, name, colour and roleList every project the account can see, with id, name, colour and role
No input schema was published for this tool.
list_tasksList Gantt tasks (and subtasks) with their id, project, name and date range.List Gantt tasks (and subtasks) with their id, project, name and date range.
No input schema was published for this tool.
list_time_blocksThe individual time blocks logged between two dates (inclusive, max 92 days),The individual time blocks logged between two dates (inclusive, max 92 days),
No input schema was published for this tool.
time_summaryTotal hours logged between two dates (inclusive, max 92 days), grouped byTotal hours logged between two dates (inclusive, max 92 days), grouped by
No input schema was published for this tool.
log_timeRecord a block of worked time on the calendar. Writes to the user's realRecord a block of worked time on the calendar. Writes to the user's real
No input schema was published for this tool.
update_time_blockChange an already-recorded time block: its date, start/end times, memo,Change an already-recorded time block: its date, start/end times, memo,
No input schema was published for this tool.
delete_time_blockprivilegedPermanently delete ONE recorded time block, along with any files attachedPermanently delete ONE recorded time block, along with any files attached
No input schema was published for this tool.
list_deleted_time_blocksTime blocks that were deleted but can still be restored, newest first,Time blocks that were deleted but can still be restored, newest first,
No input schema was published for this tool.
restore_time_blockPut a deleted time block back on the calendar, along with any files thatPut a deleted time block back on the calendar, along with any files that
No input schema was published for this tool.
10 of 10 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Read your Pyunto Time Management schedule and log time from an AI assistant. E2EE project planning.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
57 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+45 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.