Autotask MCP

MCP server for Kaseya Autotask PSA — access companies, contacts, tickets, time entries, projects, contracts, and billing through AI assistants.

Installation

Run the MCP server with npx:

Or install the package:

MCPB Bundle (Claude Desktop)

Download the .mcpb bundle from GitHub Releases for a zero-config Claude Desktop install. No Node.js or terminal required — just open the bundle in Claude Desktop via Settings → MCP Servers → Install from file. Requires Claude Desktop 0.10+.

Claude Desktop Configuration

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "autotask": {
      "command": "npx",
      "args": [
        "@wyre-technology/autotask-mcp"
      ],
      "env": {
        "AUTOTASK_USERNAME": "your-autotask-username",
        "AUTOTASK_SECRET": "your-autotask-secret",
        "AUTOTASK_INTEGRATION_CODE": "your-autotask-integration-code"
      }
    }
  }
}

Authentication

Getting Credentials

Vendor portal: https://ww1.autotask.net/

Prerequisites

• Autotask account with Administrator-level role (required to create API users)
• A decision on API user name + ownership — API users count against Autotask resource limits

Steps

1. Sign in to your Autotask instance as an Administrator.
2. Navigate to Admin → Resources/Users → New → "API User (system) (API-only)".
3. Fill in the API user details. Use a clear name (e.g., "WYRE Gateway API") so it is identifiable in audit logs.
4. Generate the API tracking identifier (this becomes AUTOTASK_INTEGRATION_CODE).
   • Save it before leaving the page — Autotask only shows it once.
5. Set the username (becomes AUTOTASK_USERNAME — this is the email-format Autotask username, NOT a real email).
6. Generate or set the secret (becomes AUTOTASK_SECRET).
7. Assign the API user to a Security Level that grants access to the entities you need (Companies, Tickets, Time Entries, etc.). Least-privilege per your gateway scope.
8. Save the API user. Use the three values in your environment.

Required Scopes / Permissions

• Companies (read/write as needed)
• Tickets (read/write as needed)
• Time Entries (read/write as needed)
• Adjust per the tools you intend to use from the gateway

Credential Format

Username is in email format. Integration code is a 32-character GUID. Secret is a long random string. All three are required.

Rotation

Autotask API users do not expire automatically. Rotate secrets manually if compromised (regenerate via the same API user page).

Architecture

Comprehensive flat tool exposure with intelligent caching and ID-to-name resolution.

Available Tools (16)

Tools are organized into 6 domains:

Tickets

Service ticket management.

Companies

CRM company management.

Contacts

Contact management.

Time Entries

Time tracking and billing.

Projects

Project management.

Contracts

Service agreements.

Rate Limits

10,000 requests per hour. The underlying client library handles rate limiting automatically.