Timesheets (Cloud)

Enabling Tempo MCP Server

🔨

The following guide includes features that are currently only available through our Early Access Program (EAP). If you are interested in participating in our EAP, please contact Tempo Support.

Tempo Administrator permission is required to enable the MCP server for your organization.

The Tempo MCP Server allows AI assistants (such as Claude, GitHub Copilot, and Cursor) to answer questions about your Tempo data in plain language. This allows you to query worklogs, timesheets, plans, and financial reports directly, without exports or manual lookups.

It works with any MCP client that supports remote servers over Streamable HTTP with OAuth 2.0. The steps on this page use Claude as the example. The server is read-only and uses per-user authentication, so each person sees only the data their own Tempo permissions allow.

AI answers are not deterministic and should be verified. The data comes from Tempo, but the assistant decides which tools to call and how to read timeframes like “last quarter,” so wording and figures can vary between runs. Always confirm numbers in Tempo before using them for compliance, billing, or audits.

The Tempo API identifies people by their Atlassian account ID, so that is what your AI assistant receives. To see display names instead, connect the Atlassian MCP Server alongside the Tempo MCP Server. This will resolve those IDs into names.

Before You Begin

  • Tempo Administrator permission is required to enable the MCP server.

  • An active Tempo subscription to Timesheets, Capacity Planner, or Financial Manager

Step 1. Enable the server

This is performed by a Tempo Administrator once per organization.

  1. Go to Tempo Settings → Data Access → MCP Server.

  2. Click the toggle to turn on Enable the Tempo MCP server.

D-2033 MCP Server on-20260721-174702.png
  1. Once the server is enabled, this page displays the Server address scoped to your Jira instance. Copy the Server address and share it with anyone who wants to connect.

  2. Optional: turn on Allow API Token Authentication to let people connect using a Tempo API token instead of OAuth.

Step 2. Add Tempo as a custom connector

This is performed by a Tempo administrator or whoever administers your AI tool, once per organization.

  1. Go to Tempo Settings → OAuth 2.0 Applications.

OAuth 2.0 app - new app-20260819-230451.png
  1. Click + New Application to open the Create Application modal. Set the following:

    • Name: Your choice

    • Redirect URI: https://claude.ai/api/mcp/auth_callback, the callback used by claude.ai and Claude Desktop

    • Client type: Confidential

    • Authorization grant type: Authorization code

Create application-20260819-213730.png
  1. Copy the client ID and client secret.

  2. In Claude, follow the steps to add a custom connector “For Team and Enterprise Plans,” pointing at your Tempo server address, and enter the client ID and secret during setup under Advanced settings.

  3. Name it Tempo MCP Server and leave individual sign-in on, so each person authenticates with their own Tempo credentials.

Entering the client ID and secret directly is what replaces Dynamic Client Registration (DCR), so under the DCR tab, leave Allow apps to register via DCR off. Turn it on only for a client that doesn’t let you enter a client ID and secret.

Step 3. Connect your AI client.

Steps 1 and 2 must be completed first. The server must be enabled, and for Claude on the web or desktop, the custom connector has to be added.

Claude on the web or desktop

  1. Go to Settings → Connectors → Browse and search for Tempo MCP Server.

Claude - Tempo MCP 1-20260819-135857.png
  1. Click the connector, then click Connect.

Claude - Tempo MCP 2-20260819-140919.png
  1. When Claude asks for access to your Tempo data, click Authorize Access, then Onwards.

Claude - Tempo MCP 3-20260819-141049.png

Claude Code

  1. Copy the server address.
    Go to Tempo Settings → Data Access → MCP Server and copy the server URL. It is scoped to your Jira instance.

  2. Generate OAuth credentials.
    Go to Tempo Settings → OAuth 2.0 Applications and click + New Application. Enter the required information (as indicated below) to complete the New Application, then copy the client ID and secret.

    • Name: Your choice

    • Redirect URI: http://localhost

    • Client type: Confidential

    • Authorization grant type: Authorization code

Create application - localhost-20260819-224010.png
  1. Add the server.
    Run one of the commands below.

Using Tempo OAuth 2.0, with the client ID and secret from step 2, Generating OAuth credentials. This is the default:

JavaScript
claude mcp add --transport http tempo \
  <MCP_ADDRESS> \
  --client-id <CLIENT-ID> --client-secret


Using a Tempo API token, available only if your admin turned on API token authentication in Step 1:

JavaScript
claude mcp add --transport http tempo \
  <TEMPO_API_URL>/mcp \
  --header "Authorization: Bearer <TOKEN>"
  1. Authenticate.
    Run /mcp, pick Tempo, and follow the prompts.

Other MCP clients

Any MCP client that supports remote servers can connect to Tempo. Before you start, check that your client:

  • Can connect to a remote MCP server over Streamable HTTP

  • Supports OAuth 2.0 authorization code flow, or lets you send a bearer token

  • Allows you to configure a custom MCP server URL

Then add your Tempo server address as a remote MCP server and authenticate with your OAuth client ID and secret, or with a Tempo API token if your admin enabled that option.

The redirect URI comes from your AI client, not from Tempo. Claude on the web and desktop uses https://claude.ai/api/mcp/auth_callback, Claude Code uses http://localhost, and other clients use their own. Check your client’s documentation for the value it expects, then use that when you create the OAuth application in Tempo.

If your client doesn’t provide a way to enter a client ID and secret, ask your Tempo admin to turn on Allow apps to register via DCR under Tempo Settings → OAuth 2.0 Applications. The client can then register itself.

Setup steps vary by client. If you encounter connection or authentication problems, check your client’s own MCP documentation first.

Step 4. Pair with the Atlassian MCP Server

For questions that span both systems, connect the Atlassian MCP Server in the same session.

  • Tempo supplies the numbers — hours, costs, budgets, plans

  • Atlassian supplies the Jira context — issue names, statuses, priorities, assignees

The assistant joins the two without any manual mapping. It also turns account IDs into display names.

What Data is Available

The server provides read-only access to the following data. Availability depends on which Tempo products your organization has licensed.

Tempo Product


Timesheets

  • Worklogs

  • Timesheet approvals

  • Accounts

  • Customers

  • Periods

  • Holiday schemes

  • Workload schemes

  • Work attributes

  • Programs

  • Teams, team memberships, and generic resources

  • Roles

  • Skills

  • Audit logs

  • Permission roles and global permission roles

  • Jira ↔ Tempo worklog ID lookups

Capacity Planner (if installed)

  • Plans and plan search, including Flex plans

  • Possible plan reviewers

  • Teams, team memberships, and generic resources

  • Roles

  • Skills and skill assignments

  • Programs

  • Permission roles and global permission roles

Financial Manager (if installed)

  • Global rates by role

  • Billing rate tables

  • Projects and project attributes

  • Actual labor costs

  • Planned labor costs (requires Capacity Planner)

  • Budgets and budget milestones

  • Portfolios

Security and Access Control

Per-user authentication
Every request carries the caller's own token; the server holds no shared credentials. Authorization, scopes, and tenant isolation are enforced by the Tempo API.

Admin control
Admins can disable the server at any time, which blocks all requests immediately.

Read-only
Only read (GET) operations are exposed. No data can be created, modified, or deleted through the MCP server.

Separate API token control
Admins can disable API token access while keeping OAuth enabled.

Data residency
The server respects your organization's data residency routing (US or EU).

Your choice of AI client
Tempo does not restrict which MCP client can connect, and does not select or operate any AI provider. When you run a query, the Tempo data you requested is sent to the AI client you connected to and to its model provider.

Example Prompts

Once connected, users can ask their AI assistant questions such as:

  • "What did my team log last week?"

  • "Show me actual hours vs. story points for issues closed last sprint."
    (requires the Atlassian MCP Server)

  • "What's the cost burn rate on the Platform project this quarter?"
    (requires Financial Manager)

  • "Which approved worklogs from May 2026 were billed to a specific client?"

  • "Is my team tracking to plan this sprint — who's over- or under-logging vs. what we planned?" (requires Capacity Planner)