Name: Jisr MCP by usefulapi
Author: usefulapi

Jisr MCP by usefulapi

Read employees, attendance, leave and payroll; create employee records and import device punches.

Tool-list grade A Remote · Streamable HTTP No auth needed 16 tools v1.7.3 MIT

No reviews yet by usefulapiGitHub The publisher’s own endpoint — this marketplace is not in the path

93/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Read employees, attendance, leave and payroll; create employee records and import device punches.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http jisr-mcp-by-usefulapi https://jisr.usefulapi.io/mcp

# 2 — ask your agent for something these tools do
#   jisr_list_employees, jisr_get_employee, jisr_get_employee_financial_info and 13 more

Jisr MCP by usefulapi costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

usefulapi578 servers

25 categories

All 578 servers

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

List the organization's employees (active by default) with code, names (English/Arabic), job title, department, business unit, employment type, line manager, joining date and status. Filter by active/inactive status, creation date and joining, termination or deletion date ranges. If the API key also has the 'Get Employee Financial Info' / 'Accounting Info' permissions, Jisr adds salary, bank (IBAN

Parameter	Type	Required	Notes
status	string	no	Only active or only inactive employees.
created_from	string	no	Only employees created on or after this date (yyyy-mm-dd).
joining_from	string	no	Only employees who joined on or after this date.
joining_to	string	no	Only employees who joined on or before this date.
terminated_from	string	no	Only employees off-boarded on or after this date.
terminated_to	string	no	Only employees off-boarded on or before this date.
deleted_from	string	no	Only employees deleted from the system on or after this date.
deleted_to	string	no	Only employees deleted from the system on or before this date.
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
rpp	integer	no	Results per page, 1-100 (Jisr's default is 100). Sent as rpp.

One employee's profile by id (UUID from jisr_list_employees): names, code, gender, marital status, phone, emails, date of birth, passport/ID number, address, line manager, department, business unit, employment type, location, nationality and contract. GET /openapi/v1/employees/basic_info?id=.

Parameter	Type	Required	Notes
id	string	yes	Employee id (UUID).

One employee's financial details by id: salary components and bank account (IBAN). Sensitive payroll data; needs the 'Get Employee Financial Info' permission on the API key. GET /openapi/v1/employees/financial_info?id=.

Parameter	Type	Required	Notes
id	string	yes	Employee id (UUID).

List one of the organization's lookup tables: departments, employment_types, business_units, locations, nationalities or outsourcing_companies, with their ids and English/Arabic names. Use the ids when creating an employee. GET /openapi/v1/lookups/{table}.

Parameter	Type	Required	Notes
table	string	yes	Which lookup table.
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
rpp	integer	no	Results per page, 1-100 (Jisr's default is 100). Sent as rpp.

Attendance summary per employee for a date range (default: the current month): total working hours, late arrival, early departure, extra and approved overtime, absence days and records. Filter by one employee or by active/inactive status. GET /openapi/v1/attendance/summary.

Parameter	Type	Required	Notes
from	string	no	Period start (yyyy-mm-dd). Default: start of the current month.
to	string	no	Period end (yyyy-mm-dd).
employee_id	string	no	Only this employee (UUID).
status	string	no	Only active or inactive employees.
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
rpp	integer	no	Results per page, 1-100 (Jisr's default is 100). Sent as rpp.

List raw clock-in/out punches that were received from punch devices, either the ones that were processed successfully or the ones that failed, in a time window (Jisr's default: the last hour). Each punch has id, punch_time, employee_code, terminal_sn and clocking_id. GET /openapi/v1/attendance_logs.

Parameter	Type	Required	Notes
status	string	yes	Which punches: processed successfully, or failed.
from	string	no	Window start, yyyy-mm-dd hh:mm:ss. Default: one hour ago.
to	string	no	Window end, yyyy-mm-dd hh:mm:ss. Default: now.
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (Jisr's default is 100). Sent as limit.

Annual leave balance summaries per employee (all employees, or only the given employee codes, at most 100). Only the annual leave type is supported by Jisr. GET /openapi/v1/employee_leaves/summary.

Parameter	Type	Required	Notes
employee_codes	array	no	Employee codes (not ids) to include; omit for everyone.
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
limit	integer	no	Results per page, 1-100 (Jisr's default is 100). Sent as limit.

List the organization's pay groups (id and name). The pay group id is needed for payroll and accrual queries. GET /openapi/v1/paygroups.

Parameter	Type	Required	Notes
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
rpp	integer	no	Results per page, 1-100 (Jisr's default is 100). Sent as rpp.

Payroll transactions per employee for one settlement type. type 'payrun' (the regular payroll) needs pay_period and paygroup_id; 'final_settlements', 'vacations_settlements' and 'out_off_payroll_transactions' need a from/to date range. Optionally filter by employee ids or transaction type ids (jisr_list_gl_transaction_types). Sensitive payroll data. GET /openapi/v1/payroll_transactions.

Parameter	Type	Required	Notes
type	string	yes	Which settlement.
pay_period	string	no	First day of a confirmed month (yyyy-mm-01). Required for type payrun.
paygroup_id	string	no	Pay group id (UUID, jisr_list_paygroups). Required for type payrun.
from	string	no	Start date (yyyy-mm-dd). Required for the other types.
to	string	no	End date (yyyy-mm-dd). Required for the other types.
employee_ids	array	no	Only these employees (UUIDs).
transaction_type_ids	array	no	Only these transaction types (UUIDs).
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
rpp	integer	no	Results per page, 1-100 (Jisr's default is 100). Sent as rpp.

Accruals per employee for a confirmed pay period: vacations, end_of_service or tickets_provision (amount, vacation days). Sensitive payroll data. GET /openapi/v1/accrual_transactions.

Parameter	Type	Required	Notes
accrual_type	string	yes	Accrual type.
paygroup_id	string	yes	Pay group id (UUID, jisr_list_paygroups).
pay_period	string	yes	First day of a confirmed month (yyyy-mm-01).
employee_ids	array	no	Only these employees (UUIDs).
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
rpp	integer	no	Results per page, 1-100 (Jisr's default is 100). Sent as rpp.

One employee's payables for a month: net salary, earnings, additions and deductions with breakdowns. Only available to organizations Jisr has whitelisted for this API. Sensitive payroll data. GET /openapi/v1/employee_monthly_payables.

Parameter	Type	Required	Notes
employee_id	string	yes	Employee id (UUID).
pay_period_start	string	yes	First day of the month (yyyy-mm-01).

List the payroll (GL) transaction types: id, category (allowances, loan types...), English/Arabic name and status. Use the ids to filter jisr_list_payroll_transactions. GET /openapi/v1/gl_transaction_types.

Parameter	Type	Required	Notes
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
rpp	integer	no	Results per page, 1-100 (Jisr's default is 100). Sent as rpp.

The organization's audit trail: who did what and when (module, feature, action, actor, success). Filter by module, event name, event type and a time range. GET /openapi/v1/audit_events.

Parameter	Type	Required	Notes
module_name	array	no	Module names, e.g. security.
event_name	array	no	Event names, e.g. login.
event_type	array	no	Event types, e.g. updated.
from	string	no	Only events created at or after this ISO 8601 date-time, e.g. 2026-10-01T00:00:00Z.
to	string	no	Only events created at or before this ISO 8601 date-time.
page	integer	no	Page number, from 1 (default 1). Pass the previous reply's next_page.
per_page	integer	no	Results per page, 1-100 (Jisr's default is 100). Sent as per_page.

List the webhooks registered for the organization: name, endpoint host, method, status. Authentication data, custom header values and the endpoint's path and query (they can hold secrets) are hidden. Read-only; this server does not create or change webhooks. GET /openapi/v1/webhooks.

No parameter schema on file.

WRITE: register a new employee in Jisr (they are invited to the system by email). Not reversible through this server: there is no delete tool. Get department_id, employment_type_id, location_id and nationality_id from jisr_list_lookup first. Names need at least two parts. POST /openapi/v1/employees.

Parameter	Type	Required	Notes
code	string	yes	Employee code, unique within the organization.
full_name_en	string	yes	Full name in English (at least two words).
full_name_ar	string	yes	Full name in Arabic (at least two words).
email	string	yes	Work email.
personal_email	string	no	Personal email (unique among active employees).
gender	string	yes	—
marital_status	string	yes	—
joining_date	string	yes	Joining date (yyyy-mm-dd).
document_number	string	yes	National ID or Iqama number.
nationality_id	integer	yes	Nationality id (jisr_list_lookup nationalities).
department_id	integer	yes	Department id (jisr_list_lookup departments).
employment_type_id	integer	yes	Employment type id (jisr_list_lookup employment_types).
location_id	integer	yes	Location id (jisr_list_lookup locations).
outsourcing_company_id	integer	no	Outsourcing company id, for outsourced staff.
contract_type	string	yes	Contract type.
contract_period	string	yes	Contract period.
contract_end_date	string	no	Contract end date (yyyy-mm-dd), for fixed-term contracts.

WRITE: send a batch of raw clock-in/out punches (at most 100) from a punch device into Jisr attendance. Jisr processes them asynchronously; check the result with jisr_list_attendance_punches. Each punch carries the unique id its device generated; do not invent ids. POST /openapi/v1/attendance_logs.

Parameter	Type	Required	Notes
punches	array	yes	—

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install Jisr MCP by usefulapi or to call it, at any volume.

ATool-list grade · score 93 / 100

Release 1.7.3 · scanned 6 Nov 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 1 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digestd5ab5923c367ce2d0dc28eec403f200718f43f3d9d225000b2ea0765d461c995

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
jisr_list_employees	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_get_employee	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_get_employee_financial_info	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_list_lookup	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_list_attendance_summary	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_list_attendance_punches	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_get_annual_leave_balances	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_list_paygroups	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_list_payroll_transactions	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_list_accrual_transactions	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_get_employee_monthly_payables	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_list_gl_transaction_types	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_list_audit_events	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_list_webhooks	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
jisr_create_employee	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
jisr_create_attendance_punches	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

flow-1

Untrusted input can drive an external action even though no sensitive source is exposed.

Supply chain and provenance

Integrityfirst-seen

Surface digestd5ab5923c367ce2d

Scanned2026-11-06

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

Where are you running it?

Tool surface

Release history

Jisr MCP by usefulapi

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also