Home › Other › clio-mcp

clio-mcp

Connect Claude to Clio: 34 tools for matters, custom fields, notes, documents, folders, billing.

TypeScript

★ 24 stars Last pushed 2026-09-10 License: MIT

View repository → Website →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (npm 2.2.0)

npx -y @oktopeak/[email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "clio-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@oktopeak/[email protected]"
      ],
      "env": {
        "CLIO_CLIENT_ID": "<YOUR_VALUE>",
        "CLIO_CLIENT_SECRET": "<YOUR_VALUE>",
        "ENCRYPTION_KEY": "<YOUR_VALUE>",
        "CLIO_REDIRECT_PORT": "<YOUR_VALUE>",
        "CLIO_REGION": "<YOUR_VALUE>",
        "READ_ONLY": "<YOUR_VALUE>",
        "CLIO_API_BASE": "<YOUR_VALUE>",
        "CLIO_AUTH_URL": "<YOUR_VALUE>",
        "CLIO_TOKEN_URL": "<YOUR_VALUE>"
      }
    }
  }
}

CLIO_CLIENT_ID required — Client ID from your Clio developer application (Settings → Developer Applications)
CLIO_CLIENT_SECRET required secret — Client Secret from your Clio developer application
ENCRYPTION_KEY secret — Optional. Leave unset to auto-generate a key stored in the OS keychain (or ~/.clio-mcp/key.hex as fallback on headless Linux/WSL2). If set, must be a 64-character hex string — it will be migrated to the OS keychain on first use.
CLIO_REDIRECT_PORT — Local port for the OAuth callback listener (default: 5678). Change if 5678 is in use.
CLIO_REGION — Clio data region: 'us' (default, app.clio.com), 'eu' (eu.app.clio.com), 'au' (au.app.clio.com), or 'ca' (ca.app.clio.com). Controls the API and OAuth base URLs. Fixed at Clio account creation; must match the server your firm logs in to. Any other value stops startup.
READ_ONLY — Optional. 'true', '1' or 'yes' leaves the nine write tools (create_matter, create_note, create_task, update_task, complete_task, create_calendar_entry, log_time_entry, create_activity, upload_document) unregistered so Claude can read Clio but never change it. Works on both transports.
CLIO_API_BASE — Advanced override for the Clio API base URL (e.g. https://eu.app.clio.com/api/v4). Takes precedence over CLIO_REGION.
CLIO_AUTH_URL — Override the OAuth authorization endpoint (e.g. https://eu.app.clio.com/oauth/authorize).
CLIO_TOKEN_URL — Override the OAuth token endpoint (e.g. https://eu.app.clio.com/oauth/token).

Package (npm 2.2.0)

npx -y @oktopeak/[email protected]

Or add to your MCP client config:

{
  "mcpServers": {
    "clio-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@oktopeak/[email protected]"
      ],
      "env": {
        "TOKEN_BROKER_URL": "<YOUR_VALUE>",
        "ENCRYPTION_KEY": "<YOUR_VALUE>"
      }
    }
  }
}

TOKEN_BROKER_URL required — URL of Oktopeak's hosted token broker for the Clio App Directory listed install. Do not set CLIO_CLIENT_ID/CLIO_CLIENT_SECRET alongside this — the shared app's secret lives only on the broker, never on this machine.
ENCRYPTION_KEY secret — Optional. Leave unset to auto-generate a key stored in the OS keychain (or ~/.clio-mcp/key.hex as fallback on headless Linux/WSL2). If set, must be a 64-character hex string — it will be migrated to the OS keychain on first use.