Redmine MCP Server: issues and time tracking
Redmine MCP Server
An MCP server for Redmine: issues, projects, wikis, time tracking and files, a read-only mode and per-user OAuth2 sign-in
- 92 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- The agent creates, changes and deletes issues, wikis and files in a live Redmine unless read-only mode is on
- A Redmine key opens all of its owner's projects
Install
- Works in
Manual install
pip install redmine-mcp-serverAfter installing, create a `.env` with `REDMINE_URL` and a key and run `redmine-mcp-server`.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The agent creates, changes and deletes issues, wikis and files in a live Redmine unless read-only mode is on
- A Redmine key opens all of its owner's projects
This is third-party code. Review the repository files before installing.
What it does
Redmine MCP Server connects an AI assistant to your Redmine instance. A stock Redmine has 53 tools, and with the RedmineUP and DMSF plugins there are 69. They cover issues, projects, news, time tracking, wikis, Gantt, file operations and project membership. `show_triage_board` renders a drag-and-drop kanban board in the chat through the MCP Apps extension. Authentication is chosen by mode: API key, username and password, OAuth2 with per-user tokens (Redmine 6.1 or later for Doorkeeper), or a browser login with each user's own API key for Redmines without OAuth. User-controlled content is wrapped in boundary tags to make prompt injection harder. The server starts with `redmine-mcp-server` and listens at `http://localhost:8000/mcp`, with a health check at `/health` and files served by UUID links with an expiry. `REDMINE_MCP_READ_ONLY=true` blocks all writes, and `REDMINE_MCP_ALLOW_TOOLS` leaves only the tools you name. A Docker image on GHCR and docker-compose are provided.
Who it is for. Project managers, developers and support staff who track work in Redmine and want to manage it from Claude Code, Cursor or VS Code.
Good fit when
- You want to find and group a project's issues and triage them on a kanban board in the chat
- You need to log time spent and review time tracking per project
- An agent should read the wiki and an issue's attachments by link
- You want a shared team server where everyone signs in as themselves through OAuth2
- You want to give the agent read-only access first and enable writes later
Not a fit when
- Redmine is older than 6.0: the integration suite passes on 6.1 and 7.0 and older versions are untested
- You need Jira or another tracker: the server works with Redmine only
- You have no way to get Redmine keys: without a key or a sign-in the server cannot connect
Example request
Show my open issues in the Website project on a kanban board, and log two hours with a comment on the high-priority one.MCP
- Transport
- http
- Authentication
- key is optional
Environment variables
REDMINE_URLrequired- Base URL of your Redmine
REDMINE_API_KEYsecret- Redmine API key for the default mode
REDMINE_MCP_READ_ONLY- Blocks all write operations when true
REDMINE_MCP_ALLOW_TOOLS- Comma-separated list of allowed tools
Limitations
The full suite passes on Redmine 6.1 and 7.0; on older versions some tools may fail: global search needs 3.3.0 or later, issue watchers 2.3.0 or later and project time-entry activities 3.4.0 or later. OAuth2 needs Redmine 6.1 or later. The `legacy-per-user` mode requires the server to sit behind TLS and the `REDMINE_PER_USER_TRUST_PROXY` flag. Attachment files are served over UUID links with a limited lifetime, so do not expose the server to the internet without authorization. Part of the 69 tools appear only with the RedmineUP and DMSF plugins.
How to disable. Stop `redmine-mcp-server` and remove the entry from the client configuration, for example with `claude mcp remove redmine`. Issued API keys can be revoked in the Redmine profile.
FAQ
How do I connect Redmine to Claude Code?
Start the server with `redmine-mcp-server` and add it with `claude mcp add --transport http redmine http://127.0.0.1:8000/mcp`. The `.env` needs `REDMINE_URL` and a key or login.
Can I limit the agent to reading?
Yes. `REDMINE_MCP_READ_ONLY=true` blocks create, update and delete, and `REDMINE_MCP_ALLOW_TOOLS` leaves only the tools you list.
How does multi-user sign-in work?
The `oauth` and `oauth-proxy` modes use Redmine 6.1+ OAuth2, `legacy-per-user` takes a personal API key in the `X-Redmine-API-Key` header, and `api-key-login` offers a browser login.
How many tools are available?
53 on a stock Redmine and 69 with the RedmineUP and DMSF plugins, plus one operator tool enabled by `REDMINE_MCP_EXPOSE_ADMIN_TOOLS=true`.
Is the server protected against prompt injection?
Partly. User-entered content is wrapped in boundary tags for safe passing to the model. This makes attacks harder but does not replace limiting the token's rights.
Discussion
No questions or reviews yet.
Related
MCP serversMCP Redmine restricts files to approved directories, and administrators can limit read-only work to GET requests.
redmine-cli runs Redmine issues and time tracking from a terminal and exposes them to agents as a skill or MCP server
Teamwork.com tasks, Desk tickets, Spaces pages and chats for an agent: a hosted server with role profiles and a read-only mode
Trello MCP server with 57 tools: cards, lists, checklists, attachments, comments, custom fields and workspaces, plus acceptance-criteria extraction
The official Kibela MCP server searches, reads and edits notes, folders and comments of your wiki straight from an assistant chat
A Mattermost MCP server: an agent reads, searches and posts messages, threads and files in your workspace, with 39 tools.
README in short
The README begins with features and a four-step quick start, then covers requirements, Redmine version compatibility, PyPI installation and an environment variable table. Authentication modes, client setup (VS Code, Claude Code and others), the tool catalog and RedmineUP and DMSF plugin support follow.