Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add newbdez33/freee-mcp/plugin install freeeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/newbdez33/freee-mcp/freee)<a href="https://agentmods.dev/skills/newbdez33/freee-mcp/freee"><img src="https://agentmods.dev/badge/skills/newbdez33/freee-mcp/freee/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/newbdez33/freee-mcp/freee"><img src="https://agentmods.dev/badge/skills/newbdez33/freee-mcp/freee.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00073 | $0.05088 |
| Opus 5 | $0.00036 | $0.02544 |
| Sonnet 5 | $0.00015 | $0.01018 |
| Haiku 4.5 | $0.00007 | $0.00509 |
Grade A, and why
freee scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 112 lines — stays where its author put it; the contents beside it link to each section on GitHub.
freee Attendance
Prefer the installed freee MCP tools for business operations. Use the companion CLI only for local interactive authentication setup, diagnostics when MCP cannot start, or source development. Both entry points call the same FreeeService. Select one backend before any business operation and keep it for the whole process or command. FREEE_BACKEND=api|playwright is authoritative; unset or auto selects API when API configuration exists and Playwright otherwise. Never fall back to another backend or switch from MCP to CLI after an operation error. Never assume that Claude Code was started from the source repository.
Choose the workflow
- If MCP tools are available, call
freee_backend_status; otherwise run CLIbackend status. An explicit.envor processFREEE_BACKENDwins over credential detection. If it isauto, API configuration present meansapi; absent meansplaywright. Use the selected execution surface for the rest of that operation. - In the API branch, use only API-backed commands. Cross-employee operations require the API role to allow them;
attendance_manageris known not to support APIteam status. - In the Playwright branch, use the corresponding MCP clock, monthly, personal-application, team, and approval tools.
freee_monthly_statusreads an explicitly requested personal work month or the month currently selected in freee;freee_personal_applications_listandfreee_personal_application_detailread the employee-side申請workflow;freee_team_statusreturns the management view's visible members, closing application state, attendance issues, and work totals.freee_approvals_listandfreee_approval_detailread the general manager-side承認workflow. Use the dedicatedfreee_monthly_approvals_listandfreee_monthly_approval_reviewfor another employee's月次勤怠締め; the monthly list exposes the application's explicitpaymentPeriodand its freee-mapped workperiod, and the review binds both months plus the exact application, one visible member, monthly summary, daily attendance table, alerts, and automatic checks. Never directly run the legacy project or ad-hoc browser actions. - For API setup, run
auth configureonly after explicit approval. Prefersystem, which stores Client Secret and Tokens in the System Keyring. In an installed plugin or agent package, use its resolved CLI path and persistent data directory; never invent a repository-relative command. - For Playwright first-time setup, call
freee_auth_statusand show the exactsetupCommandreturned withWEB_CREDENTIALS_UNAVAILABLE. Instruct the user to run it directly in a local interactive terminal. The CLI hides username, password, and confirmation input, stores them in System Keychain, and returns no credential value. Never run it through a non-interactive Agent shell or accept credentials in chat. Usebrowser credentials-statusonly in a source-development checkout. - For a real punch, call
freee_clock_prepare_action, match the returned action and identity to the exact instruction or active scoped business policy, retain its fingerprint, and callfreee_clock_commit_actionwith unchanged values andconfirm: true. If the user's instruction already precisely authorized execution, do not pause merely because prepare completed later. With CLI-only hosts, use the equivalent status plus dedicatedclock ... --confirmcommand. - For a personal monthly attendance submission or withdrawal, call
freee_monthly_statusfirst. Includeperiodwhen the user named a work month; Playwright selects that month through freee's official payment-month navigator and verifies the resulting work month before reading. Omit it only when the user intends the currently selected month. Evaluate every returned calendar warning against the exact instruction or policy. A non-empty warning not expressly covered by that authorization stops the item; do not infer safety from a separate department summary. Usefreee_monthly_prepare_action, validate the preview and fingerprint on the user's behalf, then callfreee_monthly_commit_actionwithconfirm: truewhen it remains authorized. A knownMONTHLY_PREVIEW_CHANGEDresult means no write occurred and may be reprepared under the same authorization. - For the current employee's leave or work-time correction, call
freee_personal_application_optionsfirst, including the date for leave. Use the exact returned leave label. If the selected leave form exposes a time range, provide the exactleave_startandleave_end; never accept or submit default00:00values. To request deletion of registered work time for one or more authorized dates, use one sequential create flow per date withkind=work-time-correctionandwork_time_action=delete, omit every clock and break field, and require each preview to show that exact date and action. This selects only勤務時間を削除; it creates a勤務時間修正application and does not directly delete a raw work record. Never substitute an API whole-day delete, a partial label, or list position. Read existing applications withfreee_personal_applications_listorfreee_personal_application_detail. Use the matching personal-application prepare tool, evaluate the full preview against the exact instruction or active policy, retain the fingerprint, and commit with unchanged values andconfirm: truewithout another prompt when it remains in scope. A deletion commit must be verified as one new same-date勤務時間修正whose content is exactly勤務時間を削除; if freee does not expose that exact result, treat it as unknown and never retry. A cancellation commit creates a new cancellation application that may still require manager approval; only approve it when the authorized final outcome expressly includes that follow-up. Overtime is unavailable until the options tool reports it as both available and supported; never bypass company configuration. - For a
月次勤怠締めapplication requiring manager action, callfreee_monthly_approvals_list, thenfreee_monthly_approval_reviewfor the exact No. Treat text such as2026年09月の支払分as a payment month, never as the work month. The dedicated workflow derives the work month from freee's displayed payment-month/work-month relationship, verifies that exact pair on both the attendance monitor and employee attendance page, and fails closed withMONTHLY_APPROVAL_PERIOD_MAPPING_UNCONFIRMEDwhen the application payment month or page relationship is missing, inconsistent, or ambiguous. Never substitute a fixed one-month offset. Evaluate the applicant,paymentPeriod, workperiod, monthly summary, every daily row, alerts, and automatic checks against the exact instruction or active scoped business policy. Use the dedicated prepare and commit tools and retain the fingerprint on the user's behalf. For other employee applications, use the general approval list, detail, prepare, and commit tools. Before approving a休暇, every pending approval page must be checked for a pending勤務時間修正with the exact same applicant and target date. Process every authorized matching勤務時間修正first, then reread and prepare the休暇approval again; never bypassLEAVE_APPROVAL_BLOCKED_BY_WORK_TIME_CORRECTION, and fail closed onLEAVE_APPROVAL_DEPENDENCY_UNCONFIRMED. The commit repeats this check and reopens the exact target before any click. This dependency rule does not block returning a休暇or processing the勤務時間修正itself. Before summarizing or preparing a pending勤務時間修正, read its detail and presentworkTimeChange.beforeandworkTimeChange.after; each null time means freee displayed未入力. IfworkTimeChangeis null, state that a reliable comparison is unavailable and do not infer one from flattened list content; it still blocks a same-applicant, same-date休暇approval while pending. All lists are paginated; read every pending page for each complete scan. - For any other request or CLI syntax, check references/commands.md. Do not improvise an API, MCP, or browser workflow that lacks a dedicated tool or command.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · -2 lines 3bf24c40cedd
- 9d ago First seen · 114 lines · 73 tokens per session scan A b2bf6f016205
freee is a skill published in the GitHub repository newbdez33/freee-mcp (0 stars, last pushed 9d ago), licensed MIT. It adds 73 tokens to every session and 5,088 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
orbit-notion
Open Orbit briefing skill — selected by the Orbit pipeline when Notion is the user's only connected connector, or when the user explicitly scopes their daily digest to Notion. Pulls the past 24 hours of document edits, comments, mentions, and database row changes from the user's authenticated Notion connection and…
Cortex
Operate Cortex, the LifeOS memory system — the typed Knowledge Archive (People, Companies, Ideas, Research with typed related: links) plus recall of prior work sessions, ISAs, and conversations. Search, add, harvest, develop, ingest, distill, graph-navigate, recall. USE WHEN cortex, knowledge, knowledge base, search…
pinchtab-mcp
Use this skill when a task requires browser automation through PinchTab's MCP server connected to a remote browser instance. Covers navigation, element interaction, data extraction, form filling, multi-step flows, and session management via MCP tools.
feishu
Work with Feishu or Lark bots, docs, sheets, bitables, approval flows, and OpenAPI/MCP setup without hardcoding credentials.
peekaboo
Capture and automate macOS UI with the Peekaboo CLI.
mochi-remind
Handle due reminders — notify the user with natural language and mark them done.