Documentation

Linetrack MCP server.

The connector that lets Claude, ChatGPT and Microsoft Copilot query your Linetrack data. This page covers setup, permissions, tools and the security model, for review by your IT.

At a glanceRead-onlyOAuth 2.1 with PKCEPermissions of the asking user

On this pageConnection Setup Permissions Tools Security FAQ

Connection

Key facts of the interface.

One server address for all customers. Which data comes back is decided by each user's own sign-in.

Property	Value
Server URL	https://app.linetrack.de/mcp
Protocol	Model Context Protocol (MCP), Streamable HTTP, stateless
Protocol versions	2025-03-26, 2025-06-18, 2025-11-25
Sign-in	OAuth 2.1, authorization code with PKCE, refresh tokens with rotation
Scope	mcp:read (read-only)
Token lifetime	Access tokens 15 minutes; refresh tokens 30 days
Rate limit	60 requests per minute per user, 300 per minute per company
Server description (machine-readable)	https://app.linetrack.de/.well-known/mcp/server-card.json

Setup

Connected in a few minutes.

First your administrator assigns the “AI Assistant” license to users. Then each user installs Linetrack in their assistant once and signs in with their usual Linetrack login.

Claude

From the connector directory

Find Linetrack in Claude's connector directory and connect it.
Sign in with your own Linetrack login and ask directly in the chat.

ChatGPT

From the ChatGPT apps

Find Linetrack in ChatGPT's apps and connect it.
Sign in with your own Linetrack login and ask directly in the chat.

Microsoft Copilot

From the Copilot Store

Find Linetrack in the Copilot Store and install it – just like a Teams app.
Sign in with your own Linetrack login and ask directly in Copilot.

In all three assistants Linetrack is installed like an app from the respective directory. Nobody has to enter a server URL; it is listed above only for clients that set up connectors by hand. The Linetrack login is the user's confirmation: there is no API key and no shared access.

Permissions

Who may ask what.

The assistant has no rights of its own. Every answer is produced under the permission check Linetrack applies to the asking user anyway.

“AI Assistant” license

Per user, assigned and revoked by the company administrator in user management. Without it, no sign-in to the server is possible.

Own projects and tasks

Deadlines, project status, project plans and history only to the extent the user sees them in Linetrack: own projects in full, in other projects only the tasks assigned to them.

Capacity

Capacity figures are returned only to users who may see resource planning in Linetrack as well. Which groups appear follows their visibility in the application.

Tools

The ten tools.

One tool per customer question, all marked as read-only. Lists come with 20 entries per page and page through the page parameter.

Own tasks and projects

“AI Assistant” license

Tool	Answers	Parameters
get_my_account	Who am I, which company, which permissions?	—
get_my_overdue_items	What is overdue?	filter, page
get_my_upcoming_milestones	Which deadlines are pressing next?	weeksAhead, filter, page
get_my_workload_forecast	When does it get tight?	weeksAhead, filter
get_my_projects_overview	How are my projects doing?	scope, page
get_project_completion_forecast	When will project X realistically be finished?	projectName
get_project_history	What was changed in project X?	projectName, daysBack, fromDate, toDate, page
get_project_plan	Show me the plan of project X. What is blocking what?	projectName, filter, parent, page

Capacity

depending on permissions in Linetrack

Tool	Answers	Parameters
get_capacity_outlook	Are we overbooked? Where is there room?	monthsAhead, resourceGroup, scope, page
check_capacity_for_demand	Does an order of X hours from month Y still fit?	hours, startMonth, resourceGroup, monthsAhead, scope

Every forecast carries a mandatory field stating its basis and limits, so the assistant presents an estimate as an estimate.

Security

Built for IT departments that ask questions.

The points a security review asks about, written to be passed on.

Read-only, enforced technically

All tools are marked read-only. In addition, Linetrack rejects every call to a writing interface made with an AI access token with HTTP 403. Creating, changing and deleting is not possible through this access.

Personal sign-in

OAuth 2.1 with PKCE through each user's own Linetrack login. No static API keys, no shared access.

Revocation takes effect within 15 minutes

License revoked or account deactivated: the next token renewal fails, and an existing access token expires after 15 minutes at the latest.

Registered assistants only

The sign-in addresses of the assistants are registered with Linetrack in advance. There is no open self-registration of arbitrary clients.

Tenant separation without a special path

The access token is an ordinary Linetrack token and goes through the same checks as the web interface. Company and user are never a parameter of a tool.

Only the data asked for

Only the answer to the question asked goes to the AI provider. There is no extract of your data and no background synchronisation. Requests are limited per user and per company.

FAQ

Frequently asked questions

Can the assistant change data in Linetrack?

No. The access is read-only and enforced technically. Making changes directly in chat is in preparation. The AI assistant product page describes the benefit from the business side.

Which license do users need?

The “AI Assistant” license per user. Anything beyond that depends on the permissions the user already has in Linetrack.

Why do the capacity tools also appear to users without access to resource planning?

The tool list is the same for every user. When a tool is called, Linetrack checks the permission and refuses if the user may not see the capacity in the application either; no data is returned in that case.

Can I connect my own MCP client?

Claude, ChatGPT and Microsoft Copilot are registered. We register further clients by hand; open self-registration is deliberately not offered. Get in touch.

Is there a machine-readable description?

Yes. The server description (endpoint, transport, sign-in) is at https://app.linetrack.de/.well-known/mcp/server-card.json; the sign-in addresses are named by the documents at /.well-known/oauth-protected-resource and /.well-known/oauth-authorization-server.

How reliable are the forecasts?

As orientation yes, as a commitment no. Completion is a linear projection, capacity a month-level calculation without a skills check. Both answers state their basis and limits.