TaScan MCP Server

AI agent integration for TaScan — the closed-loop autonomous operations protocol. Manage projects, events, tasks, workers, QR codes, templates, completion reports, and AI-powered issue resolution through Claude, GitHub Copilot, or any MCP-compatible AI client.

Task. Scan. Done.

What is TaScan?

TaScan is a zero-download task assignment and verification platform for physical-world work. Workers scan a QR code, complete tasks with photo verification, and managers get real-time completion reports — no app download, no login, no training required.

When something breaks, AI analyzes the issue, generates fix instructions, and dispatches them to the right worker — closing the loop autonomously in under 10 seconds.

Industries: live events, construction, hospitality, warehousing, property management, healthcare, aviation, FEMA disaster response, and more.

10 Provisional Patents Filed — 265 claims, ~1000+ pages of specification. USPTO Applications #63/995,189 through #64/001,286.

Quickest Start: Claude.ai / Claude Mobile

No install required. Add TaScan as a custom connector in Claude:

1. Settings > Connectors > Add custom connector
2. Enter: https://app.tascan.io/mcp
3. First time you use a tool, sign in with your TaScan email and password

That's it. Works on claude.ai and Claude mobile. Same sign-in experience as GitHub, Netlify, and Supabase connectors.

---

Installation (Claude Desktop / Claude Code)

npm install tascan-mcp

Or run directly with npx:

npx tascan-mcp

Configuration

Environment Variables

Variable	Required	Description
TASCAN_API_KEY	Yes	Your TaScan API key (generate in Admin Portal > Team > API Keys)
TASCAN_API_URL	No	API base URL (default: https://app.tascan.io/api/v1)

Claude Desktop

Add to your Claude Desktop config file (claude_desktop_config.json):

{
  "mcpServers": {
    "tascan": {
      "command": "npx",
      "args": ["-y", "tascan-mcp"],
      "env": {
        "TASCAN_API_KEY": "your-api-key-here"
      }
    }
  }
}

Claude Code

claude mcp add tascan -- npx -y tascan-mcp

Then set your API key in the environment.

Remote (claude.ai / Claude Mobile)

TaScan MCP is also available as a remote server — no install, no API key needed:

https://app.tascan.io/mcp

Add as a custom connector in Claude (Settings > Connectors). When you first use a tool, you'll be redirected to sign in with your TaScan email and password — just like connecting GitHub or Netlify. OAuth 2.0 with PKCE handles everything automatically.

Tools (36)

Projects

Tool	Description	Type
tascan_list_projects	List all projects in the organization	Read
tascan_get_project	Get details of a specific project	Read
tascan_create_project	Create a new project	Create
tascan_update_project	Update project name, location, status, dates	Update
tascan_delete_project	Delete a project and all its contents	Delete

Events (Task Lists)

Tool	Description	Type
tascan_list_events	List all events within a project	Read
tascan_get_event	Get event details including tasks	Read
tascan_create_event	Create a new event in a project	Create
tascan_update_event	Update event name, description, modes	Update
tascan_delete_event	Delete an event and all its tasks	Delete

Tasks

Tool	Description	Type
tascan_list_tasks	List all tasks in an event	Read
tascan_get_task	Get task details including completions; each completion carries photo_url (raw storage path) + photo_signed_url (fetchable, ~1h, null when no photo)	Read
tascan_add_tasks	Bulk-create tasks in an event	Create
tascan_update_task	Update task title, type, flags, order	Update
tascan_delete_task	Delete a task and its completions	Delete

Workers

Tool	Description	Type
tascan_list_workers	List all workers in the organization	Read
tascan_create_worker	Create a new worker profile	Create
tascan_update_worker	Update worker name, phone, email	Update

Operations

Tool	Description	Type
tascan_generate_qr	Generate a QR code for an event	Create
tascan_apply_template	Apply a pre-built template to an event	Create
tascan_list_templates	List available task templates	Read
tascan_get_report	Get completion report for an event (optional include_responses returns submitted response data plus a per-task photos[] list of { path, signed_url, completed_at, worker_name })	Read
tascan_generate_report	Mint a shareable Completion / Service (client-branded, acknowledgeable) / Project / Evidence Pack link; optionally text it	Write
tascan_list_reports	Existing report links for a list or project with acknowledgment status	Read
tascan_invite_worker	Consented intro to a marketplace worker: TaScan texts them, YES adds them to your org + sends the list, NO keeps them anonymous	Write
tascan_list_invites	Your marketplace invites and their status; accepted ones carry the worker's contact	Read
tascan_zone_compliance	Hazard-zone audit: crossings, AI-verified PPE checkpoint verdicts, breaches, injuries cross-referenced with the last PPE check (zones now carry kind, required_ppe, task_list_on_enter, worker SMS rules)	Read
tascan_create_invoice	Create a client invoice from explicit line items OR from verified work (project / lists × hourly or flat rate); returns the share link and, for single-list invoices, a linked client Service Report	Write
tascan_list_invoices	List invoices with status, totals, due dates, links; outstanding balance	Read
tascan_update_invoice	Mark paid / overdue / cancelled, edit client details, notes, due date	Write
tascan_query_responses	One task's responses across every list in a project — chronological progression series	Read

Closed-Loop Autonomous Operations (Patent Pending)

Tool	Description	Type
tascan_list_issues	List field-reported issues with filtering by status, category, severity	Read
tascan_analyze_issue	AI classifies issue severity, identifies root cause, and scores urgency	AI
tascan_recommend_fix	AI generates ranked remediation tasks with step-by-step instructions	AI
tascan_auto_resolve	Full closed loop in ONE call — issue in, AI analyzes, fix dispatched, loop closes	AI

Communications

Tool	Description	Type
tascan_dispatch_instruction	Multi-channel delivery of instructions to workers (SMS, email, QR)	Create
tascan_send_task_email	Send task links and notifications via email	Create
tascan_complete_task	Mark a task as completed with optional response data	Update

AI Agent Coordination (Patent #10)

Tool	Description	Type
tascan_list_agents	List registered AI agents in the system	Read
tascan_register_agent	Register a new AI agent with capabilities	Create
tascan_dispatch_to_agent	Route a task to a specific AI agent for execution	Create

Usage Examples

Example 1: Set up a construction site inspection

User: Create a construction project for the Downtown Tower site and set up a daily safety inspection with tasks for PPE check, fall protection, scaffolding inspection, and fire extinguisher check. Make all tasks safety checkpoints that require photos.

Claude will:
1. Call tascan_create_project with name "Downtown Tower" and location "123 Main St"
2. Call tascan_create_event with name "Daily Safety Inspection"
3. Call tascan_add_tasks with 4 safety checkpoint tasks requiring photos
4. Call tascan_generate_qr to create a scannable QR code for the foreman

Example 2: AI-powered autonomous issue resolution

User: Check if there are any open issues on the Marriott load-in and have TaScan fix them automatically.

Claude will:
1. Call tascan_list_issues to find open issues
2. Call tascan_auto_resolve for each issue — AI analyzes root cause, generates fix tasks, and dispatches instructions to the nearest qualified worker via SMS
3. Report back with resolution status and confidence scores

Example 3: Use templates to quickly deploy an event

User: We have a warehouse receiving shipment coming in tomorrow. Set up the standard receiving checklist.

Claude will:
1. Call tascan_list_templates with category "logistics" to find available templates
2. Call tascan_create_project for the warehouse
3. Call tascan_create_event for the receiving session
4. Call tascan_apply_template with the "warehouse-receiving" template slug
5. Call tascan_generate_qr for the receiving dock crew

Example 4: Analyze and triage field issues

User: We have 5 open issues on the concert setup. Analyze them all and tell me which ones are most urgent.

Claude will:
1. Call tascan_list_issues to get all open issues
2. Call tascan_analyze_issue for each one — AI classifies severity, root cause probability, and urgency score
3. Rank by urgency and recommend which to auto-resolve vs which need human attention

Task Types

Tasks support multiple response types:

Type	Description
checkbox	Simple done/not-done (default)
photo	Requires photo upload to complete
text	Free-text response
number	Numeric response
date	Date selection
choice	Multiple choice selection

Tasks can also be flagged as:

• Safety checkpoints (is_safety_checkpoint: true) — highlighted in red, cannot be skipped
• Photo required (requires_photo: true) — worker must attach a photo to complete

Getting an API Key

1. Log in to the TaScan Admin Portal
2. Navigate to Team in the sidebar
3. Scroll to API Keys
4. Click Generate API Key
5. Copy the key (it's only shown once)
6. Set it as TASCAN_API_KEY in your environment

API keys are scoped to your organization and support rate limiting (60 requests/minute).

Troubleshooting

"Connection failed" or OAuth redirect issues

• Verify you're using the correct URL: https://app.tascan.io/mcp
• Clear your browser cache and try reconnecting
• If using Claude Desktop, restart the app after adding the connector

"Unauthorized" or 401 errors (local npm install)

• Regenerate your API key in Admin Portal > Team > API Keys
• Confirm TASCAN_API_KEY is set in your environment (not just in the config file)
• Keys are organization-scoped — make sure you're using a key from the correct org

Tools not showing up in Claude

• Disconnect and reconnect the TaScan connector
• For Claude Code: run claude mcp list to verify the server is registered
• Check that your TaScan account has an active organization (free tier is fine)

"Rate limited" errors

• Default limit is 60 requests/minute per API key
• Pro and Business tiers have higher limits
• Batch operations (like tascan_add_tasks) are more efficient than individual calls

Task completions not appearing

• Workers must submit via the task link (QR scan or direct URL)
• Photo-required tasks won't show as complete until the photo uploads
• Check the event's response mode (single vs. multi-response)

Photo evidence links

• photo_url is the raw storage object path (stable, never changes). photo_signed_url is a fetchable HTTPS link that expires after ~1 hour (server default TASCAN_PHOTO_URL_TTL=3600). Re-run the read tool for a fresh link; never store the signed URL.
• photo_signed_url: null with a non-null photo_url means signing was unavailable at read time (storage hiccup). The read still succeeds — retry for the link.

Changelog

v3.15.0 — 2026-09-19

• tascan_create_cycle gains an optional reviews[] array — a multi-lens review panel (design item 14a): 1–8 lenses, each {lens, brief, provider: openai|anthropic|gemini, model?, blocking? (default true), max_tool_calls? (openai only)}, forwarded to POST /coord/cycles; at least one lens must be blocking. Omit it for the single OpenAI review.
• tascan_get_cycle_report prints review[<lens>] for panel review steps; legacy steps print review unchanged.
• 79 tools, no new tool, scopes unchanged.

v3.14.1 — 2026-09-18

• tascan_create_cycle: new optional repo argument — which codebase on the executor the build runs in, an alias from the executor's allowlist (tascan-agent/repos.json; default tascan). artifact_paths are relative to that repo. An unknown alias is refused by the executor (repo_unknown) and the cycle parks — the protocol can now build, review and gate work in any project the executor lists, not only TaScan itself (migration 161).
• 78 tools.

v3.14.0 — 2026-09-18

• Coordination layer live (migration 155): tascan_create_cycle, tascan_get_cycle_report, tascan_get_build, tascan_get_build_file, tascan_post_message now run against the released schema — build → independent review → one human decision → integrate, with signed receipts at every step.
• Scheduled SMS (migration 157): tascan_schedule_sms (full tier), tascan_list_scheduled_sms (read), tascan_cancel_scheduled_sms (full) — TaScan's own 5-minute scheduler sends through the same guarded lane as tascan_send_sms; nothing outside TaScan has to stay awake.
• tascan_get_receipt: profile argument (full | public); public-profile receipts are now published for the protocol page's build trail.
• 78 tools. Hosted MCP (https://app.tascan.io/mcp) already serves this version; this release brings the stdio package to parity.

v3.13.1 — 2026-09-14

• Docs only. tascan_get_task and tascan_get_receipt now say it plainly: a completion with status completed means the executor returned and a result was recorded — it does not mean the result was accepted. Acceptance is the receipt's verification.result under a named policy, and in v0.1 no policy runs for agent tasks (no_policy_run), so read the recorded response before treating an agent completion as success (protocol §8.3 C11). The receipt description also lists the eleven-step verifier (65,536-byte size gate, real-calendar datetimes, GPS bounds, token-free locators, verifier.identity vocabulary). No tool additions — still 70 tools.

v3.13.0 — 2026-09-14

• Authorization scopes. Every key and OAuth grant now carries a tier — read, write, or full — plus two additive permissions: agent:dispatch (hand PLAN/RESEARCH/WRITE/REVIEW/DEFAULT tasks to an AI agent inbox) and agent:dispatch:code (CODE/SHELL tasks, which run on the org's own machine). Tools are classified in scopes.cjs; a call outside the grant returns an isError result naming the scope to reconnect with. Existing OAuth connections must reconnect and tick the dispatch boxes on the consent page to dispatch again.
• tascan_get_receipt (new, 70 tools). Fetches the signed Action Receipt (Ed25519 JWS, TaScan Protocol v0.1) for one completion: what was done, by whom, evidence hashes, verification, ledger chain head — with per-field provenance. Verify offline against https://app.tascan.io/.well-known/tascan-receipt-keys.json or online via POST /api/v1/receipts/verify. Spec: https://app.tascan.io/docs/protocol/TASCAN-PROTOCOL-v0.1.md
• tascan_get_task reports an agent block (execution attempts: state, attempts, runner, trace id, error) for tasks dispatched to an agent — the only place agent failures are surfaced.
• tascan_dispatch_to_agent keeps the full instruction in the task description; the urgent marker no longer breaks routing.

v3.12.0 — 2026-09-12

• tascan_send_task_email and tascan_assess_condition now send the caller's API key (the TaScan functions behind them require it after the S99 security sweep). No tool additions — still 69 tools.

v3.11.0 — 2026-09-11

• Signed photo URLs in every completion payload. Photo evidence was invisible to AI agents: photo_url was a bare private-bucket path with no host or token. Every read path that returns a completion now also returns photo_signed_url (short-lived, default 1h, tunable via TASCAN_PHOTO_URL_TTL), null when there is no photo. Covered: tascan_get_task (task + subtask completions), tascan_get_report (new per-task photos[] when include_responses is true, replacing the bare [+photo] marker), tascan_list_subtasks, tascan_query_responses, tascan_list_issues / issue analysis (issue + injury photos), tascan_zone_compliance (PPE checkpoint photos), tascan_condition_history (assessment + baseline photos).
• One batched storage signing call per response (a 40-task list fires one request, not 40). Signing failures log and degrade to photo_signed_url: null with the raw path intact; the tool call never fails.
• Single shared signing helper on the server (photo-sign-lib) now backs the API, the photo proxy used by the Completion / Client / Project / Evidence Pack reports, and every AI vision fetcher, so URL construction cannot drift again.
• Remote endpoint serverInfo.version now reads from this package instead of a stale hardcoded string.

v3.10.0 — 2026-09-03

• 69 tools: invoices, P2P worker payments, hazard zones with AI-verified PPE checkpoints, full RLS lockdown, agent claims.

Privacy Policy

TaScan collects and processes task completion data, worker information (name, phone, email), GPS coordinates (with consent), and photos uploaded during task completion. Data is stored securely in Supabase with row-level security policies. API access is authenticated and rate-limited.

For the full privacy policy, visit: https://tascan.io/faq.html

For data deletion requests or privacy inquiries, contact: Michael@TaScan.io

Support

• Email: Michael@TaScan.io
• Website: https://tascan.io
• Issues: https://github.com/snowbikemike/tascan-mcp/issues

License

MIT License - Copyright (c) 2026 Michael Edward Love II / Love Productions LLC