Harvest
Connect Harvest to log time, run timers, manage projects and clients, send invoices and estimates, track expenses, and report on budgets.
Nothing is typed into PopMCP. You click Connect Harvest, sign in to Harvest and approve PopMCP, then choose which Harvest account to connect if your login has several. PopMCP is already registered with Harvest ID, so there is no developer app, callback URL or Account ID to deal with. If you prefer a token, a personal access token from id.getharvest.com/developers can be pasted under More options instead.
- Setup time
- 1 min
- Auth
- OAuth authorization
- API base URL
- https://api.harvestapp.com/v2
Before you begin
- A Harvest account. A login that only has Forecast cannot be used: this connector needs a Harvest account
- Your role in Harvest decides what the AI can reach: Administrators reach everything, Managers what they manage, Members their own time and expenses
- Pop-up blockers must allow the Harvest sign-in window to open
- Only if the AI should log time or change anything: an owner or admin in PopMCP to allow write actions
Get your credentials
Start the connection from PopMCP
Open the Harvest connector in PopMCP and click Connect Harvest. There are no fields to fill in: no token, no Account ID and no developer app.
Sign in to Harvest in the pop-up
The sign-in window opens on id.getharvest.com. Sign in with the Harvest login the AI should work as. What it can reach follows that login's role in Harvest.
Sign in to Harvest
PopMCP never sees your Harvest password. Harvest hands back a token once you approve.
Approve PopMCP
Harvest asks you to authorize PopMCP and which account or accounts it may use. Approve it. Forecast accounts can be left out: this connector only works with Harvest accounts.
Authorize PopMCP
PopMCP is asking to use your Harvest account.
Choose the Harvest account in PopMCP
Back in PopMCP, pick the Harvest account this connection is for. With one account there is just one row to choose. The connection is locked to it, and every request goes to that account. To work with another account, connect it as a second connection.
Choose an account
Your Harvest login reaches these accounts.
Or paste a personal access token instead
Prefer a token? Open Developers at id.getharvest.com, click Create new personal access token, give it any name, and copy the Your Token value. In PopMCP open More options, paste it into Personal access token and connect. Leave the Account ID where it is: PopMCP finds your accounts by itself. A token lasts until you revoke it, and it reaches every account your login can, so the same account step follows.
Personal access tokens
For your own scripts and tools. Each one reaches everything your login can.
Copy Your Token, not the Account ID.
Check the connection in PopMCP
The Harvest card in PopMCP reads Connected, with the company name. The everyday tools load at once, and the whole API is one search away. Logging time and every other change wait until an owner or admin allows write actions in PopMCP.
Harvest
- Status
- Connected
- Account
- Sterling Cooper
- Access
- Read only until write actions are allowed
| Area | Example tool | Access |
|---|---|---|
| Time totalsBy project, client or person | harvest_get_time_summary | Read |
| Unbilled workTracked and not invoiced | harvest_get_uninvoiced_report | Read |
| Find by nameClients, projects, people | harvest_find_records | Read |
| Log timeFrom a project and task name | harvest_log_time | Write |
| InvoicesFrom tracked time | harvest_create_invoice_from_tracked_time | Write |
Connect in PopMCP
Open your workspace, choose Harvest in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| How you connectpreset | Click Connect Harvest, sign in and approve. If your login has several Harvest accounts, you choose which one next. Your Harvest password is never shared with us. |
| Personal access token (instead of signing in)secret | Only if you prefer not to sign in. Paste it and the sign-in step is skipped. At id.getharvest.com/developers click Create new personal access token, give it any name, and copy the Your Token value. It reaches everything your Harvest login can, and lasts until you revoke it. Stored encrypted.Encrypted with AES-256-GCM on save and never shown again. |
PopMCP verifies the credential against Harvest immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Verify it worked
The Harvest card in PopMCP shows Connected with the company name. Asking the AI for the connection profile (harvest_connection_profile) names the account and whether it tracks time by duration or by start and end time, and asking how many hours you logged this week (harvest_get_time_summary) returns totals rather than an authorization error.
Troubleshooting
The sign-in window never opens
Why: A pop-up blocker is stopping the Harvest sign-in window.
Fix: Allow pop-ups for PopMCP in your browser and click Connect Harvest again.
"This login has no Harvest account that PopMCP can use"
Why: The login only has Forecast accounts, or no Harvest account was ticked on Harvest's approval page.
Fix: Connect again and tick a Harvest account, or sign in with a login that has one.
"Harvest did not accept this token"
Why: The token was copied in part, was revoked, or the Account ID was pasted by mistake.
Fix: At id.getharvest.com/developers copy the Your Token value of a personal access token, or create a new one, and paste it again.
"Your Harvest login cannot reach this account any more"
Why: The login was removed from the Harvest account after connecting.
Fix: Reconnect with a login that belongs to the account, or choose another account.
The AI gets a 403 on projects, invoices or reports
Why: Harvest limits data by role: Members see only their own time and expenses, and Managers see what they manage. Some areas also need a feature on the account, such as approvals or Time Off.
Fix: Connect with an Administrator's login, or raise the person's role in Harvest.
"This account tracks time by start and end time" or "by duration"
Why: Harvest accounts use one way of tracking time, and the other fields would not be used.
Fix: Nothing to change: the AI retries with the right fields. harvest_log_time handles this by itself.
A report answers 429
Why: Harvest allows only 100 report requests per 15 minutes for the whole account, far fewer than its other requests.
Fix: Wait a few minutes. For plain time totals, harvest_get_time_summary does not use this limit.