chore(mcp): prepare for MCP Registry submission

Adds the metadata required to submit @squidcode/timebook to
modelcontextprotocol/registry:

- server.json at repo root, declaring name (io.github.squidcode/timebook),
  the npm package + entrypoint args ("mcp"), the GitHub source repo, and
  the upstream website. Schema-pinned to the 2025-09-29 server schema.
- mcpName: "io.github.squidcode/timebook" in package.json.
- <!-- mcp-name: io.github.squidcode/timebook --> at the top of README.md
  for ownership verification by the mcp-publisher CLI.

README also gets the content reviewers look for:

- A "Try it with prompts" section with five concrete end-to-end MCP
  prompts (start a timer, query past time, log past work with rate,
  query active timer, stop timer) — Claude Connectors review wants ≥3
  examples in the docs.
- A "Privacy" section documenting token storage location and permissions,
  the absence of telemetry, the role of the MCP host, and how to revoke
  the token. A missing privacy disclosure is an automatic Connectors
  rejection.
- Minor doc updates: tools table now shows read-only / pagination hints,
  and the develop/release sections mention the new `npm test` step.

Note on naming: the GitHub repo is squidcode/timebook-cli; the npm
package and Registry namespace are @squidcode/timebook (no -cli). The
server.json reflects this split.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: ktamas77

README.md

@@ -1,3 +1,5 @@
+<!-- mcp-name: io.github.squidcode/timebook -->
+
 # Timebook CLI
 
 Command-line client and **MCP server** for [Timebook](https://usetimebook.com) — track time, manage timers, and expose your Timebook account to AI agents (Claude, Codex, Cursor, …) over the [Model Context Protocol](https://modelcontextprotocol.io).
@@ -88,16 +90,39 @@ The MCP server reuses the token saved by `timebook login` — run `timebook logi
 
 ### Tools exposed to the model
 
-| Tool               | What it does                                     |
-| ------------------ | ------------------------------------------------ |
-| `whoami`           | Current authenticated user                       |
-| `list_projects`    | All projects in scope                            |
-| `list_clients`     | All clients in scope                             |
-| `get_active_timer` | The running timer, or `null`                     |
-| `start_timer`      | Start a timer on a project                       |
-| `stop_timer`       | Stop the running timer                           |
-| `log_time`         | Log a manual entry (`duration` OR `start`+`end`) |
-| `list_entries`     | Recent entries, optional project + date filters  |
+| Tool               | What it does                                                 |
+| ------------------ | ------------------------------------------------------------ |
+| `whoami`           | Current authenticated user (read-only)                       |
+| `list_projects`    | All projects in scope (read-only)                            |
+| `list_clients`     | All clients in scope (read-only)                             |
+| `get_active_timer` | The running timer, or `null` (read-only)                     |
+| `start_timer`      | Start a timer on a project                                   |
+| `stop_timer`       | Stop the running timer                                       |
+| `log_time`         | Log a manual entry (`duration` OR `startTime`+`endTime`)     |
+| `list_entries`     | Recent entries (default 50, max 500), project + date filters |
+
+### Try it with prompts
+
+Once the MCP server is connected, ask the model in plain English:
+
+- _"Start a timer on my Acme website project for landing-page wireframes."_
+- _"How much time did I log on the Recycler project last week?"_
+- _"Log 1 hour 30 minutes against ChatNexus from 9am this morning at the Software Development rate, with description 'code review of the auth refactor'."_
+- _"What am I currently working on?"_ — invokes `get_active_timer`.
+- _"Stop my timer."_
+
+The model picks the right tool, asks `list_projects` first if it needs to disambiguate a name, and writes through `start_timer` / `log_time` / `stop_timer`.
+
+## Privacy
+
+Timebook CLI runs on your machine and only talks to your Timebook account.
+
+- **Authentication**: `timebook login` mints a personal API token via Timebook's OAuth-style consent screen. The token is stored locally with `0600` permissions (`~/Library/Preferences/timebook/config.json` on macOS, `~/.config/timebook/config.json` on Linux, `%APPDATA%\timebook\Config\config.json` on Windows). It is never transmitted anywhere except `https://usetimebook.com` (or your override) on outgoing API calls.
+- **Telemetry**: none. Neither the CLI nor the MCP server reports usage, errors, or analytics anywhere.
+- **MCP host data**: when you use `timebook mcp` from inside Claude / Cursor / etc., the MCP host (not Timebook) controls what the model sees. Tool inputs and outputs flow through the host's normal model-context pipeline.
+- **Revoking access**: visit https://usetimebook.com/settings/api-tokens to revoke the token at any time.
+
+For Timebook's product-level privacy policy, see https://usetimebook.com/privacy.
 
 ## Configuration
 
@@ -125,14 +150,14 @@ cd timebook-cli
 npm install
 npm run dev -- --help        # tsx-powered hot-loop
 npm run build                # emits dist/
-npm run lint && npm run typecheck
+npm run lint && npm run typecheck && npm run test
 ```
 
 Pre-commit hooks (ESLint + Prettier via `lint-staged`) are wired up by `husky` on `npm install`.
 
 ## Release
 
-`prepublishOnly` runs lint + typecheck + build, then:
+`prepublishOnly` runs lint + typecheck + tests + build, then:
 
 ```bash
 npm publish --access public

server.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
+  "name": "io.github.squidcode/timebook",
+  "description": "Track time, manage timers, and read your Timebook (usetimebook.com) account from any MCP client. Exposes start_timer, stop_timer, log_time, list_projects, list_clients, list_entries, get_active_timer, and whoami.",
+  "version": "0.1.4",
+  "repository": {
+    "url": "https://github.com/squidcode/timebook-cli",
+    "source": "github"
+  },
+  "websiteUrl": "https://usetimebook.com",
+  "packages": [
+    {
+      "registryType": "npm",
+      "registryBaseUrl": "https://registry.npmjs.org",
+      "identifier": "@squidcode/timebook",
+      "version": "0.1.4",
+      "transport": {
+        "type": "stdio"
+      },
+      "runtimeArguments": [
+        {
+          "type": "positional",
+          "value": "mcp"
+        }
+      ]
+    }
+  ]
+}