Is io.github.RCS-kz/bitrix24-mcp safe to use?

io.github.RCS-kz/bitrix24-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.RCS-kz/bitrix24-mcp?

io.github.RCS-kz/bitrix24-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.RCS-kz/bitrix24-mcp do?

io.github.RCS-kz/bitrix24-mcp provides 11 tools: contact_list, company_list, deal_list, lead_list, product_list and 6 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.RCS-kz/bitrix24-mcp?

io.github.RCS-kz/bitrix24-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.RCS-kz/bitrix24-mcp actively maintained?

io.github.RCS-kz/bitrix24-mcp is recently maintained — last commit was 64 days ago.

io.github.RCS-kz/bitrix24-mcp

@rcs-kz/bitrix24-mcp

Bitrix24 Cloud MCP server — 45 tools across CRM, Tasks, Deals, Leads, Files, Disk.

83/wk 11 tools GitHub npm

No known CVEs

No license

Maintained

Last commit 64d ago

Works with most clients

Transport: stdio

11 tools · ~417 tok

Grade A · 0.2% of 200K ctx

Edit this pageView history

Productivity Communication

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-rcs-kz-bitrix24-mcp": {
      "args": [
        "-y",
        "@rcs-kz/bitrix24-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-rcs-kz-bitrix24-mcp)](https://mcppedia.org/s/io-github-rcs-kz-bitrix24-mcp)

Read me

What io.github.RCS-kz/bitrix24-mcp does

Production-grade MCP server for Bitrix24 Cloud — 45 tools, safe by default. > Профессиональный MCP-сервер для Bitrix24 — 45 инструментов, безопасно по умолчанию.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@rcs-kz/bitrix24-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @rcs-kz/bitrix24-mcp against OSV.dev.

Inventory

Tools (11)

Click any tool to inspect its schema.

~417 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.RCS-kz/bitrix24-mcp safe to use?: io.github.RCS-kz/bitrix24-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.RCS-kz/bitrix24-mcp?: io.github.RCS-kz/bitrix24-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.RCS-kz/bitrix24-mcp do?: io.github.RCS-kz/bitrix24-mcp provides 11 tools: contact_list, company_list, deal_list, lead_list, product_list and 6 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.RCS-kz/bitrix24-mcp?: io.github.RCS-kz/bitrix24-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.RCS-kz/bitrix24-mcp actively maintained?: io.github.RCS-kz/bitrix24-mcp is recently maintained — last commit was 64 days ago.

Similar servers

Others in productivity / communication

View all →

Memory MCP Server98

Persistent memory using a knowledge graph

87.9k 5

Mcp_agent_mail96

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.0k 6

Sequential Thinking MCP Server95

Dynamic problem-solving through sequential thought chains

87.9k 1

Monday Api Mcp94

MCP server for using the monday.com API

412 4

MCP Security Weekly

Get CVE alerts and security updates for io.github.RCS-kz/bitrix24-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Productivity Communication

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-rcs-kz-bitrix24-mcp": {
      "args": [
        "-y",
        "@rcs-kz/bitrix24-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-rcs-kz-bitrix24-mcp)](https://mcppedia.org/s/io-github-rcs-kz-bitrix24-mcp)

Read me

What io.github.RCS-kz/bitrix24-mcp does

Production-grade MCP server for Bitrix24 Cloud — 45 tools, safe by default. > Профессиональный MCP-сервер для Bitrix24 — 45 инструментов, безопасно по умолчанию.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@rcs-kz/bitrix24-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

bitrix24-mcp

Production-grade MCP server for Bitrix24 Cloud — 45 tools, safe by default.

Профессиональный MCP-сервер для Bitrix24 — 45 инструментов, безопасно по умолчанию.

Русский · English · Install · Docs · Buy

This repository is the public front of a commercial product. It contains the README you're reading, install guides, changelogs, the published threat model, and our security-disclosure policy. Source code is proprietary and ships as a signed V8-bytecode bundle through the channels listed under Install. See NOTICE.md for the rationale.

🇷🇺 Русский

Что это

bitrix24-mcp — сервер Model Context Protocol, подключающий Claude Desktop к вашему облачному Bitrix24. Один раз устанавливаете, авторизуете через входящий вебхук Bitrix24 (или OAuth-приложение Bitrix24.Market) — Claude получает 45 инструментов по CRM (контакты, компании, сделки, лиды, товары), Задачам, Пользователям, Мессенджеру и Календарю.

Дальше Claude делает то, что умеет лучше всего — рассуждает над неструктурированными запросами вроде «покажи все сделки больше 50 млн ₸ с просроченной датой закрытия в этом квартале, самые крупные три — отправь email менеджерам и поставь задачу на follow-up» — и вызывает REST API Bitrix24 от вашего имени, с вашим подтверждением.

Почему это существует

Типовые «ИИ-интеграции с CRM» оптимизируют под демо. Мы оптимизируем под тот вечер, когда вы показали это CEO и он сказал «отлично, теперь запусти на реальном tenant'е». Именно здесь rate-лимиты, аудит-логи, обработка ошибок записи и гигиена токенов решают, останется продукт в вашем стеке или нет.

Что внутри

45 инструментов — каждый:

Типобезопасен — аргументы валидируются через Zod против строгой JSON-схемы до отправки REST-запроса. Некорректный ввод падает локально с понятной ошибкой, а не мусорным ответом API.
Confirm-gated по умолчанию — деструктивные инструменты (*_delete, *_update с массовыми селекторами) декларируют destructive: true в манифесте. Claude Desktop показывает диалог подтверждения.
Ограничен по частоте — per-tenant, per-user, per-tool. Массовые операции становятся в очередь с backpressure, а не DDoS-ят ваш Bitrix24.
Записывается в аудит-лог — каждый вызов — JSON-строка в ~/.bitrix24-mcp/audit.log (timestamp, инструмент, пользователь, rate-limit remaining, длительность, результат). Локально, права -rw-------.

Покрытие: CRM (контакты / компании / сделки / лиды / товары / активности + cross-type поиск), Задачи (create / assign / stage / comment / attach / time-log), Пользователи (list / get / by-department), IM (chat / DM / recent), Календарь (list / CRUD / respond). Полный справочник — docs/TOOLS.md на landing'е после установки.

Безопасность

Webhook / OAuth токены — в keychain ОС (macOS Keychain, Windows Credential Manager, Linux libsecret через keytar). Никогда в конфиг-файле, env или логах.
Zero telemetry. Не собираем метрики использования, stack traces, call patterns. Отключать нечего — ничего и не собирается.
Декларированный egress. Два хоста видны firewall: *.bitrix24.kz / *.bitrix24.ru / *.bitrix24.com (ваш tenant) и license.rcs.kz (валидация лицензии раз в 24 ч, fail-open после 14-дневного grace).
Целостность бандла. Продакшен-бандл — V8-bytecode с SHA-256 fingerprint'ом, проверяемым из 5 независимых check-points. Попытка модификации даёт явный fail.
Лицензии на ECDSA P-256. Подпись над tenant-scoped bundle hash + expiry. Украденная лицензия не переносится на другой tenant, срок без приватного ключа RCS не продлевается.

Модель угроз и 10-attack harness — docs/threat-model.md (synced с tests/phase4-7/ATTACK-REPORT.md каждый релиз).

Для кого

Клиенты Bitrix24 на Claude Pro / Team / Enterprise, которым надоело переключаться между

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @rcs-kz/bitrix24-mcp against OSV.dev.

Inventory

Tools (11)

Click any tool to inspect its schema.

~417 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.RCS-kz/bitrix24-mcp safe to use?: io.github.RCS-kz/bitrix24-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.RCS-kz/bitrix24-mcp?: io.github.RCS-kz/bitrix24-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.RCS-kz/bitrix24-mcp do?: io.github.RCS-kz/bitrix24-mcp provides 11 tools: contact_list, company_list, deal_list, lead_list, product_list and 6 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.RCS-kz/bitrix24-mcp?: io.github.RCS-kz/bitrix24-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.RCS-kz/bitrix24-mcp actively maintained?: io.github.RCS-kz/bitrix24-mcp is recently maintained — last commit was 64 days ago.