Is io.github.theYahia/mindbox-mcp safe to use?

io.github.theYahia/mindbox-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.theYahia/mindbox-mcp?

io.github.theYahia/mindbox-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.theYahia/mindbox-mcp do?

io.github.theYahia/mindbox-mcp provides 6 tools: get_customer, create_order, get_segments, get_product_list, update_customer and 1 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.theYahia/mindbox-mcp?

io.github.theYahia/mindbox-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.theYahia/mindbox-mcp actively maintained?

io.github.theYahia/mindbox-mcp is actively maintained — last commit was 17 days ago. It has 2 GitHub stars.

io.github.theYahia/mindbox-mcp

@theyahia/mindbox-mcp

MCP server for Mindbox CDP API — customer profiles, orders, segments. 3 tools.

2 222/wk 6 tools GitHub npm

No known CVEs

No license

Actively maintained

Last commit 17d ago

Works with most clients

Transport: stdio, http

6 tools · ~240 tok

Grade A · 0.1% of 200K ctx

Edit this pageView history

Marketing Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mindbox": {
      "env": {
        "MINDBOX_API_KEY": "ваш_ключ",
        "MINDBOX_ENDPOINT_ID": "ваш_endpoint_id"
      },
      "args": [
        "-y",
        "@theyahia/mindbox-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-theyahia-mindbox-mcp)](https://mcppedia.org/s/io-github-theyahia-mindbox-mcp)

Read me

What io.github.theYahia/mindbox-mcp does

MCP-сервер для API Mindbox CDP — профили клиентов, заказы, сегменты, списки товаров и произвольные операции.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@theyahia/mindbox-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @theyahia/mindbox-mcp against OSV.dev.

Inventory

Tools (6)

Click any tool to inspect its schema.

~240 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.theYahia/mindbox-mcp safe to use?: io.github.theYahia/mindbox-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.theYahia/mindbox-mcp?: io.github.theYahia/mindbox-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.theYahia/mindbox-mcp do?: io.github.theYahia/mindbox-mcp provides 6 tools: get_customer, create_order, get_segments, get_product_list, update_customer and 1 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.theYahia/mindbox-mcp?: io.github.theYahia/mindbox-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.theYahia/mindbox-mcp actively maintained?: io.github.theYahia/mindbox-mcp is actively maintained — last commit was 17 days ago. It has 2 GitHub stars.

Similar servers

Others in marketing / data

View all →

Supabase MCP Server94

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

PostgreSQL MCP Server94

Query and manage PostgreSQL databases directly from AI assistants

87.9k 1

Dbhub94

Zero-dependency, token-efficient database MCP server for Postgres, MySQL, SQL Server, MariaDB, SQLite.

3.1k 2

Mysql_mcp_server93

A Model Context Protocol (MCP) server that enables secure interaction with MySQL databases

1.3k 2

MCP Security Weekly

Get CVE alerts and security updates for io.github.theYahia/mindbox-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Marketing Data

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mindbox": {
      "env": {
        "MINDBOX_API_KEY": "ваш_ключ",
        "MINDBOX_ENDPOINT_ID": "ваш_endpoint_id"
      },
      "args": [
        "-y",
        "@theyahia/mindbox-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-theyahia-mindbox-mcp)](https://mcppedia.org/s/io-github-theyahia-mindbox-mcp)

Read me

What io.github.theYahia/mindbox-mcp does

MCP-сервер для API Mindbox CDP — профили клиентов, заказы, сегменты, списки товаров и произвольные операции.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@theyahia/mindbox-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

@theyahia/mindbox-mcp

MCP-сервер для API Mindbox CDP — профили клиентов, заказы, сегменты, списки товаров и произвольные операции.

Возможности

6 инструментов для работы с Mindbox API
Транспорт: stdio (по умолчанию) и Streamable HTTP (--http)
Совместимость с Claude Desktop, Claude Code, Cursor, Smithery
Повторы с backoff и идемпотентностью (transactionId), защита HTTP-транспорта
Skills для автоматизации типовых сценариев

Установка

Claude Desktop

{
  "mcpServers": {
    "mindbox": {
      "command": "npx",
      "args": ["-y", "@theyahia/mindbox-mcp"],
      "env": {
        "MINDBOX_API_KEY": "ваш_ключ",
        "MINDBOX_ENDPOINT_ID": "ваш_endpoint_id"
      }
    }
  }
}

Claude Code

claude mcp add mindbox -e MINDBOX_API_KEY=ваш_ключ -e MINDBOX_ENDPOINT_ID=ваш_endpoint_id -- npx -y @theyahia/mindbox-mcp

Streamable HTTP

MINDBOX_API_KEY=ваш_ключ MINDBOX_ENDPOINT_ID=ваш_endpoint_id npx @theyahia/mindbox-mcp --http
# MCP endpoint: http://127.0.0.1:3000/mcp
# Health check: http://127.0.0.1:3000/health

По умолчанию сервер слушает 127.0.0.1 (см. раздел Безопасность). Порт — через PORT, хост — через HOST.

Docker (HTTP)

docker build -t mindbox-mcp .
docker run --rm -p 3000:3000 \
  -e MINDBOX_API_KEY=ваш_ключ -e MINDBOX_ENDPOINT_ID=ваш_endpoint_id \
  -e MINDBOX_HTTP_ALLOWED_HOSTS=ваш-домен:3000 \
  mindbox-mcp

Контейнер слушает 0.0.0.0:3000. За обратным прокси добавьте свой хост в MINDBOX_HTTP_ALLOWED_HOSTS (DNS-rebinding защита).

Smithery

Файл smithery.yaml включён. Требуемые параметры: MINDBOX_API_KEY, MINDBOX_ENDPOINT_ID.

Авторизация и эндпоинты

Заголовок авторизации: Authorization: Mindbox secretKey="...".

Запросы идут на POST https://api.mindbox.ru/v3/operations/{sync|async}?endpointId=…&operation=…:

sync — операции с ответом (профиль клиента, сегменты, создание заказа, список товаров). Используется по умолчанию.
async — fire-and-forget события (просмотры, добавления в корзину). Доступно для run_operation через mode: "async".

Системные имена операций (operation) настраиваются в каждом проекте Mindbox — это не универсальные встроенные методы. Дефолты вроде Website.GetCustomerInfo — лишь распространённая конвенция; администратор проекта должен создать операции с совпадающими системными именами, иначе Mindbox вернёт ProtocolError.

Переменные окружения

Переменная	Обязательна	Описание
`MINDBOX_API_KEY`	да	Секретный ключ API Mindbox (также принимается `MINDBOX_SECRET_KEY`)
`MINDBOX_ENDPOINT_ID`	да	ID точки интеграции (endpointId)
`PORT`	нет	Порт HTTP-сервера (по умолчанию 3000)
`HOST`	нет	Хост привязки HTTP (по умолчанию 127.0.0.1)
`MINDBOX_HTTP_TOKEN`	нет	Bearer-токен для защиты `/mcp` (если задан — обязателен в запросах)
`MINDBOX_HTTP_ALLOWED_HOSTS`	нет	Доп. разрешённые `Host` (через запятую) для DNS-rebinding защиты
`MINDBOX_HTTP_ALLOWED_ORIGINS`	нет	Доп. разрешённые `Origin` (через запятую)
`MINDBOX_ALLOW_RAW`	нет	`0`/`false`/`off`/`no` отключает `run_

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @theyahia/mindbox-mcp against OSV.dev.

Inventory

Tools (6)

Click any tool to inspect its schema.

~240 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.theYahia/mindbox-mcp safe to use?: io.github.theYahia/mindbox-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.theYahia/mindbox-mcp?: io.github.theYahia/mindbox-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.theYahia/mindbox-mcp do?: io.github.theYahia/mindbox-mcp provides 6 tools: get_customer, create_order, get_segments, get_product_list, update_customer and 1 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.theYahia/mindbox-mcp?: io.github.theYahia/mindbox-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.theYahia/mindbox-mcp actively maintained?: io.github.theYahia/mindbox-mcp is actively maintained — last commit was 17 days ago. It has 2 GitHub stars.