Back to Home
caioldcarvalho icon

whmcs-mcp

Verified Safe

by caioldcarvalho

Overview

Integrate WHMCS API for managing clients, tickets, orders, invoices, and services via an MCP client.

Installation

Run Command
node /absolute/path/to/whmcs-mcp/build/index.js

Environment Variables

  • WHMCS_IDENTIFIER
  • WHMCS_SECRET
  • WHMCS_API_URL

Security Notes

The server uses environment variables for API credentials (WHMCS_IDENTIFIER, WHMCS_SECRET, WHMCS_API_URL), preventing hardcoding. It communicates via standard I/O (StdioServerTransport), which is generally more secure for local tools than exposing network ports. Input validation is rigorously performed using Zod schemas for all tool arguments, significantly reducing the risk of injection or malformed request vulnerabilities. Error handling prevents raw stack traces from being exposed. The primary outbound network risk is inherent to Axios calls to the configured WHMCS API endpoint, which should be secured with HTTPS and IP whitelisting on the WHMCS side.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassMedium
Avg Tokens5000
Stars0
Forks0
Last Update2026-01-16

Tags

WHMCSAPIMCPBillingSupport