Back to Home
kintone icon

mcp-server

Verified Safe

by kintone

Overview

The Kintone MCP Server allows AI assistants to interact with Kintone applications by providing a set of tools for data and app management.

Installation

Run Command
npx @kintone/mcp-server --base-url https://example.cybozu.com --username (username) --password (password)

Environment Variables

  • KINTONE_BASE_URL
  • KINTONE_USERNAME
  • KINTONE_PASSWORD
  • KINTONE_API_TOKEN
  • KINTONE_BASIC_AUTH_USERNAME
  • KINTONE_BASIC_AUTH_PASSWORD
  • KINTONE_PFX_FILE_PATH
  • KINTONE_PFX_FILE_PASSWORD
  • HTTPS_PROXY
  • KINTONE_ATTACHMENTS_DIR

Security Notes

The server relies heavily on environment variables and command-line arguments for sensitive configurations (Kintone credentials, PFX certificates, proxy settings, attachments directory). Robust Zod schemas are used for input validation, mitigating basic injection risks for configuration. File operations (downloading attachments) are constrained to a specified `KINTONE_ATTACHMENTS_DIR`, with filename sanitization to prevent path traversal within that directory. However, if an attacker could control the `KINTONE_ATTACHMENTS_DIR` itself, it could pose a risk. As this is typically set by the server administrator, this risk is managed by trusted environment setup. No 'eval' or arbitrary command execution with unvalidated user input was found. Overall, it is relatively secure when deployed in a trusted environment with properly configured sensitive variables.

Similar Servers

Stats

Interest Score44
Security Score8
Cost ClassHigh
Avg Tokens10000
Stars29
Forks7
Last Update2025-12-13

Tags

KintoneMCP ServerAPI IntegrationBusiness ApplicationsLow-code