claude-connector-perfexcrm

The 'execute_sql' tool allows arbitrary raw SQL queries to be executed directly against the Perfex CRM database. While other tools use prepared statements for parameters, the 'sql' argument itself is directly taken from input, posing a severe SQL injection risk if the LLM's output for this argument is not perfectly safe or if an attacker gains control. This grants full control over the database, including modification, deletion, and exfiltration of all data. The MCP server operates with a single database user, lacking granular, in-server role-based access control. Database credentials are handled via environment variables, which is a good practice for secure storage, but the broad capabilities of the 'execute_sql' tool remain a critical vulnerability.