Is Kommo MCP server safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
What to know before installing
- highWrite-action tools reachable without authentication
Public scan report
scanner v0.1.9 · 2026-09-22 · same rubric, same numbers if you re-run it
1 high
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 385ms20/20
- Tool poisoning48 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 12 write-action tools with no auth3/15
- Maintenancelast push 22 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Kommo does
MuninOpen-source all-in-one MCP-first customer platform: KB, Conversations, CRM, CMS, Outreach, Analyticsnot reviewedGrowingA
NilyoYour own LinkedIn, WhatsApp, Instagram, Telegram, Email and Calendar accounts, usable from any agentnot reviewedGrowingA- Salesforce CloudAI-powered Salesforce CRM: opportunity intelligence, conversation analysis, SOQL, analyticsnot reviewedGrowingB