Skip to content
anlyon.devby Anlyon

CiviCRM MCP by usefulapi

io.usefulapi/civicrmusefulapi.iostreamable-httpv1.0.0Scanned

Work with your own CiviCRM: contacts, contributions, memberships, events; log activities.

24 tools: 1 can delete or cancel things, 7 change things and 16 only read.

Tools: 1 delete, 0 irreversible, 7 write, 16 read.
  • Reads private data · 14
  • Reads text others write · 24
  • Can send data out · 1
  • 1 finding

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

24 tools

Deletes or cancels 1Claude Code: deny
  • civicrm_update_contactWRITE: changes basic fields of ONE existing contact (name, job title, source, preferred language) and/or its communication preferences (do not e-mail, do not phone, do not mail, do…Reads text others writeNo findings

    Why it is in this group

    • The name "civicrm_update_contact" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: changes basic fields of ONE existing contact (name, job title, source, preferred language) and/or its communication preferences (do not e-mail, do not phone, do not mail, do not SMS, opted out of bulk mail). Only the fields you give are changed. Setting a do-not flag to false re-enables contact the person may have declined, so only do that on the person's request. APIv4 Contact.update.

    Annotations the server declares

    • title: Update contact
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
Changes things 7Claude Code: ask
  • civicrm_add_contact_noteWRITE: adds ONE note to a contact's record, written by the contact this API key belongs to.Reads text others writeNo findings

    Why it is in this group

    • The name "civicrm_add_contact_note" says "add": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: adds ONE note to a contact's record, written by the contact this API key belongs to. Sends nothing. APIv4 Note.create.

    Annotations the server declares

    • title: Add contact note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • civicrm_add_contact_to_groupWRITE: adds ONE contact to ONE static group.Reads text others writeNo findings

    Why it is in this group

    • The name "civicrm_add_contact_to_group" says "add": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: adds ONE contact to ONE static group. If the group is used as a mailing list, the contact will receive future mailings sent to it, so only add people who agreed. Sends nothing by itself. Adding a contact who is already in the group changes nothing; a contact who was removed from it (or is pending) is set back to Added. APIv4 GroupContact.save matched on group and contact.

    Annotations the server declares

    • title: Add contact to group
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • civicrm_create_contactWRITE: creates ONE new contact (an individual, organization or household) and optionally its first e-mail address and phone number.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "civicrm_create_contact" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe input takes a destination (input.phone): what the tool writes goes there.
    Description, as the server wrote it
    WRITE: creates ONE new contact (an individual, organization or household) and optionally its first e-mail address and phone number. Does not check for duplicates: search first with civicrm_search_contacts. Sends nothing. APIv4 Contact.create, Email.create, Phone.create.

    Annotations the server declares

    • title: Create contact
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • civicrm_create_membershipWRITE: gives ONE contact a membership of a type.Reads text others writeNo findings

    Why it is in this group

    • The name "civicrm_create_membership" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: gives ONE contact a membership of a type. CiviCRM works out the dates and status from the type unless you give dates. It does NOT record a payment (use civicrm_record_contribution for that) and sends nothing. APIv4 Membership.create.

    Annotations the server declares

    • title: Create membership
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • civicrm_log_activityWRITE: records ONE activity (a meeting, phone call, e-mail, follow-up, ...) with one or more contacts.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_log_activity" says "log": a word for reading.
    • The description's first verb is "write": a word for a change.

    What it can reach

    • private-dataThe description's first sentence says "meeting": it reads calendars.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "write" and "mail": it reads inbound email, which other people can write.
    Description, as the server wrote it
    WRITE: records ONE activity (a meeting, phone call, e-mail, follow-up, ...) with one or more contacts. It only STORES the record: an activity of type Email does not send an e-mail. Added by the contact this API key belongs to unless source_contact_id is given. APIv4 Activity.create.

    Annotations the server declares

    • title: Log activity
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • civicrm_record_contributionWRITE: records ONE contribution (a donation, a payment received elsewhere) for a contact.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "write": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: records ONE contribution (a donation, a payment received elsewhere) for a contact. It only STORES the financial record: no card is charged, no receipt is e-mailed, and the amount shows up in CiviCRM's reports and the contact's giving history. Check civicrm_list_contributions first to avoid a duplicate. APIv4 Contribution.create.

    Annotations the server declares

    • title: Record contribution
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • civicrm_register_participantWRITE: registers ONE contact for ONE event (a participant record).Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "write": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: registers ONE contact for ONE event (a participant record). It does not check the event's capacity or fee, does not take payment and sends no confirmation e-mail. APIv4 Participant.create.

    Annotations the server declares

    • title: Register participant
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 16Show 16 read-only tools
  • civicrm_get_contactOne contact by id: name, type, job title, source, communication preferences (do not e-mail, opted out, ...), dates, plus all their e-mail addresses, phone numbers and postal addres…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_get_contact" says "get": a word for reading.

    What it can reach

    • private-dataThe name "civicrm_get_contact" says "get" and "contact": it reads contacts.
    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "mail": it reads inbound email, which other people can write.
    Description, as the server wrote it
    One contact by id: name, type, job title, source, communication preferences (do not e-mail, opted out, ...), dates, plus all their e-mail addresses, phone numbers and postal addresses. APIv4 Contact.get, Email.get, Phone.get, Address.get.

    Annotations the server declares

    • title: Get contact
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_get_fieldsThe fields of one CiviCRM entity (Contact, Contribution, Event, ...) including custom fields: name, label, data type, whether required, and the allowed options for a pick-list fiel…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_get_fields" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The fields of one CiviCRM entity (Contact, Contribution, Event, ...) including custom fields: name, label, data type, whether required, and the allowed options for a pick-list field. Use it to find the right field names for civicrm_query and the right option names for the filters and write tools. APIv4 <Entity>.getFields.

    Annotations the server declares

    • title: Describe an entity's fields
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_list_activitiesActivities (meetings, phone calls, e-mails, follow-ups, ...) with type, subject, status, date and details, newest first.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_list_activities" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "meeting": it reads calendars.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "mail": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Activities (meetings, phone calls, e-mails, follow-ups, ...) with type, subject, status, date and details, newest first. With contact_id: the activities that contact took part in, with their role (source, target or assignee). Otherwise all activities, optionally of one type or status. APIv4 ActivityContact.get / Activity.get.

    Annotations the server declares

    • title: List activities
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_list_casesCases (CiviCase) with subject, case type, status and dates.Reads text others writeNo findings

    Why it is in this group

    • The name "civicrm_list_cases" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Cases (CiviCase) with subject, case type, status and dates. With contact_id: the cases that contact is a client of. Needs the CiviCase component to be enabled. APIv4 CaseContact.get / Case.get.

    Annotations the server declares

    • title: List cases
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_list_contact_notesThe notes recorded on one contact (subject, text, who wrote it, when), newest first.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_list_contact_notes" says "list": a word for reading.

    What it can reach

    • private-dataThe name "civicrm_list_contact_notes" says "list" and "contact": it reads contacts.
    • private-dataThe description's first sentence says "note": it reads notes.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The notes recorded on one contact (subject, text, who wrote it, when), newest first. APIv4 Note.get.

    Annotations the server declares

    • title: List contact notes
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_list_contributionsContributions (donations, membership dues, event fees) with contact, amount, currency, financial type, status, payment method, date and source, newest first.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_list_contributions" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Contributions (donations, membership dues, event fees) with contact, amount, currency, financial type, status, payment method, date and source, newest first. Filter by contact, status, financial type, date range and minimum amount. Test contributions are left out. APIv4 Contribution.get.

    Annotations the server declares

    • title: List contributions
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_list_entitiesThe APIv4 entities this CiviCRM site offers (Contact, Contribution, Event, plus those of installed extensions), with a short description.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_list_entities" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The APIv4 entities this CiviCRM site offers (Contact, Contribution, Event, plus those of installed extensions), with a short description. Use the names with civicrm_get_fields and civicrm_query. APIv4 Entity.get.

    Annotations the server declares

    • title: List API entities
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_list_eventsEvents with title, type, start and end date, whether active and public, maximum participants and summary.Reads text others writeNo findings

    Why it is in this group

    • The name "civicrm_list_events" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Events with title, type, start and end date, whether active and public, maximum participants and summary. Upcoming events first when upcoming_only is set. Template events are left out. APIv4 Event.get.

    Annotations the server declares

    • title: List events
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_list_group_contactsThe members of one static group (or the groups one contact belongs to): contact, group and membership status (Added, Removed, Pending).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_list_group_contacts" says "list": a word for reading.

    What it can reach

    • private-dataThe name "civicrm_list_group_contacts" says "list" and "contact": it reads contacts.
    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The members of one static group (or the groups one contact belongs to): contact, group and membership status (Added, Removed, Pending). Smart groups are computed by CiviCRM and not listed here. APIv4 GroupContact.get.

    Annotations the server declares

    • title: List group members
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_list_groupsContact groups (mailing lists, static groups, smart groups) with title, description, visibility and type.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_list_groups" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Contact groups (mailing lists, static groups, smart groups) with title, description, visibility and type. APIv4 Group.get.

    Annotations the server declares

    • title: List groups
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_list_membershipsMemberships with contact, membership type, status (New, Current, Grace, Expired, ...), join, start and end date.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_list_memberships" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Memberships with contact, membership type, status (New, Current, Grace, Expired, ...), join, start and end date. Filter by contact, status, type, or those ending before a date (renewal follow-up). Test memberships are left out. APIv4 Membership.get.

    Annotations the server declares

    • title: List memberships
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_list_participantsEvent registrations with event, contact, status (Registered, Attended, Cancelled, ...), role, registration date and fee.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_list_participants" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Event registrations with event, contact, status (Registered, Attended, Cancelled, ...), role, registration date and fee. Filter by event, contact or status. Test registrations are left out. APIv4 Participant.get.

    Annotations the server declares

    • title: List event participants
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_list_relationshipsThe relationships of one contact (employee of, spouse of, volunteer for, ...) with the other contact, start and end date and whether it is active.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_list_relationships" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The relationships of one contact (employee of, spouse of, volunteer for, ...) with the other contact, start and end date and whether it is active. APIv4 Relationship.get.

    Annotations the server declares

    • title: List contact relationships
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_queryRead records of ANY CiviCRM entity with APIv4 Entity.get: choose fields, filter, sort and page.Reads text others write1 finding

    Why it is in this group

    • The name "civicrm_query" says "query": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...mount',op:'>=',value:1000}]. Read-only; credential fields and system entities (settings, p..."

      What this check looks for
    Description, as the server wrote it
    Read records of ANY CiviCRM entity with APIv4 Entity.get: choose fields, filter, sort and page. Use civicrm_list_entities and civicrm_get_fields for the names. Field names may be joined (`contact_id.display_name`, `email_primary.email`) or ask for an option's text (`status_id:label`). Examples: entity Tag; entity Campaign with where [{field:'is_active',op:'=',value:true}]; entity Contribution with select ['id','total_amount'] and where [{field:'total_amount',op:'>=',value:1000}]. Read-only; credential fields and system entities (settings, payment processors, mailings, users) are refused.

    Annotations the server declares

    • title: Query any entity
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_search_contactsFind contacts (people, organizations, households) by a word in their name, e-mail address or phone number, optionally of one contact type.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_search_contacts" says "search": a word for reading.

    What it can reach

    • private-dataThe name "civicrm_search_contacts" says "search" and "contact": it reads contacts.
    • private-dataThe description's first sentence says "find" and "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "find" and "mail": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Find contacts (people, organizations, households) by a word in their name, e-mail address or phone number, optionally of one contact type. Trashed contacts are left out. Returns id, display name, type, primary e-mail and phone. APIv4 Contact.get.

    Annotations the server declares

    • title: Search contacts
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • civicrm_whoamiThe CiviCRM contact this API key belongs to (contact id, display name, contact type) and how it authenticated.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "civicrm_whoami" says "whoami": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The CiviCRM contact this API key belongs to (contact id, display name, contact type) and how it authenticated. Everything the other tools do is limited to that contact's permissions. GET /civicrm/authx/id, then APIv4 Contact.get.

    Annotations the server declares

    • title: Get current contact
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

336 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data14
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write24
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__civicrm__civicrm_create_contact"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 info
  • Infocivicrm_query

    The description mentions "credential".

    Matched text

    description: "...mount',op:'>=',value:1000}]. Read-only; credential fields and system entities (settings, p..."

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http civicrm https://civicrm.usefulapi.io/mcp
claude mcp add --transport http civicrm https://civicrm.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__civicrm__civicrm_whoami",
      "mcp__civicrm__civicrm_search_contacts",
      "mcp__civicrm__civicrm_get_contact",
      "mcp__civicrm__civicrm_list_contact_notes",
      "mcp__civicrm__civicrm_list_relationships",
      "mcp__civicrm__civicrm_list_contributions",
      "mcp__civicrm__civicrm_list_memberships",
      "mcp__civicrm__civicrm_list_events",
      "mcp__civicrm__civicrm_list_participants",
      "mcp__civicrm__civicrm_list_activities",
      "mcp__civicrm__civicrm_list_cases",
      "mcp__civicrm__civicrm_list_groups",
      "mcp__civicrm__civicrm_list_group_contacts",
      "mcp__civicrm__civicrm_get_fields",
      "mcp__civicrm__civicrm_list_entities",
      "mcp__civicrm__civicrm_query"
    ],
    "ask": [
      "mcp__civicrm__civicrm_create_contact",
      "mcp__civicrm__civicrm_add_contact_note",
      "mcp__civicrm__civicrm_log_activity",
      "mcp__civicrm__civicrm_record_contribution",
      "mcp__civicrm__civicrm_create_membership",
      "mcp__civicrm__civicrm_add_contact_to_group",
      "mcp__civicrm__civicrm_register_participant"
    ],
    "deny": [
      "mcp__civicrm__civicrm_update_contact"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as civicrm. Review it before you use it.

Capability tags behind 24 rules
  • mcp__civicrm__civicrm_whoami private-data, untrusted-input
  • mcp__civicrm__civicrm_search_contacts private-data, untrusted-input
  • mcp__civicrm__civicrm_get_contact private-data, untrusted-input
  • mcp__civicrm__civicrm_list_contact_notes private-data, untrusted-input
  • mcp__civicrm__civicrm_list_relationships private-data, untrusted-input
  • mcp__civicrm__civicrm_list_contributions private-data, untrusted-input
  • mcp__civicrm__civicrm_list_memberships private-data, untrusted-input
  • mcp__civicrm__civicrm_list_events untrusted-input
  • mcp__civicrm__civicrm_list_participants private-data, untrusted-input
  • mcp__civicrm__civicrm_list_activities private-data, untrusted-input
  • mcp__civicrm__civicrm_list_cases untrusted-input
  • mcp__civicrm__civicrm_list_groups private-data, untrusted-input
  • mcp__civicrm__civicrm_list_group_contacts private-data, untrusted-input
  • mcp__civicrm__civicrm_get_fields private-data, untrusted-input
  • mcp__civicrm__civicrm_list_entities private-data, untrusted-input
  • mcp__civicrm__civicrm_query untrusted-input
  • mcp__civicrm__civicrm_create_contact untrusted-input, outbound
  • mcp__civicrm__civicrm_update_contact untrusted-input
  • mcp__civicrm__civicrm_add_contact_note untrusted-input
  • mcp__civicrm__civicrm_log_activity private-data, untrusted-input
  • mcp__civicrm__civicrm_record_contribution untrusted-input
  • mcp__civicrm__civicrm_create_membership untrusted-input
  • mcp__civicrm__civicrm_add_contact_to_group untrusted-input
  • mcp__civicrm__civicrm_register_participant untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/civicrm/verify?hash=11875ea508d3ae674072de917cf81ddaf9b1cb9e17e36ec622241f0f211df522" | jq -e '.changed == false'

Pinned hash 11875ea508d3, from Oct 24, 2026, 13:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/civicrm/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.usefulapi/civicrm
[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/civicrm.svg)](https://anlyon.dev/servers/io.usefulapi/civicrm)

Source: MCP Registry · repository. Synced Oct 24, 2026, 13:17 UTC.