Skip to content
anlyon.devby Anlyon

noCRM.io MCP by usefulapi

io.usefulapi/nocrm-iousefulapi.iostreamable-httpv1.1.0Scanned

Read noCRM.io leads, pipeline steps, comments and client folders; create, update and assign leads.

24 tools: 3 can delete or cancel things, 5 change things and 16 only read.

Tools: 3 delete, 0 irreversible, 5 write, 16 read.
  • Reads private data · 12
  • Reads text others write · 24
  • Can send data out · 1
  • 2 findings

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

24 tools

Deletes or cancels 3Claude Code: deny
  • nocrm_add_lead_to_client_folderWRITE: file a lead under a client folder.Reads text others writeNo findings

    Why it is in this group

    • The name "nocrm_add_lead_to_client_folder" says "add": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: file a lead under a client folder. POST /leads/{id}/add_to_client.

    Annotations the server declares

    • title: Add lead to client folder
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • nocrm_assign_leadWRITE: assign a lead to a user (id or email), replacing its current owner.Reads text others writeNo findings

    Why it is in this group

    • The name "nocrm_assign_lead" says "assign": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: assign a lead to a user (id or email), replacing its current owner. The owner may get a notification from noCRM.io. POST /leads/{id}/assign.

    Annotations the server declares

    • title: Assign lead
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
  • nocrm_update_leadWRITE: change a lead: title, status (won, lost, cancelled, todo or standby), pipeline step, amount, probability, star, estimated closing date, tags (replaces the lead's tag list), …Reads text others writeNo findings

    Why it is in this group

    • The name "nocrm_update_lead" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: change a lead: title, status (won, lost, cancelled, todo or standby), pipeline step, amount, probability, star, estimated closing date, tags (replaces the lead's tag list), or append text to the description (existing description text is never replaced). Moving to standby needs remind_date. Only the fields you pass change. PUT /leads/{id}.

    Annotations the server declares

    • title: Update lead
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
Changes things 5Claude Code: ask
  • nocrm_add_lead_commentWRITE: add a comment (an internal note) to a lead, optionally typed as an activity such as a call or meeting.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "nocrm_add_lead_comment" says "add": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe name "nocrm_add_lead_comment" says "add" and "comment": it writes something other people read.
    Description, as the server wrote it
    WRITE: add a comment (an internal note) to a lead, optionally typed as an activity such as a call or meeting. It is visible to the lead's team in noCRM.io and sends nothing to the customer. Not idempotent. POST /leads/{id}/comments.

    Annotations the server declares

    • title: Add lead comment
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • nocrm_create_client_folderWRITE: create a client folder (an account that groups leads).Reads text others writeNo findings

    Why it is in this group

    • The name "nocrm_create_client_folder" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: create a client folder (an account that groups leads). Not idempotent. POST /clients.

    Annotations the server declares

    • title: Create client folder
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • nocrm_create_leadWRITE: create a new lead.Reads text others writeNo findings

    Why it is in this group

    • The name "nocrm_create_lead" says "create": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: create a new lead. The description holds the contact's details, one 'Label: value' per line (for example 'Firstname: Ada', 'Email: ada@example.com', 'Phone: ...'); noCRM.io reads those lines. Without user_id the lead is created unassigned; a pipeline step can only be set when the lead is assigned. Not idempotent: calling twice creates two leads. POST /leads.

    Annotations the server declares

    • title: Create lead
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • nocrm_list_follow_upsPost-sales processes (task checklists created from a template) of one lead OR of one user.Reads text others write1 finding

    Why it is in this group

    • The name "nocrm_list_follow_ups" says "list": a word for reading.
    • The description's first verb is "post": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "nocrm_list_follow_ups" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "nocrm_list_follow_ups" says "list": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Post-sales processes (task checklists created from a template) of one lead OR of one user. Needs lead_id or user_id. Post-sales is a higher-edition feature (HTTP 403 otherwise). GET /follow_ups.

    Annotations the server declares

    • title: List post-sales follow-ups
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_lead_commentsThe comments (notes, logged calls/meetings/emails) on a lead, newest first by default.Reads private dataReads text others write1 finding

    Why it is in this group

    • The name "nocrm_list_lead_comments" says "list": a word for reading.
    • The description's first verb is "comment": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • private-dataThe description's first sentence says "note": it reads notes.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe name "nocrm_list_lead_comments" says "list" and "comment": it reads comments, which other people can write.
    • untrusted-inputThe description's first sentence says "comment" and "email": it reads inbound email, which other people can write.

    Findings

    • Warn

      The server marks "nocrm_list_lead_comments" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "nocrm_list_lead_comments" says "list": a word for reading.

      What this check looks for
    Description, as the server wrote it
    The comments (notes, logged calls/meetings/emails) on a lead, newest first by default. GET /leads/{id}/comments.

    Annotations the server declares

    • title: List lead comments
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
Only reads 16Show 16 read-only tools
  • nocrm_get_client_folderOne client folder by id, with its contact fields and owner.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "nocrm_get_client_folder" says "get": a word for reading.

    What it can reach

    • private-dataThe name "nocrm_get_client_folder" says "get" and "folder": it reads files.
    • private-dataThe description's first sentence says "folder": it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One client folder by id, with its contact fields and owner. GET /clients/{id}.

    Annotations the server declares

    • title: Get client folder
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_get_leadOne lead by id: title, step, status, amount, probability, tags, owner, client folder, team, reminder, and the full description with the contact's details.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "nocrm_get_lead" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "folder": it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One lead by id: title, step, status, amount, probability, tags, owner, client folder, team, reminder, and the full description with the contact's details. GET /leads/{id}.

    Annotations the server declares

    • title: Get lead
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_get_lead_duplicatesLeads that noCRM.io detects as possible duplicates of this lead (same email or key field).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "nocrm_get_lead_duplicates" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Leads that noCRM.io detects as possible duplicates of this lead (same email or key field). GET /leads/{id}/duplicates.

    Annotations the server declares

    • title: Find duplicate leads
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_get_userOne user by id or email address.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "nocrm_get_user" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    One user by id or email address. GET /users/{id}.

    Annotations the server declares

    • title: Get user
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_activitiesThe activity types (call, email, meeting and their outcomes) that can be set on a comment or reminder.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_activities" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    The activity types (call, email, meeting and their outcomes) that can be set on a comment or reminder. GET /activities.

    Annotations the server declares

    • title: List activity types
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_client_foldersClient folders (accounts that group several leads), ordered by name by default.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_client_folders" says "list": a word for reading.

    What it can reach

    • private-dataThe name "nocrm_list_client_folders" says "list" and "folder": it reads files.
    • private-dataThe description's first sentence says "folder": it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Client folders (accounts that group several leads), ordered by name by default. GET /clients.

    Annotations the server declares

    • title: List client folders
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_fieldsThe custom fields defined for leads or client folders.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_fields" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "folder": it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The custom fields defined for leads or client folders. GET /fields.

    Annotations the server declares

    • title: List custom fields
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_lead_attachmentsFile attachments on a lead (names, ids, sizes, links).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_lead_attachments" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "file": it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    File attachments on a lead (names, ids, sizes, links). GET /leads/{id}/attachments.

    Annotations the server declares

    • title: List lead attachments
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_lead_historyThe timeline of a lead: creation, assignments, step and status changes, amount changes, comments and emails sent, with who did it and when.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_lead_history" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "comment": it reads comments, which other people can write.
    Description, as the server wrote it
    The timeline of a lead: creation, assignments, step and status changes, amount changes, comments and emails sent, with who did it and when. Filter by date range, action type or user. GET /leads/{id}/action_histories.

    Annotations the server declares

    • title: List lead history
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_leadsList or search sales leads (noCRM.io's opportunities), newest first by default, with title, pipeline step, status, amount, probability, tags, owner, next reminder and the contact d…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_leads" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List or search sales leads (noCRM.io's opportunities), newest first by default, with title, pipeline step, status, amount, probability, tags, owner, next reminder and the contact details in the description. Filter by status, step (names or ids, not mixed), owner, tags, email, starred or a date range. Unassigned leads are excluded unless include_unassigned is true. GET /leads.

    Annotations the server declares

    • title: List leads
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_pipelinesThe sales pipelines of the account (one unless the multiple-pipelines feature is on).Reads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_pipelines" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The sales pipelines of the account (one unless the multiple-pipelines feature is on). GET /pipelines.

    Annotations the server declares

    • title: List pipelines
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_predefined_tagsThe account's predefined tags (admin keys only; an HTTP 401 unauthorized_non_admin means the key lacks rights).Reads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_predefined_tags" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "http": it reads web pages, which anyone can write.
    Description, as the server wrote it
    The account's predefined tags (admin keys only; an HTTP 401 unauthorized_non_admin means the key lacks rights). GET /predefined_tags.

    Annotations the server declares

    • title: List predefined tags
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_stepsThe steps (stages) of the sales pipeline in order, with ids, positions and their pipeline.Reads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_steps" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The steps (stages) of the sales pipeline in order, with ids, positions and their pipeline. Use the ids or names when filtering leads or moving a lead. GET /steps.

    Annotations the server declares

    • title: List pipeline steps
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_teamsSales teams with their members and who manages each.Reads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_teams" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Sales teams with their members and who manages each. The Teams feature must be on in the account (HTTP 403 otherwise). GET /teams.

    Annotations the server declares

    • title: List teams
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_unassigned_leadsLeads that have no owner yet (for example web-form or API leads waiting to be handed to a salesperson).Reads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_unassigned_leads" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "web": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Leads that have no owner yet (for example web-form or API leads waiting to be handed to a salesperson). GET /leads/unassigned.

    Annotations the server declares

    • title: List unassigned leads
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • nocrm_list_usersThe users (salespeople) of the account with name, email, phone, role (admin or not) and whether they are active or deactivated.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "nocrm_list_users" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    The users (salespeople) of the account with name, email, phone, role (admin or not) and whether they are active or deactivated. Deleted users are included, flagged is_disabled. GET /users.

    Annotations the server declares

    • title: List users
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

288 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data12
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write24
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__nocrm-io__nocrm_add_lead_comment"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • Warnnocrm_list_lead_comments

    The server marks "nocrm_list_lead_comments" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "nocrm_list_lead_comments" says "list": a word for reading.

    What this check looks for
  • Warnnocrm_list_follow_ups

    The server marks "nocrm_list_follow_ups" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "nocrm_list_follow_ups" says "list": a word for reading.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http nocrm-io https://nocrm-io.usefulapi.io/mcp
claude mcp add --transport http nocrm-io https://nocrm-io.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__nocrm-io__nocrm_list_leads",
      "mcp__nocrm-io__nocrm_list_unassigned_leads",
      "mcp__nocrm-io__nocrm_get_lead",
      "mcp__nocrm-io__nocrm_list_lead_history",
      "mcp__nocrm-io__nocrm_get_lead_duplicates",
      "mcp__nocrm-io__nocrm_list_lead_attachments",
      "mcp__nocrm-io__nocrm_list_pipelines",
      "mcp__nocrm-io__nocrm_list_steps",
      "mcp__nocrm-io__nocrm_list_users",
      "mcp__nocrm-io__nocrm_get_user",
      "mcp__nocrm-io__nocrm_list_teams",
      "mcp__nocrm-io__nocrm_list_client_folders",
      "mcp__nocrm-io__nocrm_get_client_folder",
      "mcp__nocrm-io__nocrm_list_activities",
      "mcp__nocrm-io__nocrm_list_predefined_tags",
      "mcp__nocrm-io__nocrm_list_fields"
    ],
    "ask": [
      "mcp__nocrm-io__nocrm_list_lead_comments",
      "mcp__nocrm-io__nocrm_list_follow_ups",
      "mcp__nocrm-io__nocrm_create_lead",
      "mcp__nocrm-io__nocrm_add_lead_comment",
      "mcp__nocrm-io__nocrm_create_client_folder"
    ],
    "deny": [
      "mcp__nocrm-io__nocrm_update_lead",
      "mcp__nocrm-io__nocrm_assign_lead",
      "mcp__nocrm-io__nocrm_add_lead_to_client_folder"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as nocrm-io. Review it before you use it.

Capability tags behind 24 rules
  • mcp__nocrm-io__nocrm_list_leads private-data, untrusted-input
  • mcp__nocrm-io__nocrm_list_unassigned_leads untrusted-input
  • mcp__nocrm-io__nocrm_get_lead private-data, untrusted-input
  • mcp__nocrm-io__nocrm_list_lead_comments private-data, untrusted-input
  • mcp__nocrm-io__nocrm_list_lead_history private-data, untrusted-input
  • mcp__nocrm-io__nocrm_get_lead_duplicates private-data, untrusted-input
  • mcp__nocrm-io__nocrm_list_lead_attachments private-data, untrusted-input
  • mcp__nocrm-io__nocrm_list_follow_ups untrusted-input
  • mcp__nocrm-io__nocrm_list_pipelines untrusted-input
  • mcp__nocrm-io__nocrm_list_steps untrusted-input
  • mcp__nocrm-io__nocrm_list_users private-data, untrusted-input
  • mcp__nocrm-io__nocrm_get_user private-data, untrusted-input
  • mcp__nocrm-io__nocrm_list_teams untrusted-input
  • mcp__nocrm-io__nocrm_list_client_folders private-data, untrusted-input
  • mcp__nocrm-io__nocrm_get_client_folder private-data, untrusted-input
  • mcp__nocrm-io__nocrm_list_activities private-data, untrusted-input
  • mcp__nocrm-io__nocrm_list_predefined_tags untrusted-input
  • mcp__nocrm-io__nocrm_list_fields private-data, untrusted-input
  • mcp__nocrm-io__nocrm_create_lead untrusted-input
  • mcp__nocrm-io__nocrm_update_lead untrusted-input
  • mcp__nocrm-io__nocrm_assign_lead untrusted-input
  • mcp__nocrm-io__nocrm_add_lead_comment untrusted-input, outbound
  • mcp__nocrm-io__nocrm_create_client_folder untrusted-input
  • mcp__nocrm-io__nocrm_add_lead_to_client_folder untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/nocrm-io/verify?hash=bed83b21fd5ede4629f32eefd1579f5abfa88540d53a405e3c8f9ba33648fbc4" | jq -e '.changed == false'

Pinned hash bed83b21fd5e, from Oct 24, 2026, 12:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/nocrm-io/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.usefulapi/nocrm-io
[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/nocrm-io.svg)](https://anlyon.dev/servers/io.usefulapi/nocrm-io)

Source: MCP Registry · repository. Synced Oct 24, 2026, 13:18 UTC.