Sellsy MCP by usefulapi

io.usefulapi/sellsyusefulapi.iostreamable-httpv1.0.0Scanned 1 hour ago

Search and read Sellsy companies, contacts, opportunities, invoices and tasks; create records.

44 tools: 6 change things and 38 only read.

Reads private data · 11
Reads text others write · 44
Can send data out · 4
No findings

Anlyon alternative

6 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

44 tools

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

sellsy_create_commentWRITE: add a comment (note) to a company, individual, contact, opportunity or document.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "sellsy_create_comment" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "sellsy_create_comment" says "create" and "comment": it writes something other people read.
Description, as the server wrote it
WRITE: add a comment (note) to a company, individual, contact, opportunity or document. Visible to the Sellsy staff, not sent to the customer. Needs comments.write.
Annotations the server declares
- title: Add a comment
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
sellsy_create_companyWRITE: create a company record in Sellsy (a prospect, client or supplier).Reads text others writeCan send data outNo findings
Why it is in this group
- The name "sellsy_create_company" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a destination (input.phone_number): what the tool writes goes there.
Description, as the server wrote it
WRITE: create a company record in Sellsy (a prospect, client or supplier). Needs companies.write. Nothing is sent to the company.
Annotations the server declares
- title: Create a company
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
sellsy_create_contactWRITE: create a contact (a person) in Sellsy.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "sellsy_create_contact" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a destination (input.phone_number): what the tool writes goes there.
Description, as the server wrote it
WRITE: create a contact (a person) in Sellsy. It is not linked to a company by this call. Needs contacts.write.
Annotations the server declares
- title: Create a contact
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
sellsy_create_individualWRITE: create an individual (a private person as prospect, client or supplier) in Sellsy.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "sellsy_create_individual" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a destination (input.phone_number): what the tool writes goes there.
Description, as the server wrote it
WRITE: create an individual (a private person as prospect, client or supplier) in Sellsy. Needs individuals.write.
Annotations the server declares
- title: Create an individual
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
sellsy_create_opportunityWRITE: create a sales opportunity linked to a company, individual or contact.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_create_opportunity" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: create a sales opportunity linked to a company, individual or contact. Needs a pipeline id and one of its step ids (see sellsy_list_opportunity_pipelines and sellsy_list_pipeline_steps). Needs opportunities.write.
Annotations the server declares
- title: Create an opportunity
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
sellsy_create_taskWRITE: create a task, optionally attached to a record and assigned to staff.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_create_task" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: create a task, optionally attached to a record and assigned to staff. Needs a label id (see sellsy_list_task_labels) and a due date-time. Needs tasks.write.
Annotations the server declares
- title: Create a task
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

Only reads 38Looks things up and changes nothing.Show 38 read-only tools

sellsy_get_companyGet one company by id.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_get_company" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get one company by id. Needs companies.read.
Annotations the server declares
- title: Get a company
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_get_contactGet one contact by id.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sellsy_get_contact" says "get": a word for reading.
What it can reach
- private-dataThe name "sellsy_get_contact" says "get" and "contact": it reads contacts.
- private-dataThe description's first sentence says "get" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get one contact by id. Needs contacts.read.
Annotations the server declares
- title: Get a contact
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_get_credit_noteGet one credit note by id.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sellsy_get_credit_note" says "get": a word for reading.
What it can reach
- private-dataThe name "sellsy_get_credit_note" says "get" and "note": it reads notes.
- private-dataThe description's first sentence says "get" and "note": it reads notes.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get one credit note by id. Needs credit-notes.read.
Annotations the server declares
- title: Get a credit note
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_get_estimateGet one estimate by id, with its rows and amounts.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_get_estimate" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get one estimate by id, with its rows and amounts. Needs estimates.read.
Annotations the server declares
- title: Get an estimate
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_get_individualGet one individual by id.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_get_individual" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get one individual by id. Needs individuals.read.
Annotations the server declares
- title: Get an individual
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_get_invoiceGet one invoice by id, with its rows, amounts and status.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_get_invoice" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get one invoice by id, with its rows, amounts and status. Needs invoices.read.
Annotations the server declares
- title: Get an invoice
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_get_itemGet one catalog item by id.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_get_item" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get one catalog item by id. Needs items.read.
Annotations the server declares
- title: Get an item
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_get_opportunityGet one opportunity by id.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_get_opportunity" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get one opportunity by id. Needs opportunities.read.
Annotations the server declares
- title: Get an opportunity
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_get_orderGet one order by id.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_get_order" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get one order by id. Needs orders.read.
Annotations the server declares
- title: Get an order
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_get_taskGet one task by id.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_get_task" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Get one task by id. Needs tasks.read.
Annotations the server declares
- title: Get a task
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_companiesList companies (customers, prospects, suppliers) with paging.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_companies" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List companies (customers, prospects, suppliers) with paging. Needs companies.read.
Annotations the server declares
- title: List companies
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_company_contactsList the contacts linked to one company (GET /companies/{id}/contacts).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sellsy_list_company_contacts" says "list": a word for reading.
What it can reach
- private-dataThe name "sellsy_list_company_contacts" says "list" and "contact": it reads contacts.
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the contacts linked to one company (GET /companies/{id}/contacts). Needs companies.read and contacts.read.
Annotations the server declares
- title: List a company's contacts
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_contactsList contacts (people at companies) with paging.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sellsy_list_contacts" says "list": a word for reading.
What it can reach
- private-dataThe name "sellsy_list_contacts" says "list" and "contact": it reads contacts.
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List contacts (people at companies) with paging. Needs contacts.read.
Annotations the server declares
- title: List contacts
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_credit_notesList credit notes with paging.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sellsy_list_credit_notes" says "list": a word for reading.
What it can reach
- private-dataThe name "sellsy_list_credit_notes" says "list" and "note": it reads notes.
- private-dataThe description's first sentence says "list" and "note": it reads notes.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List credit notes with paging. Needs credit-notes.read.
Annotations the server declares
- title: List credit notes
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_estimatesList estimates (quotes) with paging.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_estimates" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List estimates (quotes) with paging. Needs estimates.read.
Annotations the server declares
- title: List estimates
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_individualsList individuals (private customers, prospects, suppliers) with paging.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_individuals" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List individuals (private customers, prospects, suppliers) with paging. Needs individuals.read.
Annotations the server declares
- title: List individuals
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_invoice_paymentsList the payments linked to one invoice.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_invoice_payments" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the payments linked to one invoice. Needs invoices.read and payments.read.
Annotations the server declares
- title: List an invoice's payments
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_invoicesList invoices with paging.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_invoices" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List invoices with paging. Needs invoices.read.
Annotations the server declares
- title: List invoices
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_itemsList catalog items (products, services, shipping, packaging) with paging.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_items" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List catalog items (products, services, shipping, packaging) with paging. Needs items.read.
Annotations the server declares
- title: List items
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_opportunitiesList sales opportunities with paging.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_opportunities" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List sales opportunities with paging. Needs opportunities.read.
Annotations the server declares
- title: List opportunities
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_opportunity_pipelinesList the sales pipelines (needed to create an opportunity: pipeline id and step id).Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_opportunity_pipelines" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the sales pipelines (needed to create an opportunity: pipeline id and step id). Needs opportunities.read.
Annotations the server declares
- title: List opportunity pipelines
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_ordersList orders with paging.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_orders" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List orders with paging. Needs orders.read.
Annotations the server declares
- title: List orders
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_pipeline_stepsList the steps of one opportunity pipeline.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_pipeline_steps" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the steps of one opportunity pipeline. Needs opportunities.read.
Annotations the server declares
- title: List the steps of a pipeline
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_staffsList the staff members of the account (the list may hold only yourself, depending on the Sellsy plan).Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_staffs" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the staff members of the account (the list may hold only yourself, depending on the Sellsy plan). Needs staffs.read.
Annotations the server declares
- title: List staff members
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_task_labelsList the task labels (a label id is required to create a task).Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_task_labels" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the task labels (a label id is required to create a task). Needs tasks.read.
Annotations the server declares
- title: List task labels
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_list_tasksList tasks with paging.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_list_tasks" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List tasks with paging. Needs tasks.read.
Annotations the server declares
- title: List tasks
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_searchFree-text search over companies, individuals, contacts, opportunities, items, documents and staff in one call (GET /search).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sellsy_search" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Free-text search over companies, individuals, contacts, opportunities, items, documents and staff in one call (GET /search). Use it to find a record by name, email or number when you do not know its type. Needs the search.read scope.
Annotations the server declares
- title: Search across Sellsy
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_search_commentsSearch comments and notes by author, date, parent comment or the company/individual/contact they are attached to.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sellsy_search_comments" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "note": it reads notes.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe name "sellsy_search_comments" says "search" and "comment": it reads comments, which other people can write.
- untrusted-inputThe description's first sentence says "search" and "comment": it reads comments, which other people can write.
Description, as the server wrote it
Search comments and notes by author, date, parent comment or the company/individual/contact they are attached to. Needs comments.read.
Annotations the server declares
- title: Search comments (notes)
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_search_companiesSearch companies by name, email, type (prospect/client/supplier), reference, VAT, SIRET, country, postal code, creation or update date.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sellsy_search_companies" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "search" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Search companies by name, email, type (prospect/client/supplier), reference, VAT, SIRET, country, postal code, creation or update date. Needs companies.read.
Annotations the server declares
- title: Search companies
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_search_contactsSearch contacts by last name, email, phone, linked company or individual, creation date.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sellsy_search_contacts" says "search": a word for reading.
What it can reach
- private-dataThe name "sellsy_search_contacts" says "search" and "contact": it reads contacts.
- private-dataThe description's first sentence says "search" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "search" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Search contacts by last name, email, phone, linked company or individual, creation date. Needs contacts.read.
Annotations the server declares
- title: Search contacts
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_search_estimatesSearch estimates by status, number, date, currency, owner, contact or related company/individual/opportunity.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sellsy_search_estimates" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Search estimates by status, number, date, currency, owner, contact or related company/individual/opportunity. Needs estimates.read.
Annotations the server declares
- title: Search estimates
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_search_individualsSearch individuals by name, email, type, reference, country, postal code, creation or update date.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sellsy_search_individuals" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "search" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
Search individuals by name, email, type, reference, country, postal code, creation or update date. Needs individuals.read.
Annotations the server declares
- title: Search individuals
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_search_invoicesSearch invoices by status (draft/due/payinprogress/paid/late/cancelled), number, date, currency, owner, or related company/individual/opportunity.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_search_invoices" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Search invoices by status (draft/due/payinprogress/paid/late/cancelled), number, date, currency, owner, or related company/individual/opportunity. Use it for unpaid or late invoices. Needs invoices.read.
Annotations the server declares
- title: Search invoices
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_search_itemsSearch catalog items by name, reference or type.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_search_items" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Search catalog items by name, reference or type. Needs items.read.
Annotations the server declares
- title: Search items
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_search_opportunitiesSearch opportunities by name, number, pipeline, step, status (open/won/lost/cancelled/closed/late), amount, owner or due date.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_search_opportunities" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Search opportunities by name, number, pipeline, step, status (open/won/lost/cancelled/closed/late), amount, owner or due date. Needs opportunities.read.
Annotations the server declares
- title: Search opportunities
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_search_ordersSearch orders by status or delivery status, or related company/individual/opportunity.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_search_orders" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Search orders by status or delivery status, or related company/individual/opportunity. Needs orders.read.
Annotations the server declares
- title: Search orders
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_search_paymentsSearch payments by status (pending/confirmed/rejected/failed/refund) or related company/individual.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_search_payments" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Search payments by status (pending/confirmed/rejected/failed/refund) or related company/individual. Needs payments.read.
Annotations the server declares
- title: Search payments
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sellsy_search_tasksSearch tasks by status (todo/done), owner, assignee, label, due date or related record.Reads text others writeNo findings
Why it is in this group
- The name "sellsy_search_tasks" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Search tasks by status (todo/done), owner, assignee, label, due date or related record. Needs tasks.read.
Annotations the server declares
- title: Search tasks
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

1936 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 4 outbound tools breaks every one.

Reads private data11: Reads files, mail, messages, databases, secrets, calendars or repositories.; sellsy_get_contact
sellsy_get_credit_note
sellsy_list_company_contacts
sellsy_list_contacts
sellsy_list_credit_notes
sellsy_search
sellsy_search_comments
sellsy_search_companies
sellsy_search_contacts
sellsy_search_estimates
sellsy_search_individuals
Reads text others write44: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; sellsy_create_comment
sellsy_create_company
sellsy_create_contact
sellsy_create_individual
sellsy_create_opportunity
sellsy_create_task
sellsy_get_company
sellsy_get_contact
sellsy_get_credit_note
sellsy_get_estimate
sellsy_get_individual
sellsy_get_invoice
and 32 more
Can send data out4: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; sellsy_create_comment
sellsy_create_company
sellsy_create_contact
sellsy_create_individual

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__sellsy__sellsy_create_comment",
      "mcp__sellsy__sellsy_create_company",
      "mcp__sellsy__sellsy_create_contact",
      "mcp__sellsy__sellsy_create_individual"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http sellsy https://sellsy.usefulapi.io/mcp

claude mcp add --transport http sellsy https://sellsy.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__sellsy__sellsy_search",
      "mcp__sellsy__sellsy_list_companies",
      "mcp__sellsy__sellsy_search_companies",
      "mcp__sellsy__sellsy_get_company",
      "mcp__sellsy__sellsy_list_company_contacts",
      "mcp__sellsy__sellsy_list_individuals",
      "mcp__sellsy__sellsy_search_individuals",
      "mcp__sellsy__sellsy_get_individual",
      "mcp__sellsy__sellsy_list_contacts",
      "mcp__sellsy__sellsy_search_contacts",
      "mcp__sellsy__sellsy_get_contact",
      "mcp__sellsy__sellsy_list_opportunities",
      "mcp__sellsy__sellsy_search_opportunities",
      "mcp__sellsy__sellsy_get_opportunity",
      "mcp__sellsy__sellsy_list_opportunity_pipelines",
      "mcp__sellsy__sellsy_list_pipeline_steps",
      "mcp__sellsy__sellsy_list_estimates",
      "mcp__sellsy__sellsy_search_estimates",
      "mcp__sellsy__sellsy_get_estimate",
      "mcp__sellsy__sellsy_list_invoices",
      "mcp__sellsy__sellsy_search_invoices",
      "mcp__sellsy__sellsy_get_invoice",
      "mcp__sellsy__sellsy_list_invoice_payments",
      "mcp__sellsy__sellsy_list_orders",
      "mcp__sellsy__sellsy_search_orders",
      "mcp__sellsy__sellsy_get_order",
      "mcp__sellsy__sellsy_list_credit_notes",
      "mcp__sellsy__sellsy_get_credit_note",
      "mcp__sellsy__sellsy_list_items",
      "mcp__sellsy__sellsy_search_items",
      "mcp__sellsy__sellsy_get_item",
      "mcp__sellsy__sellsy_search_payments",
      "mcp__sellsy__sellsy_list_tasks",
      "mcp__sellsy__sellsy_search_tasks",
      "mcp__sellsy__sellsy_get_task",
      "mcp__sellsy__sellsy_list_task_labels",
      "mcp__sellsy__sellsy_search_comments",
      "mcp__sellsy__sellsy_list_staffs"
    ],
    "ask": [
      "mcp__sellsy__sellsy_create_company",
      "mcp__sellsy__sellsy_create_individual",
      "mcp__sellsy__sellsy_create_contact",
      "mcp__sellsy__sellsy_create_opportunity",
      "mcp__sellsy__sellsy_create_comment",
      "mcp__sellsy__sellsy_create_task"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as sellsy. Review it before you use it.

Capability tags behind 44 rules

mcp__sellsy__sellsy_search private-data, untrusted-input
mcp__sellsy__sellsy_list_companies untrusted-input
mcp__sellsy__sellsy_search_companies private-data, untrusted-input
mcp__sellsy__sellsy_get_company untrusted-input
mcp__sellsy__sellsy_list_company_contacts private-data, untrusted-input
mcp__sellsy__sellsy_list_individuals untrusted-input
mcp__sellsy__sellsy_search_individuals private-data, untrusted-input
mcp__sellsy__sellsy_get_individual untrusted-input
mcp__sellsy__sellsy_list_contacts private-data, untrusted-input
mcp__sellsy__sellsy_search_contacts private-data, untrusted-input
mcp__sellsy__sellsy_get_contact private-data, untrusted-input
mcp__sellsy__sellsy_list_opportunities untrusted-input
mcp__sellsy__sellsy_search_opportunities untrusted-input
mcp__sellsy__sellsy_get_opportunity untrusted-input
mcp__sellsy__sellsy_list_opportunity_pipelines untrusted-input
mcp__sellsy__sellsy_list_pipeline_steps untrusted-input
mcp__sellsy__sellsy_list_estimates untrusted-input
mcp__sellsy__sellsy_search_estimates private-data, untrusted-input
mcp__sellsy__sellsy_get_estimate untrusted-input
mcp__sellsy__sellsy_list_invoices untrusted-input
mcp__sellsy__sellsy_search_invoices untrusted-input
mcp__sellsy__sellsy_get_invoice untrusted-input
mcp__sellsy__sellsy_list_invoice_payments untrusted-input
mcp__sellsy__sellsy_list_orders untrusted-input
mcp__sellsy__sellsy_search_orders untrusted-input
mcp__sellsy__sellsy_get_order untrusted-input
mcp__sellsy__sellsy_list_credit_notes private-data, untrusted-input
mcp__sellsy__sellsy_get_credit_note private-data, untrusted-input
mcp__sellsy__sellsy_list_items untrusted-input
mcp__sellsy__sellsy_search_items untrusted-input
mcp__sellsy__sellsy_get_item untrusted-input
mcp__sellsy__sellsy_search_payments untrusted-input
mcp__sellsy__sellsy_list_tasks untrusted-input
mcp__sellsy__sellsy_search_tasks untrusted-input
mcp__sellsy__sellsy_get_task untrusted-input
mcp__sellsy__sellsy_list_task_labels untrusted-input
mcp__sellsy__sellsy_search_comments private-data, untrusted-input
mcp__sellsy__sellsy_list_staffs untrusted-input
mcp__sellsy__sellsy_create_company untrusted-input, outbound
mcp__sellsy__sellsy_create_individual untrusted-input, outbound
mcp__sellsy__sellsy_create_contact untrusted-input, outbound
mcp__sellsy__sellsy_create_opportunity untrusted-input
mcp__sellsy__sellsy_create_comment untrusted-input, outbound
mcp__sellsy__sellsy_create_task untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/sellsy/verify?hash=02357ce9618dffabe484d363cd8922821e1dd5607435d6747c9419b8b2546cd2" | jq -e '.changed == false'

Pinned hash 02357ce9618d, from Oct 25, 2026, 21:19 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/sellsy/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/sellsy.svg)](https://anlyon.dev/servers/io.usefulapi/sellsy)

Source: MCP Registry · repository. Synced Oct 25, 2026, 21:18 UTC.