Kommomcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Kommomcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
AI-powered CRM assistant for Kommo/amoCRM. Telegram bot with natural language interface for full CRM management — analytics, setup, entity operations, monitoring.
@kommo_wizard_bot) for CRM via natural language┌─────────────────┐ ┌──────────────────┐ ┌─────────────────┐
│ Telegram Bot │────▶│ AI Chat Engine │────▶│ Kommo API │
│ (@kommo_wizard) │ │ (Planner + LLM) │ │ (per tenant) │
└─────────────────┘ └────────┬─────────┘ └─────────────────┘
│
┌────────────┼────────────┐
▼ ▼ ▼
┌──────────┐ ┌──────────┐ ┌──────────┐
│ Tenant A │ │ Tenant B │ │ Tenant C │
│ (own DB) │ │ (own DB) │ │ (own DB) │
└──────────┘ └──────────┘ └──────────┘
┌─────────────────┐ ┌──────────────────┐
│ React Admin │────▶│ Logs Server │
│ (SPA /logs/) │ │ (aiohttp:8765) │
└─────────────────┘ └──────────────────┘The system implements a Planner-Executor pattern — a state-of-the-art agentic architecture (2025-2026) that separates deterministic planning from LLM execution:
┌─────────────────────────────────────────────┐
│ PLANNER (deterministic) │
│ │
User Query ──────────▶ │ Intent Detector ──▶ Capability Mapper │
│ │ │ │
│ ▼ ▼ │
│ Tool Graph (54 nodes, 24 edges) │
│ │ │
│ ▼ │
│ Backward Chaining ──▶ Topo Sort │
│ │ │ │
│ ▼ ▼ │
│ Parallel Detection ──▶ Chain Optimizer │
│ │ │
└─────────────────────────────┼───────────────┘
│
PlannedChain + Filtered Tools
│
┌─────────────────────────────┼───────────────┐
│ EXECUTOR (LLM) ▼ │
│ │
│ Dynamic Prompt ──▶ GPT + Filtered Tools │
│ │ │ │
│ ▼ ▼ │
│ RAG Context Tool Call Loop │
│ │ │
│ ▼ │
│ Kommo API / PostgreSQL │
│ │
└─────────────────────────────────────────────┘How it works:
move_lead requires list_pipelines)PlannedChain with ordered steps, param refs ($step0.contact_id), and costKey metrics:
On top of the planner, a RAG (Retrieval-Augmented Generation) layer provides additional context:
┌─────────────────┐ ┌──────────────────┐ ┌─────────────────┐
│ User Request │────▶│ Tool Retriever │────▶│ Dynamic Prompt │
│ │ │ (keyword match) │ │ (base + tools) │
└─────────────────┘ └──────────────────┘ └────────┬────────┘
│
┌──────────────────┐ ▼
│ Tool Registry │ ┌─────────────────┐
│ (YAML files) │────▶│ LLM + Tools │
└──────────────────┘ │ (execution) │
└─────────────────┘Benefits:
The bot maintains conversation history per user for context retention:
Tool Registry (src/kommo_mcp/telegram/tools/*.yaml):
name: kommo_pipeline_analytics
category: analytics
keywords: [воронка, конверсия, аналитика, статистика]
description: Аналитика воронки продаж
examples:
- query: "Покажи аналитику воронки"
- query: "Конверсия по этапам"The system uses AI scripting approach where natural language queries are translated into structured tool calls:
Instead of querying Kommo API for every analytics request (slow, rate-limited), we:
kommo_sync_start pulls all data to local PostgreSQLThis enables:
For production deployments, the system supports multi-tenant architecture:
┌─────────────────┐ ┌──────────────────┐
│ Telegram Bot │────▶│ Tenant Manager │
│ (@kommo_wizard)│ │ │
└─────────────────┘ └────────┬─────────┘
│
┌────────────┼────────────┐
▼ ▼ ▼
┌──────────┐ ┌──────────┐ ┌──────────┐
│ Tenant A │ │ Tenant B │ │ Tenant C │
│ (own DB) │ │ (own DB) │ │ (own DB) │
└──────────┘ └──────────┘ └──────────┘Each tenant gets:
Our architecture aligns with the key trends identified by Gartner, McKinsey, and academic research (NeurIPS 2024, ACL 2025) for production agentic systems:
| 2026 Trend | Industry State | KommoMCP Status |
|---|---|---|
| Planner-Executor separation | Emerging standard (Lu et al. 2025, Rosario et al. 2025). LangGraph, CrewAI, AutoGen adopt this pattern | ✅ Implemented: deterministic graph planner + LLM executor |
| MCP Protocol | Anthropic's MCP becoming the HTTP of agents (broad adoption 2025-2026) | ✅ Full MCP support: stdio + HTTP transport |
| Graph-based tool planning | NeurIPS 2024: "Can Graph Learning Improve Planning in LLM-based Agents?" — graph planners outperform flat RAG | ✅ Tool Graph with 54 nodes, 24 edges, backward chaining, topo sort |
| Plan-and-Execute cost pattern | Frontier model plans, cheaper models execute — 90% cost reduction (MLMastery 2026) | ✅ Planner is zero-cost (no LLM), executor sees only 2-6 tools |
| Deterministic guardrails | "Bounded autonomy" — deterministic control flow with LLM flexibility (Deloitte 2026) | ✅ Fixed chain order, param refs, dependency enforcement |
| Multi-agent orchestration | 1,445% surge in multi-agent inquiries Q1'24→Q2'25 (Gartner) | ⚡ Sequential pipeline with parallel step detection |
| Tool scoping / least privilege | Best practice: filter tools per step, not expose all (Stack AI 2026) | ✅ LLM sees only planned tools, not all 54 |
| Observability / audit trail | "Treat agent like distributed system" — traces, costs, handoffs | ✅ Interaction logger, session logs, admin panel |
| Human-in-the-Loop | Strategic HITL for high-stakes decisions (MLMastery 2026) | ✅ Confirm dialogs for destructive ops (delete, reset) |
| FinOps for agents | Cost-performance as first-class concern | ✅ Chain cost metric, planner adds 0ms to latency |
What we do well:
Roadmap to full SOTA:
# Clone repository
git clone https://github.com/your-repo/kommo-mcp.git
cd kommo-mcp
# Install dependencies
poetry install
# Copy environment file
cp .env.example .env
# Edit .env with your Kommo credentials
# Create database
createdb kommo_mcp
# Run server
poetry run kommo-mcpAdd to your Claude Desktop config (claude_desktop_config.json):
{
"mcpServers": {
"kommo": {
"command": "poetry",
"args": ["run", "kommo-mcp"],
"cwd": "/path/to/kommo-mcp"
}
}
}Use MCP Client node with HTTP transport:
https://your-domain.com/mcpkommo_setup - CRM configuration with actions:templates - List available pipeline templates (10 built-in)apply_template - Apply template (capture, qualification, followup, demo, proposal, autoservice, realestate, education, ecommerce, b2b_sales)create_pipeline - Create a new pipelinecreate_stage - Add stage to pipelineupdate_pipeline / update_stage - Rename, recolordelete_pipeline / delete_stage - Delete with lead migrationreorder_stages - Change stage ordercreate_field / update_field / delete_field - Custom fields CRUDcreate_source - Add lead sourcekommo_entity_actions - Entity operations with actions:add_note - Add note to entityget_notes / get_history - Get notes and historycreate_task / get_tasks / complete_task - Task managementupdate_lead / move_lead - Lead updateslink_contact / unlink_contact - Contact linkingkommo_bulk_actions - Mass operations with actions:mass_move - Move multiple leads to stagemass_tag - Add tags to entitiesmass_assign - Reassign entitiesmass_update - Update fields in bulkkommo_users - User management with actions:list - List all CRM usersworkload - Manager workload distributionactivity - User activity statskommo_reports - CRM reports with actions:top_deals - Top deals by amountpipeline_summary - Pipeline overviewmanager_stats - Manager performancekommo_export - Data export with actions:leads_csv - Export leads as CSV tablecontacts_csv - Export contacts as CSV tableanalytics - Summary analytics across all pipelineskommo_digest - CRM digests and summaries with actions:morning - Morning briefing (deals, tasks, overdue, stale)weekly - Weekly report (new/won/lost deals, tasks completed)my_tasks - Personal task list (overdue, today, upcoming)kommo_advisor - AI-powered recommendations with actions:next_action - What to do next with a dealpipeline_tips - Pipeline optimization recommendationsloss_analysis - Lost deals analysis and patternsclosing_tips - Deal closing adviceobjections - Objection handling guide based on CRM datastrategy - Strategic recommendations: pipeline coverage, growth levers, process improvementsqualification - BANT qualification analysis for a deal (lead_id): budget, authority, need, timelinequalification_checklist - Interactive BANT checklist with questions, red/green flagsnegotiation - Negotiation tips customized for deal size and contextcommunication_style - Detect client communication style (formal/informal/neutral) from notes and recommend approachproduct_recommendations - Upsell/cross-sell/addon recommendations based on deal context and notestalking_points - Pre-call/meeting talking points: deal status, last interaction, pricing, competitionkommo_pipeline_health - Deep pipeline analysis with actions:check - Overall health score (0-100) with key metricsvelocity - Sales speed: cycle times, daily velocity, median/fastest/slowestbottlenecks - Stage-level analysis: stale deals, avg age, congestionwin_loss - Win/loss ratio, value comparison, cycle time analysisoptimize - Optimization recommendations per stagekommo_forecast - Sales forecasting with actions:pipeline - Weighted pipeline forecast by stage proximityrevenue - Monthly revenue prediction with growth trenddeal_probability - Per-deal win probability scoring (lead_id)trends - Weekly trend analysis: new deals, value, won/lostplan_fact - Plan vs fact analysis: completion %, gap, daily target, by usercashflow - Cash flow forecast based on pipelinescenarios - Best/base/worst revenue scenarios with growth leversclosing_forecast - Closing forecast: deal candidates ranked by probability and expected valuekommo_alerts - CRM health alerts with actions:check - All alerts: stale deals, overdue tasks, missing datarisks - At-risk deals with risk score and factorsperformance - Team performance alerts: overload, stale ratioopportunities - Reactivation, follow-up, no-next-step opportunitieskommo_compare - Data comparison and analysis with actions:periods - This period vs previous: deals, revenue, conversiontrends - Weekly metric trends with direction detectionpatterns - Day/hour patterns, seasonal conversion analysiscorrelations - Price vs conversion, source performance analysiskommo_automation - Lead distribution and follow-up with actions:auto_assign - Assign leads by workload (least busy first)round_robin - Equal distribution among team membersauto_followup - Create follow-up tasks for inactive dealsauto_followup_smart - Smart follow-ups based on inactivity and deal value with urgency levelskommo_my - Personal CRM dashboard with actions:pipeline - My active deals by stage with top dealsworkload - My task/deal load with workload scoreteam - Team overview: deals, value, stale per userinsights - Pipeline insights: health, win rate, cycle timekommo_gamification - Team gamification with actions:leaderboard - Ranked team leaderboard by metric (deals, revenue, conversion)achievements - Badge system: Deal Machine, Whale Hunter, Speed Closer, etc.challenges - Sales competitions: Deal Sprint, Revenue Racepoints - Points breakdown: deals, revenue bonus, big deals, fast closesbadges - Achievement badges: First Deal, Deal Machine, Whale Hunter, Speed Closer, etc.daily_quests - Personalized daily quests with difficulty and point rewardsstreaks - Performance streaks with point multiplier bonuseskommo_loss_analysis - Deep lost deals analysis with actions:reasons - Loss reasons from notes, price range breakdownpatterns - Timing patterns: by month, day, deal age at lossby_manager - Manager comparison: loss rate, value, avg loss agekommo_smart_time - Timing intelligence with actions:best_call_time - Optimal hours/days for calls based on won dealscustomer_journey - Touch-to-purchase path: cycle times, fast vs slow dealstime_to_purchase - Time-to-purchase analysis: avg/median days, fast vs slow dealslead_response - Lead response time by manager with ratingskommo_team_planner - Capacity planning with actions:capacity - Team workload forecast: load score, available slots, statuskommo_segments - Customer segmentation with actions:by_volume - Purchase tier segmentation with win rateslookalike - Find deals similar to best performersbest_manager - Manager-client fit by deal size segmentbasket - Product mix analysis (catalogs or tag-based)by_behavior - Activity-based segments: hot, warm, cold, frozenretention - Manager retention rates with repeat client analysiskommo_escalation - Deal escalation management with actions:check - Find deals needing escalation by prioritynotify - Critical/high-value deal notificationssla - SLA violation detection with breach severitysupport - Complex case identification for support escalationauto_escalate - Auto-escalate deals based on risk score and stagekommo_reactivation - Client reactivation with actions:sleeping - Inactive clients sorted by value at risklost_nurture - Lost deals worth retrying with strategieschurn_prevention - At-risk deal detection with risk scoringprevent - Preventive actions for at-risk active dealswin_back - Win-back strategies for recently lost deals with scriptskommo_contact_enrichment - Contact data quality with actions:analyze - Data quality scoring per contactmerge_duplicates - Find duplicate contacts by name/phoneenrich - Suggest missing fields prioritized by deal activitykommo_templates - Message templates & scripts with actions:list - Available template categoriesgenerate - AI-generated template by typeapply / personalize - Fill template with lead datasales_script - Stage-specific sales scripts with objection handlersfollow_up - Personalized follow-up email templates based on deal context and inactivityclosing_script - Closing scripts: assumptive, summary, urgency, alternative, trial close techniqueskommo_anomaly - Anomaly detection with actions:detect - Price outliers, volume spikes/drops, user concentrationsales - Win rate anomalies, losing big deals, instant winskommo_objections - Sales objection management with actions:handle - Get response scripts for specific objectionslibrary - Browse objection categories with examplespredict - Anticipate objections for a deal based on contextbest_practices - Top performer practices and win patternskommo_deal_intelligence - Complex deal analysis with actions:enterprise - High-value deal tracking with risk levelsstakeholders - Contact role mapping (Decision Maker, Influencer, User)review - Deal health scoring with issues and strengthspipeline_review - Pipeline health review: issues, strengths, action itemsclosing_signals - Closing signal detection: budget, engagement, contract language, blockerskommo_contact_scoring - Contact engagement scoring with actions:score - Score contacts by activity, data completeness, recencyvalue_segments - VIP / Regular / Occasional segmentation by LTVby_value - Segment contacts by total deal value (premium/standard/basic)company_scoring - Company scoring by deal history, revenue, and tier (Enterprise/Growth/SMB)relationship_strength - Contact relationship strength scoring (Strong/Moderate/Weak/New)account_scoring - Account-level scoring by engagement, contacts, and deals (Tier 1/2/3)kommo_ai_coach - AI-powered sales coaching with actions:review_deal - Deal-specific coaching with actionable adviceskill_assessment - Manager skill radar: closing, speed, deal size, activityskill_gaps - Team-wide gap analysis with training recommendationsroleplay - Sales role-play scenarios for practicebest_practices - Top performer analysis: winning behaviors, patterns, team insightsmicro_learning - Personalized micro-lessons per user based on performance gapskommo_smart_reply - Contextual reply suggestions with actions:suggest - Smart reply suggestions based on deal context and historyobjection_response - Generate responses to client objections (price, timing, competitors)context - Communication history context for a dealauto_reply - Auto-reply suggestions by message category (pricing, delivery, warranty, support)kommo_communication_analytics - Communication quality monitoring with actions:summary - Conversation summary for a deal: stats, timeline, key topicsquality - Communication quality metrics by manager: note rate, win rate, scoresentiment - Sentiment analysis of deal communications: positive/negative/neutral scoringpatterns - Communication patterns: won vs lost deal interaction comparisoninsights - Key insights from deal communications: pricing, competitors, timeline signalskommo_doc_generator - Document generation from CRM data with actions:presentation - Client presentation outline (personalized with lead_id)proposal - Commercial proposal structure with deal contextcase_study - Case study templates from won dealscommercial_offer - Commercial offer generation personalized for a deal (lead_id)report - Sales report: summary, by-manager breakdown, highlightspartner_report - Partnership performance report with executive summary and metricsexportable_report - CSV-ready exportable report with deal data and summary statskommo_insights - Actionable business insights with actions:actionable - Priority insights: risks, conversion issues, data quality, pipeline coverageroot_cause - Root cause analysis of lost deals: patterns, by manager, by price rangestale_analysis - Stale deal analysis by aging bucket (14-30d, 30-60d, 60d+) with value at riskcampaign_roi - Campaign/source ROI: leads, won, revenue, win rate, efficiency rankingkommo_activity - Team activity analytics with actions:feed - Chronological activity feed: deals created, won, tasks completedproductivity - Productivity rankings with score breakdownkpi - Activity KPIs per user: deals, revenue, win rate, tasks, overduerecommendations - Personalized improvement recommendations per usercorrelations - Activity-result correlations: what top performers do differentlykommo_search - Enhanced search with filters:min_price / max_price - Price range filteringcreated_from / created_to - Date range filteringsort_by / sort_order - Sort by price, created_at, updated_attop_deals - Top N deals by amountdeal_context - Full deal context: contacts, notes, taskstimeline - Chronological event timeline for a dealgraph - Relationship graph: leads ↔ contacts ↔ companiesnl_query - Natural language complex queries without SQLproblems - Find problem deals: stale, no price, no responsible userbottlenecks - Pipeline bottleneck detection by stage congestion and agerejection_reasons - Lost deal rejection reason analysis from notespayment_status - Payment status check from deal notes (paid/invoiced/no info)audit_trail - Chronological audit trail of all deal events and changeskommo_tasks_ext - Extended task management (new actions):prioritize - AI-scored task prioritizationreassign - Reassign task to another userpostpone - Postpone task by N daysplan_day - AI daily plan with overdue/today/tomorrowmass_create - Mass task creation for team memberssmart_reminders - Smart reminders for inactive deals sorted by urgencymeeting_briefing - Pre-meeting briefing card with contacts, comms, talking pointsmeeting_prep - Meeting preparation guide with agenda, concerns, checklistkommo_contacts_ext - Contact analysis (new actions):without_deals - Find contacts with no linked dealsinactive - Find contacts with no activity > N dayskommo_webhooks - Webhook management (list, create, delete)kommo_tags - Tag management (list, create, delete, assign)kommo_custom_fields - Custom fields CRUD + mass operationskommo_sources - Lead sources management and analyticskommo_companies - Company management (list, get, create, update)kommo_duplicates - Duplicate detection and mergekommo_links - Entity relationship managementkommo_catalogs - Product catalogs managementkommo_events - CRM event logkommo_calls - Call records managementkommo_cleanup - Data cleanup and CRM resetkommo_mock_data - Generate test data (contacts, companies, leads)kommo_list_pipelines - List all pipelines with stageskommo_search_contacts - Quick contact searchAsk your AI assistant:
React SPA for monitoring and management, served at /logs/.
Stack: React + Vite + TailwindCSS + Recharts
Pages:
API Endpoints:
POST /api/login — JSON authGET /api/me — Current userGET /api/users — All TG users with CRM tenantsGET /api/sessions — Session list with statsGET /api/session/{id} — Session detail# Dev
cd admin && npm run dev
# Build
cd admin && npm run build
# Output: admin/dist/ → served by logs_server| Command | Description |
|---|---|
/start | Start, show welcome |
/connect | Connect new CRM |
/crm_list | List all connected CRMs |
/switch | Switch active CRM |
/status | Current CRM status |
/openai | Set OpenAI API key |
/sync | Sync CRM data to local DB |
/wizard | CRM setup wizard |
/remove_crm | Disconnect a CRM |
/help | All commands |
/cancel | Cancel current operation |
Any plain text message is treated as an AI query to the active CRM.
# Server setup
cd /opt/kommo-mcp
python -m venv venv
source venv/bin/activate
pip install -e .
# Build admin panel
cd admin && npm install && npm run build
# systemd service
sudo systemctl enable kommo-telegram-bot
sudo systemctl start kommo-telegram-bot
# nginx proxy
# /logs/ → localhost:8765 (admin panel + API)
# /mcp → localhost:8001 (MCP HTTP transport)
sudo certbot --nginx -d your-domain.comKommoMCP/
├── src/kommo_mcp/
│ ├── telegram/
│ │ ├── bot.py # Telegram bot (aiogram)
│ │ ├── ai_chat.py # AI chat engine (Planner + GPT + tools)
│ │ ├── tool_retriever.py # RAG-based tool retrieval
│ │ ├── logs_server.py # Admin panel backend + SPA serving
│ │ └── tools/ # YAML tool definitions for RAG
│ ├── planner/
│ │ ├── tool_graph_planner.py # Graph planner: intent detection, chain building, prompt generation
│ │ └── tool_registry.yaml # Tool graph: 54 tools, 258 actions, 24 edges, capabilities
│ ├── saas/
│ │ ├── manager.py # TenantManager (multi-tenant)
│ │ └── orchestrator.py # DB orchestration per tenant
│ └── server.py # MCP server (stdio + HTTP)
├── migrations/
│ └── graph_schema.sql # PostgreSQL schema for tool graph persistence
├── tests/
│ └── test_tool_graph_planner.py # 31 tests: 10 amoCRM scenarios
├── admin/ # React admin panel
│ ├── src/
│ │ ├── pages/ # Login, Dashboard, Users, Sessions, SessionDetail
│ │ ├── components/ # Layout with sidebar
│ │ └── api.js # API client
│ └── vite.config.js
├── deploy/
│ └── amomcp-nginx.conf
└── README.md# Install dependencies
pip install -e ".[dev]"
# Run bot locally
python -m kommo_mcp.telegram
# Run admin panel dev server
cd admin && npm run dev
# Lint
ruff check src/MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.