Is Mcp Server Crm safe to install?

SaferSkills independently audited Mcp Server Crm (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md5.5 KB · Markdown

mcp-server-crm

Freelancer Client Pipeline Tracker — An MCP Server that gives Claude (or any MCP-compatible LLM) tools to manage leads, track pipeline stages, log interactions, and generate reports.

Architecture

┌─────────────────────────────────────────────────┐
│                  Claude Desktop                  │
│            (or any MCP-compatible LLM)           │
└─────────────────┬───────────────────────────────┘
                  │ MCP Protocol (stdio)
                  ▼
┌─────────────────────────────────────────────────┐
│              mcp-server-crm                      │
│                                                  │
│  ┌──────────┐    ┌──────────┐                   │
│  │ server.py│    │  api.py  │                   │
│  │ (MCP)    │    │ (FastAPI)│                   │
│  └────┬─────┘    └────┬─────┘                   │
│       └───────┬───────┘                          │
│               ▼                                  │
│        ┌────────────┐                            │
│        │ queries.py │  (shared business logic)   │
│        └──────┬─────┘                            │
│               ▼                                  │
│        ┌────────────┐                            │
│        │   db.py    │  (SQLite / PostgreSQL)     │
│        └────────────┘                            │
└─────────────────────────────────────────────────┘

Key design: Both the MCP server and FastAPI REST API share the same queries.py business logic — zero duplication, guaranteed behavioral parity.

Features

Tool	Description
`search_leads`	Search leads by status, source, and budget range
`get_lead`	Get full details for a single lead
`create_lead`	Add a new lead at the "prospect" stage
`update_lead`	Update lead information (partial updates)
`update_stage`	Move a lead through the pipeline with history tracking
`get_reminders`	Find leads with past-due follow-up dates
`get_pipeline_report`	Win rate, revenue stats, stage breakdown
`flag_overdue`	Red-flag leads overdue by 3+ days
`add_activity`	Log emails, calls, meetings, proposals

Pipeline Stages

prospect → contacted → proposal_sent → qualified → negotiation → closed_won
                                                                → closed_lost

Quick Start

1. Install

git clone https://github.com/Aniketsingh12/mcp-server-crm.git
cd mcp-server-crm
pip install -e ".[dev]"

2. Seed demo data

python -m mcp_server_crm.seed

3. Run with Claude Desktop

Add to your Claude Desktop config (claude_desktop_config.json):

{
  "mcpServers": {
    "crm": {
      "command": "python",
      "args": ["-m", "mcp_server_crm.server"]
    }
  }
}

Then ask Claude things like:

"Show me all leads from LinkedIn with budget over $5000"
"Move Nexus Financial to the negotiation stage"
"Which leads have overdue follow-ups?"
"Give me a pipeline report"

4. Run the REST API (optional)

python scripts/run_both.py
# Open http://127.0.0.1:8000/docs for Swagger UI

5. Test with MCP Inspector

mcp dev src/mcp_server_crm/server.py

REST API Reference

Method	Endpoint	Description
GET	`/health`	Health check
GET	`/leads`	Search leads (query params: status, source, min_budget, max_budget)
GET	`/leads/{id}`	Get a lead
POST	`/leads`	Create a lead
PATCH	`/leads/{id}`	Update a lead
PATCH	`/leads/{id}/stage`	Change pipeline stage
DELETE	`/leads/{id}`	Delete a lead
GET	`/leads/{id}/activities`	List lead activities
POST	`/leads/{id}/activities`	Log an activity
GET	`/reminders`	Get follow-up reminders
GET	`/overdue`	Get critical overdue leads
GET	`/reports/pipeline`	Full pipeline report

Development

# Run tests
pytest -v

# Run API with auto-reload
uvicorn mcp_server_crm.api:app --reload

PostgreSQL Migration Path

The SQLite database can be swapped to Supabase/PostgreSQL by:

Adding asyncpg to dependencies
Updating db.py connection to use DATABASE_URL env var
Adjusting SQL placeholders (? → $1, $2)

The queries.py function signatures stay identical — only internal SQL changes.

Tech Stack

Python 3.11 — Runtime
MCP SDK (FastMCP) — Model Context Protocol server
FastAPI — REST API
SQLite — Zero-config database (swap to PostgreSQL for production)
Pydantic — Data validation and serialization

License

MIT

Mcp Server Crm— agent skill

Is Mcp Server Crm safe to install?

mcp-server-crm

Architecture

Features

Pipeline Stages

Quick Start

1. Install

2. Seed demo data

3. Run with Claude Desktop

4. Run the REST API (optional)

5. Test with MCP Inspector

REST API Reference

Development

PostgreSQL Migration Path

Tech Stack

License

Audit the pieces. Scan the whole. Decide.