Is Kylas Crm Mcp Server safe to install?

SaferSkills independently audited Kylas Crm Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md2.3 KB · Markdown

Kylas CRM MCP Server (Lead Only)

Model Context Protocol server for Kylas CRM lead operations. Use it from Cursor, Claude Desktop, or any MCP client to create leads, search and filter leads, and look up users, products, and pipelines.

Features

get_lead_field_instructions – Get lead schema (standard + custom fields, picklist IDs)
create_lead – Create a lead with dynamic fields from user context
search_leads – Search/filter leads by multiple criteria
lookup_users – Resolve user names to IDs (for owner, created by, etc.)
lookup_products – Resolve product names to IDs
lookup_pipelines / get_pipeline_stages – Resolve pipeline and stage for open/closed/won leads
search_idle_leads – Find leads with no activity for N days

Requirements

Python 3.10+
Kylas account and API key

Installation

pip install -e .
# or from PyPI (after publish): pip install kylas-crm-mcp-server

Configuration

Set environment variables (or use a .env file):

Variable	Required	Description
`KYLAS_API_KEY`	Yes	Your Kylas API key
`KYLAS_BASE_URL`	No	API base URL (default: https://api.kylas.io/v1)

Running the server

The server uses stdio transport (default for MCP). Run:

python -m kylas_crm_mcp
# or: python main.py  (when developing from repo root)

MCP clients (e.g. Cursor) typically start this process and communicate via stdin/stdout.

Docker

docker build -t kylas-crm-mcp .
docker run -e KYLAS_API_KEY=your_key -i kylas-crm-mcp

Development

pip install -e ".[dev]"
pytest

Publishing to the MCP Marketplace

To publish this server to the official MCP Registry (so it appears in Cursor and other MCP clients):

Publish the package to PyPI (the registry verifies ownership via your README).
Install mcp-publisher and run mcp-publisher login github, then mcp-publisher publish.

See [PUBLISHING.md](PUBLISHING.md) for the full step-by-step guide.

License

See repository for license information.

Kylas Crm Mcp Server— agent skill

Is Kylas Crm Mcp Server safe to install?

Kylas CRM MCP Server (Lead Only)

Features

Requirements

Installation

Configuration

Running the server

Docker

Development

Publishing to the MCP Marketplace

License

Audit the pieces. Scan the whole. Decide.