Connectwise Sell Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Connectwise Sell Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
FastMCP HTTP server wrapping the ConnectWise Sell (Quosal) REST API. 12 tools covering Quotes, Line Items, Tabs, Customers, Terms, Templates, Recurring Revenue, and Tax Codes.
Note: Quotes cannot be created from scratch via the Sell API — new quotes must be copied from an existing quote or template. Useget_templatesto browse templates, thencopy_quoteto create.
Via uvx (recommended — no clone, no venv):
uvx connectwise-sell-mcpSet credentials via environment variables or a .env file in your working directory.
Via pip:
pip install connectwise-sell-mcp
connectwise-sell-mcpFrom source:
git clone https://github.com/Mfrostbutter/connectwise-sell-mcp
cd connectwise-sell-mcp
cp .env.example .env
# fill in your SELL_* credentials
python3 -m venv venv && source venv/bin/activate
pip install -r requirements.txt
python3 server.py
# verify: curl http://localhost:8086/health| Mode | How to set | Best for |
|---|---|---|
http (default) | MCP_TRANSPORT=http | Persistent server shared across sessions or team members |
stdio | MCP_TRANSPORT=stdio | Cursor, VS Code, Zed, Continue, or any stdio-based MCP client |
In stdio mode the server is spawned per-session by the client — no port, no persistent process.
| Variable | Required | Default | Notes |
|---|---|---|---|
SELL_ACCESS_KEY | Yes | — | Found in the Sell URL parameters when logged in |
SELL_USERNAME | Yes | — | Sell API username (must be an API user) |
SELL_PASSWORD | Yes | — | Sell API password |
SELL_BASE_URL | No | https://sellapi.quosalsell.com | Override if your instance uses a different host |
MCP_AUTH_TOKEN | No | — | Bearer token for MCP client auth; omit to run without auth |
SELL_MCP_PORT | No | 8086 | HTTP listen port |
Log into ConnectWise Sell and look at the URL — it will contain a parameter like accessKey=XXXXXXXX. That value is your SELL_ACCESS_KEY.
The Sell API uses HTTP Basic auth with a compound credential:
Authorization: basic base64(accessKey+username:password)The server constructs this automatically from your env vars.
Quotes (5): list_quotes, get_quote, get_quote_versions, copy_quote, update_quote
Quote detail (4): get_quote_items, get_quote_tabs, get_quote_customers, get_quote_terms
Reference (3): get_templates, get_recurring_revenues, get_tax_codes
HTTP mode — Claude Desktop, Claude Code (server runs persistently):
claude_desktop_config.json / .claude/settings.json:
{
"mcpServers": {
"connectwise-sell": {
"type": "http",
"url": "http://localhost:8086/mcp",
"headers": { "Authorization": "Bearer your_token_here" }
}
}
}stdio mode — Cursor, VS Code, Zed, Continue, or any stdio client (server spawned per-session):
{
"mcpServers": {
"connectwise-sell": {
"command": "uvx",
"args": ["connectwise-sell-mcp"],
"env": {
"SELL_ACCESS_KEY": "your_access_key",
"SELL_USERNAME": "your_api_username",
"SELL_PASSWORD": "your_password",
"MCP_TRANSPORT": "stdio"
}
}
}
}[Unit]
Description=ConnectWise Sell MCP
After=network.target
[Service]
User=mcp
WorkingDirectory=/opt/connectwise-sell-mcp
EnvironmentFile=/opt/connectwise-sell-mcp/.env
ExecStart=/opt/connectwise-sell-mcp/venv/bin/python3 server.py
Restart=always
[Install]
WantedBy=multi-user.targetMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.