Mcp Server Dolibarr — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server Dolibarr (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP server for Dolibarr ERP/CRM. Lets Claude (or any MCP-compatible client) read and manage your Dolibarr thirdparties (clients/suppliers), commercial proposals, contracts, and invoices directly — no manual API scripting needed.
Built by Nexora 360 Digital, released for anyone running Dolibarr to use for free.
No install needed — run it directly with npx (see configuration below), or clone this repo and run npm install.
The server reads two environment variables:
| Variable | Description | Example |
|---|---|---|
DOLIBARR_URL | Your Dolibarr REST API base URL | https://your-domain.com/dolibarr/api/index.php |
DOLIBARR_API_KEY | The API key generated for your Dolibarr user | abc123... |
claude mcp add dolibarr \
--env DOLIBARR_URL=https://your-domain.com/dolibarr/api/index.php \
--env DOLIBARR_API_KEY=your_api_key_here \
-- npx -y mcp-server-dolibarrAdd to your MCP config file (e.g. claude_desktop_config.json):
{
"mcpServers": {
"dolibarr": {
"command": "npx",
"args": ["-y", "mcp-server-dolibarr"],
"env": {
"DOLIBARR_URL": "https://your-domain.com/dolibarr/api/index.php",
"DOLIBARR_API_KEY": "your_api_key_here"
}
}
}
}Connectivity
dolibarr_ping — verify the URL/API key are workingThirdparties (clients/suppliers)
dolibarr_list_thirdpartiesdolibarr_get_thirdpartydolibarr_find_thirdparty_by_emaildolibarr_create_thirdpartydolibarr_update_thirdpartyCommercial Proposals (Quotes)
dolibarr_list_proposalsdolibarr_get_proposaldolibarr_create_proposaldolibarr_add_proposal_linedolibarr_validate_proposalContracts
dolibarr_list_contractsdolibarr_get_contractdolibarr_create_contractdolibarr_add_contract_lineInvoices
dolibarr_list_invoicesdolibarr_get_invoicedolibarr_create_invoicedolibarr_add_invoice_linedolibarr_validate_invoicedolibarr_get_invoice_pdf_urlAnything else
dolibarr_request — raw passthrough to any Dolibarr REST endpoint (/products, /users, /projects, etc.) for the parts of Dolibarr's huge API surface this server doesn't wrap explicitly yet.*_lines endpoints). The tools above mirror that.POST /{proposals|invoices|contracts}/{id}/lines actually expects the body wrapped as {"request_data": {...fields...}}, not a flat object of fields (despite this not matching the field names documented for older Dolibarr versions). Sending a flat object doesn't error — it silently creates a blank line with special_code: "3" (no description, qty 0, price 0) instead of your real data. dolibarr_add_proposal_line, dolibarr_add_invoice_line and dolibarr_add_contract_line already wrap the body correctly to work around this. If you see blank/special_code: 3 lines appearing on Dolibarr versions other than 23.x, check your instance's live schema at /api/index.php/explorer/swagger.json and adjust index.js accordingly — Dolibarr's REST API shape has changed across major versions.country_id for thirdparties follows Dolibarr's internal country table (e.g. 144 = Sri Lanka in standard Dolibarr installs) — check your instance if unsure.Issues and PRs welcome — this was built to scratch a real itch (managing client proposals/invoices via Claude) and intentionally keeps a dolibarr_request escape hatch so it stays useful even where dedicated tools haven't been written yet.
MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.