Zero Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Zero Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP (Model Context Protocol) server for integrating Zero CRM with Claude Desktop and other MCP-compatible clients.
where clauses for powerful querieslimit/offset supportnpm install
npm run buildAdd to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"zero": {
"command": "node",
"args": ["/path/to/zero-api/dist/index.js"],
"env": {
"ZERO_API_KEY": "your-api-key-here",
"ZERO_WORKSPACE_NAME": "My Workspace"
}
}
}
}Replace /path/to/zero-api with the actual path and add your Zero API key.
| Variable | Required | Description |
|---|---|---|
ZERO_API_KEY | Yes | Your Zero API key |
ZERO_WORKSPACE_NAME | No | Workspace name to use (defaults to first workspace) |
Request an API key from the Zero team. Self-service API key generation is not yet available.
zero_get_workspace - Get and cache the default workspacezero_list_companies - List/search companies with filteringzero_get_company - Get company by IDzero_create_company - Create a new companyzero_update_company - Update company fieldszero_delete_company - Archive or delete a companyzero_list_contacts - List/search contacts with filteringzero_get_contact - Get contact by IDzero_create_contact - Create a new contactzero_update_contact - Update contact fieldszero_delete_contact - Archive or delete a contactzero_list_deals - List/search deals with filteringzero_get_deal - Get deal by IDzero_create_deal - Create a new dealzero_update_deal - Update deal fieldszero_delete_deal - Archive or delete a dealOnce configured, you can ask Claude:
Tools support JSON where clauses with MongoDB-style $-prefixed operators:
{"name": {"$contains": "Acme"}}
{"value": {"$gte": 50000}}
{"value": {"$between": [1000, 5000]}}
{"stage": {"$in": ["stage-id-1", "stage-id-2"]}}
{"closeDate:month": "2026-01"}
{"ownerIds": {"$includes": "user-id"}}
{"location.city": "San Francisco"}npm run dev # Watch mode
npm run build # Build for productionThis server integrates with Zero's REST API. See src/api-reference.ts for documented endpoints.
Note: Zero is in beta. When they update their API, update this MCP accordingly.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.