Bitrix24 MCP Server
Bitrix24 CRM entities and user data access via Model Context Protocol tools.
Data last scanned today · Reviewed today
Overview
The Bitrix24 MCP Server enables AI agents to interact with your CRM instance by providing a comprehensive suite of tools for managing contacts, deals, tasks, leads, and companies. It includes built-in rate limiting to manage API traffic effectively and leverages full TypeScript type definitions to ensure robust data handling throughout the integration. Users can perform CRUD operations on CRM entities, search with flexible filtering, and resolve complex user relationships within the Bitrix24 ecosystem. This server simplifies the process of syncing AI assistants with internal business workflows by handling task list retrievals, deal pipeline filtering, and lead management automatically.
Our verdict
This server receives a security score of 10/100, resulting in a high risk level. The absence of a read-only mode means every installation grants the server full write access to your CRM data, and the lack of a detected license creates legal ambiguity regarding its use. Given that it is a community-maintained project that has not been updated in over a year, it is not recommended for environments requiring strict security controls or enterprise-level stability.
- Supports granular CRUD operations for contacts, deals, and leads
- Includes built-in rate limiting for Bitrix24 API requests
- Maintains a small attack surface with only four direct dependencies
- High security risk due to lack of read-only operational mode
- No detected license provides unclear legal usage terms
- Inactive maintenance status with last commit over one year ago
- Single-contributor project increases long-term bus-factor risk
Setup
{
"mcpServers": {
"bitrix24-mcp-server": {
"args": [
"-y",
"bitrix24-mcp-server"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| bitrix24_create_contact | Create new contacts | medium |
| bitrix24_get_contact | Retrieve contact by ID | low |
| bitrix24_list_contacts | List contacts with filtering | low |
| bitrix24_update_contact | Update existing contacts | medium |
| bitrix24_create_deal | Create new deals | medium |
| bitrix24_get_deal | Retrieve deal by ID | low |
| bitrix24_list_deals | List deals with filtering | low |
| bitrix24_update_deal | Update existing deals | medium |
| bitrix24_create_task | Create new tasks | medium |
| bitrix24_get_task | Retrieve task by ID | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›What are the system requirements for running the server?
The server requires Node.js 18 or higher, along with either npm or yarn for package management.
›How do I connect the server to my Bitrix24 instance?
You must create an incoming webhook under the Applications section of your Bitrix24 instance and provide the resulting webhook URL in the BITRIX24_WEBHOOK_URL environment variable.
›Does the server provide tools to troubleshoot connection or permission issues?
Yes, the server includes utilities such as bitrix24_validate_webhook to check connections and bitrix24_diagnose_permissions to verify webhook access levels.
›Are there built-in safeguards for API usage?
The server includes built-in rate limiting to help ensure your interactions respect Bitrix24 API usage limits.
Badge
Maintain this server? Add the live badge to your README.