LABSCO SUMMARY
Per-app allow and deny lists, from a project that has handed off to Cybozu's official server.
Read this first: on 2025-08-28 the author announced that Cybozu had released an official kintone MCP server and that this project would get no new features. What it still does unusually well is scoping — the env block alone decides which app IDs are reachable, with the deny list taking priority, so a client can be limited to a handful of apps without touching kintone's own permissions.
What it is
A single-executable MCP server for kintone that lets an AI client explore and manipulate records in your kintone apps.
What you get
- Explore and manipulate kintone data from an MCP client
- Per-app scoping: KINTONE_ALLOW_APPS and KINTONE_DENY_APPS take lists of app IDs, and deny wins over allow
- Sign in with a username and password, or with a comma-separated list of API tokens
- A prebuilt executable from the releases page — put it anywhere and point the client at it
Requirements
KINTONE_BASE_URL is required, and then either KINTONE_USERNAME with KINTONE_PASSWORD or KINTONE_API_TOKEN. Download the executable from the releases page; there is no runtime to install.
Setup effort
Follow the published steps
USE CASES
01
Asking where a project stands
Query the app that tracks it and get the current status without opening kintone.
02
Updating a record mid-conversation
Change a field — the README's example moves Project B's progress to 50%.
03
Limiting what an assistant can reach
List the app IDs you are willing to expose in KINTONE_ALLOW_APPS; anything in KINTONE_DENY_APPS stays blocked even if it is also allowed.
BEFORE YOU INSTALL
What to know first
Requires
- KINTONE_BASE_URL (the base URL of your kintone)
- KINTONE_USERNAME and KINTONE_PASSWORD, or KINTONE_API_TOKEN
INSTALLATION
Connect your client
Server setup
Download the latest release for your platform from https://github.com/macrat/mcp-server-kintone/releases, unpack it, and place the executable anywhere you like.
Add the configuration below to your client, with command set to the full path of that executable. Set KINTONE_BASE_URL, then either KINTONE_USERNAME and KINTONE_PASSWORD or KINTONE_API_TOKEN, and remove the lines you do not use.
MCP Clients
Any MCP client
ANY MCP CLIENT · JSON
{
"mcpServers": {
"kintone": {
"command": "<YOUR_PATH_TO_MCP_SERVER_KINTONE>",
"env": {
"KINTONE_BASE_URL": "https://<YOUR_DOMAIN>.cybozu.com",
"KINTONE_USERNAME": "<YOUR_KINTONE_USERNAME>",
"KINTONE_PASSWORD": "<YOUR_KINTONE_PASSWORD>",
"KINTONE_API_TOKEN": "<YOUR_KINTONE_API_TOKEN>, <YOUR_ANOTHER_API_TOKEN>, ...",
"KINTONE_ALLOW_APPS": "1, 2, 3, ...",
"KINTONE_DENY_APPS": "4, 5, ..."
}
}
}
}