Most kintone integrations read and write records. This one also creates apps, rewrites form layouts, changes access control and deploys to production — so the account you give it should be the account you would give a person with those powers. Two practical notes from the README itself: file downloads at 1MB or above may fail in the current implementation, and the desktop-extension install lets you disable individual tools, which is the easiest way to narrow the surface.
A local MCP server for kintone, Cybozu's business application platform. It is unofficial — Cybozu publishes its own, and this README points at it — and its scope is unusually complete: alongside reading and writing records it can create apps, add and reconfigure fields, change form layouts, edit views, graphs, notifications, process management and access control, and deploy those changes to production.
- Records read, searched, created, updated and upserted on a duplicate-prevention field — `get_record`, `search_records`, `create_record`, `update_record`, `upsert_record`
- Process management driven properly: status transitions, assignee changes and comments — `update_record_status`, `update_record_assignees`, `add_record_comment`, `get_record_comments`
- Files uploaded and downloaded, with a documented caveat that files of 1MB or more may not download correctly in the current implementation — `upload_file`, `download_file`
- App configuration read in full: form layout and fields, actions, plugins, process management, views, graphs and all four notification kinds — `get_apps_info`, `get_form_layout`, `get_form_fields`, `get_app_actions`, `get_app_plugins`, `get_process_management`, `get_views`, `get_reports`, `get_notifications`, `get_per_record_notifications`, `get_reminder_notifications`
- Permissions inspected and evaluated at app, field and record level — `get_app_acl`, `get_field_acl`, `get_record_acl`, `evaluate_records_acl`
- Apps built and changed, then deployed to production with a status check — `create_app`, `add_fields`, `update_field`, `update_form_layout`, `update_app_settings`, `update_views`, `update_reports`, `update_notifications`, `update_process_management`, `deploy_app`, `get_deploy_status`
- Spaces, threads and guests managed — `get_space`, `update_space`, `update_space_body`, `get_space_members`, `update_space_members`, `add_thread`, `update_thread`, `add_thread_comment`, `add_guests`, `update_space_guests`
- Users and groups resolved — `get_users`, `get_groups`, `get_group_users`
- The current connection's domain and username, so the agent can report which tenant it is acting against — `get_kintone_domain`, `get_kintone_username`
A kintone account with the permissions you want the agent to have. Three values: `KINTONE_DOMAIN` as `[subdomain].cybozu.com`, `KINTONE_USERNAME`, and `KINTONE_PASSWORD` — a plain-text account password rather than an API token, which is the trust decision to make before installing. The easiest install is the `.mcpb` desktop extension from Releases, dragged into Claude Desktop's extensions panel, where you enter the connection details in a form and can disable individual tools you would rather not expose. Otherwise Node.js 20 or newer with pnpm or npm, and point the client at `server.js`.
Build from source — clone the repository and build it, then point your client at the binary