Name: CiviCRM MCP by usefulapi
Author: usefulapi

CiviCRM MCP by usefulapi

Work with your own CiviCRM: contacts, contributions, memberships, events; log activities.

Tool-list grade A Remote · Streamable HTTP No auth needed 24 tools v1.16.2 MIT

No reviews yet by usefulapiGitHub The publisher’s own endpoint — this marketplace is not in the path

93/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Work with your own CiviCRM: contacts, contributions, memberships, events; log activities.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http civicrm-mcp-by-usefulapi https://civicrm.usefulapi.io/mcp

# 2 — ask your agent for something these tools do
#   civicrm_whoami, civicrm_search_contacts, civicrm_get_contact and 21 more

CiviCRM MCP by usefulapi costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

usefulapi598 servers

25 categories

All 598 servers

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

The CiviCRM contact this API key belongs to (contact id, display name, contact type) and how it authenticated. Everything the other tools do is limited to that contact's permissions. GET /civicrm/authx/id, then APIv4 Contact.get.

No parameter schema on file.

Find contacts (people, organizations, households) by a word in their name, e-mail address or phone number, optionally of one contact type. Trashed contacts are left out. Returns id, display name, type, primary e-mail and phone. APIv4 Contact.get.

Parameter	Type	Required	Notes
query	string	no	Text to look for in the display name, primary e-mail or primary phone (partial match). Leave empty to list contacts by name.
contact_type	string	no	Only this contact type.
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

One contact by id: name, type, job title, source, communication preferences (do not e-mail, opted out, ...), dates, plus all their e-mail addresses, phone numbers and postal addresses. APIv4 Contact.get, Email.get, Phone.get, Address.get.

Parameter	Type	Required	Notes
contact_id	integer	yes	CiviCRM contact id (the cid in the contact's URL).

The notes recorded on one contact (subject, text, who wrote it, when), newest first. APIv4 Note.get.

Parameter	Type	Required	Notes
contact_id	integer	yes	CiviCRM contact id.
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

The relationships of one contact (employee of, spouse of, volunteer for, ...) with the other contact, start and end date and whether it is active. APIv4 Relationship.get.

Parameter	Type	Required	Notes
contact_id	integer	yes	CiviCRM contact id.
active_only	boolean	no	Only active relationships (default true).
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

Contributions (donations, membership dues, event fees) with contact, amount, currency, financial type, status, payment method, date and source, newest first. Filter by contact, status, financial type, date range and minimum amount. Test contributions are left out. APIv4 Contribution.get.

Parameter	Type	Required	Notes
contact_id	integer	no	Only this contact's contributions.
status	string	no	Only this status by name, e.g. Completed, Pending, Failed, Cancelled, Refunded.
financial_type	string	no	Only this financial type by name, e.g. Donation, Member Dues, Event Fee.
date_from	string	no	Received on or after this date.
date_to	string	no	Received on or before this date (a plain date includes that whole day).
min_amount	number	no	Only contributions of at least this amount.
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

Memberships with contact, membership type, status (New, Current, Grace, Expired, ...), join, start and end date. Filter by contact, status, type, or those ending before a date (renewal follow-up). Test memberships are left out. APIv4 Membership.get.

Parameter	Type	Required	Notes
contact_id	integer	no	Only this contact's memberships.
status	string	no	Only this status by name, e.g. Current, Grace, Expired, Cancelled.
membership_type	string	no	Only this membership type by name, e.g. General.
ends_before	string	no	Only memberships that end on or before this date.
ends_after	string	no	Only memberships that end on or after this date.
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

Events with title, type, start and end date, whether active and public, maximum participants and summary. Upcoming events first when upcoming_only is set. Template events are left out. APIv4 Event.get.

Parameter	Type	Required	Notes
title	string	no	Only events whose title contains this text.
upcoming_only	boolean	no	Only events that have not ended yet (start date today or later).
active_only	boolean	no	Only active events (default true).
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

Event registrations with event, contact, status (Registered, Attended, Cancelled, ...), role, registration date and fee. Filter by event, contact or status. Test registrations are left out. APIv4 Participant.get.

Parameter	Type	Required	Notes
event_id	integer	no	Only this event's participants.
contact_id	integer	no	Only this contact's registrations.
status	string	no	Only this participant status by name, e.g. Registered, Attended, Cancelled.
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

Activities (meetings, phone calls, e-mails, follow-ups, ...) with type, subject, status, date and details, newest first. With contact_id: the activities that contact took part in, with their role (source, target or assignee). Otherwise all activities, optionally of one type or status. APIv4 ActivityContact.get / Activity.get.

Parameter	Type	Required	Notes
contact_id	integer	no	Only activities this contact is involved in.
activity_type	string	no	Only this activity type by name, e.g. Meeting, Phone Call, Email, Follow up.
status	string	no	Only this status by name, e.g. Scheduled, Completed, Cancelled.
date_from	string	no	On or after this date.
date_to	string	no	On or before this date (a plain date includes that whole day).
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

Cases (CiviCase) with subject, case type, status and dates. With contact_id: the cases that contact is a client of. Needs the CiviCase component to be enabled. APIv4 CaseContact.get / Case.get.

Parameter	Type	Required	Notes
contact_id	integer	no	Only cases of this client contact.
status	string	no	Only this case status by name, e.g. Open, Resolved. Applied when no contact_id is given.
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

Contact groups (mailing lists, static groups, smart groups) with title, description, visibility and type. APIv4 Group.get.

Parameter	Type	Required	Notes
title	string	no	Only groups whose title contains this text.
active_only	boolean	no	Only active groups (default true).
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

The members of one static group (or the groups one contact belongs to): contact, group and membership status (Added, Removed, Pending). Smart groups are computed by CiviCRM and not listed here. APIv4 GroupContact.get.

Parameter	Type	Required	Notes
group_id	integer	no	Members of this group (from civicrm_list_groups).
contact_id	integer	no	The groups of this contact.
status	string	no	Membership status (default Added).
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

The fields of one CiviCRM entity (Contact, Contribution, Event, ...) including custom fields: name, label, data type, whether required, and the allowed options for a pick-list field. Use it to find the right field names for civicrm_query and the right option names for the filters and write tools. APIv4 <Entity>.getFields.

Parameter	Type	Required	Notes
entity	string	yes	APIv4 entity name, e.g. Contact.
field	string	no	Only this field, with its options (e.g. contribution_status_id).
action	string	no	The action the fields are for (default get).

The APIv4 entities this CiviCRM site offers (Contact, Contribution, Event, plus those of installed extensions), with a short description. Use the names with civicrm_get_fields and civicrm_query. APIv4 Entity.get.

Parameter	Type	Required	Notes
search	string	no	Only entities whose name or title contains this text.

Read records of ANY CiviCRM entity with APIv4 Entity.get: choose fields, filter, sort and page. Use civicrm_list_entities and civicrm_get_fields for the names. Field names may be joined (contact_id.display_name, email_primary.email) or ask for an option's text (status_id:label). Examples: entity Tag; entity Campaign with where [{field:'is_active',op:'=',value:true}]; entity Contribution with

Parameter	Type	Required	Notes
entity	string	yes	APIv4 entity name, e.g. Campaign.
select	array	yes	Fields to return.
where	array	no	Filters, all of which must match.
order_by	array	no	Sort order.
limit	integer	no	Records per call, 1-100 (default 25).
offset	integer	no	How many records to skip (default 0). Pass the previous reply's next_offset.

WRITE: creates ONE new contact (an individual, organization or household) and optionally its first e-mail address and phone number. Does not check for duplicates: search first with civicrm_search_contacts. Sends nothing. APIv4 Contact.create, Email.create, Phone.create.

Parameter	Type	Required	Notes
contact_type	string	yes	Individual, Organization or Household.
first_name	string	no	Individual: first name.
last_name	string	no	Individual: last name.
organization_name	string	no	Organization: its name.
household_name	string	no	Household: its name.
job_title	string	no	—
source	string	no	Where this contact came from (free text).
email	string	no	First e-mail address (stored as the primary one).
phone	string	no	First phone number (stored as the primary one).

WRITE: changes basic fields of ONE existing contact (name, job title, source, preferred language) and/or its communication preferences (do not e-mail, do not phone, do not mail, do not SMS, opted out of bulk mail). Only the fields you give are changed. Setting a do-not flag to false re-enables contact the person may have declined, so only do that on the person's request. APIv4 Contact.update.

Parameter	Type	Required	Notes
contact_id	integer	yes	CiviCRM contact id.
first_name	string	no	—
last_name	string	no	—
organization_name	string	no	—
household_name	string	no	—
job_title	string	no	—
source	string	no	—
preferred_language	string	no	—
do_not_email	boolean	no	—
do_not_phone	boolean	no	—
do_not_mail	boolean	no	—
do_not_sms	boolean	no	—
is_opt_out	boolean	no	Opted out of ALL bulk mailings.

WRITE: adds ONE note to a contact's record, written by the contact this API key belongs to. Sends nothing. APIv4 Note.create.

Parameter	Type	Required	Notes
contact_id	integer	yes	CiviCRM contact id the note is about.
note	string	yes	The note text.
subject	string	no	Optional subject line.

WRITE: records ONE activity (a meeting, phone call, e-mail, follow-up, ...) with one or more contacts. It only STORES the record: an activity of type Email does not send an e-mail. Added by the contact this API key belongs to unless source_contact_id is given. APIv4 Activity.create.

Parameter	Type	Required	Notes
activity_type	string	yes	Activity type by name, e.g. Meeting, Phone Call, Email, Follow up (see civicrm_get_fields Activity, field activity_type_id).
subject	string	yes	Subject line.
with_contact_ids	array	yes	The contact(s) the activity is with.
details	string	no	Description.
status	string	no	Status by name, e.g. Completed (default), Scheduled, Cancelled.
activity_date_time	string	no	When it happened or will happen (default now).
assignee_contact_ids	array	no	Contact(s) assigned to do it.
source_contact_id	integer	no	Who added it (default: the API key's own contact).

WRITE: records ONE contribution (a donation, a payment received elsewhere) for a contact. It only STORES the financial record: no card is charged, no receipt is e-mailed, and the amount shows up in CiviCRM's reports and the contact's giving history. Check civicrm_list_contributions first to avoid a duplicate. APIv4 Contribution.create.

Parameter	Type	Required	Notes
contact_id	integer	yes	CiviCRM contact id of the donor.
total_amount	number	yes	Amount, in the site's currency unless currency is given.
financial_type	string	yes	Financial type by name, e.g. Donation, Member Dues, Event Fee, Campaign Contribution.
receive_date	string	no	When it was received (default now).
status	string	no	Contribution status by name: Completed (default), Pending, ...
payment_method	string	no	Payment method by name, e.g. Check, Cash, Credit Card, EFT.
currency	string	no	ISO currency code (default: the site's default).
source	string	no	Where it came from (free text).
trxn_id	string	no	Your own reference, e.g. a check number or bank reference.

WRITE: gives ONE contact a membership of a type. CiviCRM works out the dates and status from the type unless you give dates. It does NOT record a payment (use civicrm_record_contribution for that) and sends nothing. APIv4 Membership.create.

Parameter	Type	Required	Notes
contact_id	integer	yes	CiviCRM contact id.
membership_type	string	yes	Membership type by name, e.g. General (see civicrm_get_fields Membership, field membership_type_id).
join_date	string	no	Join date (default today).
start_date	string	no	Start date (default: calculated by the type).
end_date	string	no	End date (default: calculated by the type).
source	string	no	Where it came from (free text).

WRITE: adds ONE contact to ONE static group. If the group is used as a mailing list, the contact will receive future mailings sent to it, so only add people who agreed. Sends nothing by itself. Adding a contact who is already in the group changes nothing; a contact who was removed from it (or is pending) is set back to Added. APIv4 GroupContact.save matched on group and contact.

Parameter	Type	Required	Notes
group_id	integer	yes	Group id (from civicrm_list_groups).
contact_id	integer	yes	CiviCRM contact id.

WRITE: registers ONE contact for ONE event (a participant record). It does not check the event's capacity or fee, does not take payment and sends no confirmation e-mail. APIv4 Participant.create.

Parameter	Type	Required	Notes
event_id	integer	yes	Event id (from civicrm_list_events).
contact_id	integer	yes	CiviCRM contact id.
status	string	no	Participant status by name: Registered (default), Attended, Pending from pay later, ...
role	string	no	Role by name: Attendee (default), Volunteer, Host, Speaker.
source	string	no	Where it came from (free text).

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install CiviCRM MCP by usefulapi or to call it, at any volume.

ATool-list grade · score 93 / 100

Release 1.16.2 · scanned 7 Nov 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 1 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digest09a980d28c8f3b078d85b5824507218b619459d49bf6b72ecbd82986e8881b60

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
civicrm_whoami	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_search_contacts	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_get_contact	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_list_contact_notes	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_list_relationships	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_list_contributions	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_list_memberships	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_list_events	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_list_participants	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_list_activities	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_list_cases	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_list_groups	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_list_group_contacts	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_get_fields	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_list_entities	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_query	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
civicrm_create_contact	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
civicrm_update_contact	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
civicrm_add_contact_note	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
civicrm_log_activity	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
civicrm_record_contribution	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
civicrm_create_membership	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
civicrm_add_contact_to_group	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
civicrm_register_participant	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

flow-1

Untrusted input can drive an external action even though no sensitive source is exposed.

Supply chain and provenance

Integrityfirst-seen

Surface digest09a980d28c8f3b07

Scanned2026-11-07

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

Where are you running it?

Tool surface

Release history

CiviCRM MCP by usefulapi

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also