Name: Method CRM MCP by usefulapi
Author: usefulapi

Method CRM MCP by usefulapi

Query Method CRM customers, leads, activities and invoices; create and update records.

Tool-list grade A Remote · Streamable HTTP No auth needed 16 tools v1.16.1 MIT

No reviews yet by usefulapiGitHub The publisher’s own endpoint — this marketplace is not in the path

90/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Query Method CRM customers, leads, activities and invoices; create and update records.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http method-crm-mcp-by-usefulapi https://method-crm.usefulapi.io/mcp

# 2 — ask your agent for something these tools do
#   method_get_account, method_list_tables, method_get_table_fields and 13 more

Method CRM MCP by usefulapi costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

usefulapi563 servers

25 categories

All 563 servers

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Who the API key acts as: the Method user behind it (id and name; use the id as an assignee). Also a cheap check that the key works. GET /api/v1/me.

No parameter schema on file.

List every table on this Method account (standard QuickBooks/Xero/Method tables and custom ones) with its source and whether it can be created, updated or deleted. Tables differ per account: call this before querying a table you are unsure of. GET /api/v1/tables.

No parameter schema on file.

The exact field names of a table with type, whether required, creatable and mutable, and for dropdowns the table they reference. Use it to pick select fields and to name fields in create/update calls (names are case-sensitive and wrong ones are silently ignored). GET /api/v1/tables/{table}/fields.

Parameter	Type	Required	Notes
table	string	yes	Table name exactly as method_list_tables shows it, e.g. Customer, Contacts, Activity, Invoice, Estimate.

Query any table (Customer, Contacts, Activity, Invoice, Estimate, Item, Users, custom tables ...). Always pass select. filter uses OData-style syntax: strings in single quotes, dates as '2026-05-26T00:00:00Z' with Z or an offset, operators eq ne lt gt le ge and or not, functions contains(Name,'x') startswith() endswith(); e.g. "BalanceRemaining gt 0 and DueDate lt '2026-10-01T00:00:00Z'". `app

Parameter	Type	Required	Notes
table	string	yes	Table name exactly as method_list_tables shows it, e.g. Customer, Contacts, Activity, Invoice, Estimate.
select	array	no	Field names to return (case-sensitive, from method_get_table_fields). Without a select Method returns hundreds of columns per row.
filter	string	no	Filter expression, e.g. "IsLeadStatusOnly eq true and contains(Name,'Smith')".
orderby	string	no	Sort, e.g. "RecordID desc" or "TotalBalance desc,RecordID".
apply	string	no	Aggregation, e.g. "aggregate($count as Total)"; ignores paging.
top	integer	no	Rows per page, 1-100 (default 25).
skip	integer	no	Rows to skip (default 0). Pass the previous reply's next_skip.

How many records a table has, optionally matching a filter (same filter syntax as method_query_records). Cheap: call it before paging through a big table. GET /api/v1/tables/{table}/count.

Parameter	Type	Required	Notes
table	string	yes	Table name exactly as method_list_tables shows it, e.g. Customer, Contacts, Activity, Invoice, Estimate.
filter	string	no	Filter expression.

One record by RecordID from any table. Pass select to limit the columns; expand names a related CHILD table whose rows are embedded (e.g. InvoiceLine on Invoice; at most 50 rows); a parent such as a contact's Entity is not expanded: read it with its own RecordID (Entity_RecordID). GET /api/v1/tables/{table}/{recordId}.

Parameter	Type	Required	Notes
table	string	yes	Table name exactly as method_list_tables shows it, e.g. Customer, Contacts, Activity, Invoice, Estimate.
record_id	integer	yes	The record's RecordID.
select	array	no	Field names to return (case-sensitive, from method_get_table_fields). Without a select Method returns hundreds of columns per row.
expand	string	no	A child table to embed (a table with a dropdown field to this one), e.g. InvoiceLine on Invoice. At most 50 child rows.

Find customers and leads (the Customer table: Customers & Leads in Method) by text in the name or email, by lead/customer type, or list them all. Returns RecordID, name, email, phone, lead flag and status; override select for other fields (see method_get_table_fields with table Customer). Page with next_skip. GET /api/v1/tables/Customer.

Parameter	Type	Required	Notes
text	string	no	Matches records whose Name or Email contains this text (case-insensitive).
kind	string	no	leads = IsLeadStatusOnly true, customers = false (default all).
active_only	boolean	no	Only active records (IsActive true).
select	array	no	Field names to return (case-sensitive, from method_get_table_fields). Without a select Method returns hundreds of columns per row.
top	integer	no	Rows per page, 1-100 (default 25).
skip	integer	no	Rows to skip (default 0). Pass the previous reply's next_skip.

List contacts (people), optionally those of one customer/lead entity (entity_id = the Customer's RecordID) or matching text in name/email/phone. Returns RecordID, name, email, phone, the entity link and active flag. Use a Contact's RecordID (not the Customer's) when linking activities. GET /api/v1/tables/Contacts.

Parameter	Type	Required	Notes
entity_id	integer	no	Only contacts of this entity (the Customer/Vendor RecordID).
text	string	no	Matches contacts whose Name, Email or Phone contains this text.
select	array	no	Field names to return (case-sensitive, from method_get_table_fields). Without a select Method returns hundreds of columns per row.
top	integer	no	Rows per page, 1-100 (default 25).
skip	integer	no	Rows to skip (default 0). Pass the previous reply's next_skip.

List activities (calls, emails, to-dos, notes), newest first. Filter by the entity they belong to, the assigned user or a due-date window. The note text is in Comments. Override select for other fields (method_get_table_fields with table Activity). GET /api/v1/tables/Activity.

Parameter	Type	Required	Notes
entity_id	integer	no	Only activities of this entity (Customer RecordID).
assigned_to_id	integer	no	Only activities assigned to this user id (method_get_account or the Users table).
due_after	string	no	ISO 8601 date-time WITH a timezone (Z or +hh:mm), e.g. 2026-10-01T00:00:00Z.
due_before	string	no	ISO 8601 date-time WITH a timezone (Z or +hh:mm), e.g. 2026-10-01T00:00:00Z.
select	array	no	Field names to return (case-sensitive, from method_get_table_fields). Without a select Method returns hundreds of columns per row.
top	integer	no	Rows per page, 1-100 (default 25).
skip	integer	no	Rows to skip (default 0). Pass the previous reply's next_skip.

List invoices, newest first, optionally only unpaid ones (BalanceRemaining > 0), one customer's (customer_id = Customer RecordID) or created since a time. Returns reference number, customer, dates, amount and balance; override select for other fields. For totals use method_query_records with apply. GET /api/v1/tables/Invoice.

Parameter	Type	Required	Notes
customer_id	integer	no	Only invoices of this customer (Customer RecordID).
unpaid_only	boolean	no	Only invoices with an outstanding balance.
created_since	string	no	ISO 8601 date-time WITH a timezone (Z or +hh:mm), e.g. 2026-10-01T00:00:00Z.
select	array	no	Field names to return (case-sensitive, from method_get_table_fields). Without a select Method returns hundreds of columns per row.
top	integer	no	Rows per page, 1-100 (default 25).
skip	integer	no	Rows to skip (default 0). Pass the previous reply's next_skip.

List the files attached to a record (name, size, who added it, id). Use the id with method_get_file_url. GET /api/v1/files.

Parameter	Type	Required	Notes
table	string	yes	Table name exactly as method_list_tables shows it, e.g. Customer, Contacts, Activity, Invoice, Estimate.
record_id	integer	yes	The record's RecordID.

A temporary download link (valid 20 minutes) for an attached file, by the file id from method_list_files. The link works without the API key: share it only with someone allowed to see the file. GET /api/v1/files/{id}/url.

Parameter	Type	Required	Notes
file_id	string	yes	File id (a GUID).

WRITE: creates a record in Method's Customer table. is_lead true = a Customer Lead (does not sync to the accounting system); is_lead false = a full customer, which Method syncs to QuickBooks/Xero (it appears there too). Method also creates the primary Contact; its RecordID is returned as contact_id when it could be found (use it, not the customer id, to link activities). Name is required (for a pe

Parameter	Type	Required	Notes
name	string	yes	Display name of the customer or lead.
is_lead	boolean	yes	true = lead (not synced to accounting), false = customer (synced to QuickBooks/Xero).
first_name	string	no	—
last_name	string	no	—
email	string	no	—
phone	string	no	—
lead_status	string	no	Account-defined lead status, e.g. Open (leads only).
assigned_to_id	integer	no	Owner: a Method user id (method_get_account, or the Users table).
extra_fields	object	no	Field name -> value, exactly as method_get_table_fields names them (case-sensitive; a misspelled name is silently ignored by Method). For a dropdown/linked field send the integer id in its _RecordID

WRITE: logs an activity (call, email, to-do, note) on a customer/lead. entity_id is the Customer RecordID; contact_id is the Contact RecordID (not the Customer's; method_list_contacts finds it). The text goes in Comments. Prefer activity_type_id (read it from an existing activity of that type) over the caption activity_type: a caption that matches zero or several options is silently dropped. Metho

Parameter	Type	Required	Notes
entity_id	integer	yes	The Customer (entity) RecordID the activity belongs to, so it shows in its history.
comments	string	yes	The note body.
activity_type_id	integer	no	ActivityType_RecordID from an existing activity of the wanted type.
activity_type	string	no	Activity type caption, e.g. Call. Use only if you have no id.
contact_id	integer	no	The Contact RecordID.
assigned_to_id	integer	no	Method user id of the owner (method_get_account).
status_id	integer	no	ActivityStatus_RecordID (account-defined, e.g. Not Started / Completed).
due	string	no	Due/start time, YYYY-MM-DDTHH:mm:ss.

WRITE: creates a record in any table that allows it (method_list_tables shows canCreate), e.g. Estimate, Invoice, Item, Vendor. For customers/leads and activities use the dedicated tools. Field names are case-sensitive and a wrong one is silently ignored: read them with method_get_table_fields first, and send dropdown links as their _RecordID integer. Creating accounting records (Invoice, Estima

Parameter	Type	Required	Notes
table	string	yes	Table name exactly as method_list_tables shows it, e.g. Customer, Contacts, Activity, Invoice, Estimate.
fields	object	yes	Field name -> value, exactly as method_get_table_fields names them (case-sensitive; a misspelled name is silently ignored by Method). For a dropdown/linked field send the integer id in its _RecordID

WRITE: changes fields on one record (PATCH: only the fields you pass change). Field names are case-sensitive and Method silently ignores wrong or read-only names, so the reply re-reads the record and shows the stored values of the fields you sent: check them. Linked fields are changed through their _RecordID integer field. Updating accounting records (Customer, Invoice ...) makes Method sync the

Parameter	Type	Required	Notes
table	string	yes	Table name exactly as method_list_tables shows it, e.g. Customer, Contacts, Activity, Invoice, Estimate.
record_id	integer	yes	The record's RecordID.
fields	object	yes	Field name -> value, exactly as method_get_table_fields names them (case-sensitive; a misspelled name is silently ignored by Method). For a dropdown/linked field send the integer id in its _RecordID

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install Method CRM MCP by usefulapi or to call it, at any volume.

ATool-list grade · score 90 / 100

Release 1.16.1 · scanned 4 Nov 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score90

Findings0 threat · 2 capability

Capabilityhigh

Coveragemanifest

Verificationnot in this report

Surface digest52f3d08360cb7db513e0aa66fd416713e8f7bb3834493aa9e217c61440db1488

Score vectorthreat 100 → client 90

Term	Level	What it prices	Points
capability-exposure	high	capability blast radius (high) — client exposure if the model is manipulated	−6
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. high is the level these add up to.

Tool	Capability tags	Why the tag was assigned
method_get_account	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
method_list_tables	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
method_get_table_fields	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
method_query_records	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
method_count_records	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
method_get_record	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
method_search_customers	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
method_list_contacts	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
method_list_activities	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
method_list_invoices	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
method_list_files	sensitive-sourceuntrusted-input	sensitive-source: keyword "list_files"; untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
method_get_file_url	untrusted-input	untrusted-input: keyword "download", declares openWorldHint: true (interacts with entities outside the server)
method_create_customer	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
method_create_activity	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
method_create_record	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
method_update_record	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

method_count_records → method_list_files → method_create_activity

A cross-tool exfiltration chain exists: method_count_records → method_list_files → method_create_activity.

Supply chain and provenance

Integrityfirst-seen

Surface digest52f3d08360cb7db5

Scanned2026-11-04

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

Where are you running it?

Tool surface

Release history

Method CRM MCP by usefulapi

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also