Follow Up BossSAFE
Talk to your Follow Up Boss CRM in plain English. 160-tool MCP server for realtors, built by a working broker (Neuhaus Realty Group, Austin TX). Free self-host, ELv2 licensed.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Talk to your Follow Up Boss CRM in plain English from Claude AI (or any MCP-compatible tool). 160 tools covering 100% of the official API, plusabout/helpmeta tools. Built by a working real estate broker, not a dev shop.
Built by [Ed Neuhaus](https://neuhausre.com) — broker / owner at [Neuhaus Realty Group](https://neuhausre.com) in Austin, Texas. Licensed real estate broker since 2009, 19+ years in the business. I built this because I wanted to talk to my own FUB account in plain English. It's free for self-host use under the Elastic License 2.0.
Other things I'm working on
- [EdNeuhaus.com](https://edneuhaus.com) — My builder profile, more on how this one's built: edneuhaus.com/projects/fub-mcp/
- [NeuhausRE.com](https://neuhausre.com) — My brokerage's site, AI-powered home search
- [StaySTRA.com](https://staystra.com) — Short-term rental investment analyzer
- [Austin MLS MCP](https://github.com/mindwear-capitian/austin-mls-mcp) — hosted MLS MCP server (live MLS data via Claude, ChatGPT, Perplexity, and more)
- [Kendall Creek Properties](https://kendallcreekproperties.com) — Sister brokerage
Want to thank me?
- Got a real estate referral? I take referrals from licensed agents in any state for clients moving to or from Texas. Reach out via [neuhausre.com/contact](https://neuhausre.com/contact).
- Write about it. Blog post, LinkedIn, X — tag me and link to neuhausre.com.
- Open an issue or PR if you find a bug or build something useful.
WARNING: This tool has full read AND write access to your Follow Up Boss account. It can create, update, and delete contacts, deals, tasks, notes, and other data in your CRM. Strongly recommended: back up your FUB data before turning this loose, unless you really know what you're doing. Always review AI-suggested actions before confirming changes to live
cfc537fadf49OBSERVED · 2026-10-09Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add followupboss-mcp-server --env FUB_API_KEY=${FUB_API_KEY} --env FUB_SYSTEM_KEY=${FUB_SYSTEM_KEY} --env MCP_AUTH_DISABLED=${MCP_AUTH_DISABLED} --env MCP_AUTH_PASSWORD=${MCP_AUTH_PASSWORD} -- npx -y [email protected]{
"mcpServers": {
"followupboss-mcp-server": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"FUB_API_KEY": "${FUB_API_KEY}",
"FUB_SYSTEM_KEY": "${FUB_SYSTEM_KEY}",
"MCP_AUTH_DISABLED": "${MCP_AUTH_DISABLED}",
"MCP_AUTH_PASSWORD": "${MCP_AUTH_PASSWORD}"
}
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
overlayDemo | read | test |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (9)
const API_KEY = 'fka_test_secret_value';
@modelcontextprotocol/sdk, axios, express
evaluated as `!== 'false'`: unset ⇒ **SAFE**. Opt into Full Access explicitly
- Better 403 error surface: when FUB returns 403 Forbidden the MCP response now includes a `hint` listing the tools that commonly require elevated permissions (`createTextMessage`, `listAutomations`,
- **Ask you to choose Safe Mode or Full Access**
#### Safe Mode vs Full Access
| | Safe Mode (default) | Full Access |
- Auto-load `.env` for standalone testing
Yes, Claude can create, update, and delete records in your FUB account. Claude will typically confirm before making changes, especially for deletions. If you want read-only access, you can create a re
Gates applied: no_behavioural_pass.
cfc537fadf49full audit observations/trust-audit/mcp-server/mindwear-capitian__follow-up-boss.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | cfc537fadf49 | SAFE | B | 89 | first audit |
Questions
What is the Follow Up Boss MCP server?
Talk to your Follow Up Boss CRM in plain English. 160-tool MCP server for realtors, built by a working broker (Neuhaus Realty Group, Austin TX). Free self-host, ELv2 licensed.
What tools does Follow Up Boss expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Follow Up Boss safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Follow Up Boss need?
It reads FUB_API_KEY, FUB_SYSTEM_KEY, MCP_AUTH_DISABLED, MCP_AUTH_PASSWORD, MCP_BEARER_TOKEN and MCP_OAUTH_STORE_PATH from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Follow Up Boss run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as followupboss-mcp-server at 1.5.3.
How current is this page?
The grade is for one exact copy of the source (cfc537fadf49), read on 2026-10-09. The repository is watched and re-audited when it changes.