Atlas / MCP servers / selerity / accelo-mcp

accelo-mcpCAUTION

Name: accelo-mcp
Author: selerity

mcp/selerity/accelo-mcp

MCP server by selerity · accelo · ai · crm · Audited 2026-10-11

⚑ Report / re-scan Source ↗

Unofficial MCP server for the Accelo CRM platform

Verdict

CAUTION

Grade

Trust score

89 /100

Exposed tools

200 151r · 53w · 15d

Transport

streamable-http

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

An unofficial Model Context Protocol server for the Accelo CRM platform. It exposes Accelo data and operations to MCP-compatible AI assistants through the documented Accelo REST API.

This project is not affiliated with or endorsed by Accelo. Users are responsible for their Accelo account, OAuth application, permissions, and data handling.

Installation

With `uvx`

The recommended installation for MCP hosts is:

{
"mcpServers": {
"accelo": {
"command": "uvx",
"args": ["accelo-mcp"],
"env": {
"ACCELO_DEPLOYMENT": "your-deployment",
"ACCELO_CLIENT_ID": "your-client-id",
"ACCELO_CLIENT_SECRET": "your-client-secret"
}
}
}
}

To pin a release:

"args": ["accelo-mcp==0.1.0"]

uvx installs the package into an isolated environment and runs the accelo-mcp command.

With `pip`

python3 -m pip install accelo-mcp
accelo-mcp

From source

git clone 
cd accelo-mcp
python3 -m venv .venv
source .venv/bin/activate
pip install -e ".[dev]"

Configuration

Copy .env.example to .env, or provide these variables through the MCP host:

Read from source at commit 374496188c66OBSERVED · 2026-10-11

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add accelo-mcp --env ACCELO_AUTH_TYPE=${ACCELO_AUTH_TYPE} --env ACCELO_CLIENT_SECRET=${ACCELO_CLIENT_SECRET} -- uvx accelo-mcp

claude-desktop

{
  "mcpServers": {
    "accelo-mcp": {
      "command": "uvx",
      "args": [
        "accelo-mcp"
      ],
      "env": {
        "ACCELO_AUTH_TYPE": "${ACCELO_AUTH_TYPE}",
        "ACCELO_CLIENT_SECRET": "${ACCELO_CLIENT_SECRET}"
      }
    }
  }
}

Exposed tools (200)

151 read · 53 write · 15 destructive. Blast radius: 15 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`accelo_add_company_manager`	write	Add a staff member as a manager of a company.
`accelo_cancel_timer`	destructive	Cancel and delete a timer.
`accelo_close_contract_period`	read	Close a contract period.
`accelo_convert_time_external_to_activity`	read	Convert a time external (imported calendar appointment) into an activity.
`accelo_count_activities`	read	Count activities matching the given filters.
`accelo_count_activity_threads`	read	Count activity threads matching the given filters.
`accelo_count_addresses`	read	Count addresses matching the given filters.
`accelo_count_affiliations`	read	Count affiliations matching the given filters.
`accelo_count_assets`	read	Count assets matching the given filters.
`accelo_count_checklists`	read	Count checklists matching the given filters.
`accelo_count_companies`	read	Count companies matching the given filters.
`accelo_count_contacts`	read	Count contacts matching the given filters.
`accelo_count_contracts`	read	Count contracts matching the given filters.
`accelo_count_contributor_types`	read	Count contributor types matching the given filters.
`accelo_count_contributors`	read	Count contributors matching the given filters.
`accelo_count_divisions`	read	Count divisions matching the given filters.
`accelo_count_enum`	read	Count an object
`accelo_count_expenses`	read	Count expenses matching the given filters.
`accelo_count_groups`	read	Count groups matching the given filters.
`accelo_count_holidays`	read	Count holidays matching the given filters.
`accelo_count_interactions`	read	Count the interactions on a single activity.
`accelo_count_invoice_line_items`	read	Count invoice line items matching the given filters (Beta).
`accelo_count_invoices`	read	Count invoices matching the given filters.
`accelo_count_issues`	read	Count issues matching the given filters.
`accelo_count_jobs`	read	Count jobs matching the given filters.
`accelo_count_ledgers`	read	Count ledgers matching the given filters.
`accelo_count_milestones`	read	Count milestones matching the given filters.
`accelo_count_object_budgets`	read	Count object budgets matching the given filters.
`accelo_count_payments`	read	Count payments matching the given filters.
`accelo_count_prospects`	read	Count prospects matching the given filters.
`accelo_count_purchases`	read	Count purchases matching the given filters.
`accelo_count_quotes`	read	Count quotes matching the given filters.
`accelo_count_rates`	read	Count all rates on the deployment.
`accelo_count_referrals`	read	Count referrals matching the given filters.
`accelo_count_requests`	read	Count requests matching the given filters.
`accelo_count_resources`	read	Count resources (attachments) matching the given filters.
`accelo_count_segmentations`	read	Count segmentations matching the given filters.
`accelo_count_signoffs`	read	Count signoffs matching the given filters.
`accelo_count_skills`	read	Count skills matching the given filters.
`accelo_count_staff`	read	Count staff members matching the given filters.
`accelo_count_tags`	read	Count tags matching the given filters.
`accelo_count_tasks`	read	Count tasks matching the given filters.
`accelo_count_taxes`	read	Count tax codes matching the given filters.
`accelo_count_time_externals`	read	Count time externals matching the given filters.
`accelo_create_activity`	write	Create a new activity (note, email, call, or meeting).
`accelo_create_address`	write	Create a new address.
`accelo_create_affiliation`	write	Create a new affiliation (link a contact to a company).
`accelo_create_asset_link`	write	Create an asset link between an asset and another object.
`accelo_create_checklist`	write	Create a new checklist.
`accelo_create_company`	write	Create a new company in Accelo.
`accelo_create_contact`	write	Create a new contact (also creates an affiliation to the company).
`accelo_create_expense`	write	Create a new expense.
`accelo_create_holiday`	write	Create a new holiday (Beta).
`accelo_create_issue`	write	Create a new issue (ticket).
`accelo_create_job`	write	Create a new job (project).
`accelo_create_object_budget_material`	write	Create a new material line item on an object budget.
`accelo_create_prospect`	write	Create a new prospect (sale).
`accelo_create_quote`	write	Create a new quote (proposal).
`accelo_create_request`	write	Create a new request.
`accelo_create_signoff_recipient`	write	Add a recipient to a signoff.
`accelo_create_skill`	write	Create a new skill.
`accelo_create_staff`	write	Create a new staff member (user) on the Accelo deployment.
`accelo_create_tag`	write	Create a new tag.
`accelo_create_task`	write	Create a new task.
`accelo_create_timer`	write	Create a new timer.
`accelo_create_webhook_subscription`	write	Create a webhook subscription.
`accelo_deactivate_contact`	write	Deactivate a contact (set standing to inactive).
`accelo_delete_activity`	destructive	Delete an activity.
`accelo_delete_affiliation`	destructive	Delete an affiliation.
`accelo_delete_asset_link`	destructive	Delete an asset link (does NOT delete the asset itself).
`accelo_delete_checklist`	destructive	Delete a checklist.
`accelo_delete_company`	destructive	Delete a company from Accelo.
`accelo_delete_expense`	destructive	Delete an expense.
`accelo_delete_holiday`	destructive	Delete a holiday (Beta).
`accelo_delete_issue`	destructive	Delete an issue.
`accelo_delete_job`	destructive	Delete a job.
`accelo_delete_prospect`	destructive	Delete a prospect.
`accelo_delete_signoff_recipient`	destructive	Delete a signoff recipient.
`accelo_delete_timer`	destructive	Delete a timer.
`accelo_delete_webhook_subscription`	destructive	Delete a webhook subscription.
`accelo_describe_object`	read	Get field descriptions and examples for an Accelo object type.
`accelo_download_resource_url`	read	Get the download URL for a resource.
`accelo_get_activity`	read	Get a single activity by ID.
`accelo_get_activity_time_allocated`	write	Get aggregate time allocated across a set of activities.
`accelo_get_address`	read	Get a single address by ID.
`accelo_get_affiliation`	read	Get a single affiliation by ID.
`accelo_get_asset`	read	Get a single asset by ID.
`accelo_get_asset_type`	read	Get a single asset type by ID.
`accelo_get_checklist`	read	Get a single checklist by ID.
`accelo_get_company`	read	Get a single company by ID.
`accelo_get_contact`	read	Get a single contact by ID.
`accelo_get_context`	read	Get the Accelo object model, relationships, and query guide.
`accelo_get_contract`	read	Get a single contract by ID.
`accelo_get_contract_period`	read	Get a single contract period by ID.
`accelo_get_contributor`	read	Get a single contributor by ID.
`accelo_get_contributor_type`	read	Get a single contributor type by ID.
`accelo_get_current_staff`	read	Get the currently authenticated staff member (whoami).
`accelo_get_division`	read	Get a single division by ID (Beta).
`accelo_get_enum`	read	Get a single enumeration value by ID (e.g. one issue status).
`accelo_get_expense`	read	Get a single expense by ID.
`accelo_get_extension_values`	read	Get extension field values for a specific object.
`accelo_get_group`	read	Get a single group by ID (Beta).
`accelo_get_holiday`	read	Get a single holiday by ID (Beta).
`accelo_get_invoice`	read	Get a single invoice by ID.
`accelo_get_invoice_line_item`	read	Get a single invoice line item by ID (Beta).
`accelo_get_issue`	read	Get a single issue (ticket) by ID.
`accelo_get_job`	read	Get a single job (project) by ID.
`accelo_get_ledger`	read	Get a single ledger by ID.
`accelo_get_milestone`	read	Get a single milestone by ID.
`accelo_get_object_budget`	read	Get a single object budget by ID.
`accelo_get_payment`	read	Get a single payment by ID.
`accelo_get_profile_values`	read	Get profile field values for a specific object.
`accelo_get_prospect`	read	Get a single prospect (sale) by ID.
`accelo_get_purchase`	read	Get a single purchase by ID.
`accelo_get_quote`	read	Get a single quote by ID.
`accelo_get_rate`	read	Get a single rate by ID.
`accelo_get_referral`	read	Get a single referral by ID.
`accelo_get_request`	read	Get a single request by ID.
`accelo_get_resource`	read	Get a single resource (attachment) by ID.
`accelo_get_segmentation`	read	Get a single segmentation by ID.
`accelo_get_signoff`	read	Get a single signoff by ID.
`accelo_get_staff`	read	Get a single staff member by ID.
`accelo_get_task`	read	Get a single task by ID.
`accelo_get_tax`	read	Get a single tax code by ID.
`accelo_get_time_external`	read	Get a single time external by ID.
`accelo_get_timer`	read	Get a single timer by ID.
`accelo_list_activities`	read	List activities (notes, emails, calls, meetings) from Accelo.
`accelo_list_activity_threads`	read	List activity threads from Accelo.
`accelo_list_addresses`	read	List addresses from Accelo.
`accelo_list_affiliations`	read	List affiliations (contact-company links) from Accelo.
`accelo_list_asset_links`	read	List asset links (joins between an asset and another object).
`accelo_list_asset_types`	read	List asset types from Accelo.
`accelo_list_assets`	read	List assets from Accelo.
`accelo_list_checklists`	read	List checklists from Accelo.
`accelo_list_collections`	read	List resource collections for an object.
`accelo_list_companies`	read	List companies from Accelo with optional filtering, field selection, and search.
`accelo_list_company_managers`	read	List the managers (staff) of a company.
`accelo_list_contacts`	read	List contacts from Accelo.
`accelo_list_contract_periods`	read	List contract periods for a specific contract.
`accelo_list_contracts`	read	List contracts (retainers) from Accelo.
`accelo_list_contributor_types`	read	List contributor types from Accelo.
`accelo_list_contributors`	read	List contributors from Accelo.
`accelo_list_divisions`	read	List divisions from Accelo (Beta).
`accelo_list_enum`	read	List an object
`accelo_list_expenses`	read	List expenses from Accelo.
`accelo_list_extension_fields`	read	List extension fields available for an object type.
`accelo_list_filters`	read	List saved filters on the deployment.
`accelo_list_groups`	read	List staff groups from Accelo (Beta).
`accelo_list_holidays`	read	List holidays from Accelo (Beta).
`accelo_list_interactions`	read	List the interactions (senders/recipients) on a single activity.
`accelo_list_invoice_line_items`	read	List invoice line items from Accelo (Beta).
`accelo_list_invoices`	read	List invoices from Accelo.
`accelo_list_issues`	read	List issues (tickets) from Accelo.
`accelo_list_jobs`	read	List jobs (projects) from Accelo.
`accelo_list_ledgers`	read	List account ledgers from Accelo.
`accelo_list_milestones`	read	List milestones from Accelo.
`accelo_list_object_budget_materials`	read	List materials (line items) from object budgets.
`accelo_list_object_budget_services`	read	List services (time-based line items) from object budgets.
`accelo_list_object_budget_templates`	read	List object budget templates from Accelo.
`accelo_list_object_budgets`	read	List object budgets from Accelo.
`accelo_list_object_filters`	read	List saved filters for a particular object type.
`accelo_list_payments`	read	List payments from Accelo.
`accelo_list_profile_fields`	read	List profile fields available for an object type.
`accelo_list_progressions`	read	List available progressions for an object (possible status transitions).
`accelo_list_prospects`	read	List prospects (sales) from Accelo.
`accelo_list_purchases`	read	List purchases from Accelo.
`accelo_list_quotes`	read	List quotes (proposals) from Accelo.
`accelo_list_rates`	read	List rates from Accelo.
`accelo_list_referrals`	read	List referrals from Accelo.
`accelo_list_request_threads`	read	List request threads on the deployment.
`accelo_list_requests`	read	List requests from Accelo.
`accelo_list_resources`	read	List resources (attachments) from Accelo.
`accelo_list_segmentations`	read	List segmentations (categories) from Accelo.
`accelo_list_signoffs`	read	List signoffs from Accelo.
`accelo_list_skills`	read	List skills from Accelo.
`accelo_list_staff`	read	List staff members from Accelo.
`accelo_list_staff_memberships`	read	List staff group memberships from Accelo.
`accelo_list_tags`	read	List tags from Accelo.
`accelo_list_tasks`	read	List tasks from Accelo.
`accelo_list_taxes`	read	List tax codes from Accelo.
`accelo_list_thread_activities`	read	List all activities within a single thread.
`accelo_list_time_externals`	read	List time externals (imported calendar appointments) from Accelo.
`accelo_list_timers`	read	List timers from Accelo (current user
`accelo_list_webhook_subscription_types`	read	List available webhook subscription event types.
`accelo_list_webhook_subscriptions`	read	List webhook subscriptions for the current user.
`accelo_pause_timer`	read	Pause a running timer.
`accelo_progress_task_to_done`	read	Auto-progress a task
`accelo_progress_task_to_start`	write	Auto-progress a task
`accelo_rate_limit_status`	read	Get current API rate limit status.
`accelo_redraft_signoff`	read	Redraft a signoff — return a sent signoff to draft standing.
`accelo_remove_company_manager`	destructive	Remove a manager from a company.
`accelo_reopen_contract_period`	read	Reopen a previously closed contract period.
`accelo_run_filter`	write	Run a saved filter and return the objects it matches.
`accelo_run_progression`	write	Auto-run a progression to advance an object
`accelo_send_signoff`	write	Send a signoff to its recipients.
`accelo_set_extension_value`	write	Set an extension field value on an object.
`accelo_set_profile_value`	write	Set a profile field value on an object.
`accelo_start_timer`	write	Start a timer.
`accelo_update_activity`	write	Update an existing activity.
`accelo_update_address`	write	Update an existing address.

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: declared (4 observation(s))
Shell: declared (1 observation(s))
Dependencies: pinned
Secrets in source: none-found

Findings (5)

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95

src/accelo_mcp/tools/__init__.py:69

module = importlib.import_module(f".{module_name}", package=__name__)

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

accelo_cancel_timer, accelo_delete_activity, accelo_delete_affiliation, accelo_delete_asset_link, accelo_delete_checklist, accelo_delete_company, accelo_delete_expense, accelo_delete_holiday, accelo_d

Why it matters. 15 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

README.md:116

This listens on `http://127.0.0.1:3000/mcp` by default. To serve from inside a

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

tests/test_auth.py:469

urllib.request.urlopen("http://127.0.0.1:19876/callback?code=test-auth-code-xyz")

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

tests/test_auth.py:501

"http://127.0.0.1:19877/callback?error=access_denied&error_description=User+denied"

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha 374496188c66full audit observations/trust-audit/mcp-server/selerity__accelo-mcp.json · Report an issue / request a re-scan

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

Date	Source	Verdict	Grade	Score	Change
2026-10-11	`374496188c66`	CAUTION	B	89	first audit

Questions

What is the accelo-mcp MCP server?

Unofficial MCP server for the Accelo CRM platform

What tools does accelo-mcp expose?

200 in total: 151 read-only, 53 that write, and 15 that can delete or overwrite (accelo_cancel_timer, accelo_delete_activity, accelo_delete_affiliation, accelo_delete_asset_link, accelo_delete_checklist). Every one is listed on this page with its risk.

Is accelo-mcp safe to connect to an agent?

With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 15 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does accelo-mcp need?

It reads ACCELO_AUTH_TYPE and ACCELO_CLIENT_SECRET from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does accelo-mcp run?

It speaks streamable-http, so it runs as a service you connect to over the network. It is published on PyPI as accelo-mcp.

How current is this page?

The grade is for one exact copy of the source (374496188c66), read on 2026-10-11. The repository is watched and re-audited when it changes.

Source	Selerity/accelo-mcp
PyPI	`accelo-mcp`
Transports	streamable-http
Credentials it reads	`ACCELO_AUTH_TYPEACCELO_CLIENT_SECRET`
License	MIT
Activity	pushed 0d ago

accelo-mcpCAUTION

Overview

Installation

With uvx

With pip

From source

Configuration

Connect

Exposed tools (200)

Trust audit

What the source does

Findings (5)

Audit history

Questions

With `uvx`

With `pip`