mcp-crm

A learning project: a Model Context Protocol server that exposes a CRM to an MCP client over stdio.

Sign-in goes through Microsoft Entra using the device-code flow. The resulting identity token is exchanged for a CRM access token, so CRM queries run as the signed-in user and return only what that user is allowed to see.

Requirements

• Node.js 20+

• An Entra app registration with the device-code (public client) flow enabled

• A CRM API that accepts an Entra token at POST /api/auth/entra and serves GET /api/accounts

Related MCP server: M365 Copilot Web Bridge

Setup

npm install

Create a .env in the project root:

ENTRA_CLIENT_ID=<your app registration's client id>
ENTRA_TENANT_ID=<your directory tenant id>
CRM_API_BASE_URL=https://your-crm.example.com

All three are required — the server throws on startup if any is missing. .env is gitignored; never commit it.

Running

npx tsx src/index.ts     # run directly
npx tsc                  # type-check and build to dist/

The server speaks MCP over stdio, so it is normally launched by a client rather than by hand. To register it with Claude Code:

{
  "mcpServers": {
    "crm": {
      "command": "npx",
      "args": ["tsx", "/absolute/path/to/mcp-crm/src/index.ts"]
    }
  }
}

Log output goes to stderr, since stdout carries the MCP protocol.

Tools

Sign-in flow

start_crm_login cannot block until Entra finishes, so it is split in two:

1. Call start_crm_login. It returns the device code and the URL to open.

2. Complete sign-in in the browser.

3. Call crm_login_status to confirm. Once it reports a signed-in user, search_crm_accounts will work.

The token is held in memory only — restarting the server means signing in again.

License

ISC