Skip to main content
Glama
TrueDevs-Inc

Frappe MCP

by TrueDevs-Inc
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Frappe MCP

A permission-aware remote Model Context Protocol server for Frappe v15.

Each person connects with their own Frappe account. The server issues MCP-only tokens and executes tools under that person's normal Frappe roles and User Permissions. Client applications never receive the person's ERP password.

Endpoints

  • MCP: /api/method/frappe_mcp.api.handle

  • Authorization: /api/method/frappe_mcp.oauth.authorize

  • Token exchange: /api/method/frappe_mcp.oauth.token

  • Protected-resource metadata: /.well-known/oauth-protected-resource

  • Authorization-server metadata: /.well-known/oauth-authorization-server

Related MCP server: Frappe MCP Server

Install

cd /home/frappe/frappe-bench
bench get-app https://github.com/TrueDevs-Inc/frappe-mcp.git
bench --site your-site.example install-app frappe_mcp
bench --site your-site.example set-config frappe_mcp_enabled true
bench --site your-site.example migrate
bench build --app frappe_mcp

The two /.well-known URLs must be routed to the corresponding Frappe methods by the site's reverse proxy. See docs/operations.md.

Connect

See docs/connect.md for Claude and ChatGPT setup.

Security

  • Tokens are accepted only by the MCP endpoint.

  • Authorization codes and access tokens are stored as hashes.

  • Authorization Code with PKCE S256 is mandatory.

  • The OAuth resource must exactly match the configured MCP endpoint.

  • Frappe permissions are re-applied to every tool call.

This project is experimental. Test with non-administrator accounts and harmless records before enabling it for production workflows.

Write tools are hidden and mcp:write authorization is rejected unless an operator explicitly sets frappe_mcp_write_enabled to true. Keep the default read-only mode until cross-user permission tests pass.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Related MCP Connectors

  • odooOAuth
    com.odooconsole

    Odoo ERP for AI agents: hosted OAuth endpoint, gated writes, one endpoint for every instance.

    ERP Systems
    13
  • Odoo MCP by bancadaOAuth
    es.bancada

    Connect any AI assistant to Odoo 16–19 via OAuth 2.0 + PKCE. 400 free calls, no local install.

    ERP Systems
    1
  • HubSpotOAuth
    com.hubspot.app

    The HubSpot MCP Server acts as a bridge that enables AI assistants and Large Language Models to securely interact with HubSpot CRM data through natural conversation, without requiring users to understand complex API structures. It provides read-only access to standard CRM objects (contacts, companies, deals, tickets, products, invoices, and more) and their associations, secured via OAuth 2.0, allowing AI agents to perform tasks like summarizing deals, fetching company updates, and looking up record changes.

    Customer Data PlatformsDatabasesMarketing
    3
  • SentryAOAuth
    dev.sentry.mcp

    Enable secure connectivity between Sentry issues and debugging data, and LLM clients, using a Model Context Protocol (MCP) server.

    MonitoringDeveloper ToolsObservability
    3

Related MCP Servers

  • ERPNext MCP Server

    jagmohan0908
    A
    license
    B
    quality
    D
    maintenance
    Integrates with ERPNext/Frappe API to enable AI assistants to create, read, update, and list documents, run reports, and authenticate via the Model Context Protocol.
    6
    MIT

  • Frappe MCP Server

    Codenetic-tech
    A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI models to securely interact with Frappe Framework/ERPNext instances, supporting document CRUD, RPC methods, file management, workflows, reporting, and more via the Model Context Protocol.
    238 npm
    ISC

  • ERPNext MCP Server

    rizkyurdhan
    A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI assistants to interact with ERPNext data and functionality through the Model Context Protocol, including document CRUD, report running, and API method calls.
    MIT

  • Synapse

    erpuae
    A
    license
    Not graded
    quality
    A
    maintenance
    Enables LLM clients to securely read and write Frappe/ERPNext data under a real user's permissions, with audited calls and granular access control.
    AGPL 3.0