Kontur.Elba MCP
This MCP server lets you manage Kontur.Elba data through a whitelisted Elba Public API, using exposed MCP tools for discovery and requests.
List available API operations (
elba_list_operations)Describe operation parameters, bodies, and responses (
elba_describe_operation)Get organizations available for the API key (
elba_list_organizations)Execute any allowed GET/POST/PUT/DELETE operation (
elba_request)Create and view bank accounts
Create, search, and view contractors
Create, update, search, and view products
Work with document news and subscriptions
Create bills, acts, waybills, and UPD documents
Check long-running operations
Create, modify, get, and delete public links
Get document templates
Secure key handling: API key sent only via X-Kontur-ApiKey header; routes restricted to the OpenAPI schema
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Kontur.Elba MCPПокажи мои организации в Эльбе"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Kontur.Elba MCP
MCP-сервер для управления данными в Контур.Эльбе через официальный Elba Public API.
Сервер работает локально по stdio, передаёт API-ключ только в заголовке X-Kontur-ApiKey и разрешает запросы только к операциям из приложенной OpenAPI-схемы.
Возможности
получение доступных организаций;
создание и просмотр банковских счетов;
создание, поиск и просмотр контрагентов;
создание, обновление, поиск и просмотр товаров;
работа с новостями по документам и подписками;
создание счетов, актов, накладных и УПД;
проверка долгих операций;
создание, изменение, получение и удаление публичных ссылок;
получение шаблонов документов;
просмотр параметров каждой операции прямо через MCP.
Полный контракт API сохранён в openapi.json.
Related MCP server: bokio-mcp
1. Получите API-ключ
Откройте Эльбу.
Нажмите «Настройки и оплата» → «Настройки сервиса».
Откройте вкладку API.
Нажмите «Выпустить ключ».
Скопируйте ключ и сохраните его в менеджере секретов: повторно Эльба его не покажет.
Не добавляйте ключ в код, .env в Git или переписку. Если ключ раскрыт, отзовите его в Эльбе и выпустите новый.
2. Установите и соберите сервер
Требуется Node.js 20 или новее.
git clone https://github.com/apo100l/elba-kontur-mcp.git
cd elba-kontur-mcp
npm install
npm run buildПосле публикации можно установить пакет глобально без клонирования:
npm install --global elba-kontur-mcpВ конфигурации MCP в этом случае используйте команду elba-kontur-mcp без args.
3. Подключите MCP-клиент
Укажите абсолютный путь к dist/index.js и передайте ключ через окружение.
Codex
Добавьте сервер в ~/.codex/config.toml:
[mcp_servers.kontur_elba]
command = "node"
args = ["/absolute/path/to/elba-kontur-mcp/dist/index.js"]
[mcp_servers.kontur_elba.env]
ELBA_API_KEY = "ваш-api-ключ"После изменения конфигурации перезапустите Codex.
Claude Desktop
Добавьте сервер в claude_desktop_config.json:
{
"mcpServers": {
"kontur-elba": {
"command": "node",
"args": ["/absolute/path/to/elba-kontur-mcp/dist/index.js"],
"env": {
"ELBA_API_KEY": "ваш-api-ключ"
}
}
}
}Перезапустите Claude Desktop.
Другой MCP-клиент
Запускаемая команда:
ELBA_API_KEY="ваш-api-ключ" node /absolute/path/to/elba-kontur-mcp/dist/index.jsstdout занят протоколом MCP. Диагностические сообщения сервер выводит только в stderr.
Инструменты MCP
Инструмент | Назначение |
| Список разрешённых операций; поддерживает поиск |
| Параметры, JSON-тело и ответы операции |
| Быстро получить организации по API-ключу |
| Выполнить любую операцию из OpenAPI-схемы |
Перед созданием или изменением данных сначала вызовите elba_describe_operation, чтобы получить точную структуру тела запроса.
Примеры запросов ассистенту:
«Покажи мои организации в Эльбе».
«Найди операции для работы с контрагентами».
«Покажи схему создания счёта, но пока ничего не создавай».
«Создай контрагента в организации … с такими реквизитами: …».
Настройки окружения
Переменная | Обязательна | Значение по умолчанию |
| да | — |
| нет |
|
| нет |
|
ELBA_API_BASE_URL полезен для тестового прокси. Не меняйте его на недоверенный адрес: сервер отправляет туда API-ключ.
Разработка
npm run check
npm testПри обновлении API замените openapi.json, затем выполните проверку и тесты. Клиент автоматически использует список маршрутов из схемы.
Версионирование и публикация
Проект использует Semantic Versioning:
patch— исправления без изменения совместимости;minor— новые обратно совместимые возможности;major— несовместимые изменения MCP-инструментов или конфигурации.
Перед выпуском обновите CHANGELOG.md, убедитесь, что ветка main чистая, затем выберите тип версии:
npm run release:patch
# или npm run release:minor
# или npm run release:majorКоманда обновит версии в package.json и package-lock.json, создаст коммит и Git-тег. Отправьте их вместе:
git push origin main --follow-tagsТег vX.Y.Z запускает workflow .github/workflows/publish.yml: он сверяет тег с версией пакета, выполняет тесты и публикует пакет с provenance.
Для публикации добавьте в настройках GitHub-репозитория секрет Actions NPM_TOKEN с npm automation/granular access token. Ограничьте токен только этим пакетом и правом публикации.
Безопасность
ключ не записывается в логи и ответы MCP;
произвольные URL и неизвестные маршруты отклоняются;
сетевой запрос ограничен таймаутом;
ошибки API возвращаются без заголовков запроса;
.envисключён из Git.
Любой MCP-инструмент с операциями POST, PUT или DELETE может менять данные в Эльбе. Проверяйте организацию, идентификаторы и тело запроса перед подтверждением действия.
Лицензия
Available Tools
4 toolselba_describe_operationОписание операции ЭльбыB
Возвращает параметры, тело запроса и ответы конкретной операции из OpenAPI-схемы.
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Фактический путь или шаблон, например /v1/organizations | |
| method | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses the core behavior — returning parameters, request body, and responses from the OpenAPI schema — which makes the read-only introspection nature evident. However, it does not cover error behavior (e.g., unknown path/method combination) or explicitly confirm the absence of side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence that states the verb and the returned content with zero filler. It is efficiently structured, though it leaves room for a usage hint without becoming verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a low-complexity tool (two required scalar parameters, one enum, no output schema), the description plus schema cover the essentials for calling it correctly. The main gaps are error behavior and routing guidance among siblings; without annotations, slightly more disclosure would make it complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 50%: path has a description and example, while method has only an enum with no description. The description adds only the framing that both parameters together identify 'конкретную операцию' (a specific operation), which largely restates what the schema already implies. It does not meaningfully compensate for the undocumented method parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Возвращает' — returns) and a specific resource (parameters, request body, and responses of a specific operation from the OpenAPI schema). The word 'конкретной' (specific) signals a single-operation lookup, which implicitly separates it from the listing sibling elba_list_operations and the execution sibling elba_request, though no sibling is named explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit when-to-use or when-not-to-use guidance is given. The intended workflow — describing a specific operation discovered via elba_list_operations and before calling elba_request — is only implied by the tool name and sibling set, not stated in the description.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
elba_list_operationsСписок операций ЭльбыA
Показывает доступные методы и маршруты Elba Public API из встроенной OpenAPI-схемы.
| Name | Required | Description | Default |
|---|---|---|---|
| search | No | Необязательный поиск по маршруту или описанию |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the transparency burden. It reveals that this is a read-only listing of methods/routes derived from a built-in OpenAPI schema, which implies no destructive side effects. It could be more explicit about return format or search behavior, but the core behavioral profile is clear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence conveys the action, object, and source with no wasted words. It is appropriately sized for the tool's simplicity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter introspection tool with no output schema, the description and parameter schema are sufficient to call it. The main gap is the lack of explicit routing to sibling tools, but that is more about usage guidance than completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool description does not describe the 'search' parameter beyond naming the action, but the input schema already provides a complete description of it (optional search by route or description). With 100% schema coverage, the baseline 3 applies and no compensation is needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('shows') and a concrete resource ('available methods and routes of the Elba Public API'), and it names the source ('built-in OpenAPI schema'). This clearly distinguishes the tool from sibling tools like describe_operation or request.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no guidance on when to use this tool instead of elba_describe_operation, elba_list_organizations, or elba_request. There is no mention of discovering operations first, nor any exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
elba_list_organizationsОрганизации ЭльбыB
Получает список организаций, доступных по настроенному API-ключу.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| offset | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the disclosure burden. It does communicate that the tool is a read-only fetch ('Получает') and that results depend on the configured API key. However, it does not mention pagination behavior, failure modes, response shape, or rate-limit/auth consequences, so transparency is only partially addressed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One sentence with no filler. The main action and key scoping condition are front-loaded, and every word contributes to the meaning. It is appropriately concise for such a simple list operation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is adequate for a basic call: it names a clear outcome and the authentication context, and no parameters are required. But it is incomplete in meaningful ways: no parameter guidance, no explicit pagination note, no alternative routing, and no output-schema hints. This is a minimally viable, but not rich, definition.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the description does not explain the two parameters (limit and offset) at all. It does not add any meaning beyond the bare parameter names and schema constraints, and because coverage is low, the description was expected to compensate but does not.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'Получает список организаций' (gets a list of organizations) and adds the scope 'доступных по настроенному API-ключу' (available via the configured API key). This makes the purpose clear and distinguishes it from sibling tools like elba_list_operations, which targets operations instead of organizations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage context — call this when you need the list of organizations accessible with the current API key — but it gives no explicit guidance about when to choose this tool over elba_list_operations or elba_request, and no exclusions or alternatives are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
elba_requestЗапрос к Elba Public APIA
Выполняет операцию, только если сочетание метода и пути разрешено встроенной OpenAPI-схемой. Для изменяющих операций сначала изучите схему через elba_describe_operation.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | JSON-тело запроса | |
| path | Yes | Фактический путь с подставленными идентификаторами, например /v1/organizations/{id}/bills | |
| query | No | Query-параметры | |
| method | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It does disclose real behavior: the tool refuses to execute method/path combinations not allowed by the OpenAPI schema, and mutation calls require prior schema review — genuinely useful context beyond the title. However, it's silent on auth requirements, error behavior when validation fails, response format, and it never warns that DELETE/PUT/POST have destructive side effects. For an unannotated tool that can mutate, this is a partial disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, each carrying distinct information: the first states the core behavioral constraint (schema-gated execution), the second gives actionable pre-requisite guidance for mutating calls. No repetition of the title, no filler, and the most important fact is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no annotations and no output schema, the description bears full responsibility for completeness. It covers the two most critical aspects — the validation gate that prevents invalid calls, and the describe-first workflow for mutations. But it leaves out what an agent needs at runtime: response/return format, error and status semantics, authentication prerequisites, and an explicit warning about irreversibile destructive operations. For a generic executor with destructive potential, the agent is left to guess on operational behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 75%: method has a self-describing enum, path has pattern plus a concrete example ('/v1/organizations/{id}/bills'), while body and query have only tautological descriptions ('JSON-тело запроса', 'Query-параметры'). The description adds genuine inter-parameter meaning — method and path must jointly form an allowed operation in the OpenAPI schema, so arbitrary combinations will be rejected. It doesn't elaborate body/query semantics, which is acceptable since those are operation-specific and discoverable via elba_describe_operation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action: 'Выполняет операцию, только если сочетание метода и пути разрешено встроенной OpenAPI-схемой' — a generic request executor gated by the built-in OpenAPI schema. This is a clear verb+resource pairing that distinguishes it from the introspective sibling tools (elba_list_operations, elba_describe_operation), which discover rather than execute. It doesn't explicitly contrast itself against siblings, but the execution role plus schema gate makes the purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The second sentence gives explicit when-to-use guidance: 'Для изменяющих операций сначало изучите схему через elba_describe_operation' — naming the exact sibling tool for the mutating case. The rules imply GET-level calls can proceed directly and the tool enforces schema permissibility. It doesn't cover when to use elba_list_organizations or elba_list_operations, but the relevance routing for the riskiest case is explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
Each tool serves a clear, distinct purpose: e1 and e2 are for OpenAPI schema introspection (listing vs. describing), e3 returns domain data (organizations), and e4 is the guarded generic executor. There is no overlap or ambiguity between them.
All tools share the 'elba_' prefix and follow a verb-based pattern (list, describe, request). Minor inconsistencies: 'list_operations' uses plural while 'describe_operation' is singular, and 'elba_request' lacks an explicit object noun unlike the others.
Four tools is a well-scoped set for an OpenAPI-gated API wrapper: schema listing, schema details, an organization listing convenience, and a safe request executor. Each tool earns its place without redundancy.
The server provides a full workflow: discover available operations, inspect details, list organizations, and execute allowed requests. There are no obvious gaps for the intended purpose of securely interacting with the Elba Public API.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Headless API-first double-entry accounting & bookkeeping engine. 84 MCP tools over HTTP.
Conta Azul ERP MCP — sales, customers, finance and NF-e via OAuth 2.0. Read + write, 35 tools.
APIs.guru MCP — keyless directory of 2,500+ public APIs and their OpenAPI specs.
wFirma.pl (Polish accounting) via MCP: invoices, contractors, payments, reports. Full read-write.
Related MCP Servers
AlicenseAqualityCmaintenanceEnables MCP-capable agents to read Fintaro invoices and transactions, and upload receipts, via a scoped API key with PII-safe projections.6Apache 2.0- AlicenseAqualityCmaintenanceEnables MCP clients to read and write Bokio accounting data for one company through 85 tools covering invoices, customers, suppliers, journal entries, chart of accounts, fiscal years, items, tags, uploads, SIE export, and bank payments.40MIT
- AlicenseNot gradedqualityBmaintenanceEnables MCP-compatible agents to securely access an Invoice4U account for searching documents and customers and creating receipts linked to paid invoices, with read-only behavior by default.MIT
- AlicenseAqualityCmaintenanceEnables interaction with Mindbox CDP, including customer profiles, orders, segments, product lists, and arbitrary operations via MCP tools.6453MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/apo100l/elba-kontur-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server