kingdee-mcp-proxy
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@kingdee-mcp-proxy查询上个月的销售出库单"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
kingdee-mcp-proxy 🐟
Production-grade MCP proxy that lets AI Agents (Claude / Cursor / any MCP client) safely query Kingdee Cloud Galaxy (金蝶云星空) ERP — with read-only mode, write confirmation gates, and full audit logging.
让 AI Agent 用自然语言安全查询/操作金蝶云星空 ERP:只读模式、写操作确认闸门、全链路审计日志。
⚡ Battle-tested: running in production since Aug 2026, querying real ERP data daily via official Kingdee OpenAPI (
ExecuteBillQuery).
Why this exists
Community MCP connectors for Kingdee typically hand the AI a master key: admin credentials, raw secrets in prompts, unrestricted writes, no audit trail. That's how you get an AI deleting your purchase orders.
This project takes the zero-trust approach:
Risk | Common approach | This proxy |
Credentials | Secrets exposed to LLM context | Keys live only server-side in |
Permissions | Admin/SA account | Dedicated least-privilege integration account |
Write ops | AI can save/submit/audit/delete directly |
|
Data leakage | Raw tables dumped to external LLM | Aggregation at proxy; forced |
Audit | None | Append-only audit log: who / which tool / sanitized params / row count / latency |
Related MCP server: Kingdee MCP Server
Quick start
git clone https://github.com/YOUR_NAME/kingdee-mcp-proxy.git
cd kingdee-mcp-proxy
python3 -m venv .venv && source .venv/bin/activate
pip install -r requirements.txt
cp .env.example .env # fill in your Kingdee integration account
python -m proxy.server # stdio mode (Claude Desktop / WorkBuddy)
python -m proxy.server --transport sse --host 0.0.0.0 --port 8181 # team-shared SSE modePoint your MCP client at it:
{ "mcpServers": { "kingdee": {
"command": "python",
"args": ["/path/to/proxy/server.py"],
"env": { "READONLY": "true" } } } }Then just ask: "查一下上个月的物料入库单" → done.
Tools
Read-only: query_bill (generic bill query) · view_bill (bill detail) · health
Write (only registered when READONLY=false, always gated):
preview_save_bill → preview_submit_bills → preview_audit_bills → confirm_action
Setup on Kingdee side (5 min)
金蝶后台:
系统管理 → 第三方系统登录授权 → 新增Create a dedicated integration account (not Administrator), grant only needed query modules
Copy AppID / AppSecret / AcctID into
.env
Full checklist: see 安全核对清单 (WIP)
Business value / 商业价值
For CFOs/IT managers: give every employee an AI analyst over ERP data without opening security holes
Works with: Claude Desktop, Cursor, WorkBuddy, or any MCP-compatible agent
I also do custom ERP×AI integrations (UFIDA/SAP/self-built systems): → contact below
Dual licensing
Open source: AGPL-3.0
Commercial license available if you need to embed this in closed-source products or want SLA support → open an issue titled
[commercial]
Contact
Issues & PRs welcome
Custom integration inquiries: leave a comment in Discussions
定制企业 AI 落地(MCP 开发 / 私有化部署 / Agent 工作流):请提 issue 或邮件联系
⭐ If this saved you a week of work, star the repo — it helps other Chinese ERP teams find it.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceEnables AI assistants to query and operate Dingjie ERP system via natural language, covering procurement, sales, and material management.1
- AlicenseBqualityBmaintenanceEnables AI assistants to operate Kingdee Cloud Star ERP via natural language, including querying, creating, submitting, auditing, and deleting business documents.8157MIT
- AlicenseBqualityCmaintenanceMCP server for Kingdee Cloud (K3Cloud) ERP that enables AI assistants to query and operate ERP data through natural language, supporting bills, metadata, and read/write operations.81Apache 2.0
- FlicenseAqualityCmaintenanceMCP server that exposes ERP functionalities to AI agents, enabling read-only queries for sales orders and inventory, and human-in-the-loop purchase requisition creation and approval.5
Related MCP Connectors
Read-only China A-share data for AI agents: market, limit-up, capital flow and disclosures.
Shared, permission-aware company context for AI agents, with provenance, approvals and audit.
Runtime permission, approval, and audit layer for AI agent tool execution.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/zhigang327/kingdee-mcp-proxy'
If you have feedback or need assistance with the MCP directory API, please join our Discord server