sbis-mcp

Read-only MCP server for Saby (СБИС) EDI — list/read documents and counterparties via the official JSON-RPC API, so agents can see legally significant paperwork without copy-paste.

⚠️ Unofficial. Not affiliated with Tensor LLC / Saby. Needs your own Saby account with API access.
v0.1 is read-only. Digital signatures (КЭП) and write paths are out of scope until v0.2.

⚠️ Неофициальный. Не аффилирован с ООО «Тензор» / Saby. Нужен свой аккаунт.
v0.1 — только чтение. КЭП и запись — не в этом релизе.

Proof — seven tools (v0.1)

Writes (ЗаписатьДокумент, ПодготовитьДействие, …) stay off until v0.2 (writable, default false).

First use

Env (recommended):

export SBIS_LOGIN="<LOGIN>"
export SBIS_PASSWORD="<PASSWORD>"
# optional:
export SBIS_BASE_URL="https://online.sbis.ru"   # test: https://fix-online.sbis.ru
export SBIS_ACCOUNT="<ACCOUNT>"

Or ~/.sbis-mcp/config.json:

{
  "login": "<LOGIN>",
  "password": "<PASSWORD>",
  "baseUrl": "https://online.sbis.ru",
  "writable": false
}

Build & run (Node.js ≥ 18):

npm install
npm run build
npm start

Claude Desktop example: examples/claude_desktop_config.json.

Limits (from Saby docs)

• Auth: ≤300 calls/min per IP

• Session sid: ~21 days (X-SBISSessionID)

• Attachment: ≤73 MB, up to 10 per document

• Temporary file links: ~1 month

Source: saby.ru tech requirements

API docs: JSON-RPC format · auth · documents · counterparties

Live smoke & tests

Live smoke is manual (real account + tariff «Обмен с контрагентами»):

npm run build
SBIS_LOGIN="…" SBIS_PASSWORD="…" node scripts/live-smoke.mjs

Unit tests mock RPC — no live account:

npm test

License

MIT — see LICENSE.