kingdee-mcp-proxy
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@kingdee-mcp-proxy查询上个月的销售出库单"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
kingdee-mcp-proxy 🐟
Production-grade MCP proxy that lets AI Agents (Claude / Cursor / any MCP client) safely query Kingdee Cloud Galaxy (金蝶云星空) ERP — with read-only mode, write confirmation gates, and full audit logging.
让 AI Agent 用自然语言安全查询/操作金蝶云星空 ERP:只读模式、写操作确认闸门、全链路审计日志。
⚡ Battle-tested: running in production since Aug 2026, querying real ERP data daily via official Kingdee OpenAPI (
ExecuteBillQuery).
Why this exists
Community MCP connectors for Kingdee typically hand the AI a master key: admin credentials, raw secrets in prompts, unrestricted writes, no audit trail. That's how you get an AI deleting your purchase orders.
This project takes the zero-trust approach:
Risk | Common approach | This proxy |
Credentials | Secrets exposed to LLM context | Keys live only server-side in |
Permissions | Admin/SA account | Dedicated least-privilege integration account |
Write ops | AI can save/submit/audit/delete directly |
|
Data leakage | Raw tables dumped to external LLM | Aggregation at proxy; forced |
Audit | None | Append-only audit log: who / which tool / sanitized params / row count / latency |
Related MCP server: Kingdee MCP Server
Quick start
git clone https://github.com/zhigang327/kingdee-mcp-proxy.git
cd kingdee-mcp-proxy
python3 -m venv .venv && source .venv/bin/activate
pip install -r requirements.txt
cp .env.example .env # fill in your Kingdee integration account
python -m proxy.server # stdio mode (Claude Desktop / WorkBuddy)
python -m proxy.server --transport sse --host 0.0.0.0 --port 8181 # team-shared SSE modePoint your MCP client at it:
{ "mcpServers": { "kingdee": {
"command": "python",
"args": ["/path/to/proxy/server.py"],
"env": { "READONLY": "true" } } } }Then just ask: "查一下上个月的物料入库单" → done.
Tools
Read-only: query_bill (generic bill query) · view_bill (bill detail) · health
Write (only registered when READONLY=false, always gated):
preview_save_bill → preview_submit_bills → preview_audit_bills → confirm_action
Setup on Kingdee side (5 min)
金蝶后台:
系统管理 → 第三方系统登录授权 → 新增Create a dedicated integration account (not Administrator), grant only needed query modules
Copy AppID / AppSecret / AcctID into
.env
Full checklist: see 安全核对清单 (WIP)
Business value / 商业价值
For CFOs/IT managers: give every employee an AI analyst over ERP data without opening security holes
Works with: Claude Desktop, Cursor, WorkBuddy, or any MCP-compatible agent
I also do custom ERP×AI integrations (UFIDA/SAP/self-built systems): → contact below
Dual licensing
Open source: AGPL-3.0
Commercial license available if you need to embed this in closed-source products or want SLA support → open an issue titled
[commercial]
Contact · ERPilot 企航智能
ERPilot — We pilot AI into your business systems. 让 AI 开进你的业务系统。
Issues & PRs welcome
Custom integration inquiries (UFIDA / SAP / self-built ERP): open an issue titled
[integration]定制企业 AI 落地(MCP 开发 / 私有化部署 / Agent 工作流):请提 issue
⭐ If this saved you a week of work, star the repo — it helps other Chinese ERP teams find it.
This server cannot be deployed
Maintenance
Related MCP Connectors
Read-only finance and operations controls for AI agents with evidence and safe next actions.
Safe, read-only Postgres and MySQL access for AI agents. Audit log + column-level controls.
Security gateway for AI agents: policy, approval, and audited execution, no secrets shared.
Supervised API-write gateway for AI agents with policy, human approval and execution receipts.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceEnables AI assistants to query and operate Dingjie ERP system via natural language, covering procurement, sales, and material management.1-
- AlicenseBqualityBmaintenanceEnables AI assistants to operate Kingdee Cloud Star ERP via natural language, including querying, creating, submitting, auditing, and deleting business documents.8176MIT
- AlicenseBqualityCmaintenanceMCP server for Kingdee Cloud (K3Cloud) ERP that enables AI assistants to query and operate ERP data through natural language, supporting bills, metadata, and read/write operations.81Apache 2.0
- FlicenseAqualityCmaintenanceMCP server that exposes ERP functionalities to AI agents, enabling read-only queries for sales orders and inventory, and human-in-the-loop purchase requisition creation and approval.59-