Back to Browse

Holded MCP Server

Developer ToolsUse Caution4.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for Holded — invoicing, accounting, CRM, projects, and team

About

MCP server for Holded — invoicing, accounting, CRM, projects, and team

Security Report

4.8
Use Caution4.8High Risk

This is a well-structured MCP server for the Holded API with proper authentication, appropriate permissions, and solid code quality. The server requires API key authentication via environment variables, uses the MCP SDK correctly, and implements comprehensive input validation with Zod schemas. Minor findings include broad exception handling and limited sensitive data logging protections, but these are typical for servers in this category and do not present material security risks. Supply chain analysis found 8 known vulnerabilities in dependencies (1 critical, 6 high severity). Package verification found 1 issue.

3 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Your Holded API key. Get it from https://app.holded.com/apiOptional

Environment variable: HOLDED_API_KEY

Comma-separated list of modules to enable (invoicing, crm, projects, accounting, team). All enabled by default.Optional

Environment variable: HOLDED_MODULES

API rate limit in requests per second. Default: 10.Optional

Environment variable: HOLDED_RATE_LIMIT_PER_SECOND

Set to 'true' to enable debug logging for API requests.Optional

Environment variable: HOLDED_DEBUG

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-energio-es-holded-mcp": {
      "env": {
        "HOLDED_DEBUG": "your-holded-debug-here",
        "HOLDED_API_KEY": "your-holded-api-key-here",
        "HOLDED_MODULES": "your-holded-modules-here",
        "HOLDED_RATE_LIMIT_PER_SECOND": "your-holded-rate-limit-per-second-here"
      },
      "args": [
        "-y",
        "@energio/holded-mcp"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!