Back to Browse

Contactapi MCP Server

Developer ToolsLow Risk9.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

An open-source API for collecting and managing contacts and signups.

About

An open-source API for collecting and managing contacts and signups.

Security Report

9.7
Low Risk9.7Low Risk

Valid MCP server (2 strong, 2 medium validity signals). No known CVEs in dependencies. ⚠️ Package registry links to a different repository than scanned source. Imported from the Official MCP Registry. 1 finding(s) downgraded by scanner intelligence.

8 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-kozmos-tech-contactapi": {
      "args": [
        "-y",
        "@kozmos-tech/contactapi"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

contactapi

An open-source API to save contacts. Send a POST with an email and any other JSON fields you want, and they get saved as-is. Manage them with simple CRUD.

Built with Hono and deployed on Vercel.

API overview

The base URL is https://contactapi.dev and every request carries your API key as a Bearer token:

Authorization: Bearer YOUR_KEY
MethodPathKeyDescription
POST/v1/contactssecret or publishableCreate (or upsert) a contact by email
GET/v1/contactssecretList contacts, paginated
GET/v1/contacts/:idsecretFetch a single contact
PATCH/v1/contacts/:idsecretUpdate a contact
DELETE/v1/contacts/:idsecretDelete a contact

Contacts are keyed by email — creating one whose email already exists updates it in place rather than duplicating it. Full reference lives on the landing page and in /llms.txt.

There are two kinds of key:

  • ck_secret_… — secret key, for your backend. Full access to every endpoint.
  • ck_pub_… — publishable key, for the browser. Can only create contacts and is locked to your domains.

MCP server

AI clients (Claude Desktop, claude.ai custom connectors, Cursor, the MCP Inspector) can manage your contacts through an MCP server at:

https://contactapi.dev/mcp

Auth is OAuth 2.1 with dynamic client registration — point a client at the URL and it discovers the authorization server, registers itself, and sends you to log in and approve access; no API key to copy. The server exposes five tools that mirror the REST API: list_contacts, get_contact, create_contact (upsert-by-email), update_contact, and delete_contact. Everything is scoped to the account you log in as.

The OAuth provider is Better Auth's mcp plugin (src/auth.ts); the tools and endpoint wiring live in src/mcp/server.ts and src/index.ts.

Development

Prerequisites: Vercel CLI installed globally.

npm install
vc dev
open http://localhost:3000

Build

npm install
vc build

Deploy

npm install
vc deploy

License

MIT

Reviews

No reviews yet

Be the first to review this server!