MCP connectors for CIS business tools — 1C, Wildberries, Ozon, Bitrix24, AmoCRM, Moysklad, Telegram, iiko. Eight servers, one pip install. MIT.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http
verified
reported
listed in the official MCP registry counts 68 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
amocrm_account
-
amocrm_create
-
amocrm_get
-
amocrm_list
-
amocrm_pipelines
-
amocrm_update
-
bitrix24_crm_create
-
bitrix24_crm_get
-
bitrix24_crm_list
-
bitrix24_crm_update
-
bitrix24_task_get
-
bitrix24_tasks_list
-
iiko_create_delivery
-
iiko_deliveries_by_phone
-
iiko_employees
-
iiko_nomenclature
-
iiko_order_types
-
iiko_organizations
-
iiko_payment_types
-
iiko_stop_list
-
iiko_terminal_groups
-
moysklad_create
-
moysklad_get
-
moysklad_list
-
moysklad_organizations
-
moysklad_stock
-
moysklad_update
-
onec_count
-
onec_create
-
onec_delete
-
onec_get
-
onec_list_entities
-
onec_query
-
onec_schema
-
onec_update
-
ozon_analytics
-
ozon_get_posting
-
ozon_get_stocks
-
ozon_list_postings
-
ozon_list_products
-
ozon_list_warehouses
-
ozon_product_info
-
ozon_transactions
-
ozon_unfulfilled
-
ozon_update_prices
-
ozon_update_stocks
-
tg_answer_callback
-
tg_delete_message
-
tg_delete_webhook
-
tg_edit_message
-
tg_get_chat
-
tg_get_me
-
tg_get_updates
-
tg_get_webhook_info
-
tg_send_document
-
tg_send_message
-
tg_send_photo
-
tg_set_webhook
-
wb_get_orders
-
wb_get_prices
-
wb_get_stocks
-
wb_list_cards
-
wb_list_warehouses
-
wb_new_orders
-
wb_order_stats
-
wb_sales
-
wb_seller_info
-
wb_update_stocks
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 584d3e0 · analyzer v33 · 2d ago
skills & prompt files 1
- agent-rules Aiyo28-yzel-584d3e0/CLAUDE.md
danger signals2
- suspicious endpoint api.telegram.org Aiyo28-yzel-584d3e0/src/yzel/connectors/telegram/client.py :84
base_url: str = "https://api.telegram.org", - suspicious endpoint api.telegram.org Aiyo28-yzel-584d3e0/src/yzel/core/types.py :144
default="https://api.telegram.org",
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 52
filesystem 3
- fs Aiyo28-yzel-584d3e0/src/yzel/core/vault.py :14
from pathlib import Path - fs (weak) Aiyo28-yzel-584d3e0/tests/conftest.py :5
from pathlib import Path - fs (weak) Aiyo28-yzel-584d3e0/tests/test_versions.py :14
from pathlib import Path
network 19
- net Aiyo28-yzel-584d3e0/src/yzel/connectors/amocrm/client.py :17
import httpx - net Aiyo28-yzel-584d3e0/src/yzel/connectors/bitrix24/client.py :17
import httpx - net Aiyo28-yzel-584d3e0/src/yzel/connectors/iiko/client.py :24
import httpx - net Aiyo28-yzel-584d3e0/src/yzel/connectors/moysklad/client.py :21
import httpx - net Aiyo28-yzel-584d3e0/src/yzel/connectors/onec/odata.py :13
from urllib.parse import quote - net Aiyo28-yzel-584d3e0/src/yzel/connectors/ozon/client.py :22
import httpx - net Aiyo28-yzel-584d3e0/src/yzel/connectors/telegram/client.py :19
import httpx - net Aiyo28-yzel-584d3e0/src/yzel/connectors/wildberries/client.py :29
import httpx - net Aiyo28-yzel-584d3e0/src/yzel/core/discovery.py :16
import httpx - net (weak) Aiyo28-yzel-584d3e0/tests/mock_odata_server.py :262
from urllib.parse import unquote - net (weak) Aiyo28-yzel-584d3e0/tests/test_amocrm.py :9
import httpx - net (weak) Aiyo28-yzel-584d3e0/tests/test_bitrix24.py :9
import httpx
show 7 more
- net (weak) Aiyo28-yzel-584d3e0/tests/test_discovery.py :105
import httpx - net (weak) Aiyo28-yzel-584d3e0/tests/test_iiko.py :8
import httpx - net (weak) Aiyo28-yzel-584d3e0/tests/test_moysklad.py :8
import httpx - net (weak) Aiyo28-yzel-584d3e0/tests/test_onec.py :18
import httpx - net (weak) Aiyo28-yzel-584d3e0/tests/test_ozon.py :8
import httpx - net (weak) Aiyo28-yzel-584d3e0/tests/test_telegram.py :8
import httpx - net (weak) Aiyo28-yzel-584d3e0/tests/test_wildberries.py :13
import httpx
database 1
- db Aiyo28-yzel-584d3e0/src/yzel/core/vault.py :13
import sqlite3
tool registrations 68
- amocrm_list Aiyo28-yzel-584d3e0/src/yzel/connectors/amocrm/server.py :110
- amocrm_get Aiyo28-yzel-584d3e0/src/yzel/connectors/amocrm/server.py :149
- amocrm_create Aiyo28-yzel-584d3e0/src/yzel/connectors/amocrm/server.py :173
- amocrm_update Aiyo28-yzel-584d3e0/src/yzel/connectors/amocrm/server.py :193
- amocrm_pipelines Aiyo28-yzel-584d3e0/src/yzel/connectors/amocrm/server.py :216
- amocrm_account Aiyo28-yzel-584d3e0/src/yzel/connectors/amocrm/server.py :229
- bitrix24_crm_list Aiyo28-yzel-584d3e0/src/yzel/connectors/bitrix24/server.py :97
- bitrix24_crm_get Aiyo28-yzel-584d3e0/src/yzel/connectors/bitrix24/server.py :136
- bitrix24_crm_create Aiyo28-yzel-584d3e0/src/yzel/connectors/bitrix24/server.py :155
- bitrix24_crm_update Aiyo28-yzel-584d3e0/src/yzel/connectors/bitrix24/server.py :176
- bitrix24_tasks_list Aiyo28-yzel-584d3e0/src/yzel/connectors/bitrix24/server.py :199
- bitrix24_task_get Aiyo28-yzel-584d3e0/src/yzel/connectors/bitrix24/server.py :226
show 28 more
- iiko_organizations Aiyo28-yzel-584d3e0/src/yzel/connectors/iiko/server.py :58
- iiko_terminal_groups Aiyo28-yzel-584d3e0/src/yzel/connectors/iiko/server.py :66
- iiko_nomenclature Aiyo28-yzel-584d3e0/src/yzel/connectors/iiko/server.py :75
- iiko_stop_list Aiyo28-yzel-584d3e0/src/yzel/connectors/iiko/server.py :84
- iiko_deliveries_by_phone Aiyo28-yzel-584d3e0/src/yzel/connectors/iiko/server.py :93
- iiko_create_delivery Aiyo28-yzel-584d3e0/src/yzel/connectors/iiko/server.py :107
- iiko_order_types Aiyo28-yzel-584d3e0/src/yzel/connectors/iiko/server.py :120
- iiko_payment_types Aiyo28-yzel-584d3e0/src/yzel/connectors/iiko/server.py :129
- iiko_employees Aiyo28-yzel-584d3e0/src/yzel/connectors/iiko/server.py :138
- moysklad_list Aiyo28-yzel-584d3e0/src/yzel/connectors/moysklad/server.py :84
- moysklad_get Aiyo28-yzel-584d3e0/src/yzel/connectors/moysklad/server.py :133
- moysklad_create Aiyo28-yzel-584d3e0/src/yzel/connectors/moysklad/server.py :156
- moysklad_update Aiyo28-yzel-584d3e0/src/yzel/connectors/moysklad/server.py :175
- moysklad_stock Aiyo28-yzel-584d3e0/src/yzel/connectors/moysklad/server.py :198
- moysklad_organizations Aiyo28-yzel-584d3e0/src/yzel/connectors/moysklad/server.py :228
- onec_list_entities Aiyo28-yzel-584d3e0/src/yzel/connectors/onec/server.py :61
- onec_query Aiyo28-yzel-584d3e0/src/yzel/connectors/onec/server.py :66
- onec_get Aiyo28-yzel-584d3e0/src/yzel/connectors/onec/server.py :94
- onec_schema Aiyo28-yzel-584d3e0/src/yzel/connectors/onec/server.py :106
- onec_count Aiyo28-yzel-584d3e0/src/yzel/connectors/onec/server.py :117
- onec_create Aiyo28-yzel-584d3e0/src/yzel/connectors/onec/server.py :129
- onec_update Aiyo28-yzel-584d3e0/src/yzel/connectors/onec/server.py :141
- onec_delete Aiyo28-yzel-584d3e0/src/yzel/connectors/onec/server.py :154
- ozon_list_warehouses Aiyo28-yzel-584d3e0/src/yzel/connectors/ozon/server.py :54
- ozon_list_products Aiyo28-yzel-584d3e0/src/yzel/connectors/ozon/server.py :59
- ozon_product_info Aiyo28-yzel-584d3e0/src/yzel/connectors/ozon/server.py :75
- ozon_get_stocks Aiyo28-yzel-584d3e0/src/yzel/connectors/ozon/server.py :87
- ozon_update_stocks Aiyo28-yzel-584d3e0/src/yzel/connectors/ozon/server.py :98
28 more not shown — this panel samples each group; the count above is the real total.
declared dependencies 10
- mcp@>=1.0.0,<2.0.0
- httpx@>=0.27.0
- pydantic@>=2.0.0
- cryptography@>=42.0.0
- click@>=8.0.0
- pytest@>=8.0.0
- pytest-asyncio@>=0.23.0
- pytest-httpx@>=0.30.0
- ruff@>=0.4.0
- mypy@>=1.10.0
transport_posture 8
- binds all interfaces (0.0.0.0) Aiyo28-yzel-584d3e0/tests/mock_amocrm_server.py :378
uvicorn.run(app, host="0.0.0.0", port=8080) - network-listening, binds all interfaces, no auth detected Aiyo28-yzel-584d3e0/tests/mock_bitrix24_server.py :345
uvicorn.run(app, host="0.0.0.0", port=8078) - binds all interfaces (0.0.0.0) Aiyo28-yzel-584d3e0/tests/mock_iiko_server.py :234
uvicorn.run(app, host="0.0.0.0", port=8082) - binds all interfaces (0.0.0.0) Aiyo28-yzel-584d3e0/tests/mock_moysklad_server.py :416
uvicorn.run(app, host="0.0.0.0", port=8079) - binds all interfaces (0.0.0.0) Aiyo28-yzel-584d3e0/tests/mock_odata_server.py :406
uvicorn.run(app, host="0.0.0.0", port=8077) - binds all interfaces (0.0.0.0) Aiyo28-yzel-584d3e0/tests/mock_ozon_server.py :225
uvicorn.run(app, host="0.0.0.0", port=8080) - network-listening, binds all interfaces, no auth detected Aiyo28-yzel-584d3e0/tests/mock_telegram_server.py :195
uvicorn.run(app, host="0.0.0.0", port=8081) - binds all interfaces (0.0.0.0) Aiyo28-yzel-584d3e0/tests/mock_wildberries_server.py :226
uvicorn.run(app, host="0.0.0.0", port=8079)