
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
businessmap-mcp
Advanced tools
MCP server for Businessmap Kanbanize, exposing tools for managing business entities like boards, cards, and columns, facilitating LLM interaction.
This project is an unofficial MCP (Model Context Protocol) server for Businessmap formerly Kanbanize, designed to expose a set of tools for managing business-related entities such as boards, cards, columns, and user information. It is built to facilitate interaction with Large Language Models (LLMs) and similar applications through a standardized protocol.
The server provides the following tools, accessible via the MCP:
The server provides the following resources, accessible via the MCP:
user://me
).To use this MCP server with your LLM, follow these steps:
First, ensure you have Node.js (which includes npm) installed on your system. You can download it from nodejs.org.
To connect this MCP server to your LLM, you need to configure it in your mcp.json
file. This file tells your LLM environment how to discover and interact with the MCP server.
Add the following configuration to your mcp.json
file:
{
"servers": [
{
"name": "businessmap",
"command": "npx",
"args": ["businessmap-mcp", "-y"],
"envs": {
"BUSINESSMAP_API_URL": "https://example.kanbanize.com/api/v2",
"BUSINESSMAP_API_KEY": "your_businessmap_api_key"
// "BUSINESSMAP_READ_ONLY": "true" optional default value in false
}
}
]
}
BUSINESSMAP_READ_ONLY
Environment Variablefalse
(changeable operations are enabled by default).true
, all tools that perform changeable operations (such as creating, updating and deleting cards, comments, co-owners and subtasking) will be disabled.This ensures that the server only recovers data and does not modify any entity in BusinessMap.
**Note:**
- Replace `"https://example.kanbanize.com/api/v2"` with the actual base URL of the API your `businessmap-mcp` server needs to connect to.
- Replace `"your_businessmap_api_key"` with your actual API key.
- The `command` and `args` specify how to run the MCP server.
- The `envs` section provides environment variables required by the `businessmap-mcp` server for its operation.
After configuring `mcp.json`, your LLM should be able to discover and call the tools exposed by this server (e.g., `Board Tools`, `Card Tools`). Refer to your LLM's documentation for specific instructions on how to load `mcp.json` configurations.
## Support and Contribution
If you find this project useful, please consider giving it a star ⭐ on GitHub!
### Reporting Issues
If you encounter any bugs or have feature requests, please open an issue on the [GitHub Issues page](https://github.com/godrix/mcp-businessmap/issues).
### Contributing
Contributions are welcome! If you'd like to contribute, please follow these steps:
1. Fork the repository.
2. Create a new branch (`git checkout -b feature/your-feature-name`).
3. Make your changes and commit them (`git commit -m 'Add new feature'`).
4. Push to your branch (`git push origin feature/your-feature-name`).
5. Open a Pull Request.
Please ensure your code adheres to the project's coding standards and includes appropriate tests.
### More Information
For more information about Businessmap Kanbanize, please visit the official website: [https://businessmap.io](https://businessmap.io)
FAQs
MCP server for Businessmap Kanbanize, exposing tools for managing business entities like boards, cards, and columns, facilitating LLM interaction.
The npm package businessmap-mcp receives a total of 4 weekly downloads. As such, businessmap-mcp popularity was classified as not popular.
We found that businessmap-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.