
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
lgl-mcp-server
Advanced tools
MCP server for the Little Green Light nonprofit CRM — manage constituents, gifts, groups, activities, and contact records directly without third-party middleware.
A direct, secure, and high-fidelity Model Context Protocol (MCP) Server for the Little Green Light CRM database. This server allows AI coding assistants and chat applications (like Claude Desktop, LibreChat, or Open WebUI) to securely interact with your donor database to search constituents, log gifts, categorize taxonomic groups, and generate reports locally without any third-party middleware (like Zapier).
Clone this repository to your local machine, open a terminal in the folder, and run:
npm install
Copy the .env.example template to create your local .env configuration file:
cp .env.example .env
Open .env in a text editor and replace the placeholder with your actual LGL API key:
LGL_API_KEY=your_lgl_api_key_here
PORT=3000
This server can be integrated into any AI client, editor, or chat interface that supports the Model Context Protocol (MCP).
To utilize this server in the official Claude Desktop application, add the configuration to your claude_desktop_config.json file.
File Location:
%APPDATA%\Claude\claude_desktop_config.json~/Library/Application Support/Claude/claude_desktop_config.jsonConfiguration:
{
"mcpServers": {
"lgl-crm": {
"command": "node",
"args": ["C:\\path\\to\\your\\workspace\\folder\\index.js"],
"env": {
"LGL_API_KEY": "your_lgl_api_key_here"
}
}
}
}
Cursor supports custom MCP servers directly in its graphical user interface:
lgl-crmcommandnode C:\path\to\your\workspace\folder\index.jsLGL_API_KEY is set in your operating system environment variables or shell configuration so Cursor can inherit it.Windsurf supports native MCP configurations via its global config file.
File Location:
%USERPROFILE%\.codeium\windsurf\mcp_config.json~/.codeium/windsurf/mcp_config.jsonConfiguration:
{
"mcpServers": {
"lgl-crm": {
"command": "node",
"args": ["C:\\path\\to\\your\\workspace\\folder\\index.js"],
"env": {
"LGL_API_KEY": "your_lgl_api_key_here"
}
}
}
}
LibreChat allows you to integrate MCP servers directly through its centralized config file librechat.yaml.
Configuration in librechat.yaml:
mcpServers:
lgl-crm:
type: "stdio"
command: "node"
args: ["C:\\path\\to\\your\\workspace\\folder\\index.js"]
env:
LGL_API_KEY: "your_lgl_api_key_here"
To add this to Open WebUI (commonly used with local Ollama instances):
lgl-crm.node C:\path\to\your\workspace\folder\index.jsLGL_API_KEY is loaded on your host machine or docker run statement running the Open WebUI instance).Unlike other MCP integrations that route sensitive donor information through third-party services (like Zapier or Make), this server operates on a direct local pipeline:
index.js file before deployment.This project is open-source and free to adapt for non-profit organizations under the MIT License.
FAQs
MCP server for the Little Green Light nonprofit CRM — manage constituents, gifts, groups, activities, and contact records directly without third-party middleware.
We found that lgl-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.