xenmark-mcp

Xenmark MCP server

An MCP server that lets AI assistants — Claude, Cursor, VS Code and others — read your Xenmark drawing-review data: projects, drawings, revisions, comments, replies and your notification inbox. Read-only, runs on your own machine, uses a token you create inside Xenmark.

Status: released. On npm as xenmark-mcp and in the official MCP Registry as io.github.Xenmark/xenmark-mcp.

What you can ask

• "Anything new for me in Xenmark?" / "Who mentioned me today?"
• "Which projects am I on, and what's my role?"
• "What's still open on drawing 1001-300, Rev. B?"
• "List the unresolved comments on that revision and who raised them."
• "What did Greta reply on comment #7?"

Every answer carries a link straight into Xenmark.

What it never does

It never writes to Xenmark, never sees your password, never returns e-mail addresses, files, billing or account roles, and never reaches projects you are not a member of. It talks to exactly one server: https://api.xenmark.app, the official read-only Integration API (contract).

Get a token

In Xenmark: profile → Account & Security → Connected apps → Connect an app → "Personal API token (Postman, GitHub)" → Generate. The token is shown once; keep it in the assistant's config only. Revoke it any time from Connected apps.

Install

Requires Node.js 18 or newer. The server runs with npx -y xenmark-mcp — nothing to clone or build. (To run from a source checkout instead: npm install && npm run build, then point your assistant at dist/index.js.)

Claude Desktop — edit claude_desktop_config.json (Settings → Developer → Edit Config) and add:

{
  "mcpServers": {
    "xenmark": {
      "command": "npx",
      "args": ["-y", "xenmark-mcp"],
      "env": { "XENMARK_TOKEN": "xmk_live_YOUR_TOKEN_HERE" }
    }
  }
}

Restart Claude Desktop; the Xenmark tools appear under the tools icon.

Cursor — Settings → MCP → Add new server, same command, args and env.

VS Code (Copilot agent mode) — add the same entry under "servers" in .vscode/mcp.json or your user mcp.json.

From a source checkout, replace the command with node and the args with the full path to dist/index.js.

Support

[e-mail] · Security: see SECURITY.md. Never post a token anywhere public.