@kintone/mcp-server 1.0.0

package/dist/config/schema.js

@@ -0,0 +1,81 @@
+import { z } from "zod";
+export const PACKAGE_NAME = "@kintone/mcp-server";
+export const configSchema = z
+    .object({
+    KINTONE_BASE_URL: z
+        .string()
+        .url()
+        .describe("The base URL of your kintone environment (e.g., https://example.cybozu.com)"),
+    KINTONE_USERNAME: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Username for authentication"),
+    KINTONE_PASSWORD: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("Password for authentication"),
+    KINTONE_API_TOKEN: z
+        .string()
+        .optional()
+        .refine((value) => {
+        if (!value)
+            return true;
+        const tokens = value.split(",").map((t) => t.trim());
+        return (tokens.length <= 9 &&
+            tokens.every((token) => /^[a-zA-Z0-9]+$/.test(token)));
+    }, {
+        message: "API tokens must be comma-separated alphanumeric strings (max 9 tokens)",
+    })
+        .describe("API tokens for authentication (comma-separated, max 9 alphanumeric tokens)"),
+    KINTONE_BASIC_AUTH_USERNAME: z
+        .string()
+        .optional()
+        .describe("Username for Basic authentication"),
+    KINTONE_BASIC_AUTH_PASSWORD: z
+        .string()
+        .optional()
+        .describe("Password for Basic authentication"),
+    HTTPS_PROXY: z
+        .string()
+        .optional()
+        .refine((value) => !value || value === "" || z.string().url().safeParse(value).success, { message: "Invalid proxy URL format" })
+        .describe("HTTPS proxy URL (e.g., http://proxy.example.com:8080)"),
+    KINTONE_PFX_FILE_PATH: z
+        .string()
+        .optional()
+        .describe("Path to PFX client certificate file"),
+    KINTONE_PFX_FILE_PASSWORD: z
+        .string()
+        .optional()
+        .describe("Password for PFX client certificate file"),
+})
+    .refine((data) => {
+    // Either username/password or API token must be provided
+    const hasUserAuth = data.KINTONE_USERNAME && data.KINTONE_PASSWORD;
+    const hasApiToken = data.KINTONE_API_TOKEN;
+    return hasUserAuth || hasApiToken;
+}, {
+    message: "Either KINTONE_USERNAME/KINTONE_PASSWORD or KINTONE_API_TOKEN must be provided",
+    path: [],
+})
+    .refine((data) => {
+    const hasPath = data.KINTONE_PFX_FILE_PATH;
+    const hasPassword = data.KINTONE_PFX_FILE_PASSWORD;
+    // Both must be provided together or both must be omitted
+    return (hasPath && hasPassword) || (!hasPath && !hasPassword);
+}, {
+    message: "Both KINTONE_PFX_FILE_PATH and KINTONE_PFX_FILE_PASSWORD must be provided together",
+    path: ["KINTONE_PFX_FILE_PATH"],
+})
+    .refine((data) => {
+    const hasBasicUsername = data.KINTONE_BASIC_AUTH_USERNAME;
+    const hasBasicPassword = data.KINTONE_BASIC_AUTH_PASSWORD;
+    // Both must be provided together or both must be omitted
+    return ((hasBasicUsername && hasBasicPassword) ||
+        (!hasBasicUsername && !hasBasicPassword));
+}, {
+    message: "Both KINTONE_BASIC_AUTH_USERNAME and KINTONE_BASIC_AUTH_PASSWORD must be provided together",
+    path: ["KINTONE_BASIC_AUTH_USERNAME"],
+});

package/dist/index.js

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createServer } from "./server.js";
+import { parseKintoneClientConfig } from "./config/index.js";
+import { getKintoneClient } from "./client.js";
+const main = async () => {
+    const transport = new StdioServerTransport();
+    console.error("Starting server...");
+    const config = parseKintoneClientConfig();
+    getKintoneClient(config);
+    const server = createServer();
+    await server.connect(transport);
+};
+main().catch(console.error);

package/dist/schema/record/record-for-parameter.js

@@ -0,0 +1,119 @@
+import { z } from "zod";
+// kintoneレコードのフィールド値用共通スキーマ
+const _recordValueSchema = z.union([
+    // 文字列系フィールド (SINGLE_LINE_TEXT, MULTI_LINE_TEXT, RICH_TEXT, LINK)
+    z.object({
+        value: z
+            .string()
+            .nullable()
+            .describe("Text value for string fields (SINGLE_LINE_TEXT, MULTI_LINE_TEXT, RICH_TEXT, LINK)"),
+    }),
+    // 数値フィールド (NUMBER) - 文字列として送信
+    z.object({
+        value: z
+            .string()
+            .nullable()
+            .describe("Numeric value as string for NUMBER fields (e.g., '123.45'). Only half-width numbers, +/- signs, decimal point (.), and exponential notation (e/E) are allowed. Empty string, null, or undefined for empty values."),
+    }),
+    // 日付・時間系フィールド (DATE, TIME, DATETIME)
+    z.object({
+        value: z
+            .string()
+            .nullable()
+            .describe("Date/time value for DATE, TIME, DATETIME fields (DATE: 'YYYY-MM-DD', TIME: 'HH:mm', DATETIME: 'YYYY-MM-DDTHH:mm:ssZ')"),
+    }),
+    // 単一選択フィールド (RADIO_BUTTON, DROP_DOWN)
+    z.object({
+        value: z
+            .string()
+            .nullable()
+            .describe("Selected option value for RADIO_BUTTON and DROP_DOWN fields"),
+    }),
+    // 複数選択系フィールド (CHECK_BOX, MULTI_SELECT)
+    z.object({
+        value: z
+            .array(z.string())
+            .min(0)
+            .nullable()
+            .describe("Array of selected option values for CHECK_BOX and MULTI_SELECT fields"),
+    }),
+    // ユーザー選択フィールド (USER_SELECT)
+    z.object({
+        value: z
+            .array(z.object({
+            code: z.string().describe("User code/login name"),
+        }))
+            .nullable()
+            .describe("Array of selected users for USER_SELECT fields"),
+    }),
+    // 組織選択フィールド (ORGANIZATION_SELECT)
+    z.object({
+        value: z
+            .array(z.object({
+            code: z.string().describe("Organization code"),
+        }))
+            .nullable()
+            .describe("Array of selected organizations for ORGANIZATION_SELECT fields"),
+    }),
+    // グループ選択フィールド (GROUP_SELECT)
+    z.object({
+        value: z
+            .array(z.object({
+            code: z.string().describe("Group code"),
+        }))
+            .nullable()
+            .describe("Array of selected groups for GROUP_SELECT fields"),
+    }),
+    // 作成者・更新者フィールド (CREATOR, MODIFIER) - 登録時はcodeのみ
+    z.object({
+        value: z
+            .object({
+            code: z.string().describe("User code/login name"),
+        })
+            .nullable()
+            .describe("User information for CREATOR and MODIFIER fields (registration format with code only)"),
+    }),
+    // サブテーブルフィールド (SUBTABLE - kintone specific table field type)
+    z.object({
+        value: z
+            .array(z.object({
+            id: z.string().optional().describe("Row ID (optional for new rows)"),
+            value: z
+                .record(z.any())
+                .describe("Field values within this subtable row"),
+        }))
+            .nullable()
+            .describe("Array of subtable rows for SUBTABLE fields"),
+    }),
+    // ルックアップフィールド (LOOKUP) - キー項目の型に応じて文字列または数値文字列
+    z.object({
+        value: z
+            .string()
+            .nullable()
+            .describe("Lookup field value for LOOKUP fields (string for SINGLE_LINE_TEXT key, numeric string for NUMBER key)"),
+    }),
+    // 作成日時・更新日時フィールド (CREATED_TIME, UPDATED_TIME) - 登録時のみ指定可能
+    z.object({
+        value: z
+            .string()
+            .nullable()
+            .describe("Date/time value for CREATED_TIME and UPDATED_TIME fields (ISO 8601 format, only for registration)"),
+    }),
+]);
+export const recordSchemaForParameter = z.record(_recordValueSchema.or(z.object({
+    value: z
+        .array(z.object({
+        fileKey: z
+            .string()
+            .describe("File key obtained from file upload API"),
+    }))
+        .nullable()
+        .describe("Array of uploaded files for FILE fields"),
+})));
+// ファイルアップロードツール未実装のため現在はinputとしては指定不可
+// TODO: ファイルアップロードツール実装後に調整
+export const recordSchemaForParameterWithoutFile = z.record(_recordValueSchema.or(z.object({
+    value: z
+        .never()
+        .describe("FILE fields are not supported yet (file upload tool not implemented)"),
+})));

package/dist/schema/record/records.js

@@ -0,0 +1,182 @@
+import { z } from "zod";
+export const recordValueSchema = z.union([
+    z.object({
+        type: z.literal("SINGLE_LINE_TEXT"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("MULTI_LINE_TEXT"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("RICH_TEXT"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("NUMBER"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("DATE"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("DATETIME"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("DROP_DOWN"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("CHECK_BOX"),
+        value: z.array(z.string()).nullable(),
+    }),
+    z.object({
+        type: z.literal("MULTI_SELECT"),
+        value: z.array(z.string()).nullable(),
+    }),
+    z.object({
+        type: z.literal("RADIO_BUTTON"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("USER_SELECT"),
+        value: z
+            .array(z.object({
+            code: z.string(),
+            name: z.string(),
+        }))
+            .nullable(),
+    }),
+    z.object({
+        type: z.literal("CREATOR"),
+        value: z
+            .object({
+            code: z.string(),
+            name: z.string(),
+        })
+            .nullable(),
+    }),
+    z.object({
+        type: z.literal("CREATED_TIME"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("MODIFIER"),
+        value: z
+            .object({
+            code: z.string(),
+            name: z.string(),
+        })
+            .nullable(),
+    }),
+    z.object({
+        type: z.literal("UPDATED_TIME"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("RECORD_NUMBER"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("__ID__"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("__REVISION__"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("CATEGORY"),
+        value: z.array(z.string()).nullable(),
+    }),
+    z.object({
+        type: z.literal("STATUS"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("STATUS_ASSIGNEE"),
+        value: z
+            .array(z.object({
+            code: z.string(),
+            name: z.string(),
+        }))
+            .nullable(),
+    }),
+    z.object({
+        type: z.literal("FILE"),
+        value: z
+            .array(z.object({
+            contentType: z.string(),
+            fileKey: z.string(),
+            name: z.string(),
+            size: z.string(),
+        }))
+            .nullable(),
+    }),
+    z.object({
+        type: z.literal("LINK"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("CALC"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("LOOKUP"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("TIME"),
+        value: z.string().nullable(),
+    }),
+    z.object({
+        type: z.literal("SUBTABLE"),
+        value: z
+            .array(z.object({
+            id: z.string(),
+            value: z.record(z.any()),
+        }))
+            .nullable(),
+    }),
+    z.object({
+        type: z.literal("GROUP"),
+        value: z.array(z.any()).nullable(),
+    }),
+    z.object({
+        type: z.literal("REFERENCE_TABLE"),
+        value: z.null(),
+    }),
+    z.object({
+        type: z.literal("ORGANIZATION_SELECT"),
+        value: z
+            .array(z.object({
+            code: z.string(),
+            name: z.string(),
+        }))
+            .nullable(),
+    }),
+    z.object({
+        type: z.literal("GROUP_SELECT"),
+        value: z
+            .array(z.object({
+            code: z.string(),
+            name: z.string(),
+        }))
+            .nullable(),
+    }),
+    z.object({
+        type: z.literal("SPACER"),
+        value: z.null(),
+    }),
+    z.object({
+        type: z.literal("HR"),
+        value: z.null(),
+    }),
+    z.object({
+        type: z.literal("LABEL"),
+        value: z.null(),
+    }),
+]);
+export const recordSchema = z.record(recordValueSchema);

package/dist/server.js

@@ -0,0 +1,20 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { tools } from "./tools/index.js";
+import { version } from "./version.js";
+import { PACKAGE_NAME, parseKintoneClientConfig } from "./config/index.js";
+import { shouldEnableTool } from "./tool-filters.js";
+export const createServer = () => {
+    const server = new McpServer({
+        name: PACKAGE_NAME,
+        version,
+    }, {
+        capabilities: {
+            tools: {},
+        },
+    });
+    const config = parseKintoneClientConfig();
+    tools
+        .filter((tool) => shouldEnableTool(tool.name, config))
+        .forEach((tool) => server.registerTool(tool.name, tool.config, tool.callback));
+    return server;
+};

package/dist/tool-filters.js

@@ -0,0 +1,14 @@
+export const filterRules = [
+    {
+        condition: (config) => config.isApiTokenAuth,
+        excludeTools: ["kintone-get-apps"],
+    },
+];
+export function shouldEnableTool(toolName, config) {
+    for (const rule of filterRules) {
+        if (rule.condition(config) && rule.excludeTools.includes(toolName)) {
+            return false;
+        }
+    }
+    return true;
+}

package/dist/tools/index.js

@@ -0,0 +1,20 @@
+import { addRecords } from "./kintone/record/add-records.js";
+import { deleteRecords } from "./kintone/record/delete-records.js";
+import { getRecords } from "./kintone/record/get-records.js";
+import { updateRecords } from "./kintone/record/update-records.js";
+import { getApp } from "./kintone/app/get-app.js";
+import { getApps } from "./kintone/app/get-apps.js";
+import { getFormFields } from "./kintone/app/get-form-fields.js";
+import { getProcessManagement } from "./kintone/app/get-process-management.js";
+import { updateStatuses } from "./kintone/record/update-statuses.js";
+export const tools = [
+    getApp,
+    getApps,
+    getFormFields,
+    getProcessManagement,
+    updateStatuses,
+    addRecords,
+    deleteRecords,
+    getRecords,
+    updateRecords,
+];

package/dist/tools/kintone/app/get-app.js

@@ -0,0 +1,70 @@
+import { z } from "zod";
+import { createTool } from "../../utils.js";
+import { getKintoneClient } from "../../../client.js";
+import { parseKintoneClientConfig } from "../../../config/index.js";
+const inputSchema = {
+    appId: z
+        .string()
+        .describe("The ID of the app to retrieve (numeric value as string)"),
+};
+const outputSchema = {
+    appId: z.string().describe("The app ID"),
+    code: z.string().describe("The app code (empty string if not set)"),
+    name: z.string().describe("The app name"),
+    description: z
+        .string()
+        .describe("The app description (empty string if not set)"),
+    spaceId: z
+        .string()
+        .nullable()
+        .describe("The space ID (null if not in a space)"),
+    threadId: z
+        .string()
+        .nullable()
+        .describe("The thread ID (null if not in a space)"),
+    createdAt: z.string().describe("The creation date and time"),
+    creator: z
+        .object({
+        code: z.string().describe("The creator's user code"),
+        name: z.string().describe("The creator's display name"),
+    })
+        .describe("The creator information"),
+    modifiedAt: z.string().describe("The last modified date and time"),
+    modifier: z
+        .object({
+        code: z.string().describe("The modifier's user code"),
+        name: z.string().describe("The modifier's display name"),
+    })
+        .describe("The modifier information"),
+};
+export const getApp = createTool("kintone-get-app", {
+    title: "Get App",
+    description: "Get app settings from kintone",
+    inputSchema,
+    outputSchema,
+}, async ({ appId }) => {
+    const config = parseKintoneClientConfig();
+    const client = getKintoneClient(config);
+    const app = await client.app.getApp({ id: appId });
+    const result = {
+        appId: app.appId,
+        code: app.code,
+        name: app.name,
+        description: app.description,
+        spaceId: app.spaceId,
+        threadId: app.threadId,
+        createdAt: app.createdAt,
+        creator: app.creator,
+        modifiedAt: app.modifiedAt,
+        modifier: app.modifier,
+    };
+    return {
+        structuredContent: result,
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify(result, null, 2),
+            },
+        ],
+    };
+});

package/dist/tools/kintone/app/get-apps.js

@@ -0,0 +1,112 @@
+import { z } from "zod";
+import { createTool } from "../../utils.js";
+import { getKintoneClient } from "../../../client.js";
+import { parseKintoneClientConfig } from "../../../config/index.js";
+const inputSchema = {
+    ids: z
+        .array(z.string())
+        .max(100)
+        .optional()
+        .describe("Array of app IDs (numeric values as strings, max 100)"),
+    codes: z
+        .array(z.string().max(64))
+        .max(100)
+        .optional()
+        .describe("Array of app codes (max 64 characters each)"),
+    name: z
+        .string()
+        .max(64)
+        .optional()
+        .describe("App name for partial match search"),
+    spaceIds: z
+        .array(z.string())
+        .max(100)
+        .optional()
+        .describe("Array of space IDs (numeric values as strings, max 100)"),
+    offset: z
+        .number()
+        .min(0)
+        .optional()
+        .default(0)
+        .describe("Offset for pagination (default: 0)"),
+    limit: z
+        .number()
+        .min(1)
+        .max(100)
+        .optional()
+        .default(100)
+        .describe("Number of apps to retrieve (1-100, default: 100)"),
+};
+const appSchema = z.object({
+    appId: z.string().describe("The app ID"),
+    code: z.string().describe("The app code (empty string if not set)"),
+    name: z.string().describe("The app name"),
+    description: z
+        .string()
+        .describe("The app description (empty string if not set)"),
+    spaceId: z
+        .string()
+        .nullable()
+        .describe("The space ID (null if not in a space)"),
+    threadId: z
+        .string()
+        .nullable()
+        .describe("The thread ID (null if not in a space)"),
+    createdAt: z.string().describe("The creation date and time"),
+    creator: z
+        .object({
+        code: z.string().describe("The creator's user code"),
+        name: z.string().describe("The creator's display name"),
+    })
+        .describe("The creator information"),
+    modifiedAt: z.string().describe("The last modified date and time"),
+    modifier: z
+        .object({
+        code: z.string().describe("The modifier's user code"),
+        name: z.string().describe("The modifier's display name"),
+    })
+        .describe("The modifier information"),
+});
+const outputSchema = {
+    apps: z.array(appSchema).describe("Array of app information"),
+};
+export const getApps = createTool("kintone-get-apps", {
+    title: "Get Apps",
+    description: "Get multiple app settings from kintone",
+    inputSchema,
+    outputSchema,
+}, async ({ ids, codes, name, spaceIds, offset, limit }) => {
+    const config = parseKintoneClientConfig();
+    const client = getKintoneClient(config);
+    const response = await client.app.getApps({
+        ids,
+        codes,
+        name,
+        spaceIds,
+        offset,
+        limit,
+    });
+    const result = {
+        apps: response.apps.map((app) => ({
+            appId: app.appId,
+            code: app.code,
+            name: app.name,
+            description: app.description,
+            spaceId: app.spaceId,
+            threadId: app.threadId,
+            createdAt: app.createdAt,
+            creator: app.creator,
+            modifiedAt: app.modifiedAt,
+            modifier: app.modifier,
+        })),
+    };
+    return {
+        structuredContent: result,
+        content: [
+            {
+                type: "text",
+                text: JSON.stringify(result, null, 2),
+            },
+        ],
+    };
+});