About Server Zendesk
Server Zendesk is an MCP server in the Communication category: zendesk MCP server for Model Context Protocol hosts. It has been installed 0 times through Conduid.
Install
claude mcp add server-zendesk -- npx -y @mindstone-engineering/mcp-server-zendesknpx -y @mindstone-engineering/mcp-server-zendeskThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
Ask AI about Server Zendesk
Powered by Claude · Grounded in docs
Security checks
- ·README presentNot checked yet.
- ·License declaredNot checked yet.
- ·Tests presentNot checked yet.
- ·Dependencies pinnedNot checked yet.
- ·No dynamic code executionNot checked yet.
- ·Scoped permissionsNot checked yet.
README
mcp-servers
Source-available MCP servers by Mindstone. Works with any MCP host — Claude Desktop, Cursor, Rebel, and others.
Connectors
| Connector | Description |
|---|---|
| apple-shortcuts | Run and list Apple Shortcuts on macOS via the shortcuts CLI |
| browser-automation | Headless browser control via accessibility snapshots — navigate, fill forms, click, and screenshot pages via the agent-browser CLI |
| elevenlabs | Generate speech, music, and sound effects, browse voices, and transcribe audio via the ElevenLabs API |
| email-imap | Read, search, send, and manage emails through IMAP and SMTP |
| fathom | List and search meetings, view details, read transcripts, and manage teams via Fathom AI |
| freshdesk | Manage helpdesk tickets, search support requests, reply to customers, and add internal notes |
| gamma | Create AI-powered presentations, documents, webpages, and social posts via Gamma |
| google-analytics | Discover GA4 accounts and properties, explore the live schema, and run reports via the Google Analytics API |
| humaans | Query employee profiles, job roles, time-away requests, and company info via Humaans HR |
| kling | Generate AI videos from text descriptions or images via Kling AI |
| mixmax | Manage sequences, send tracked emails, use templates, and monitor engagement via Mixmax |
| nano-banana | Generate and edit images using Google Gemini's AI capabilities |
| napkin | Generate professional visuals — diagrams, infographics, and illustrations — from text via Napkin AI |
| office | Read and edit Word documents, Excel workbooks, and PowerPoint presentations from desktop Microsoft 365 via an Office Add-in sidecar |
| outreach | Manage prospects, sequences, accounts, tasks, and mailings via the Outreach sales engagement API |
| pandadoc | Create, send, and manage documents, templates, and e-signatures via PandaDoc |
| quickbooks | Manage invoices, bills, customers, vendors, employees, and accounts in QuickBooks Online |
| retell-ai | Place voice-agent phone calls, manage agents and LLM prompts, and discover voices via the Retell AI API |
| runway | Generate AI video, images, audio, speech, and sound effects via Runway ML |
| salesforce | Manage accounts, contacts, opportunities, leads, tasks, users, and custom objects via the Salesforce API |
| servicenow | Manage incidents, change requests, users, and knowledge base articles in ServiceNow |
| talentlms | Manage users, courses, groups, branches, enrolments, and assessments in TalentLMS |
| workday | Query workers, profiles, and organizations in Workday HCM |
| zendesk | Manage tickets, macros, users, and views in Zendesk Support |
Quick Start
Each server builds independently:
cd connectors/<name>
npm install
npm run build
Or run directly via npx (once published):
npx -y @mindstone-engineering/mcp-server-zendesk
See each server's README for configuration and host setup instructions. Some connectors require additional environment variables to opt into specific behaviour (e.g. QB_ALLOW_PROD_WRITES for QuickBooks production writes, MCP_WORKSPACE_PATH for sandboxed file reads, BROWSER_AUTOMATION_ALLOW_EVAL for browser-automation script eval) — see the per-connector READMEs for the full list.
Security & Hardening
This monorepo follows a defence-in-depth posture for tool-call hosts. Highlights include:
- Workflow safety. GitHub Actions workflows are env-fy'd against script injection (CWE-94), pinned to commit SHAs for third-party actions, and granted least-privilege
permissions:blocks. - Untrusted-content envelopes. External content from email, helpdesk, and ticketing systems (email-imap, freshdesk, zendesk) is wrapped in
<untrusted-content source="...">envelopes with close-tag breakout escaping, so an LLM host can recognise and refuse instruction-injection attempts. - Workspace sandboxing. File-uploading connectors (nano-banana, pandadoc, elevenlabs) constrain reads to
MCP_WORKSPACE_PATH(oros.tmpdir()) with canonical-prefix containment that handles symlinked roots like/tmp→/private/tmp. - Secure-by-default writes. Production-impacting writes (QuickBooks invoices/bills/customers/vendors) require an explicit
QB_ALLOW_PROD_WRITES=1opt-in env var; outreach prospect-enrolment and mixmax sequence-recipient tools carrydestructiveHint: trueso hosts surface confirmation prompts. - SSRF & path traversal. Download connectors (napkin, runway) enforce host allow-lists, manual-redirect handling, and symlink-safe write paths under a configurable root.
- Loopback OAuth bind. Connectors with local OAuth callback servers (salesforce, outreach) hard-code 127.0.0.1, ignoring any
MCP_OAUTH_BIND_HOSToverride. - E.164 validation. Outbound phone-call tools (retell-ai) reject non-E.164 numbers before any upstream API call.
For per-connector security notes, see each connector's README.
To report a vulnerability, please see SECURITY.md.
Licence
Each connector is licensed under FSL-1.1-MIT — see the LICENSE file in each connector directory for details.
README mirrored from the source repository 4 months ago. The original is authoritative.