B

BoondManager MCP Server

fauguste/boondmanager-mcp · v2.19.1 · Tools & Integrations

by faugusteScan grade: caution

MCP server for the BoondManager staffing ERP/CRM exposing 182 tools, 12 prompts and 22 resources over candidates, resources, opportunities, projects, invoices and expense reports, with stdio and OAuth-protected HTTP transports

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is BoondManager MCP Server a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • MCP
  • 1 MCP server

Before you install

Sign-in
Not declared
Settings it asks for
BoondManager URL, User Token (Option 1 : JWT auto) (secret), Client Token (Option 1 : JWT auto) (secret), Client Key (Option 1 : JWT auto) (secret) and 10 more
Declared access
Not declared
License
Apache-2.0

Check before relying on it

  • Some security checks did not finish: HOL plugin scan. See the evidence
  • 4 medium findings from the scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is BoondManager MCP Server?

BoondManager MCP Server is a published tools & integrations plugin for AI coding agents that works with Claude Code and MCP, developed by fauguste and distributed through the HOL AI plugin registry. MCP server for the BoondManager staffing ERP/CRM exposing 182 tools, 12 prompts and 22 resources over candidates, resources, opportunities, projects, invoices and expense reports, with stdio and OAuth-protected HTTP transports.

Canonical slug
fauguste/boondmanager-mcp
Version
v2.19.1 · updated Oct 15, 2026

Registry snapshot

Owner verification
Not verified
Scanner
Registry fallback scan
Security result
Caution
Digest verified
Yes

Trust and security

Trust & reputation

48

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64/100
Maintenance
0/100
MCP server setup
100/100
Plugin Security
47/100
Provenance
35/100
Publisher Quality
75/100

Provenance

Plugin root
plugins/boondmanager-mcp
Source repo
https://github.com/fauguste/boondmanager-mcp-server
Source commit
Unpinned
Publisher verified
No
Owner verified
Not owner verified

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Caution
Security result
47
Security score
0
High findings
Provider
registry-broker-fallback
Grade
F · caution
Version
Unknown
cisco-skill-scanner: not_applicable

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumpublishabilitypublishability.link.missing.websiteURL

websiteURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.privacyPolicyURL

privacyPolicyURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.termsOfServiceURL

termsOfServiceURL should be present for marketplace readiness.

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

mediumprovenanceprovenance.commit.missing

An immutable source commit is required for provenance.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Find the marketplace and plugin names

    The install id is <plugin-entry>@<marketplace-name>, and the marketplace name is declared inside the manifest — it can differ from the repository name. List registered marketplaces to read both names.

    shell
  3. 3

    Install the plugin

    Substitute the plugin entry name and the marketplace name shown by the previous step.

    claude code

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "boondmanager-mcp",
  "displayName": "BoondManager MCP Server",
  "version": "2.19.1",
  "description": "MCP Server for BoondManager API - 185 tools, 13 prompts, 22 resources (ERP/CRM)",
  "author": {
    "name": "Silamir",
    "url": "https://www.silamir.com"
  },
  "homepage": "https://github.com/silamir/boondmanager-mcp-server#readme",
  "repository": "https://github.com/silamir/boondmanager-mcp-server.git",
  "license": "Apache-2.0",
  "keywords": [
    "boondmanager",
    "esn",
    "crm",
    "erp",
    "candidates",
    "resources",
    "mcp"
  ],
  "userConfig": {
    "base_url": {
      "type": "string",
      "title": "BoondManager URL",
      "description": "URL de base de l'API BoondManager (ex: https://ui.boondmanager.com/api). Laissez vide pour utiliser l'URL par défaut.",
      "required": false,
      "default": "https://ui.boondmanager.com/api"
    },
    "user_token": {
      "type": "string",
      "title": "User Token (Option 1 : JWT auto)",
      "description": "Token utilisateur BoondManager. Mon compte > Informations de connexion > Clé d'API. Remplir avec Client Token et Client Key pour générer le JWT automatiquement.",
      "sensitive": true,
      "required": false
    },
    "client_token": {
      "type": "string",
      "title": "Client Token (Option 1 : JWT auto)",
      "description": "Token client BoondManager. Administration > Espace Développeur > API / Sandbox.",
      "sensitive": true,
      "required": false
    },
    "client_key": {
      "type": "string",
      "title": "Client Key (Option 1 : JWT auto)",
      "description": "Clé secrète client BoondManager. Administration > Espace Développeur > API / Sandbox.",
      "sensitive": true,
      "required": false
    },
    "api_token": {
      "type": "string",
      "title": "Token JWT (Option 2 : JWT pré-construit)",
      "description": "Token JWT BoondManager déjà construit. Alternatif à l'option 1.",
      "sensitive": true,
      "required": false
    },
    "user": {
      "type": "string",
      "title": "Utilisateur (Option 3 : BasicAuth)",
      "description": "Nom d'utilisateur BoondManager pour l'authentification BasicAuth.",
      "required": false
    },
    "password": {
      "type": "string",
      "title": "Mot de passe (Option 3 : BasicAuth)",
      "description": "Mot de passe BoondManager pour l'authentification BasicAuth.",
      "sensitive": true,
      "required": false
    },
    "mcp_profile": {
      "type": "string",
      "title": "Restriction : profil d'accès",
      "description": "Profil préconfiguré parmi recruiting, sales, finance, delivery, admin (plusieurs = séparés par des virgules, union). Raccourci pour ne pas lister les domaines un par un. Ignoré si 'domaines autorisés' est renseigné. Voir docs/access-control.md.",
      "required": false
    },
    "mcp_domains": {
      "type": "string",
      "title": "Restriction : domaines autorisés",
      "description": "Liste blanche de domaines séparés par des virgules (ex: invoices,payments,application). Vide = tous les domaines. Voir docs/access-control.md.",
      "required": false
    },
    "mcp_exclude_domains": {
      "type": "string",
      "title": "Restriction : domaines exclus",
      "description": "Liste noire de domaines séparés par des virgules (ex: candidates,resources), appliquée après la liste blanche. Vide = aucune exclusion.",
      "required": false
    },
    "mcp_operations": {
      "type": "string",
      "title": "Restriction : opérations autorisées",
      "description": "Opérations autorisées séparées par des virgules parmi read,create,update,delete. Vide = toutes. Ignoré si 'Lecture seule' est activé.",
      "required": false
    },
    "mcp_read_only": {
      "type": "boolean",
      "title": "Restriction : lecture seule",
      "description": "Si activé, expose uniquement les outils de lecture (bloque création, modification et suppression). N'est pas une frontière de sécurité dure : les droits du compte BoondManager s'appliquent en plus.",
      "required": false,
      "default": false
    },
    "confirm_delete": {
      "type": "boolean",
      "title": "Confirmer les suppressions",
      "description": "Si activé (défaut), une confirmation est demandée avant chaque suppression lorsque le client MCP supporte l'élicitation. Désactiver pour retrouver le comportement historique (suppression directe).",
      "required": false,
      "default": true
    },
    "dictionary_overrides": {
      "type": "string",
      "title": "Libellés personnalisés du dictionnaire",
      "description": "Mapping libellé→ID pour les instances BoondManager aux dictionnaires personnalisés : JSON inline (commence par {) ou chemin vers un fichier JSON UTF-8. Ex: {\"action\":{\"contact\":{\"Call\":61}},\"state\":{\"candidate\":{\"Interviewed\":2}}}. Voir docs/dictionary-overrides.md.",
      "required": false
    }
  },
  "interface": {
    "displayName": "BoondManager MCP Server",
    "developerName": "fauguste"
  },
  "mcpServers": "./.registry/mcp.json",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 5
}

Marketplace source

Repo URL
https://github.com/fauguste/boondmanager-mcp-server
Marketplace path
Unknown
Source path
plugins/boondmanager-mcp
Install policy
Unspecified

File inventory

.claude-plugin/plugin.json

file

4,954 bytes

2d3e8478a6cf7b6d…

.codex-plugin/plugin.json

plugin-manifest

4,365 bytes

1c82b23dfee6767d…

.mcp.json

file

1,028 bytes

603985139597bf15…

.registry/mcp.json

mcp-config

812 bytes

43ed7d660c38c948…

BoondManager MCP Server — Frequently asked questions

What is BoondManager MCP Server?
BoondManager MCP Server is an AI plugin in the HOL registry. MCP server for the BoondManager staffing ERP/CRM exposing 182 tools, 12 prompts and 22 resources over candidates, resources, opportunities, projects, invoices and expense reports, with stdio and OAuth-protected HTTP transports.
How do I install BoondManager MCP Server?
Install BoondManager MCP Server in your harness: Claude Code — /plugin marketplace add fauguste/boondmanager-mcp-server; MCP — git clone https://github.com/fauguste/boondmanager-mcp-server. Full step-by-step guidance is on the HOL plugin page.
How do I install BoondManager MCP Server in Claude Code?
To install BoondManager MCP Server in Claude Code, start with /plugin marketplace add fauguste/boondmanager-mcp-server. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How do I install BoondManager MCP Server in MCP?
To install BoondManager MCP Server in MCP, start with git clone https://github.com/fauguste/boondmanager-mcp-server. The complete step-by-step install guide for MCP is on the HOL plugin page.
How is the Trust Score for BoondManager MCP Server computed?
BoondManager MCP Server has a HOL Trust Score of 48 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/fauguste%2Fboondmanager-mcp/trust
Who publishes BoondManager MCP Server?
BoondManager MCP Server is published by fauguste and listed on HOL.

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W43. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins