MCP Checkmcp-server
ru.invoicebox/mcp-server
About mcp-server
mcp-server is an MCP server published by invoicebox.ru. MCP-сервер Инвойсбокса: счета, отгрузки и возвраты по просьбе человека
It runs on your own machine: your AI client starts it from the npm package @invoicebox/mcp-server at version 0.2.1.
It asks for one secret: INVOICEBOX_API_TOKEN. Give it a key with the least access that still works.
It also needs INVOICEBOX_MERCHANT_ID set before it starts.
Version 0.2.1 was published on 12 August 2026, and the source code is public, so you can read it before installing.
Written from the registry entry. 9 automated checks on the registry entry and the package code: 7 pass, 0 warn, 0 fail, 2 info. How we check.
What it asks for
| Variable | Required | Secret | Description |
|---|---|---|---|
INVOICEBOX_API_TOKEN | Yes | Yes | Токен API Инвойсбокса. Выпускается в личном кабинете; правами токена ограничивается то, что сервер вообще может сделать |
INVOICEBOX_MERCHANT_ID | Yes | No | Идентификатор магазина, от имени которого работает сервер |
INVOICEBOX_ENV | No | No | Контур: demo или prod. По умолчанию demo — боевой включается явно |
INVOICEBOX_TOOLSETS | No | No | Наборы инструментов через запятую: read по умолчанию, write и refund включаются явно |
INVOICEBOX_STATE_DIR | No | No | Каталог состояния: без него защита от дублей действует только в пределах одного запуска |
Checks
| Check | Result | Detail |
|---|---|---|
| Source repository linked | Pass | https://github.com/InvoiceBox/invoicebox-mcp-server |
| Version pinned | Pass | Every package has an explicit version |
| Secrets requested | Info | Asks for 1 secret: INVOICEBOX_API_TOKEN |
| Known package registry | Pass | All packages come from npm, PyPI, OCI, NuGet or MCPB |
| Namespace ownership | Info | Name verified via domain invoicebox.ru |
| Registry text aimed at the AI | Pass | Description and settings contain no hidden characters or instructions to the AI |
| Install scripts | Pass | @invoicebox/mcp-server@0.2.1 runs nothing at install |
| Code red flags | Pass | Read 83 files in @invoicebox/mcp-server@0.2.1: no obfuscation, encoded execution, credential reads or data-collection endpoints found |
| Text aimed at the AI | Pass | No hidden characters or instructions to the AI in 83 files, including comments and the README |
Popularity & health: 48 / 100
Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.
0 forks, 0 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.
What people say
No Hacker News threads link to its source code.
Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.
Facts
| Registry name | ru.invoicebox/mcp-server |
|---|---|
| Publisher | Domain invoicebox.ru |
| How the name is verified | Name verified via domain invoicebox.ru. The registry ties the name prefix to that account or domain; it does not check the code. |
| Type | Local: runs on your machine from a package |
| Packages | npm @invoicebox/mcp-server 0.2.1 (stdio) |
| Version | 0.2.1 |
| Published | |
| Last updated | |
| Source repository | https://github.com/InvoiceBox/invoicebox-mcp-server |
| Website | https://docs.invoicebox.ru/mcp/ |
| Category | Finance & payments (assigned by keyword rule, not by hand) |