Read-only MCP server for 1C-Bitrix

Install

npx skillfoxx add mcp/mcp-server-dlya-1s-bitriks-tolko-chtenie

claude mcp add --transport http bitrix 'https://САЙТ/mcp/' --header 'Authorization: Bearer <your AUTHORIZATION>'

{
  "mcpServers": {
    "bitrix": {
      "type": "http",
      "url": "https://САЙТ/mcp/",
      "headers": {
        "Authorization": "Bearer <your AUTHORIZATION>"
      }
    }
  }
}

{
  "mcpServers": {
    "bitrix": {
      "url": "https://САЙТ/mcp/",
      "headers": {
        "Authorization": "Bearer <your AUTHORIZATION>"
      }
    }
  }
}

code --add-mcp '{"name":"bitrix","type":"http","url":"https://САЙТ/mcp/","headers":{"Authorization":"Bearer <your AUTHORIZATION>"}}'

{
  "servers": {
    "bitrix": {
      "type": "http",
      "url": "https://САЙТ/mcp/",
      "headers": {
        "Authorization": "Bearer <your AUTHORIZATION>"
      }
    }
  }
}

[mcp_servers.bitrix]
url = "https://САЙТ/mcp/"
http_headers = { Authorization = "Bearer <your AUTHORIZATION>" }

{
  "mcpServers": {
    "bitrix": {
      "httpUrl": "https://САЙТ/mcp/",
      "headers": {
        "Authorization": "Bearer <your AUTHORIZATION>"
      }
    }
  }
}

{
  "mcpServers": {
    "bitrix": {
      "serverUrl": "https://САЙТ/mcp/",
      "headers": {
        "Authorization": "Bearer <your AUTHORIZATION>"
      }
    }
  }
}

{
  "mcpServers": {
    "bitrix": {
      "type": "streamableHttp",
      "url": "https://САЙТ/mcp/",
      "headers": {
        "Authorization": "Bearer <your AUTHORIZATION>"
      }
    }
  }
}

{
  "mcpServers": {
    "bitrix": {
      "type": "streamable-http",
      "url": "https://САЙТ/mcp/",
      "headers": {
        "Authorization": "Bearer <your AUTHORIZATION>"
      }
    }
  }
}

{
  "mcp": {
    "bitrix": {
      "type": "remote",
      "url": "https://САЙТ/mcp/",
      "headers": {
        "Authorization": "Bearer <your AUTHORIZATION>"
      }
    }
  }
}

{
  "context_servers": {
    "bitrix": {
      "url": "https://САЙТ/mcp/",
      "headers": {
        "Authorization": "Bearer <your AUTHORIZATION>"
      }
    }
  }
}

git clone https://github.com/shelezyaka/bitrix-mcp.git local/modules/itb.mcp

This is third-party code. Review the repository files before installing.

What it does

This installable 1C-Bitrix module runs an MCP server over Streamable HTTP at a separate entry point, /mcp/index.php, without hooking into storefront page handlers. The code has no database write command at all, only SELECT. Tools are split into eight groups, each toggled separately in module settings and granted separately per token: catalog (product search and cards, prices, per-warehouse stock), orders (search, cards, statuses, stats, customers, discounts), reports (sales, top products, abandoned carts, slow movers, stock shortages, zero-result search phrases), form submissions, API introspection of the install itself (classes, methods, source, events, agents, highload blocks), code file reading with hard folder and extension boundaries, and arbitrary SELECT against the database, with tables containing passwords, keys and payment-gateway credentials closed off by column name from the schema rather than a hardcoded list. A token is shown once at issue, rights are granted by explicitly enabling a group per token, and every request is logged, including rejected ones.

Who it is for. For boxed 1C-Bitrix store owners who want a safe, read-only AI agent view into their catalog, orders and reports with no risk of breaking anything.

Example request

Show products with less stock than a week of sales needs, and what visitors searched for but did not find

Limitations

Requires 1C-Bitrix 22 or newer, PHP 8.2+ and the iblock module; field-tested on Bitrix 26.650.0 and PHP 8.5. Orders, reports, forms, files and SQL are disabled by default and must be deliberately opened by an admin. The sql and files groups, once enabled, allow arbitrary reading of site code and tables, so the README explicitly warns against opening them unless needed. The local/modules/ folder is reachable over HTTP unlike bitrix/modules/, so it needs a separate web server rule to block it.

How to disable. Revoke all tokens on the Tokens tab and remove the module via Marketplace, Installed Solutions.

MCP

Transport

http

Authentication

API key

Security check

• With the orders and forms groups enabled, it reads customer personal data: name, phone, address
• The sql and files groups, once enabled, allow access to arbitrary database tables and the site's source code

README in short

The detailed README explains how it differs from ready-made solutions (a separate entry point rather than an OnProlog handler, an iblock whitelist, a token shown only once), step-by-step install into local/modules/itb.mcp with a warning about the folder being reachable over HTTP, token and per-group permission setup, a full list of 35 tools across eight groups with examples of what each returns and its PII warnings, file-read and SQL boundaries in an allowed-versus-forbidden table, two catalog read engines (legacy and ORM) with speed measurements, ready prompt scenarios, and a list of Bitrix-independent tests. MIT license.

Related