SkillFoxx

Bitrix24 Agent Skill Pack

A Bitrix24 REST skill split into capability packs with a method allowlist, risk confirmations and an audit log

  • 26 ★ on the repository
  • Last commit
  • Unlicense
Skill

Broad access

Why this level

  • Gives the agent transactional write access to the portal's CRM, tasks, chats and business processes
  • The webhook stores its secret key in the URL; rights depend on what was granted when it was created
All reasons and checks
Russian stack

vrtalex/bitrix24-skillAuthor:Aleksandr Vartanian

Install

Services

In your terminal, with SkillFoxx CLI

npx skillfoxx add skills/bitrix24-agent-skill-pack

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • Gives the agent transactional write access to the portal's CRM, tasks, chats and business processes
  • The webhook stores its secret key in the URL; rights depend on what was granted when it was created

This is third-party code. Review the repository files before installing.

What it does

The skill gives an agent safe-by-default access to the Bitrix24 REST API via webhook or OAuth: instead of one giant allowlist, methods are split into modular capability packs (core, comms, automation, collab and others), each with its own reference and ready call chains. The bitrix24_client.py script checks a method against method_risk.json and required_params.json before calling it, risky operations require explicit confirmation, and offline_sync_worker.py can run in a deferred-sync mode. The README explains the auth model in detail: an incoming webhook for a single portal, an OAuth app for a multi-portal scenario, an outgoing webhook as an event entry point, and when to use Bitrix24's official MCP server instead of this skill for better method accuracy.

Who it is for. For Bitrix24 teams who care about the safety of an agent's transactional calls: an allowlist, confirmations and an audit trail instead of blind trust.

Good fit when

  • You need an agent with real write access to Bitrix24, but with an allowlist and confirmation for risky methods
  • You want ready call chains by module: CRM and tasks, chats and telephony, business processes, workgroups
  • You need an audit log of which methods the agent called and with what parameters

Not a fit when

  • You only need a method and field reference for accurate code generation: the official Bitrix24 MCP server fits that better
  • You are not ready to work through the webhook versus OAuth auth model and pick the right one
  • You need multi-portal operation with token rotation without setting up an OAuth app

Example request

Create a deal from the new lead and set a task for the responsible manager, asking for confirmation before changing the stage

Limitations

A portal admin has to enable external AI connections to Bitrix24 under MCP servers settings. A webhook carries whatever rights it was created with and embeds its secret key right in the URL, so it must never go into public or frontend code. The skill does not replace the official Bitrix24 MCP for an accurate method reference; it is a governed layer for transactional writes.

How to disable. Remove skills/bitrix24-agent from your agent install and revoke the webhook or OAuth connection under Apps - MCP connections in your Bitrix24 portal.

FAQ

How is this different from the official Bitrix24 MCP?

MCP is better for method and field discovery during code generation, while this skill is a governed layer for real transactional writes with an allowlist and confirmations.

What does the core pack cover?

CRM, tasks.task, users, events and batch calls, the base set for most scenarios.

Discussion

No questions or reviews yet.

All Bitrix24 tools

Bitrix24 REST API skill

bitrix24-rest-api

Russian stack

A Claude Code skill with real-portal-verified Bitrix24 REST API gotchas: auth modes, errors hidden under HTTP 200, retries and rate limits

SkillMinimal access
Russian stack

Four skills for Bitrix24 apps: install and OAuth, a batching REST client, events and iframe placements, CRM business processes and calendar

SkillExtended access
Russian stack

A skill for administering, diagnosing and developing boxed Bitrix24 and Bitrix Framework, built from official documentation

SkillExtended access1

The @bitrix24/b24jssdk skill set

@bitrix24/b24jssdk skills

Official

Seven official Bitrix24 skills for the JS/TS SDK: picking B24Hook, B24Frame or B24OAuth, REST calls, filters, iframe managers and 12 ready mini-apps

SkillExtended access18
Official

A skill for Bitrix24's official PHP SDK that teaches an agent to wire up webhooks and OAuth, call SDK services, and handle results, errors and pagination

SkillExtended access103

Alternatives

Tools by other authors for the same tasks.

README in short

The English README explains Bitrix24's auth model in detail (webhook, OAuth, outgoing webhook, MCP) with a table of when to use each, and gives step-by-step admin instructions for enabling external AI connections in portal settings. It describes the capability-pack model instead of one big allowlist, the project layout with bitrix24_client.py and offline_sync_worker.py scripts, and webhook safety rules: never publish the secret key, and watch the Integrations and Statistics tabs.

README badge

Report a problem