KPN Grexx MCP server

by WYRE-AI·io.github.WYRE-AI/kpn-mcp·v2.3.1

No reviews yet

KPN IRMA on Grexx: address checks, prequalification, customers, orders, mobile and line tools.

B70/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B70/100

not scanned yet

Adoption

New

0 stars

Reviews

Write one

Nobody has reviewed KPN Grexx yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

KPN Grexx tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How KPN Grexx compares

Against every graded E-commerce MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 70/100; higher than 42% of 2,174 E-commerce servers

Release history: 3 versions in the registry since 2026-09-25, latest 2026-10-22, typically one every 14 days.

Install KPN Grexx in Claude Code, Cursor or VS Code

claude mcp add kpn-mcp -- docker run -i --rm ghcr.io/wyre-ai/kpn-mcp:v2.3.1

Add to Cursor

What the publisher says

From the KPN Grexx repository's README, as published. We do not edit it. Read it on GitHub

kpn-mcp

MCP server for KPN APIs, aimed at MSP helpdesks supporting Dutch customers on KPN: network outage checks, address availability, SIM-swap fraud checks, and KPN Zakelijk business mobile (Mobile Services Management, MSM v11).

Built on the MCP 2026-07-28 spec via the split v2 SDK (@modelcontextprotocol/server / /node / /client ^2.0.0-beta.5) with dual-era serving: one shared McpServerFactory behind createMcpHandler({ legacy: 'stateless' }) answers both 2025-era initialize-handshake clients (the WYRE gateway today) and modern 2026-07-28 envelope clients, with an identical, deterministic 23-tool surface for every caller. Ships as a GHCR container only (no MCPB bundle). The KPN client is @wyre-ai/node-kpn.

Tools (23, flat)

Network (free, self-serve products):

kpntestconnection: mint OAuth tokens, report the account tier, MSM status and quota.
kpndisturbancescheck: current and planned outages at a Dutch address.
kpnavailabilitycheck: fibre/copper availability and speeds at a Dutch address.
kpnsimswapgetdate: the most recent SIM swap on a KPN mobile number.

Business mobile (MSM), reads: kpnmobilesubscriberslist, kpnmobilesubscribersget, kpnmobilecontractslist, kpnmobilecontractsget (PIN/PUK always masked), kpnmobilecontractsgetoperations, kpnmobileorderslist, kpnmobileordersget, kpnmobileservicerequestslist, kpnmobileservicerequestsget, kpnmobileinvoiceslist, kpnmobileinvoicesgetpdf, kpnmobilehierarchylist, kpnmobilethresholds_list.

Gated behind confirmation: kpnmobilecontractsgetpuk (⚠ HIGH-IMPACT sensitive read), kpnmobilesimblock, kpnmobilesimunblock, kpnmobileordersauthorize (⚠ HIGH-IMPACT), kpnmobilesimreplace and kpnmobileorders_cancel (⚠ DESTRUCTIVE).

MSM writes create KPN orders that are processed asynchronously and may need authorization. A successful call means the order was created, not that the SIM is already blocked. They are never retried automatically; after a transient error, check kpnmobileorders_list before trying again.

Credentials

Credentials belong to a KPN API Store project (developer.kpn.com → Dashboard → Projects). Each product (Disturbance Check, Internet Speed Check, SIM Swap, MSM) must be added to that project; a token still mints when a product is missing, and the call then fails with 401/403.

MSM access is per end customer: the MSM token is bound to one customer's GRIP user, so one gateway connection is one KPN business customer. KPNBASEURL is env-mode only; a header-controlled base URL would let a caller redirect client secrets to any host.

In gateway mode a request missing X-KPN-Client-Id / X-KPN-Client-Secret, or carrying only half of the MSM pair, is answered 401 (JSON-RPC error -32001) before the MCP handler runs. It never falls through to env credentials.

When CONDUITS2SSECRET is set (conduit provisions this sidecar's own derived subkey), every request except /health must also carry a valid X-Gateway-S2S HMAC header signed by the gateway, or it is answered 401. This stops a compromised sibling sidecar from impersonating the gateway. Unset, the check is off (the fleet's dormant default).

Running

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

KPN Grexx: common questions

Is KPN Grexx MCP server safe?: Mostly: it is graded B (70/100). Read the KPN Grexx safety report
How do I install KPN Grexx?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does KPN Grexx need an API key?: Yes. The registry entry asks for KPN_GREXX_PASSWORD, KPN_CLIENT_SECRET, KPN_MSM_CLIENT_SECRET.
Is KPN Grexx maintained?: The last commit was 40 days ago (2026-09-25). The latest release is v2.3.1.
What can I use instead of KPN Grexx?: Servers from other publishers that do the same job: Omie MCP server, Shopware MCP server and Esimfly MCP server.

Alternatives to KPN Grexx

Same job from other publishers: the closest match first, then the best rated.

Omie
MCP server for Omie — ERP, customers, products, orders, invoices, financials
More from codespar →
not reviewed
Established
B
Shopware
Query and safely manage a Shopware 6 shop: products, orders, customers, stock, audits, reports.
not reviewed
Growing
B
Esimfly
eSIMfly Business API: search eSIM plans, check usage, diagnose eSIMs, optionally order (confirmed)
not reviewed
Growing
A
SkeletIQ
Hand a released SkeletIQ architecture to a coding agent: brief, build order, drift check.
not reviewed
Growing
B
Idea Reality
Pre-build reality check. Scans GitHub, HN, npm, PyPI, Product Hunt — returns 0-100 signal.
not reviewed
Established
B

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 70/100
Stars: 0
Downloads/wk: –
Price: Free
Licence: Apache-2.0
Transport: Local · oci
Version: 2.3.1
Category: E-commerce
Last release: 2026-09-25

Credentials it needs

KPN_GREXX_USERNAMEGrexx API username. Passed to the SDK as the OAuth client_id (portal: API Gegevens). The SDK sends it with HTTP Basic on the token endpoint. This server does not mint the token.
KPN_GREXX_PASSWORDsecretGrexx API password. Passed to the SDK as the OAuth client_secret (scope=all). The SDK sends it with HTTP Basic on the token endpoint.
KPN_GREXX_BASE_URLGrexx interface root, without /realtime. No default; acceptatie and production differ. In gateway mode a connection may override it with X-Grexx-Api-Url (together with X-Grexx-Token-Url, allowlisted Grexx hosts only).
KPN_GREXX_TOKEN_URLOAuth token endpoint. Production differs from acceptatie. In gateway mode a connection may override it with X-Grexx-Token-Url (together with X-Grexx-Api-Url).
KPN_LEGACY_DEVELOPER_APISet to 1 to also register the developer.kpn.com tools (disturbances, availability, SIM swap, MSM). Default is Grexx only.
KPN_CLIENT_IDLegacy developer.kpn.com project client ID. Used only when KPN_LEGACY_DEVELOPER_API=1.
KPN_CLIENT_SECRETsecretLegacy developer.kpn.com project client secret. Used only when KPN_LEGACY_DEVELOPER_API=1, together with KPN_CLIENT_ID.
KPN_MSM_CLIENT_IDOptional legacy MSM app ID. Used only when KPN_LEGACY_DEVELOPER_API=1. Must be paired with KPN_MSM_CLIENT_SECRET.
KPN_MSM_CLIENT_SECRETsecretOptional legacy MSM app secret. Used only when KPN_LEGACY_DEVELOPER_API=1, together with KPN_MSM_CLIENT_ID.
KPN_BASE_URLLegacy developer.kpn.com base URL. Env only. Used only when KPN_LEGACY_DEVELOPER_API=1.
MCP_TRANSPORTTransport mode. Set to 'stdio' for local CLI use; the image defaults to 'http' for gateway hosting.
AUTH_MODECredential source: 'env' reads KPN_GREXX_* locally, 'gateway' expects X-KPN-Grexx-Username and X-KPN-Grexx-Password, plus optional X-Grexx-Api-Url and X-Grexx-Token-Url per connection.
LOG_LEVELLog verbosity: debug, info, warn, error

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/wyre-ai-kpn-mcp.svg)](https://mcp.market/server/wyre-ai-kpn-mcp)

How the badge works