C

Zendesk MCP Server

Community TypeScript MCP server for Zendesk Support ticket management

Overall Score67/100

Score Breakdown

Server Info

Package
zd-mcp-server
Registry
npm
Maintainer
Community
Category
Customer Support
Tags
ticketssupporthelpdesk
Last Scanned
7 Apr 2026

Findings

4 issues

Authentication & Identity

HIGHNo per-request auth - requires instance-per-user

Stdio-only transport. Requires three environment variables for Zendesk API token authentication. The env vars are validated at module load time with a throw if missing. Credentials are shared across all tool invocations via a module-level client. For multi-tenant deployment, the platform must spawn a separate server instance per user.

Remediation

Add HTTP/SSE transport to accept per-request Authorization headers, or implement the MCP OAuth spec.

Tool Schema Quality

MEDIUMOnly 2 of 8 schemas have parameter constraints

Most schemas lack maxLength, enum, or pattern constraints on string parameters.

Remediation

Add constraints to string parameters, especially on write operations.

Data Exposure

LOWNo field selection on responses

Responses return full records rather than projected fields.

Remediation

Implement field selection to return only relevant fields.

Maintenance & Trust

LOWCommunity-maintained by Girish Koundinya

No official vendor backing.

Remediation

Seek vendor verification.

Tools

8 total
NameDescriptionRisk
zendesk_get_ticketGet a Zendesk ticket by IDread
zendesk_update_ticketUpdate a Zendesk ticket's propertieswrite
zendesk_create_ticketCreate a new Zendesk ticketwrite
zendesk_add_private_noteAdd a private internal note to a Zendesk ticketwrite
zendesk_add_public_noteAdd a public comment to a Zendesk ticketwrite
zendesk_searchSearch for Zendesk tickets based on a queryread
zendesk_get_ticket_detailsGet detailed information about a Zendesk ticket including commentsread
zendesk_get_linked_incidentsFetch all incident tickets linked to a particular ticketread

Deploy Zendesk MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow