HomeCommunication › CardDAV address books

CardDAV address books

Read and write CardDAV address books: contacts, groups and photos over the open standard

TypeScript CloudLocal
★ 0 stars Last pushed 2026-09-20 License: MIT

Topics: Communication

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package (npm 0.1.3)

npx -y @ni-c/carddav-mcp@0.1.3

Or add to your MCP client config:

{
  "mcpServers": {
    "carddav-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@ni-c/carddav-mcp@0.1.3"
      ],
      "env": {
        "CARDDAV_URL": "<YOUR_VALUE>",
        "CARDDAV_USERNAME": "<YOUR_VALUE>",
        "CARDDAV_PASSWORD": "<YOUR_VALUE>",
        "CARDDAV_TOKEN": "<YOUR_VALUE>",
        "CARDDAV_ADDRESSBOOKS": "<YOUR_VALUE>",
        "CARDDAV_MAX_CONTACTS": "<YOUR_VALUE>",
        "CARDDAV_READ_ONLY": "<YOUR_VALUE>",
        "CARDDAV_INSECURE_TLS": "<YOUR_VALUE>",
        "CARDDAV_ALLOW_PLAINTEXT": "<YOUR_VALUE>",
        "CARDDAV_ALLOW_TOOLS": "<YOUR_VALUE>",
        "CARDDAV_DENY_TOOLS": "<YOUR_VALUE>",
        "ELICITATION": "<YOUR_VALUE>"
      }
    }
  }
}
  • CARDDAV_URL required — Root of the CardDAV server, e.g. https://dav.example.net. An address book collection URL also works.
  • CARDDAV_USERNAME — Account name. Most hosted services want an app-specific password with it.
  • CARDDAV_PASSWORD secret — Password or app-specific password. Deleted from the environment once read.
  • CARDDAV_TOKEN secret — Bearer token, as an alternative to username and password. Not both.
  • CARDDAV_ADDRESSBOOKS — Comma-separated address books this server may touch, by path or final path segment. Default: all of them.
  • CARDDAV_MAX_CONTACTS — Contacts a listing returns by default, 1 to 500 (default: 100)
  • CARDDAV_READ_ONLY — Set to true to register only the read tools (default: false)
  • CARDDAV_INSECURE_TLS — Set to true to accept a self-signed certificate on the configured host only (default: false)
  • CARDDAV_ALLOW_PLAINTEXT — Set to true to allow a plain http:// URL to a host that is not loopback, which sends the credentials and every contact unencrypted (default: false)
  • CARDDAV_ALLOW_TOOLS — Comma-separated tool names or list_* prefixes to register; 'essential' selects a curated preset (default: all tools)
  • CARDDAV_DENY_TOOLS — Comma-separated tool names or list_* prefixes to remove from whatever the allow list left
  • ELICITATION — Deliberately unprefixed, and reaches every MCP server in the environment. Set to false to make guarded tools use the two-call token instead of a dialog (default: true)

Package (oci)

docker run -i --rm ghcr.io/ni-c/carddav-mcp:0.1.3

Or add to your MCP client config:

{
  "mcpServers": {
    "carddav-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/ni-c/carddav-mcp:0.1.3"
      ],
      "env": {
        "CARDDAV_URL": "<YOUR_VALUE>",
        "CARDDAV_USERNAME": "<YOUR_VALUE>",
        "CARDDAV_PASSWORD": "<YOUR_VALUE>",
        "CARDDAV_TOKEN": "<YOUR_VALUE>",
        "CARDDAV_ADDRESSBOOKS": "<YOUR_VALUE>",
        "CARDDAV_MAX_CONTACTS": "<YOUR_VALUE>",
        "CARDDAV_READ_ONLY": "<YOUR_VALUE>",
        "CARDDAV_INSECURE_TLS": "<YOUR_VALUE>",
        "CARDDAV_ALLOW_PLAINTEXT": "<YOUR_VALUE>",
        "CARDDAV_ALLOW_TOOLS": "<YOUR_VALUE>",
        "CARDDAV_DENY_TOOLS": "<YOUR_VALUE>",
        "ELICITATION": "<YOUR_VALUE>"
      }
    }
  }
}
  • CARDDAV_URL required — Root of the CardDAV server, e.g. https://dav.example.net. An address book collection URL also works.
  • CARDDAV_USERNAME — Account name. Most hosted services want an app-specific password with it.
  • CARDDAV_PASSWORD secret — Password or app-specific password. Deleted from the environment once read.
  • CARDDAV_TOKEN secret — Bearer token, as an alternative to username and password. Not both.
  • CARDDAV_ADDRESSBOOKS — Comma-separated address books this server may touch, by path or final path segment. Default: all of them.
  • CARDDAV_MAX_CONTACTS — Contacts a listing returns by default, 1 to 500 (default: 100)
  • CARDDAV_READ_ONLY — Set to true to register only the read tools (default: false)
  • CARDDAV_INSECURE_TLS — Set to true to accept a self-signed certificate on the configured host only (default: false)
  • CARDDAV_ALLOW_PLAINTEXT — Set to true to allow a plain http:// URL to a host that is not loopback, which sends the credentials and every contact unencrypted (default: false)
  • CARDDAV_ALLOW_TOOLS — Comma-separated tool names or list_* prefixes to register; 'essential' selects a curated preset (default: all tools)
  • CARDDAV_DENY_TOOLS — Comma-separated tool names or list_* prefixes to remove from whatever the allow list left
  • ELICITATION — Deliberately unprefixed, and reaches every MCP server in the environment. Set to false to make guarded tools use the two-call token instead of a dialog (default: true)

Related servers

Listed in punkpeye/awesome-mcp-servers (MIT)

Data from the Official MCP Registry