centerfield-visitor-mcp
io.github.hmkim/centerfield-visitor-mcp
Centerfield building (Seoul) visitor pre-registration: validate, preview and register visitors.
Documentation
Centerfield Visitor MCP
An MCP (Model Context Protocol) server that automates
visitor reservations for the Centerfield building (www.centerfield.co.kr).
Use it from any MCP-compatible agent — Kiro CLI / Kiro IDE / KiroCrew, Claude Code, Claude Desktop,
Codex CLI, Cursor, Strands Agents (local stdio) and Amazon Quick or any remote client (streamable HTTP) —
to register visitors with natural language: single entries, pasted text, survey exports, or Excel/CSV files.
센터필드 빌딩 방문예약을 자동화하는 MCP 서버입니다. 로컬 에이전트(Kiro, Claude Code, Codex, Cursor …)는 stdio로, Amazon Quick 같은 원격 에이전트는 streamable HTTP로 같은 서버를 씁니다.
The stdio server runs entirely locally — uvx downloads and runs it on your machine, and it talks
directly to www.centerfield.co.kr. No backend service is required for local agents.
Quick start
mkdir -p ~/.config/centerfield-visitor-mcp
cp .env.example ~/.config/centerfield-visitor-mcp/.env # fill CF_COMPANY_NAME, CF_PERSON_IN_CHARGE_MOBILE
uvx centerfield-visitor-mcp # stdio; every client below can launch this
~/.config/centerfield-visitor-mcp/.env is read automatically, so client configs need no secrets.
Client setup
| Client | How | Details |
|---|---|---|
| Kiro CLI | ~/.kiro/settings/mcp.json | clients/kiro/mcp.json |
| Kiro IDE | .kiro/settings/mcp.json (workspace) | same file |
| KiroCrew | agent JSON mcpServers + tools | clients/kirocrew/agent-snippet.json |
| Claude Code | claude mcp add centerfield-visitor --scope user -- uvx centerfield-visitor-mcp | clients/claude-code/ |
| Claude Desktop | claude_desktop_config.json | clients/claude-desktop/ |
| Codex CLI | ~/.codex/config.toml [mcp_servers.centerfield-visitor] | clients/codex/config.toml |
| Cursor | .cursor/mcp.json | clients/cursor/mcp.json |
| Strands Agents | MCPClient(stdio_client(...)) | clients/strands/example.py |
| Amazon Quick | remote streamable HTTP + OAuth 2LO | clients/remote/README.md |
Agent skill (Agent Skills spec, works in Claude Code / Kiro / KiroCrew): SKILL.md —
also shipped as the project skill .claude/skills/centerfield-visitor/SKILL.md.
Tools
| Tool | Side effect | Notes |
|---|---|---|
validate_configuration() | none | Checks company, approval contact and floor list against the live site |
preview_visitors_from_text(text, default_visit_date, default_visit_time, default_floor, default_purpose, participation) | none | Parse + validate pasted CSV/TSV |
register_visitor(..., dry_run) | creates a reservation | dry_run=true validates (input + site) without submitting |
register_visitors_from_text(text, defaults…, participation, dry_run) | creates reservations | Sequential, one summary string returned |
preview_visitors_from_file(file_path, defaults…, participation) | none | stdio deployments only (needs a shared filesystem) |
register_visitors_from_file(file_path, defaults…, participation, dry_run) | creates reservations | stdio deployments only |
register_* tools exist only while CF_EXPOSE_WRITE_TOOLS is true (default).
Recommended flow: validate_configuration once → preview_* → human confirms → register_*.
The default_* arguments fill columns that attendee lists usually lack (visit date/time/floor).
participation keeps only rows whose attendance-type column contains the given text (see below).
Previews mask mobile numbers and emails (010******78, h***@example.com); pass the original
values to register_*.
With CF_EXPOSE_WRITE_TOOLS=false the three register_* tools are not registered at all, so the
server is preview-only regardless of what a client sends.
Reservation outcomes
Every visitor gets one status (ReservationResult.status; success is kept for compatibility
and is true only for SUCCEEDED):
| Status | Meaning | What to do |
|---|---|---|
SUCCEEDED | Centerfield answered success: true (dry run: validated, nothing submitted). No reservation id is returned by the site | done |
FAILED | Definitely not created: explicit success: false, HTTP 4xx except 408/429, validation/setup error, or the connection was never established | fix the cause, run a new preview, get approval, retry that row only |
UNKNOWN | The request may have been processed but the outcome is unconfirmed: HTTP 408/429/5xx, read/write timeout, read/write error, remote protocol error, non-JSON or unrecognised response | do not retry; check the Centerfield app/site first |
NOT_SUBMITTED | Not sent because an earlier row in the same bulk call was UNKNOWN | resolve the UNKNOWN row, then preview + approve again |
Bulk calls stop at the first UNKNOWN. The summary always reads
총 N명 중 A명 성공, B명 실패, C명 결과 불명(UNKNOWN), D명 미제출(NOT_SUBMITTED);
BulkReservationOut carries succeeded, failed, unknown, not_submitted (they add up to total)
and stopped_on_unknown. failed now counts only definite failures (it used to be total - succeeded).
Logs record only the error class and HTTP status, never the site's response text or visitor data.
Input constraints
| Field | Rule |
|---|---|
visit_time | HH:MM, 30-minute intervals, 08:00–20:00 (HH:MM:SS from spreadsheets tolerated) |
visit_date | YYYY-MM-DD, today or later in Asia/Seoul, whatever the host time zone; date + time already passed in Seoul is rejected |
floor | 12 or 18; if omitted, CF_DEFAULT_FLOOR (default 12) |
visit_purpose | meeting (default), visit_business, interview, tour, construction, others |
visitor_mobile | Korean mobile only (a site requirement); 010-1234-5678, 010 1234 5678, +82 10-1234-5678 are normalized to 01012345678; empty or non-Korean numbers are rejected. Visitors without a Korean mobile need Centerfield's manual process |
visitor_email | valid email address |
| duplicates | rows with the same mobile + date + time inside one request are skipped and reported |
File / text format
Header row in Korean or English; survey-export headers are recognized too
(Full Name, Email, 연락처(…), 소속/회사 (…)). Unknown columns are ignored.
이름,회사,전화번호,이메일,방문일,방문시간,층
홍길동,ABC주식회사,01012345678,hong@abc.com,2026-11-15,10:00,12
Lists without date/time columns: pass default_visit_date="2026-11-15", default_visit_time="10:00".
Attendance type (survey exports): a column such as 참석 형태 / 어떤 형태로 참석하시나요? / Participation
is detected and summarised in the preview (참석 형태 컬럼 감지: 온라인 7, 오프라인 3). Pass
participation="오프라인" to process only rows whose value contains that text (case/space-insensitive; rows
with an empty value are dropped and counted). If a filter is requested but the input has no such column,
register_* refuses instead of registering everyone, and preview_* shows the unfiltered rows under a warning.
Configuration
| Variable | Description | Default | Required |
|---|---|---|---|
CF_COMPANY_NAME | Tenant company name as registered in Centerfield | (empty) | ✅ |
CF_PERSON_IN_CHARGE_MOBILE | Mobile number of the approval contact registered in Centerfield | (empty) | ✅ |
CF_BUILDING / CF_BUILDING_KEY | Building code / display key | east / East | |
CF_DEFAULT_FLOOR | Floor when a row omits it (12 or 18) | 12 | |
CF_TRANSPORT | stdio or streamable-http | stdio | |
CF_HTTP_HOST / CF_HTTP_PORT / CF_HTTP_PATH | HTTP bind address and path | 127.0.0.1 / 8000 / /mcp | |
CF_HTTP_STATELESS / CF_HTTP_JSON_RESPONSE | Streamable HTTP mode | true / true | |
CF_HTTP_ALLOWED_HOSTS | Host allow-list for DNS-rebinding protection (host:* = any port). Empty: loopback binds use a built-in localhost list; other binds run with protection off and log a warning | (empty) | |
CF_EXPOSE_FILE_TOOLS | Force file tools on/off | on for stdio, off for HTTP | |
CF_EXPOSE_WRITE_TOOLS | Register the reservation-creating register_* tools. false = preview-only server (tools absent from the tool list). Remote deployments should set it explicitly per endpoint | true | |
CF_CENTERFIELD_BASE_URL | Centerfield base URL | https://www.centerfield.co.kr | |
CF_REQUEST_TIMEOUT | HTTP timeout (seconds) | 30 | |
CF_BULK_MAX_VISITORS | Max visitors per bulk request (default 20; use 10 as a conservative Amazon Quick cap) | 20 | |
CF_REQUEST_DELAY | Delay between submissions (seconds) | 0.5 | |
CF_ENV_FILE | Extra .env to load | (unset) |
.env load order (later overrides earlier): ~/.config/centerfield-visitor-mcp/.env → ./.env → $CF_ENV_FILE;
process environment variables always win. Startup logs (stderr) list the files read and any problems.
CF_PERSON_IN_CHARGE_MOBILEmust be the mobile number registered as the tenant's approval contact. Runvalidate_configurationafter setup — it checks both values live without creating a reservation.
Remote mode (Amazon Quick, hosted deployments)
CF_TRANSPORT=streamable-http CF_HTTP_HOST=0.0.0.0 uvx centerfield-visitor-mcp # http://host:8000/mcp
docker build --platform linux/arm64 -t centerfield-visitor-mcp . # or the container image
See clients/remote/README.md for the AgentCore Runtime + Cognito recipe and the
Amazon Quick connector steps. Works with mcp SDK 1.x and 2.x.
Development & testing
uv sync --group dev
uv run pytest # offline unit tests (mocked HTTP)
uv run --with "mcp<2" pytest # same suite on mcp SDK 1.x
uv run python scripts/smoke_http.py # streamable-http transport smoke test
uv run pytest -m live # read-only checks against the live site (needs a real .env)
CF_LIVE_REGISTER=1 CF_TEST_VISITOR_NAME=... CF_TEST_VISITOR_MOBILE=... CF_TEST_VISITOR_EMAIL=... uv run pytest -m live
The last command creates one real reservation; confirm it in the Centerfield mobile app and cancel it there (there is no cancel API).
How it works
The server holds a single session against the Centerfield site, manages CSRF tokens, verifies the tenant company
and approval contact, resolves the floor key, then submits the reservation form. Bulk requests are processed
sequentially with a configurable delay and stop at the first UNKNOWN outcome.
Known limitations
- No server-enforced preview → approval → write binding. The server does not issue a preview token that
register_*must present, so "a human approved exactly this list" is enforced by the agent skill and the client's tool-approval prompt, not by the server. A token scheme was deliberately left out until a stateless design is settled (the HTTP transport is stateless, so the token must be verifiable without server-side storage, bound to the exact normalized input, short-lived, and replay-safe). Until then, keep per-call approval on forregister_*in your client (do not "always allow"), and useCF_EXPOSE_WRITE_TOOLS=falsefor endpoints that should only preview. - No reservation id. The site's success response carries no identifier the server can return;
SUCCEEDEDmeans "the site answeredsuccess: true". Check the Centerfield app for the booking itself. - No cancel API. Cancel wrong bookings in the Centerfield app/site.
MCP Registry
Listed as io.github.hmkim/centerfield-visitor-mcp (see server.json).
mcp-name: io.github.hmkim/centerfield-visitor-mcp
License
centerfield-visitor-mcppip install centerfield-visitor-mcp