Integrations & API
Kibi Connect in your IT landscape
Kibi Connect connects to what you already run: sign-in via OpenID Connect, SAML or Microsoft Entra ID, an open REST API with webhooks, an MCP server for AI assistants, a ready-made n8n node, WebDAV for file storage and calendar feeds. Non-desk workers land properly in the system, too — without double maintenance.
Identity & SSO
OpenID Connect, SAML 2.0, Microsoft Entra ID and SCIM provisioning.
MCP server
Claude, ChatGPT, Cursor & co. access Kibi with the person's own permissions.
REST API
Token access with scopes to every core area, documented via OpenAPI.
Webhooks
Signed events in real time to your systems — no polling.
n8n & workflows
Ready-made n8n node with 129 operations plus built-in workflows.
Files, WebDAV & DMS
File storage as a network drive, Files API and DMS API.
Calendar & meetings
iCal feed, external calendar subscriptions and meeting links for booking tools.
Your own web apps
Existing web applications right in the Kibi navigation.
Identity & sign-in
Which sign-in methods and identity providers does Kibi Connect support?
OpenID Connect, SAML 2.0 and Microsoft Entra ID — several in parallel, too. Via SCIM 2.0 your identity management creates, updates and locks accounts automatically.
Employees sign in with the account they already have. The administration sets up the identity sources under Integrations; each source gets its own sign-in button. That suits companies running Keycloak, Okta or ADFS just as well as public authorities using eIAM or AGOV. Connect Active Directory and LDAP through Keycloak or ADFS — Kibi Connect does not reach into your directory from the cloud, which keeps the attack surface small.
- OpenID Connect, e.g. Keycloak, Okta, Auth0, ADFS — with discovery and sign-in via PKCE
- SAML 2.0, e.g. ADFS, Shibboleth, Keycloak and public-sector IdPs such as eIAM and AGOV
- Microsoft Entra ID with sign-in and directory sync via Microsoft Graph
- Several identity sources in parallel per organisation, one sign-in button per source
- SCIM 2.0: create, update and lock accounts, assign groups and roles — locking instead of deleting is the default, configurable per source
- Just-in-time creation on first sign-in, with defined default roles
- If your identity provider enforces MFA, you can confirm it — the second prompt in Kibi is skipped
MCP server
How do AI assistants like Claude or ChatGPT access Kibi Connect?
Through the Kibi Connect MCP server. AI assistants act on behalf of a person, with their permissions — and your organisation stays in control with one toggle.
The Model Context Protocol (MCP) is the open standard AI assistants use to reach tools and data. Claude, ChatGPT, Cursor and other MCP clients connect to your platform via OAuth and can then search the wiki, find free slots or create tasks, for example. The client sees the tools of every installed area and always acts with exactly the permissions of the signed-in person — what that person may not do in Kibi Connect, their AI assistant may not do either. The other way round, Kai — the Kibi Connect AI assistant — uses external MCP servers as connectors, organisation-wide or, if you allow it, per person.
- Full control for your organisation: the MCP server is ready to use right away, and a single toggle in the administration switches it off — effective immediately for every connected AI client
- OAuth sign-in with dynamic client registration — no copying tokens by hand
- Tools for every installed area, such as wiki, posts, calendar, tasks, chat, files and notes
- The AI client works with exactly the signed-in person's permissions — for reading and writing
- Every tool call is logged
- Connected clients can be revoked at any time
REST API
What can the Kibi Connect REST API do?
It reads and writes content from every core area — wiki, posts, calendar, tasks, chat, groups, people, files and notes.
Create tokens in your profile under Integrations and grant separate read and write rights per area. Every request runs with the permissions of the person who owns the token — the API never sees more than that person does in the platform. Exchange formatted text as TipTap JSON, HTML or Markdown. For a lasting sync with a leading system such as SharePoint or GitHub there are external IDs, upserts, conflict detection and loop protection.
- Bearer tokens with separate read and write scopes per area
- Rate limits per token: 120 read requests/min, 30 write requests/min
- Rich text as TipTap JSON, HTML or Markdown
- Sync with external systems: external IDs, upserts, conflict detection
- Meeting links API: booking systems mint join links for Kibi calls
- OpenAPI documentation at kibi.de/docs/api
Webhooks
How do other systems learn about changes in Kibi Connect?
Through signed webhooks: Kibi Connect reports new employees, events or completed tasks to your URL right away — no polling.
Administrators create webhook endpoints under Administration › Integrations and pick the events they need. Every delivery carries an HMAC-SHA256 signature, a unique delivery ID and whether the change came in through the API and from which integration. That lets your system recognise its own writes and avoid endless loops.
- 19 events: people, posts, calendar events, tasks, groups and wiki pages
- Signature in the X-Kibi-Signature header (HMAC-SHA256)
- Retries and a delivery log for every dispatch
- Automatic deactivation on persistent failures
- Endpoints can also be managed via the API
n8n & workflows
How do I automate processes with n8n and Kibi Connect?
With the ready-made n8n node @weslink/n8n-nodes-kibi-connect: 129 operations plus a trigger on Kibi events, installable right inside n8n.
The node is published on npm and installed in n8n under Settings › Community Nodes. It covers the REST API from chat and feed to files, documents, groups and time tracking; the trigger reacts to signed webhook events from Kibi Connect. For processes inside the platform there are also built-in workflows: they react to events in Kibi Connect and call external interfaces through stored connections.
- n8n node @weslink/n8n-nodes-kibi-connect with 129 operations, including the Files API
- Trigger node for signed Kibi webhooks
- Built-in workflows with API calls to Odoo and HTTP interfaces
- Credentials for third-party systems managed centrally under Administration › Integrations › Third-party systems
Files & documents
How do I connect Kibi file storage to Finder, Explorer or other systems?
Via WebDAV as a network drive in Finder, Windows Explorer or the iOS Files app — and through the Files API for syncing and custom integrations.
With WebDAV, employees open a file from Kibi Connect straight in Word, Excel or a PDF editor; saving puts the new version back into the platform without downloading and re-uploading. They create their own WebDAV token in their profile, which can be revoked independently. The Files API uses the same permissions, versions and locks and powers the Kibi desktop clients. For ERP systems, invoice approval or archives, the DMS API provides documents including their extracted metadata.
- WebDAV (RFC 4918) for macOS Finder, Windows Explorer, iOS Files and Android file managers
- A personal WebDAV token per person, revocable at any time
- Files API: REST and WebSocket with versions, locks, trash and share links
- DMS API: read and upload documents with document type, sender, amounts and retention period
- Every access runs with the respective person's permissions
Calendar & meetings
How do Kibi events get into Outlook, Google or Apple Calendar?
Through a personal iCal feed that employees subscribe to in any common calendar. External iCal calendars can be shown in Kibi, too.
Employees create the feed link themselves; changes in Kibi Connect show up in the subscribed calendar automatically. The other way round, you subscribe to external iCal calendars — public holidays or shift plans, for example — for yourself or offer them to the whole organisation as recommended calendars. Booking systems such as Odoo mint join links for Kibi calls through the API: guests join via link without an account, and reschedules or cancellations are carried over.
- iCal feed (.ics) with a personal, revocable token
- External iCal subscriptions, personal or organisation-wide
- Meeting links API for booking systems (reference: Odoo appointments)
- Events also reachable via REST API, webhooks and the MCP server
Your own web apps
Can I bring my own web applications into Kibi Connect?
Yes. Machine portals, booking systems or internal pages appear as their own entry in the navigation and open right inside the platform.
Employees reach all their tools in one place — no media break and no separate bookmark, on the smartphone too. The other way round, Kibi Connect itself can be embedded in existing portals: you decide in the security settings which domains may do so.
- Any URL as a navigation entry with its own name and icon
- Configured in the administration
- Embed Kibi Connect in your own portals — on approved domains only
- Works with anything that can be embedded in an iframe
Data ownership
Your data stays yours — at any time.
Kibi Connect is an open platform — what goes in comes out again. Use the REST API to export all your content whenever you want. At the end of a contract your data is deleted in line with the GDPR.
- Full data export via the REST API — whenever you want
- Hosted in Germany/EU (Hetzner), GDPR-compliant
- No third-party sharing, no US cloud
- End of contract: your data is deleted in line with the GDPR
Special integrations
Integrations for specific use cases — not relevant for every organisation, but ready to use.
-
Time tracking with DATEV export
The monthly close produces a DATEV payroll CSV with actual and target hours, overtime, vacation and sick days, and Sunday and night hours — for payroll preparation by your tax advisor.
-
RO.CAS for Rotary clubs
Syncs members, addresses, club offices and events from the Rotary club administration RO.CAS — daily, weekly or manually, with a dry run.
-
Calendar sync with Google and Microsoft 365
Sync events in both directions with Google Calendar and Microsoft 365. Currently in a pilot phase, available on request.
Missing an integration?
Get in touch. We check with you whether it can be built via the REST API, webhooks or n8n — or build it together with you.
Frequently asked questions about integrations
Does Kibi Connect support Microsoft Entra ID (Azure AD)?
Yes. Employees sign in via OpenID Connect with their Microsoft account. A directory sync via Microsoft Graph creates new people automatically, keeps name, job title, department, office location and optionally the profile photo up to date, and locks or removes accounts disabled in Entra ID. Install the integration from the module catalog.
Does Kibi Connect have an MCP server?
Yes. Through the MCP server, AI assistants such as Claude, ChatGPT or Cursor connect to Kibi Connect via OAuth and act on behalf of the signed-in person — with exactly their permissions. The MCP server is ready to use in every organisation, and you stay in control: a single toggle in the administration switches it off or on again — effective immediately. Every tool call is logged, and connected clients can be revoked at any time.
Is there a public REST API?
Yes. An open REST API with bearer tokens and separate read and write scopes per area, documented via OpenAPI at kibi.de/docs/api. Rich text can be read and written as TipTap JSON, HTML or Markdown; for syncing with external systems there are external IDs, upserts and conflict detection.
How do webhooks work?
Webhook endpoints are configured in the administration under Integrations. Kibi Connect delivers 19 event types signed with HMAC-SHA256 (X-Kibi-Signature header) to your URL — with retries and a delivery log. Persistent failures deactivate the endpoint automatically.
Is there a connector for n8n?
Yes: the community node @weslink/n8n-nodes-kibi-connect is on npm and installs in n8n under Settings › Community Nodes. It ships 129 operations from chat and feed to files, documents, groups and time tracking, plus a trigger for signed webhook events. Connect other automation platforms via the REST API and webhooks.
Can I mount Kibi file storage as a network drive?
Yes, via WebDAV. Finder, Windows Explorer, the iOS Files app and Android file managers mount the file storage as a drive. Sign-in uses your own e-mail address and a WebDAV token from your profile that can be revoked at any time. The same permissions, versions and locks apply as in the browser.
Which sign-in methods and identity providers does Kibi Connect support?
OpenID Connect (e.g. Keycloak, Okta, Auth0, ADFS), SAML 2.0 (e.g. ADFS, Shibboleth, public-sector IdPs such as eIAM and AGOV) and Microsoft Entra ID — several sources in parallel, each with its own sign-in button. Connect Active Directory and LDAP through Keycloak or ADFS. The administration sets this up under Integrations.
Does Kibi Connect support SCIM provisioning?
Yes, SCIM 2.0. Your identity management creates, updates and locks accounts automatically and assigns groups and roles. By default accounts are locked instead of deleted; this can be changed per identity source. Alternatively Kibi Connect creates accounts on first sign-in via just-in-time creation with default roles.
How do I add the Kibi calendar to Outlook?
Create an iCal feed token in your personal settings and subscribe to the generated .ics URL in Outlook (File › Account Settings › Internet Calendars). It works the same way for Apple Calendar and Google Calendar.
Can I embed my own web apps in Kibi?
Yes. Any URL can be added as a navigation entry in Kibi Connect and opens right inside the platform — machine portals, booking systems or internal websites, for example.
Can time tracking be handed over to DATEV?
Yes, monthly as a DATEV payroll CSV. It contains actual/target hours, overtime, vacation and sick days, and Sunday and night hours, and imports into your tax advisor's payroll software.
Where is the data stored?
On Hetzner servers in Germany, GDPR-compliant. No US cloud, no sharing with third parties.
Need an integration not listed here?
We help connect Kibi to your existing IT — directly or via our API. Reach out and we'll openly discuss feasibility and effort with you.
Your contacts at Kibi
Christofer, Maria, Verena
Christofer, Maria and Verena advise you personally, run demos and webinars, and guide you through the rollout in your company.