Skip to main content
Compare

Accounting MCP servers · sources checked November 1, 2026

Which accounting MCP server can your AI assistant trust with your books?

QuickBooks Online, Xero, Expensify, Puzzle and Beancount.io each publish an MCP server an AI assistant such as Claude can connect to. Here is what each one can read and write, how it signs in, and whether you can preview and undo an AI's edit.

Try DemoStart Free→
  • Every claim cites the vendor's own docs, checked November 1, 2026
  • Published by Beancount.io, which is one of the five servers ranked
  • "Unverified" means the vendor docs do not say, never that a feature is missing
Compare features

How this comparison was made

The ranking answers one question: how safely can an AI assistant change your books? Servers that write, show you the change first and keep a record you can revert rank highest; read-only servers rank last because they cannot change anything. If your books already live in one of these products, read its best-for line rather than its rank.

Read and write scope
What the assistant can read, and which records it can create, change or delete.
Authentication
How the connection signs in, what you approve, and how long it stays signed in where the vendor says.
Preview before a write
Whether you see a proposed change, or confirm it, before it is written to your books.
Where the data lives
Where the books live and where the server runs: the vendor's cloud, your machine, or a git repository.
Audit and undo
Whether an edit made through MCP leaves a record you can inspect and revert.
Supported clients
Which AI apps the vendor documents as supported.
What it takes to use
What you need before you can connect. No vendor publishes a separate MCP price.

Seven criteria, five accounting MCP servers

Every cell comes from the vendor's own documentation, checked November 1, 2026. "Unverified" means those sources do not say; it does not mean the feature is missing. QuickBooks and Xero cells describe the hosted server first and the open-source one second.

Read and write scope

Beancount.io
Read and write: BQL queries, files, entries, ledger checks; append, edit and delete files, bank imports, pull requests
QuickBooks Online
Read and write: reports and business data; creates invoices, estimates, payment links and customers, imports transactions. Open-source server: 145 tools
Puzzle
Read-only by default; write Beta per connection for categorization, bills, invoices, journal entries and reconciliation
Xero
Read and write: 18 read and 21 write tools (create, update, authorise, void); no delete tool listed
Expensify
Read-only: its Search tool over expenses and reports

Authentication

Beancount.io
OAuth 2.1 with PKCE and dynamic client registration; approve one ledger or all; static token for other clients
QuickBooks Online
Sign in with Intuit and grant permissions. Open-source server: your own Intuit developer app and OAuth 2.0
Puzzle
OAuth with your Puzzle account; stays signed in while used at least once every 30 days
Xero
OAuth 2.0 with PKCE; you pick organisations and approve scopes; refresh tokens last 60 days
Expensify
OAuth 2.1 with PKCE; revoke by removing the server from your client

Preview before a write

Beancount.io
dry_run on 19 write tools; unified diff for file edits; pull requests for review
QuickBooks Online
Confirmation required for destructive actions; general dry-run: Unverified
Puzzle
Confirms each change before making it; dry-run mode: Unverified
Xero
V1 tools do not ask for confirmation; Xero advises adding your own step
Expensify
Not applicable: read-only

Where the data lives

Beancount.io
Plain-text Beancount files in a git repository on Web Beancount
QuickBooks Online
Your QuickBooks Online company in Intuit's cloud; the open-source server runs on your machine
Puzzle
Your Puzzle company in Puzzle's cloud, through a remote connector
Xero
Your Xero organisation in Xero's cloud; hosted server, or open-source server run locally
Expensify
Your Expensify account, through a server Expensify hosts

Audit and undo

Beancount.io
Every change is a git commit, revertible with standard git tools
QuickBooks Online
Unverified
Puzzle
Unverified; writes can be switched off per connection
Xero
Unverified; Xero's usual invoice status rules still apply
Expensify
Not applicable: read-only

Supported clients

Beancount.io
Claude Code, Claude Desktop, Cursor, Windsurf, Zed and any OAuth 2.1 MCP client
QuickBooks Online
Claude (US), ChatGPT plugin; open-source server: Claude Code and other MCP clients
Puzzle
Claude.ai on any plan, ChatGPT, Cursor, Codex
Xero
Any MCP client, including Claude Desktop, Claude Code, Cursor and VS Code
Expensify
Claude, ChatGPT, Cursor and other MCP clients

What it takes to use

Beancount.io
Available to all Web Beancount users
QuickBooks Online
Active QuickBooks Online or Intuit Enterprise Suite subscription, US only; connector price not published
Puzzle
A Puzzle account; free-plan companies drop to a limited read-only set after a grace period
Xero
Included for Commercial Apps on the Core developer plan or above; Starter apps reach the demo organisation only
Expensify
Any Expensify account; MCP price not published

The five accounting MCP servers, one section each

Ranked by how safely an assistant can change your books. Each section links straight to the vendor documents behind it, so you can check every line yourself.

  1. Beancount.io MCP server

    Hosted on Web Beancount · OAuth 2.1, one ledger or all

    #beancount-mcp Link to this section

    Reads and writes a plain-text Beancount ledger in git: 44 tools, dry_run previews on 19 write tools, and every applied edit a revertible git commit.

    An assistant can run BQL queries, read ledger files and entries, check the ledger, append entries, edit files, stage bank imports and open pull requests. File tools return a unified diff before anything is written, and each change lands as an "AI edit" commit you can inspect or revert with ordinary git tools.

    Best for: Previewed, git-committed edits on a plain-text ledger you can always read.

    Read and write scope
    Read and write: BQL queries, files, entries, ledger checks; append, edit and delete files, bank imports, pull requests
    Authentication
    OAuth 2.1 with PKCE and dynamic client registration; approve one ledger or all; static token for other clients
    Preview before a write
    dry_run on 19 write tools; unified diff for file edits; pull requests for review
    Where the data lives
    Plain-text Beancount files in a git repository on Web Beancount
    Audit and undo
    Every change is a git commit, revertible with standard git tools
    Supported clients
    Claude Code, Claude Desktop, Cursor, Windsurf, Zed and any OAuth 2.1 MCP client
    What it takes to use
    Available to all Web Beancount users

    Strengths

    • dry_run previews on 19 write tools, with a unified diff for file edits
    • Every applied change is a git commit, revertible with standard git tools
    • Signs in with OAuth 2.1 and PKCE; you approve one ledger or all of them

    Trade-offs

    • Your books must be a Beancount ledger, so moving from another product means converting first
    • A write applied without a preview can still report validation errors after it lands

    Sources, checked November 1, 2026

    Install Beancount MCP in your AI clientStart Free→

  2. QuickBooks Online MCP server

    US QuickBooks Online subscription · connector price not published

    #quickbooks-mcp Link to this section

    Intuit's hosted QuickBooks connector for Claude writes invoices, estimates and customers in US QuickBooks Online companies; an open-source server covers 145 tools.

    The hosted connector reads reports and business data, creates invoices, estimates, payment links, customers and items, updates sales documents and imports transactions, and asks you to confirm destructive actions such as deleting an invoice. The open-source server runs on your machine with your own Intuit developer app and can switch its create, update or delete tools off.

    Best for: Assistant work inside an existing US QuickBooks Online company.

    Read and write scope
    Read and write: reports and business data; creates invoices, estimates, payment links and customers, imports transactions. Open-source server: 145 tools
    Authentication
    Sign in with Intuit and grant permissions. Open-source server: your own Intuit developer app and OAuth 2.0
    Preview before a write
    Confirmation required for destructive actions; general dry-run: Unverified
    Where the data lives
    Your QuickBooks Online company in Intuit's cloud; the open-source server runs on your machine
    Audit and undo
    Unverified
    Supported clients
    Claude (US), ChatGPT plugin; open-source server: Claude Code and other MCP clients
    What it takes to use
    Active QuickBooks Online or Intuit Enterprise Suite subscription, US only; connector price not published

    Strengths

    • Hosted connector needs no developer app: sign in with your Intuit account
    • Destructive actions such as deleting an invoice require your confirmation
    • Open-source server: 145 tools over 29 entity types plus 11 reports

    Trade-offs

    • Hosted connector is available to US customers only
    • Audit trail or undo for MCP edits is unverified in Intuit's docs

    Sources, checked November 1, 2026

  3. Puzzle MCP server

    Puzzle account · MCP price not published

    #puzzle-mcp Link to this section

    Puzzle's remote connector starts read-only; a per-connection write Beta categorizes, bills, invoices, journals and reconciles, confirming each change first.

    New connections can read the balance sheet, income statement, transactions and more. Turning on the write Beta for a connection lets the assistant categorize transactions, create bills, invoices and journal entries and reconcile accounts, and it confirms each change with you before making it. You can turn write access off again per connection.

    Best for: Read-only questions by default, with opt-in writes that confirm each change.

    Read and write scope
    Read-only by default; write Beta per connection for categorization, bills, invoices, journal entries and reconciliation
    Authentication
    OAuth with your Puzzle account; stays signed in while used at least once every 30 days
    Preview before a write
    Confirms each change before making it; dry-run mode: Unverified
    Where the data lives
    Your Puzzle company in Puzzle's cloud, through a remote connector
    Audit and undo
    Unverified; writes can be switched off per connection
    Supported clients
    Claude.ai on any plan, ChatGPT, Cursor, Codex
    What it takes to use
    A Puzzle account; free-plan companies drop to a limited read-only set after a grace period

    Strengths

    • Read-only unless you enable writes for that connection
    • With writes on, the assistant confirms each change before making it

    Trade-offs

    • Write access is a Beta
    • Audit trail or undo for MCP edits is unverified in Puzzle's docs

    Sources, checked November 1, 2026

  4. Xero MCP server

    Core developer plan or above · no extra charge for Remote MCP

    #xero-mcp Link to this section

    Xero's hosted Remote MCP server is generally available with 39 tools that read and create, update, authorise or void invoices, contacts, payments and journals.

    Nothing to install: the hosted server signs in with OAuth 2.0 and PKCE, and each call runs against one organisation with only the scopes your app was granted. Xero states its V1 tools do not ask for confirmation and advises building that step into your agent. An MIT-licensed open-source server also runs locally.

    Best for: Developers who want broad hosted read and write and will build their own confirmation step.

    Read and write scope
    Read and write: 18 read and 21 write tools (create, update, authorise, void); no delete tool listed
    Authentication
    OAuth 2.0 with PKCE; you pick organisations and approve scopes; refresh tokens last 60 days
    Preview before a write
    V1 tools do not ask for confirmation; Xero advises adding your own step
    Where the data lives
    Your Xero organisation in Xero's cloud; hosted server, or open-source server run locally
    Audit and undo
    Unverified; Xero's usual invoice status rules still apply
    Supported clients
    Any MCP client, including Claude Desktop, Claude Code, Cursor and VS Code
    What it takes to use
    Included for Commercial Apps on the Core developer plan or above; Starter apps reach the demo organisation only

    Strengths

    • Hosted and generally available, with nothing to install
    • 18 read tools and 21 write tools at general availability
    • Works with any MCP client, including Claude Desktop, Claude Code, Cursor and VS Code

    Trade-offs

    • V1 tools do not ask for confirmation before writing; Xero advises adding that step
    • Starter (free) developer apps can reach only the demo organisation

    Sources, checked November 1, 2026

  5. Expensify MCP server

    Expensify account · no admin seat needed

    #expensify-mcp Link to this section

    Expensify's hosted MCP server is read-only: an assistant searches your expenses and reports but cannot approve, edit or reimburse anything.

    The server gives read-only access through its Search tool, signed in with OAuth 2.1 and PKCE. It cannot approve reports, edit expenses, reimburse payments or manage Workspace settings, so there is nothing to preview or undo. You revoke access by removing the server from your AI client.

    Best for: Read-only questions about your expenses and reports.

    Read and write scope
    Read-only: its Search tool over expenses and reports
    Authentication
    OAuth 2.1 with PKCE; revoke by removing the server from your client
    Preview before a write
    Not applicable: read-only
    Where the data lives
    Your Expensify account, through a server Expensify hosts
    Audit and undo
    Not applicable: read-only
    Supported clients
    Claude, ChatGPT, Cursor and other MCP clients
    What it takes to use
    Any Expensify account; MCP price not published

    Strengths

    • Any member with an Expensify account can connect
    • Read-only by design, so an assistant cannot change anything

    Trade-offs

    • Cannot approve reports, edit expenses or reimburse payments
    • Covers expenses only, not a full general ledger

    Sources, checked November 1, 2026

More on AI agents and your books

The best accounting tools for AI agents

Comparing agent workflows rather than MCP servers: CLI installs, local files, previews and repeatable imports.

Read comparison

Give your AI agent a ledger with the bea CLI

No MCP client? A shell-capable agent can keep local plain-text books with two install commands and no account.

Install bea

Frequently Asked Questions

Which accounting software has an official MCP server?

As of November 1, 2026, QuickBooks Online, Xero, Expensify, Puzzle and Beancount.io each publish their own MCP server. QuickBooks and Xero offer two paths: a vendor-hosted server and an open-source server you run yourself. Expensify's server is read-only; Puzzle's is read-only by default with an optional write Beta; Beancount.io's reads and writes a plain-text ledger in git.

Can the QuickBooks MCP server create or edit transactions?

Yes. Intuit's hosted QuickBooks connector for Claude creates invoices, estimates, payment links and customer records, updates sales documents and imports transactions; it is available to US customers only and asks you to confirm destructive actions such as deleting an invoice. Intuit's open-source server exposes 145 create, read, update, delete and search tools over 29 entity types plus 11 reports, with settings that switch the create, update or delete tools off.

Is the Xero MCP server hosted, and what does it cost?

Xero now runs a hosted Remote MCP server, generally available, that you connect to with OAuth 2.0 and PKCE; nothing is installed. Xero says Remote MCP access is included at no extra charge for a Commercial App on its Core developer plan or above, while free Starter apps can only reach the demo organisation. Xero also publishes an MIT-licensed open-source server you run locally. Checked November 1, 2026.

Is the Expensify MCP server read-only?

Yes. Expensify's hosted MCP server gives an assistant read-only access to your Expensify data through its Search tool. Expensify states it cannot approve reports, edit expenses, reimburse payments or manage Workspace settings. You connect with OAuth and revoke access by removing the server from your AI client.

Can Puzzle's MCP server write to my books?

Only if you turn it on. New Puzzle MCP connections are read-only. Write access is a Beta you enable per connection; it covers categorizing transactions, creating bills, invoices and journal entries, and reconciling accounts, and the assistant confirms each change with you before making it. A connection stays signed in as long as it is used at least once every 30 days.

Which accounting MCP server lets me preview and undo an AI's edit?

Beancount.io offers a dry_run preview on its write tools, returns a unified diff for file edits, and records every applied change as a git commit you can revert. QuickBooks' hosted connector asks for confirmation before destructive actions, and Puzzle's write Beta confirms each change. Xero says its V1 tools do not ask for confirmation and advises adding that step yourself. Expensify is read-only. Undo through MCP for the other servers is unverified in the vendors' documentation.

Who publishes this comparison?

Beancount.io publishes this page and is one of the five servers compared. Every competitor claim comes from the vendor's own documentation or repository, checked on November 1, 2026. No server was runtime-tested for this page, and anything the vendor sources do not document is labelled unverified rather than counted as a failing.

Give your AI assistant books it can't quietly break

Connect Beancount.io's MCP server to Claude, Cursor or any OAuth MCP client. Preview every edit, and keep each one as a git commit you can revert.

Try DemoStart Free→