Skip to content
Agents Finance
NewsEvidence: Announcement

Holded launches its MCP server to connect Claude, ChatGPT and other assistants to your account

Summary: In June 2026 Holded released a remote MCP server that lets AI assistants query and, if the user authorizes it, modify data in their account: invoices, contacts, treasury and stock. It connects with OAuth 2.1 and the assistant inherits the permissions of the Holded user who authorizes it.

Published on 2 min read354 words

What it does

It exposes the Holded API as tools that an MCP-compatible assistant can call from a single remote URL (https://mcp.holded.com/mcp, with OAuth 2.1 over Streamable HTTP). The reference mentions 356 tools, one per API operation, grouped by area. The assistant can, for example, list invoices, search contacts, check treasury balances or check stock. When authorizing, the user chooses a profile: analyst (read-only), operational (read and write) or custom.

Reported result or impact

Holded publishes no savings figures. What it does document is the control model: the assistant can never do more than the user who authorizes it, and access is cut by deleting the token in Holded or disconnecting the connector.

Mind the evidence. A communication from the vendor itself or from a news outlet about a launch. It describes what the product promises, not verified results.

How to replicate it

You need a Holded account with API access enabled. In Claude (web or desktop), add a custom connector with the MCP server URL and sign in to Holded; the page says one-click connection from the connector directory is coming soon. Start with the read-only profile, which Holded recommends, and try queries such as the list of invoices pending collection. If you enable writing, first check which areas are enabled, because the server page and the help guide do not describe exactly the same thing for what the operational profile covers, for example in payment recording or accounting entries.

What to keep in mind

  • According to the help guide, the read-only profile leaves out sensitive areas by default, such as developer tokens, payroll and bank mandates or remittances.
  • The help guide sums up the philosophy of the operational profile like this: AI drafts and organizes, and the person issues and collects. Anything that moves money or has tax effects stays read-only unless it is deliberately widened.
  • Connecting a third-party assistant means that the data it queries passes through that AI provider. Review its terms and data-protection rules (GDPR) before using it with customer data.

Sources

We wrote this entry in our own words from the sources above and checked that the links worked on October 17, 2026. Is anything incorrect? Tell us.

Related entries

Keep exploring