Verified

Billy MCP Server

Manage Danish accounting tasks, invoices, and journal entries directly in your AI assistant.

Data last scanned today · Reviewed today

40 5 dangerous tools40 tools★ 1TypeScriptMIT

Overview

Billy MCP Server integrates the Danish accounting platform Billy into your AI workflow, enabling automated bookkeeping, invoice generation, and bank reconciliation. It provides 40 distinct tools that allow you to check account balances, manage contacts, and attach receipts to financial records.

Our verdict

This server carries a high-risk score of 30/100, primarily because it is community-maintained rather than developed by the official vendor and has not yet undergone editorial review. Because it interacts with sensitive financial data, users should exercise extreme caution, ensure they utilize the provided write-protection features, and verify all automated transactions before finalizing them.

Supports human-approval workflows for all financial write operations
Provides 40 specialized tools for comprehensive accounting management
Requires only two direct dependencies for reduced supply-chain exposure
Includes a sandboxed batch-scripting tool for complex operations

High security risk due to lack of official vendor maintenance
Current authentication and read-only modes remain unreviewed
Bus-factor risk exists due to a single-contributor project structure
No external security audit or editorial validation performed

Setup

Claude Desktop

{
  "mcpServers": {
    "billy-mcp": {
      "args": [
        "-y",
        "billy-mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

No read-only mode — running this grants full read/write access.
No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

Tool	Description	Risk
get_organization	Fetches organization details.	low
list_contacts	Lists all contacts.	low
get_contact	Fetches a specific contact.	low
create_contact	Creates a new contact.	medium
update_contact	Updates an existing contact.	medium
list_contact_persons	Lists contact persons.	low
create_contact_person	Creates a new contact person.	medium
list_products	Lists all products.	low
get_product	Fetches a specific product.	low
create_product	Creates a new product.	medium

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›How do I obtain the necessary authentication token?

Log into your account at mit.billy.dk, navigate to Settings, then Access tokens to create a token for your company.

›How does the server protect against unauthorized financial transactions?

The server defaults to 'confirm' mode, which triggers a native MCP approval dialog for every write operation, ensuring the AI cannot execute transactions without your explicit sign-off.

›What happens if my MCP client does not support approval dialogs?

The system is fail-closed, meaning it will block all write operations and display instructions instead of executing them.

›Can I prevent the AI from making any changes to my accounting data?

Yes, you can set the BILLY_WRITE_MODE environment variable to 'read-only', which prevents write tools from being registered entirely.

›Are there specific configuration requirements for running the server in VS Code?

You need to add a server definition to your .vscode/mcp.json file, providing the BILLY_ACCESS_TOKEN as an environment variable.

›What file types are supported for receipt uploads?

The upload_file tool supports PDF, JPG, PNG, and GIF formats.