billy-mcp
Connects AI assistants to the Danish accounting platform Billy (billy.dk) for managing invoices, journal entries, balances, and receipts, with built-in human approval for all write operations.
README
billy-mcp — Billy (billy.dk) MCP Server for Claude & AI Assistants
Connect Claude, Cursor, VS Code, and any MCP-compatible AI assistant to Billy — the Danish accounting platform (billysbilling). Create invoices, book journal entries, check account balances, reconcile bank lines, and attach receipts — with built-in human-approval write protection so your AI never books anything without your sign-off.
Billy accounting · Billy.dk API · Danish bookkeeping (bogføring/regnskab) · AI bookkeeping agent · Model Context Protocol server · Claude Desktop integration
What can it do?
Ask your AI assistant things like:
- "Create an invoice for Acme ApS: 10 consulting hours at 1.200 DKK, due in 14 days"
- "What's the balance of account 5211 this quarter?" (trial balance from live postings)
- "Book last month's payroll as a journal entry — draft it, I'll approve"
- "Void these 34 duplicate entries" (one call, one approval, per-item results)
- "Upload this receipt PDF and attach it to journal entry #67"
- "Which invoices are overdue and unpaid?"
40 tools covering invoices, supplier bills, contacts, products, bank payments, manual journal entries (daybook transactions), postings, trial balance, bank reconciliation, file attachments, a sandboxed batch-scripting tool, and a raw API escape hatch for everything else.
Quick start
1. Get a Billy access token
Log into mit.billy.dk → Settings → Access tokens → Create access token. Tokens are per-company and don't expire.
2. Add to your MCP client
Claude Desktop (claude_desktop_config.json) / Cursor / any JSON-config host:
{
"mcpServers": {
"billy": {
"command": "npx",
"args": ["-y", "billy-mcp"],
"env": {
"BILLY_ACCESS_TOKEN": "<your token>"
}
}
}
}
Claude Code (CLI):
claude mcp add billy -e BILLY_ACCESS_TOKEN=<your token> -- npx -y billy-mcp
VS Code (.vscode/mcp.json):
{
"servers": {
"billy": {
"command": "npx",
"args": ["-y", "billy-mcp"],
"env": { "BILLY_ACCESS_TOKEN": "${input:billy-token}" }
}
}
}
That's it — no clone, no build. npx fetches the published package.
From source (development)
git clone https://github.com/thourum/billy-mcp.git
cd billy-mcp
npm install
cp .env.example .env # paste your token
npm run dev # run over stdio
npm run inspector # try tools in the MCP Inspector UI
Write protection — safe for real financial data
Every write (create/update/approve/void/pay/upload) is gated by BILLY_WRITE_MODE:
| Mode | Behavior |
|---|---|
read-only |
Write tools are not registered at all; raw requests reject non-GET |
confirm (default) |
Each write pauses and shows you a native approval dialog (MCP elicitation) with the full payload — the AI cannot approve its own writes |
full |
Writes execute without approval |
Fail-closed: if your MCP host doesn't support elicitation dialogs, confirm mode blocks writes with instructions instead of executing them. Irreversible operations (approve invoice, void entry, bank payments) are additionally flagged destructiveHint so hosts can add their own guardrails. Declining, dismissing, or leaving the checkbox unticked = nothing is booked.
Environment variables
| Variable | Required | Description |
|---|---|---|
BILLY_ACCESS_TOKEN |
yes | Billy API access token (sent as X-Access-Token) |
BILLY_WRITE_MODE |
no | read-only, confirm (default), or full |
BILLY_ORGANIZATION_ID |
no | Auto-resolved when the token maps to one company |
BILLY_BASE_URL |
no | Defaults to https://api.billysbilling.com/v2 |
BILLY_LOCALE |
no | en_US, da_DK, fr_FR, nl_NL, de_DE |
Tools
<details> <summary><b>Full tool list (40)</b></summary>
Organization & contacts — get_organization, list_contacts, get_contact, create_contact, update_contact, list_contact_persons, create_contact_person
Products — list_products, get_product, create_product, update_product
Invoices — list_invoices, get_invoice, create_invoice (embedded lines, draft or approve-immediately), approve_invoice, delete_invoice
Bills (expenses) — list_bills, get_bill, create_bill
Payments — create_bank_payment (mark invoices/bills paid), list_bank_payments, list_balance_modifiers
Journal entries (daybook) — create_daybook_transaction (client-side debit/credit balance validation + idempotency-key safe retry), void_daybook_transaction, batch_void_daybook_transactions (N voids, one approval), list_daybook_transactions, list_daybooks
Reporting & reconciliation — get_account_balances (trial balance / per-account balance from postings), list_postings, list_transactions, list_accounts, get_account, list_bank_lines, list_bank_line_matches
Files & attachments — upload_file (pdf/jpg/png/gif), attach_file (link to invoice/bill/journal entry), list_files, list_attachments
Power tools — execute_script (sandboxed JS batch runner with server-enforced mutation log + dry_run), billy_raw_request (any Billy v2 endpoint)
</details>
Built for LLM agents, not just humans
- Compact responses by default (~90% fewer tokens); pass
verbose: truefor full payloads appliedFilterstransparency: Billy silently ignores unknown query params — every list tool reports which filters ran server-side vs client-side, so the agent never mistakes "filter ignored" for "no results"- Pre-flight validation: imbalanced journal entries are rejected client-side with per-currency debit/credit totals before an approval is ever requested
- Idempotent retries:
idempotencyKeyon journal entries dedupes safely after timeouts - Batch with one approval:
execute_scriptruns loops (e.g. 34 voids) with a full audit log returned even when the script fails mid-run
FAQ
Is this an official Billy integration? No — community project using Billy's public REST API v2.
Does it work with Billy's free plan? Yes, any account that can create access tokens at mit.billy.dk.
Can the AI spend my money? In default confirm mode, no write happens without you clicking approve in a dialog the model can't touch. Use read-only for pure analysis sessions.
Which AI apps are supported? Anything speaking Model Context Protocol over stdio: Claude Desktop, Claude Code, Cursor, Windsurf, VS Code (GitHub Copilot), Zed, and more.
Development
npm run typecheck # tsc --noEmit
npm run build # compile to dist/
npm run inspector # interactive tool testing
Stack: TypeScript, MCP TypeScript SDK v2, Zod v4 schemas. Billy API reference mirrored in docs/billy-api.md.
License
Keywords: Billy MCP server, billy.dk API, billysbilling integration, Danish accounting AI, bogføring automatisering, regnskab AI, Claude accounting, MCP accounting server, AI bookkeeping Denmark, fakturering API.
推荐服务器
Baidu Map
百度地图核心API现已全面兼容MCP协议,是国内首家兼容MCP协议的地图服务商。
Playwright MCP Server
一个模型上下文协议服务器,它使大型语言模型能够通过结构化的可访问性快照与网页进行交互,而无需视觉模型或屏幕截图。
Magic Component Platform (MCP)
一个由人工智能驱动的工具,可以从自然语言描述生成现代化的用户界面组件,并与流行的集成开发环境(IDE)集成,从而简化用户界面开发流程。
Audiense Insights MCP Server
通过模型上下文协议启用与 Audiense Insights 账户的交互,从而促进营销洞察和受众数据的提取和分析,包括人口统计信息、行为和影响者互动。
VeyraX
一个单一的 MCP 工具,连接你所有喜爱的工具:Gmail、日历以及其他 40 多个工具。
graphlit-mcp-server
模型上下文协议 (MCP) 服务器实现了 MCP 客户端与 Graphlit 服务之间的集成。 除了网络爬取之外,还可以将任何内容(从 Slack 到 Gmail 再到播客订阅源)导入到 Graphlit 项目中,然后从 MCP 客户端检索相关内容。
Kagi MCP Server
一个 MCP 服务器,集成了 Kagi 搜索功能和 Claude AI,使 Claude 能够在回答需要最新信息的问题时执行实时网络搜索。
e2b-mcp-server
使用 MCP 通过 e2b 运行代码。
Neon MCP Server
用于与 Neon 管理 API 和数据库交互的 MCP 服务器
Exa MCP Server
模型上下文协议(MCP)服务器允许像 Claude 这样的 AI 助手使用 Exa AI 搜索 API 进行网络搜索。这种设置允许 AI 模型以安全和受控的方式获取实时的网络信息。