Cube MCP server: what it reads, what it can write back, and how to connect Claude or ChatGPT

Cube hosts an OAuth MCP server at mcp.cubesoftware.com: read by default, write-back to AI-opened scenarios with a separate permission. Verified 21 Oct 2026.

Official MCP server · read & write (hosted)
Claude connector · read & write (per Cube)
ChatGPT app · read & write (per Cube)

Hosting: Remote HTTP, hosted by Cube: https://mcp.cubesoftware.com/. No local or open-source server.
Auth: OAuth sign-in with your Cube login, no API keys. Cube supports SAML single sign-on; its pricing page lists SSO on Silver and Gold and leaves it off Bronze.
Read / write: Read with Use MCP (Read Only). Write-back (scenario data, planning Tables, Boards, scenarios and other dimension members, formula accounts, tags, draft workflows, imports) with Use MCP (Write). Write isn't on for everyone: it depends on user type and how your org was set up.
Works with: Claude (Claude Connectors Directory, per Cube), ChatGPT (app or developer mode), Copilot and Gemini (per Cube's product page), any MCP client
Plan requirement: Cube says the server is available to all Cube customers. Its pricing page lists MCP under the Silver and Gold plans and leaves it off Bronze. Only data pulls (5 credits) and build or write calls (125 credits) use AI credits. Setup calls and reads of structure, Boards, Tables, tags, workflows, connections and change history are free.
Last changed: 2026-10-19 (connect guide updated: Claude directory listing and ChatGPT app)
Verification: Verified 21 Oct 2026 by theFinanceStack · confidence: high

What can an agent do with Cube through MCP?

An agent can query actuals, budgets, forecasts and transaction detail within your Cube permissions. With write access it can also publish figures into scenarios opened for AI, build Boards and planning Tables, and draft workflows.

Cube's tool reference lists 16 read calls, 12 build-and-write calls and 2 session calls.

What happens when it writes

Writes take effect at once. Cube allows publish_data and write_planning_table_data only in scenarios the AI created or a person opened for AI. Other write calls work outside that limit.

Call	What happens
`publish_data`	Puts values into the scenario immediately.
`write_planning_table_data`	Replaces the Table's whole dataset for that scenario.
`create_formula`	Adds a calculated account that applies across every scenario.
`create_dimension`	Can add members such as a new account or department.
`create_tag` and the Board calls	Change shared objects.
Workflows and tasks	Created as Not Started or draft.
`initiate_import`	Pulls actuals from an existing connection into the scenario you name. Cube doesn't say whether the AI write-back check applies to imports.

Money

No call pays, approves spend or posts to a general ledger.

Can

Read the chart of accounts, dimensions and formulas behind calculated accounts
Pull aggregated slices (actuals versus budget, YTD) and transaction-level drilldowns
Read Boards, planning Tables, tags, workflows, tasks, source connections and recent change history
Publish figures into a scenario that the AI created or a person opened for AI (write)
Create scenarios and other dimension members (such as an account or department), duplicate scenarios, add formula accounts, create tags (write)
Build and update Boards; create and fill planning Tables (write)
Draft workflows and tasks; start an import from an existing connection (write)

Cannot

Write figures or planning Table data to an existing scenario unless a person has set its write protection to "AI"; the AI can't turn that setting on itself (per Cube)
Write to a locked time period, or one routed elsewhere by a scenario lifecycle rule, even in a scenario open to AI (per Cube)
Rename or restructure dimensions, edit existing formulas or tags, or delete Boards and other assets (per Cube)
Cancel a running workflow, assign tasks or change anyone's permissions (per Cube)
Write to your connected source systems through Cube (per Cube)
Read or write outside the user's Data Access Scope (per Cube)
Undo an AI publish: Cube's Undo Publish works only in the Spreadsheet App, Audit Trail and Web Reports (per Cube)

What access does it get?

The connection acts as the Cube user who signs in and stays inside that user's Data Access Scope. Two Cube permissions set whether it can only read or can also write, and which one a user holds depends on user type and how your org was set up.

Where	Scopes and permissions (as documented)	Admin requirement
Cube MCP server (mcp.cubesoftware.com), including the Claude and ChatGPT listings	Cube permissions Use MCP (Read Only) and Use MCP (Write), in the Cube AI permission group. The server's OAuth metadata lists scopes read, write and introspection; Cube does not document which a client requests. Role-based access and cell-level redaction apply to every call, per Cube.	A Cube admin grants the permissions in User Management. Use MCP (Write) can be held only by Finance or Admin users and can't be given to Business users. Cube's tool reference says it is on by default for Admin and Finance users, yet orgs upgraded from the single MCP permission had everyone moved to Read Only, and Cube's product updates describe write as a permission an admin grants. Check each user in User Management before anyone connects. Claude Team/Enterprise: an Owner adds Cube and can restrict its Board-building tools.

How do I connect it?

Add Cube from the Claude directory or the ChatGPT app link, or add https://mcp.cubesoftware.com/ as a custom MCP server, then sign in with your Cube login. Cube says setup takes under two minutes.

Team/Enterprise: an Owner or Primary Owner goes to Organization settings › Connectors, selects + Add, opens "All Available", searches for Cube Software and selects Add. The Owner can also restrict the tools that build or update Boards for everyone.
Each user opens https://claude.ai/directory/cube-software (or searches "Cube Software" in Customize › Connectors), selects Connect and signs in to Cube.
Alternative: Add custom connector with the name Cube and URL https://mcp.cubesoftware.com/ (Owners add it in Organization settings › Connectors).

These steps come from Cube's connect guide. We could not open the Claude listing itself.

What should a finance team watch for?

Write access may already be on for Finance and Admin users, and an AI publish lands in the scenario straight away with no undo through MCP. Decide who holds Use MCP (Write) before anyone connects.

Per Cube's tool reference, Use MCP (Write) defaults to on for Admin and Finance users and can't be given to Business users. Orgs upgraded from the single MCP permission had everyone moved to Read Only. Check User Management and turn write off for anyone who only needs answers.
Open a scenario for AI only when you expect writes there; the AI can't open one itself, and locked time periods stay locked even in a scenario open to AI (per Cube). Let the AI work in scenarios it creates or duplicates.
write_planning_table_data replaces the whole Table dataset for that scenario; check the proposal first.
The scenario check covers figures and planning Table data only. A formula account the AI adds applies across every scenario, and new accounts or departments get no write protection, per Cube.
Only data pulls (5 credits each) and build or write calls (125 each) use company AI credits. Cube's example: 20 data calls plus one publish uses 225 credits, and a broad request such as a board deck can take dozens of calls. When credits run out, those calls are blocked until a user with Administer AI tops up from the Usage page.
Per Cube's undo article, publishes made through the MCP Server can't be undone today; Undo Publish works only in the Spreadsheet App, Audit Trail and Web Reports. AI publishes land immediately, so review each one before it runs.
Table text, task names and change notes are free text. An injected instruction there could push the agent to publish figures or overwrite a Table, so review each write.
Cube's MCP pages do not state retention or training terms. Check Cube's Trust Center and your AI provider's terms.

How could finance teams and accounting firms use it?

With read access, a team can answer variance questions and report from the numbers already in Cube. With write access, it can draft scenarios and Boards for a person to review before anyone relies on them.

Inside a company

Ask why an expense line is over budget this month and drill into the transactions behind it.
Have the AI duplicate the budget into a new downside scenario and adjust drivers there, leaving the original untouched.
Draft a Board for the quarterly business review, then check each widget against Cube reports.
Confirm actuals are current with list_connections before running month-end variance commentary.

At an accounting firm

For a fractional CFO client, summarise actuals versus forecast by entity before the monthly call.
Draft a close checklist as a Not Started workflow with draft tasks, then assign owners in Cube.
Build a reforecast in an AI-created scenario for the client's finance lead to review.
Where one login reaches several Cube companies, confirm the active company before each session.

Whatever the use, a person should approve anything that changes a scenario of record in Cube. Treat AI-written figures as drafts until they tie to Cube's reports.

Want Cube connected to Claude for your team?

We configure scoped connections and a review step before anything changes your books. Fixed fee.

Book a 30-minute setup call

Change log

Date	Change	Source
2026 Q2	Write-back via Cube MCP	help.cubesoftware.com/hc/en-us/articles/51048387237908-2026-
2026 Q1	Cube MCP Server made available to all customers (read)	help.cubesoftware.com/hc/en-us/articles/51048387237908-2026-
2026-10-19	Connect guide updated with Claude directory listing and ChatGPT app	help.cubesoftware.com/hc/en-us/articles/45569561283092-Conne
2026-09-30	Tool reference published, with read-only and write permissions and credit costs	help.cubesoftware.com/hc/en-us/articles/54111068392724-What-

FAQ

Is this official?

Yes. Cube Software hosts the server at mcp.cubesoftware.com and documents it in its Help Center. Cube.dev, the semantic-layer product, is separate.

Is it free?

Cube doesn't publish a separate MCP price. Data pulls and writes use company AI credits; setup calls and most reads are free. Cube says all customers have access, yet its pricing page lists MCP only under Silver and Gold, so confirm for your plan.

Does it change data in Cube?

Yes, for users with Use MCP (Write). Figures and planning Table data go only into scenarios the AI created or a person opened for AI. Other write calls reach further: the AI can add formula accounts that apply across every scenario, add accounts or other dimension members, create tags, and build or update Boards. Cube applies writes immediately and flags them as AI-originated in the audit trail.

Is my data used to train models?

Cube's MCP pages don't say. Read Cube's Trust Center and your AI provider's terms on training and retention before connecting.

Can my accountant use it on my behalf?

Cube doesn't document outside-adviser access for MCP. The connection acts as whoever signs in. An accountant would connect with their own Cube login, and that user's permissions and Data Access Scope set what the AI can see or write.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.