Kick MCP server and Claude connector: what it reads and writes, what access it gets, how to connect

Kick hosts an official MCP server at use.kick.co/mcp with read and write tools for its ledger, listed in the Claude and ChatGPT directories. Verified 21 Oct 2026.

Official remote MCP server · read & write
Claude connector · read & write
ChatGPT app · read & write

Hosting: Remote HTTP, hosted by Kick (https://use.kick.co/mcp). No local or open-source server.
Auth: OAuth sign-in with mcp:read and mcp:write scopes, or a personal access token (kick_pat_…) sent as a Bearer header
Read / write: Read and write. Kick's pages differ on whether every write is previewed, and its tool list says revenue recognition entries post right away
Works with: Claude.ai and Claude Desktop (connector), ChatGPT (app), Gemini, Perplexity, Microsoft Copilot, Cursor and other remote-capable MCP clients, per Kick
Plan requirement: Any paid Kick plan; calls in free workspaces return an error. Reconciliation needs Basic, classes, bills and invoices need Plus, and revenue recognition needs Advanced (per Kick's tool list)
Last changed: July 2026 (Kick added to the Claude connector directory)
Verification: Verified 21 Oct 2026 by theFinanceStack · confidence: high

What can an agent do with Kick through MCP?

It can read transactions, reports, the chart of accounts and close setup. It can also create or change categories, rules, journal entries, bills, invoices, tasks and client setup in Kick.

Where it runs

Source	Tools
Kick's tool list	59 tools in 15 groups, split into query (read) and act (write) tools
Claude directory	39, currently

Previews

Kick's pages differ on previews.

Kick page	What it says
Tool list and ChatGPT guide	Every change is previewed.
Permissions page	Supported writes return a preview and a confirmation token.

What happens when it writes

Record	What happens
Revenue recognition policy	The tool list warns that applying one posts entries to the accrual ledger at once, including future months.
Manual journals, opening balances and manual transactions	Kick documents no draft state. Treat them as changing the ledger once confirmed.
Bills and invoices	Can be created as open, which puts them straight into payables and receivables.
`native_invoices_act`	Emails Kick invoices to your client's customer with a PDF and an optional pay link.
`chat_act`	Posts external messages your client sees, or internal ones only your firm sees.

Money

Kick lists no tool that pays, moves money or marks a bill paid.

Can

Browse workspaces and entities, and run profit and loss, balance sheet, trial balance and cash flow reports (read)
Search, recategorise, split, match, create and mark transactions for deletion (write)
Create, update and delete categories, classes, counterparties, rules and accounts (write; classes need Plus or above, per Kick)
Create, edit and delete manual journal entries and opening balances, with no documented draft state (write)
Create bills and invoices as draft or open; open records go straight into payables and receivables (write; Plus or above for the Accrual ledger; invoices USD only, per Kick)
Create Kick invoices and email them to customers with a PDF and an optional pay link (write; USD only, per Kick)
Apply revenue recognition policies, which post right away (write; Advanced plan or above; Kick says it covers revenue only, and excludes prepaid expenses and fixed assets)
Create tasks and post task chat messages, either client-visible or internal (write)
Create firm clients (with plan, invites and billing ownership), close templates, tiers and close stages (write; only when the connection has access to your organization, per Kick)

Cannot

Pay bills, move money or mark bills and invoices paid (no such tool is listed, per Kick)
Reconcile accounts or undo a reconciliation (reconciliation is read-only through MCP, per Kick)
Merge accounts, or edit bills and invoices created outside MCP (per Kick)
Undo single-transaction edits with activity_undo (per Kick)
Return document file contents through documents_query (per Kick)

What access does it get?

It gets the Kick workspaces you already have permission to see. mcp:read covers lookups and mcp:write covers changes, and you pick read-only or read and write at sign-in. Kick says All workspaces also covers workspaces you're added to later.

Where	Scopes and permissions (as documented)	Admin requirement
Claude connector and ChatGPT app (OAuth)	mcp:read (tool discovery and read-only calls) and mcp:write (tools that change data). At sign-in you choose Read only or Read & write (Read & write appears only when the client asks for write access), and All workspaces or specific ones. Kick says All workspaces also covers workspaces you're added to later, so tick only the clients the work needs. Firm tools appear only when the connection has access to your organization.	Kick doesn't document a Kick role needed to authorise. Claude Team/Enterprise: an Owner or admin adds Kick under Settings > Organization settings > Connectors first, and members without that right see a Request button. ChatGPT Enterprise/Edu: an admin enables the app under Workspace settings > Apps.
Personal access token (remote, any client)	Bearer token starting kick_pat_, created under Settings > API > Generate MCP token. Workspace-bound tokens use their workspace; user-scoped tokens must pass workspaceId. A read-only token can call read tools only. Kick recommends read-only tokens for lookups, but its token steps don't show where to choose read-only.	Kick says people with a view-only role can create read-only tokens only; it doesn't document other role limits. Every call is also checked against your existing workspace permissions.

How do I connect it?

Use the Claude connector or the ChatGPT app for the quickest setup; for Claude Code, Cursor and other clients, add https://use.kick.co/mcp and sign in or send a personal access token.

In Claude, go to Settings > Connectors, search for Kick and click Connect (Kick's documented steps).
Sign in to Kick, choose Read only or Read & write, choose All workspaces or specific ones, then click Authorize. All workspaces also covers workspaces you're added to later, so tick only the clients you need.
In each chat, click +, open Connectors and turn Kick on.
Team/Enterprise: an Owner or admin goes to Settings > Organization settings > Connectors > Browse connectors, searches for Kick and adds it to the team. Members whose role can't add connectors see a Request button. Each member then connects their own Kick account.

Kick says the connector works on Claude Free, Pro, Max, Team and Enterprise. Choose Read only unless a workflow needs changes.

What should a finance team watch for?

The main risk is write access: Kick's pages differ on whether every write is previewed, so grant Read only by default and keep a person confirming each change.

Kick's tool list says applying a revenue recognition policy posts entries to the accrual ledger right away, including future months. Treat it as a direct posting to the ledger.
Open bills and invoices land in payables and receivables at once, and Kick invoices reach customers with an optional pay link. Client-visible chat posts and bulk deletes also need care. activity_undo reverts whole batches only. It can't undo a single-transaction edit.
In ChatGPT, Always allow lets Kick changes run without asking. Kick also says that if Memory is on, ChatGPT may remember what it pulled from Kick, so consider turning Memory off for client work. Kick doesn't document a rate limit for MCP.
Cursor, Claude Code and other config-file clients keep the kick_pat_ token in plain text. A project file such as .cursor/mcp.json or .mcp.json is the most likely to be committed. Keep it out of version control and shared folders, use short expiry, and revoke any exposed token.
Kick warns about prompt injection in memos, documents and emails: an injected instruction could push the agent to post a journal, send an invoice or delete records, so keep confirmation on.
Kick's Claude guide says Team and Enterprise chats aren't used for training, while Free, Pro and Max chats are unless Help improve Claude is off, with five-year retention while it's on. Its ChatGPT guide says Business, Enterprise and Edu don't train on app data by default, while Free, Go, Plus and Pro may unless Improve the model for everyone is off. Kick advises weighing this before using a personal account with client books.

How could finance teams and accounting firms use it?

Use read access for questions and reporting, and write access for drafting changes that a person previews and confirms before they reach the ledger.

Inside a company

Ask for the monthly profit and loss and explain the largest movements from transaction detail.
Find uncategorised or miscategorised transactions and propose new categories or rules for a person to confirm.
Prepare a manual journal entry, such as an asset purchase with depreciation, and review the preview before confirming, since Kick documents no draft state for journals.
Prepare bills or invoices from source documents and ask for draft status explicitly, because the tools can also create open records that go straight to payables and receivables.

At an accounting firm

Review category changes and unusual transactions across the client workspaces your team can already see.
Prepare a new client's chart of accounts, close template and tasks for a manager to approve.
Check reconciliation history and trial balances before month-end sign-off.
Use workspace-bound tokens or explicit workspaceId values so work stays in the right client's books.

Keep a person approving every change to the ledger in Kick, and treat AI-produced figures as drafts until they tie to Kick's reports.

Want Kick connected to Claude for your team?

We configure scoped connections and a review step before anything changes your books. Fixed fee.

Book a 30-minute setup call

Change log

Date	Change	Source
2026-10-21	Kick tool list documents 59 tools; revenue recognition apply posts entries immediately; Kick ChatGPT app listed in the Plugins directory	docs.kick.co/ai/mcp/available-tools.md
2026-07	Kick added to the Claude connector directory (39 tools shown)	claude.com/connectors/kick-co
2026-05-21	Kick MCP launched on all paid plans, with read and write tools	www.kick.co/changelog/kick-mcp

FAQ

Is this official?

Yes. Kick documents and hosts the server at use.kick.co, publishes the Claude connector, which the Claude directory marks as Anthropic verified, and links to its own ChatGPT app.

Is it free?

Kick says MCP is included on all paid Kick plans, and some tools need Basic, Plus or Advanced. You also need a Claude, ChatGPT or other AI client plan.

Does it change data in Kick?

Yes, if you grant Read & write. Kick's pages differ on whether every write shows a preview first. Revenue recognition entries post right away, open bills and invoices go straight to payables and receivables, and Kick invoices can be emailed, so keep read-only unless you need changes.

Is my data used to train models?

Kick's guides say it depends on your AI plan. Claude Team and Enterprise and ChatGPT Business, Enterprise and Edu don't train on it by default. Claude Free, Pro and Max and ChatGPT Free, Go, Plus and Pro can, unless you turn the training setting off. Check Anthropic's or OpenAI's terms for your plan.

Can my accountant use it on my behalf?

Kick says access follows existing team permissions, so an accountant with access to your workspace can connect their own Kick account. A view-only user can create read-only tokens only. Kick doesn't document delegated use beyond that.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.