SoftLedger MCP server: what it reads, what access it gets, and how to connect Claude or ChatGPT
SoftLedger hosts an official read-only MCP server (US and EU URLs) that uses your normal SoftLedger sign-in and follows your role and locations. Verified 21 Oct 2026.
- Official remote MCP server · read-only
- Hosting
- Remote HTTP, hosted by SoftLedger: https://api.softledger.com/mcp (EU: https://eu-api.softledger.com/mcp). No local or open-source server.
- Auth
- OAuth sign-in through SoftLedger's identity provider (login.softledger.com): sign in, pick the tenant, approve. SoftLedger says no API keys are created or stored.
- Read / write
- Read-only. SoftLedger says the AI cannot create, update, delete or post; write access is planned.
- Works with
- Claude.ai and Claude Desktop (custom connector), Claude Code, ChatGPT (custom connector), Cursor and other remote MCP clients
- Plan requirement
- Not stated by SoftLedger. SoftLedger notes ChatGPT may need developer or connector features on your plan.
- Last changed
- September 2026 (setup guide for the MCP server published or updated)
- Verification
- Verified 21 Oct 2026 by theFinanceStack · confidence: high
What can an agent do with SoftLedger through MCP?
It can read the SoftLedger records listed in its setup guide, from journal entries and the chart of accounts to invoices, bills, payments and budgets. It cannot create, change or post anything.
What it can read
SoftLedger's setup guide lists the data the server exposes:
- The general ledger (journal entries and lines), chart of accounts, cost centers and jobs
- Invoices and lines, and customers
- Bills and lines, vendors and payments
- Products, budgets, locations, contacts, accounting periods, fiscal years and settings
Good to know
- SoftLedger doesn't publish tool names or a tool count. It says the server first discovers which entities are available, then queries them.
- There are no saved-report tools yet. So the AI builds figures such as a trial balance from the individual records. It can't run a SoftLedger report.
- Large lists come back page by page, so a filtered question (one entity, one period) is faster and more reliable.
Can
- Read journal entries and lines, the chart of accounts, accounting periods and fiscal years
- Read invoices, customers, bills, vendors and payments, including line detail
- Read cost centers, jobs, products, budgets and locations for multi-entity questions
- Read contacts, limited to name, email and phone (per SoftLedger)
- Answer only within the connected user's role and assigned locations (per SoftLedger)
Cannot
- Create, update, delete or post any record (per SoftLedger; write access is planned for a later release)
- Run saved or dedicated financial reports (per SoftLedger, none exist yet)
- Reach inventory, crypto, sales and purchase orders, bank feeds, prepaids, fixed assets or admin functions yet (per SoftLedger, excluded for now and planned as SoftLedger expands the server)
- Show addresses or bank account details, including vendor bank accounts (per SoftLedger)
- Switch between tenants inside one connection (per SoftLedger, one connection per tenant)
What access does it get?
The same read view the signed-in SoftLedger user already has, for one tenant, limited to that user's assigned locations.
| Where | Scopes and permissions (as documented) | Admin requirement |
|---|---|---|
| Remote MCP server, OAuth sign-in (US or EU) | SoftLedger doesn't document MCP-specific scopes. Its sign-in server's published metadata lists only openid, email, profile and offline_access; what the AI can read is set by the user's SoftLedger role and location assignments. Entities the user can't access are hidden entirely, per SoftLedger. | SoftLedger's product page says access stays off until an admin grants it; its setup guide doesn't describe that step. Once a permission is granted, the user reconnects, because SoftLedger says new permissions appear only after reconnecting. Before rollout, SoftLedger asks admins to review roles, location assignments and AI policy. Each person connects with their own user; SoftLedger advises against a shared service login. Claude Team/Enterprise: an Owner adds custom connectors. |
How do I connect it?
Add the regional URL (https://api.softledger.com/mcp, or the EU URL) as a custom connector or remote server, then sign in to SoftLedger, choose the tenant and approve.
- In Claude, add a custom connector: SoftLedger documents Settings > Connectors > Add custom connector; in current Claude this is under Customize > Connectors.
- Paste https://api.softledger.com/mcp, or https://eu-api.softledger.com/mcp if you log in at eu-app.softledger.com.
- Sign in with your own SoftLedger login (SoftLedger advises against a shared service login), select the tenant and approve the authorisation screen.
- For more than one tenant, add one connector per tenant; SoftLedger suggests names like SL-<tenant>.
- Team/Enterprise: an Owner adds the custom connector before members can connect.
No Claude directory listing as of 21 Oct 2026; this uses the custom connector path SoftLedger documents.
What should a finance team watch for?
The connection can read whatever the signed-in user can see, so that user's SoftLedger role and location assignments decide what the AI reads. Review them before anyone connects.
- Least privilege: each person connects with their own SoftLedger user, whose role and locations should cover only what the AI should read. SoftLedger advises against a shared service login, because it loses per-user permissions and the audit trail. SoftLedger says removed permissions apply on the next request and deactivating the user ends MCP access.
- One tenant per connection. Firms and multi-tenant groups need a separate connection for each tenant.
- Open-period figures are provisional, per SoftLedger, because close entries such as FX remeasurement can still post; SoftLedger says closed periods are more reliable for reporting. Tie AI-built totals back to SoftLedger reports, since the server has no report tools.
- Long lists are paginated. Ask narrow questions (one entity, one period) so answers aren't built from a partial result.
- SoftLedger's product page mentions an admin granting broader permissions such as creating journal entries. Its setup guide says the server is read-only today. Re-check before relying on either.
- SoftLedger says it only answers queries your authorised AI client makes, and that how the AI vendor handles chat data is governed by that vendor's terms, especially on free plans. It makes no statement about model training.
- Invoice, bill and journal descriptions come back as free text. An injected instruction there could steer the agent to misreport figures or act through other connected tools, so review outputs before they are shared.
How could finance teams and accounting firms use it?
Because the server is read-only, it suits questions, reviews and first-draft reporting that a person checks against SoftLedger.
Inside a company
- Ask which invoices are overdue or which bills are unpaid for one entity, without building a report.
- Compare spend by cost center or job against budget for the month, then confirm totals in SoftLedger.
- Pull journal entries for an account and period to explain an unusual balance before close.
- Draft a short summary of book cash (from GL cash accounts) and payables for a management update, then check it against SoftLedger; bank feeds aren't exposed.
At an accounting firm
- Prepare for a client call by summarising receivables, payables and recent journals for that tenant.
- Run review questions (large or unusual entries, new vendors, entries in closed periods) before sign-off.
- Check multi-entity results by location for a client with several subsidiaries.
- Set up one named connection per client tenant so questions never mix clients.
A person approves any change to the books in SoftLedger itself. AI-built figures stay drafts until they tie to SoftLedger's reports.
Want SoftLedger connected to Claude for your team?
We configure scoped connections and a review step before anything changes your books, for a fixed fee.
Book a 30-minute setup callChange log
| Date | Change | Source |
|---|---|---|
| 2026-10-21 | Re-verified: read-only status, US and EU URLs, sign-in flow and exposed data unchanged; no Claude directory listing found | softledger.com/support/en/articles/16516650-connect-ai-assis |
| 2026-09 | SoftLedger MCP setup guide published or updated (US and EU remote URLs, read-only, writes planned) | softledger.com/support/en/articles/16516650-connect-ai-assis |
FAQ
Is this official?
Yes. SoftLedger documents the server in its help centre and on its product page, and hosts it on its own API domains (api.softledger.com and eu-api.softledger.com).
Is it free?
SoftLedger doesn't state a price or plan requirement for MCP. You need a SoftLedger login and an AI client plan; SoftLedger notes ChatGPT may need developer or connector features.
Does it write to my books?
No. SoftLedger says the AI cannot create, update, delete or post, and that write access is planned for a future release.
Is my data used to train models?
SoftLedger doesn't say. It says it only answers queries your authorised AI client makes, and that how the AI vendor handles chat data is governed by that vendor's terms, especially on free plans; check your AI provider's terms.
Can my accountant use it on my behalf?
SoftLedger doesn't document an accountant or delegated-access flow. Access follows the signed-in user's role and locations, so an accountant would need their own SoftLedger user with a role and locations on your tenant.
Sources
- SoftLedger: Connect AI assistants to SoftLedger MCP server
- SoftLedger: MCP product page
- SoftLedger MCP server: OAuth protected-resource metadata
- SoftLedger sign-in: authorization server metadata
Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.