Tesorio MCP server for Claude and ChatGPT: what it does, what access it gets, how to connect

Tesorio hosts one remote MCP server for its AR and cash platform, with OAuth sign-in and read and write access for Claude, ChatGPT and other clients. Verified 21 Oct 2026.

Official remote MCP · read & write

Hosting: Remote HTTP, hosted by Tesorio at https://mcp.tesorio.com/v1/mcp. No local or open-source server.
Auth: OAuth 2.1 browser sign-in with your Tesorio login and a consent screen; no API keys. The server's OAuth metadata lists two scopes, mcp:read and mcp:write.
Read / write: Read and write. Tesorio describes access to customers, invoices, payments and related data, and its ChatGPT setup notes that write operations may need manual confirmation. No published tool list.
Works with: Claude.ai and Claude Desktop, Claude Code, ChatGPT, and other clients that support remote MCP servers, per Tesorio's help article; Tesorio's product page also names Cursor.
Plan requirement: An active Tesorio user account, per Tesorio's help article. Tesorio's 14 Apr 2026 release note introduced AI Chat with MCP server integration as a beta, with access through your Customer Success Manager, so confirm with your CSM that MCP is enabled for your organisation. Tesorio doesn't publish pricing or plan limits for MCP.
Last changed: 2026-09-29 (help article and setup screenshots updated)
Verification: Verified 21 Oct 2026 by theFinanceStack · confidence: high

What can an agent do with Tesorio through MCP?

It can read Tesorio's customers, invoices and payments and take some actions in Tesorio, but Tesorio doesn't publish which tools write or what they change.

Tesorio's help article says connected assistants can access customer, invoice, payment and related data, and that the tools "may evolve over time." It does not list the tools or give a count. The tool list is only visible after sign-in, so we can't map the write path tool by tool.

What is documented

The server advertises an mcp:write scope next to mcp:read.
Tesorio's suggested ChatGPT description is "Access Tesorio data & take actions".
Its product page shows an agent that finds high-value overdue accounts, nudges the account owner in Slack and "updates Tesorio."

Not documented by the vendor

Treat every write as live until Tesorio confirms otherwise.

Whether a write posts immediately or waits for review inside Tesorio
Whether any tool applies cash or touches payments

Can

Answer questions about customers, invoices and payments in your Tesorio organisation
Pull overdue and high-value accounts and the account owner for follow-up; Tesorio's product page example also has the agent update Tesorio in the same run, so a read and a write happen together
Update records in Tesorio; which records and fields is not documented by the vendor
Work in several AI clients at once, each with its own session, per Tesorio

Cannot

See data your Tesorio user can't already view; access is limited to your organisation and your permissions, per Tesorio
Run without sign-in; there are no API keys or manual credentials, per Tesorio
Stay connected indefinitely; access tokens expire and the client asks you to authorise again, per Tesorio

What access does it get?

Whatever your own Tesorio user can see, inside one organisation, granted through OAuth with read and write scopes.

Where	Scopes and permissions (as documented)	Admin requirement
Tesorio MCP Server (remote)	OAuth 2.1. The server's published OAuth metadata lists mcp:read and mcp:write. Tesorio says access is organisation-scoped and limited to data you already have permission to view; it doesn't document whether you can approve read only on the consent screen. The server's OAuth metadata (not Tesorio's docs) also allows dynamic client registration by public PKCE (S256) clients, so any MCP client can register itself; to limit which AI clients reach Tesorio, use your AI workspace's connector controls, since Tesorio documents no client allowlist.	Tesorio documents no admin step beyond an active Tesorio user account. In Claude Team/Enterprise an Owner adds connectors for the organisation; in ChatGPT Business/Enterprise an admin must allow custom connectors.

How do I connect it?

Add https://mcp.tesorio.com/v1/mcp to your AI client, sign in to Tesorio in the browser and click Approve; in Claude, Tesorio says you can add it from the Connectors directory instead.

In Claude Team/Enterprise, an Owner or Primary Owner opens Organization settings from their name in the bottom-left corner, then Connectors (under Plugins), per Tesorio's help article. Members then connect Tesorio from their own Connectors settings; Pro/Max users, who have no Organization settings, use Customize › Connectors.
Click + Add, choose All available, search for Tesorio, open the listing and click Connect.
Sign in to Tesorio in the browser window and click Approve on the consent screen.
If you can't find the listing, add a custom connector under Customize › Connectors with https://mcp.tesorio.com/v1/mcp. Team/Enterprise: an Owner adds it first, then members connect.

Tesorio says it is listed in the Claude Connectors directory; we couldn't open a public listing to confirm it on 21 Oct 2026.

What should a finance team watch for?

Undocumented write tools, expiring sessions and customer free text flowing back into the agent.

Tesorio doesn't publish the tool list, which tools write, or whether any tool touches payments or cash application. Ask Tesorio before giving the connector to anyone who shouldn't change AR records.
Least privilege comes from Tesorio roles: the agent sees and changes what the signing-in user can. Connect with a user whose role fits the job; Tesorio doesn't document a read-only option on the consent screen.
Keep tool approval prompts on in your client. Tesorio notes ChatGPT may ask for confirmation on writes; it doesn't say the same for Claude.
Customer names, invoice notes and dispute text are untrusted input. An instruction hidden in a note could push the agent to update Tesorio records or, if a Slack or email connector is also enabled, message colleagues, so a person should approve each write.
Access tokens expire and repeated sign-in prompts usually mean an expired refresh token; Tesorio's fix is to remove the server, re-add it and authorise again. To revoke access, Tesorio says you remove the server from the AI tool's configuration and restart it. The server's OAuth metadata also lists a token revocation endpoint, and Tesorio doesn't document central, admin-side revocation, so ask Tesorio how to cut off MCP sessions when a user leaves.
Corporate firewalls or VPNs can block mcp.tesorio.com; IT may need to allowlist it, per Tesorio.
Tesorio says your password is never saved locally. It doesn't state MCP data retention or training terms; read Tesorio's privacy policy and DPA and your AI provider's terms.

How could finance teams and accounting firms use it?

Read access suits questions and reporting. Write access suits drafted updates that a person checks before they reach Tesorio.

Inside a company

Ask which high-value invoices are overdue and who owns each account, without building a report.
Summarise a customer's invoices and payment history before a collections or renewal call.
Draft the AR section of the month-end pack from open invoice and payment data (aging computed from invoice due dates), then tie it to Tesorio reports.
Prepare suggested record updates for overdue accounts and have the AR lead approve each one before it runs.

At an accounting firm

Review a client's overdue balances and payment trends ahead of a monthly close meeting.
Answer a client's question about a specific customer's open invoices from live Tesorio data.
Draft follow-up notes on disputed or late invoices for the client's team to review and send.
Plan one sign-in per client organisation; Tesorio doesn't document multi-organisation access.

Whatever the use, keep a person approving anything the agent changes in Tesorio or the ledger, and treat AI-written AR figures as drafts until they match Tesorio's reports.

Want Tesorio connected to Claude for your team?

We configure scoped connections and a review step before anything changes your books, for a fixed fee.

Book a 30-minute setup call

Change log

Date	Change	Source
2026-09-29	Help article updated with Claude directory, Claude Code and ChatGPT setup steps and screenshots	help.tesorio.com/en/articles/14050733-mcp-server-connect-ai-
2026-04-14	Tesorio release announcement: AI Chat in beta, including MCP server integration for connecting external AI tools like Claude	help.tesorio.com/en/articles/14596626-4-14-2026-tesorio-rele

FAQ

Is this official?

Yes. Tesorio hosts the MCP server at mcp.tesorio.com and documents it in its own help centre.

Is it free?

Tesorio doesn't publish a price for MCP. You need an active Tesorio user account and an AI client plan that allows connectors.

Does it change data in Tesorio?

It can. The server offers a write scope and Tesorio says the connector can take actions, but it doesn't list which tools write. Keep approval prompts on.

Is my data used to train models?

Tesorio's MCP documentation doesn't say. Check Tesorio's privacy policy and DPA, and your AI provider's data terms, before connecting.

Can my accountant use it on my behalf?

Tesorio doesn't document this. Access follows the Tesorio user who signs in, so an outside accountant would need their own Tesorio user in your organisation.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.