Well MCP server: what it does, what access it gets, how to connect

Well runs one hosted MCP server with OAuth sign-in. Its live tool list has 311 tools that read and write invoices, contacts, the ledger and email. Verified 21 Oct 2026.

Official remote MCP · read & write

Hosting: Remote HTTP, hosted by Well (https://api.wellapp.ai/v1/mcp). A local npx package is described in the repo docs but is not on npm. Repo: https://github.com/WellApp-ai/Well (MIT).
Auth: OAuth 2.0 browser sign-in with your Well account (PKCE, automatic client registration); no API key for the remote server or the Claude Code plugin.
Read / write: Read and write. The server marks 163 tools read-only, 97 as writes and 51 as destructive; many writes apply immediately.
Works with: Claude.ai, Claude Desktop, Claude Code (plugin), ChatGPT (developer mode), Cursor, Windsurf, Codex and other remote MCP clients, per Well.
Plan requirement: A Well account. Well's site says it is in private beta and free to start; pricing is not documented.
Last changed: 2026-10-21: repository updated; no releases or MCP changelog published
Verification: Verified 21 Oct 2026 by theFinanceStack · confidence: high

What can an agent do with Well through MCP?

An agent can query most of a Well workspace: invoices, companies, people, transactions, the ledger, VAT and cash figures. It can change much of it too. That includes editing and issuing invoices, posting entries and sending email.

Well's published docs cover only a few tools. The repo's tool reference lists 4 and the README lists 7. The server returned 311 tools on 21 Oct 2026, so treat the live list as the scope.

What happens when it writes

Most writes take effect as soon as the tool runs. There is no draft step. Well's confirmation cards belong to its own chat and WhatsApp.

Action	What happens
Issue a draft invoice	Gives it the next number and locks it. Well says it holds no confirmation over MCP, so your AI client's approval prompt is the check you have.
Send email	Sent from your Gmail.
Set a ledger account with the no-invoice flag, or re-run posting	Books journal entries.
Reverse an entry	Posts a new entry dated today.
Delete invoices, companies, people, documents, products, projects, notes or tasks	Soft deletes, per Well.
Delete a saved place	Deleted for good.
Delete a saved login	Erases the password.
Other delete tools	The tools don't say.
Set up a schedule (a job Well runs later on a clock or an event, with nobody in the chat)	Over MCP, a new or edited schedule is saved as a draft. It runs only after you approve it in Well's chat.

Money

Invoice payment links (Stripe or Qonto).
Stripe-hosted card pages (workspace owners and admins only, per Well).
Sending a supplier invoice to Qonto.
Browser tasks that can fill a shopping cart. Well asks before paying unless your own auto-pay setting applies.
Filing a French VAT return (WhatsApp only, after you confirm the figures).

Tools on other connected providers

invoke_connector_tool runs a tool on another provider connected to Well, if that provider has its own MCP server (Well names Attio, Notion and Linear). Its one accounting use, per Well, is reading a QuickBooks or Xero profit and loss or balance sheet.

Tool	What happens
Read tools	Run at once.
A write tool Well has reviewed for that provider	Waits for your approval inside Well.
Any other write tool	Well refuses it.

Can

Query invoices, companies, people, documents, transactions and the accounting ledger
Read VAT summaries, cash position, burn, runway and receivables figures
Create and update companies, people, products, projects and contact channels
Update, issue and soft-delete invoices; create invoices from data
Assign ledger accounts, post and reverse journal entries
Draft emails for you to send, or send email directly from your Gmail
Make invoice payment links and send supplier invoices to Qonto
Run read tools on other connected providers that have their own MCP server, and ask for writes there that you approve inside Well
Save schedules for Well to run later; they stay drafts until you approve them in Well's chat

Cannot

Edit or delete an invoice once it is issued; corrections go through a credit note, per Well
Delete a posted journal entry; it can only be reversed, per Well
File a VAT return outside WhatsApp, or without the person validating the figures first, per Well
Send an invoice to a Qonto account connected by a different member, per Well
Arm a schedule from outside Well's chat; over MCP it is saved as a draft, per Well
Run a write tool on a connected provider unless Well has reviewed it for that provider and you approve it in Well, per Well

What access does it get?

A connection gets the signed-in user's access to their Well workspaces through an OAuth token. Well's OAuth metadata lists five MCP scopes but doesn't say which ones a connection requests.

Where	Scopes and permissions (as documented)	Admin requirement
Well MCP (remote, OAuth)	OAuth metadata lists mcp:access, mcp:read, mcp:admin, mcp:close:read and mcp:close:prepare, plus openid, email and profile. Well doesn't document what each grants or offer a read-only connection. Some tools check workspace roles: deleting an invoice needs owner, admin or the member who keeps it; inviting members needs owner or admin.	Well doesn't document an admin approval step. Claude Team/Enterprise: an Owner adds the connector and can restrict which MCP servers and plugins Claude Code may use, which matters because Well's Claude Code plugin comes from its own marketplace and also installs Well's skills. ChatGPT Business/Enterprise: an admin enables developer mode and allows the connector.

How do I connect it?

Add https://api.wellapp.ai/v1/mcp as a custom connector or remote MCP server and sign in with your Well account; in Claude Code, Well recommends its plugin.

In Claude (web or Desktop) go to Customize › Connectors (Well's docs say Settings › Connectors) and choose Add custom connector. Team/Enterprise: an Owner adds it.
Enter https://api.wellapp.ai/v1/mcp, click Add, then sign in with your Well account.
Well's site also links a Claude directory listing at https://claude.ai/directory/connectors/well. We couldn't open it (unverified); if it opens for you, click Connect and sign in.

What should I watch out for?

The live server can send email, issue invoices and post to the ledger. Well's docs describe far less than that. Keep your client's approval prompt on for every write, and check what scheduled jobs are allowed to change.

Well's docs are out of date. The tool reference lists 4 tools and the server listed 311 on 21 Oct 2026. Check the tool list your client shows.
Immediate writes: send_message emails from your Gmail, issue_invoice locks the invoice, and posting tools book entries. Well doesn't document a way to switch write tools off, so use your client's per-tool approval.
Scheduled jobs: the agent can save a schedule that Well runs later with nobody in the chat. Once you approve it in Well's chat, each run makes the changes you signed off inside Well, with no approval prompt in your AI client. The agent can also pause a schedule, or resume a paused one you already approved, without a new approval, per Well. Approve schedule requests deliberately and review your schedules in Well.
Saved logins and cards: Well keeps your saved logins for supplier portals, the French tax site (impots.gouv.fr) and shopping sites, and its browser runs sign in with them. A purchase can be paid with the card saved on the merchant's site. These sit with Well and its browser extension, outside your AI client.
invoke_connector_tool works only on connected providers that have their own MCP server. Write tools Well has reviewed wait for approval inside Well; Well refuses other write tools. Approve those requests in Well with the same care as in your client.
Prompt injection: Well reads emails, invoices and receipts. An instruction hidden in a supplier email or invoice note could push the agent to send an email, issue an invoice or post an entry. Approve each write yourself.
The server sends the AI client its own long instructions (brand voice, which Well skills to load).
Per Well's privacy policy, its AI providers are Google Gemini, Anthropic, OpenAI and LlamaIndex, and it does not use Google user data to train models; it makes no wider training statement. Well also says it does not currently pin a processing region for any of these providers, which matters for EU and UK data-residency checks. Read Well's and your AI provider's terms.
Early product: Well's site says private beta. The repo has no releases, and its list of planned work still includes a public beta.

How could finance teams and accounting firms use it?

Mostly for asking questions of invoice, transaction and ledger data, with drafting uses where a person checks the draft before anything is issued, posted or sent.

Inside a company

Ask which supplier invoices are missing for last month's transactions
Pull receivables, cash position or VAT summaries for a period
Draft a customer invoice in Well for a person to review before issuing
Check a supplier's new bank details against payments already on file

At an accounting firm

Query a client workspace's unposted transactions and ledger gaps
Prepare a French VAT return PDF for review (Well says nothing is filed or paid)
Draft a reminder email to a client for a missing receipt, sent by a person
Compare a client's invoice register against bank transactions

Whatever the use, a person should approve anything that issues an invoice, posts to the ledger, sends an email or moves money.

Want Well connected to Claude for your team?

We configure scoped connections and a review step before anything changes your books. Fixed fee.

Book a 30-minute setup call

Change log

Date	Change	Source
2026-10-21	Server returned 311 tools (163 read-only, 97 write, 51 destructive) against 7 in the README; OAuth metadata lists five MCP scopes.	api.wellapp.ai/v1/mcp
2026-10-21	Repository last updated; no GitHub releases published.	github.com/WellApp-ai/Well

FAQ

Is this official?

Yes. Well hosts the server at https://api.wellapp.ai/v1/mcp and publishes setup docs and a Claude Code plugin in its own GitHub repo.

Is it free?

Well's site says it is in private beta and free to start, with no card needed. It doesn't publish pricing for the MCP server or the product.

Does it change data in Well?

Yes. It can edit, issue and soft-delete invoices, post journal entries and send email from your Gmail, many as soon as the tool runs. It can also save scheduled jobs that make changes later, once you approve them in Well's chat.

Is my data used to train models?

Well's privacy policy says it doesn't use Google user data to train models and names its AI providers, but makes no wider training statement. Check Well's and your AI provider's terms.

Can my accountant use it on my behalf?

Well doesn't document this for MCP. A connection runs as the signed-in user, and Well's tools can invite members to a workspace, so an accountant would sign in with their own Well login.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.