theFinanceStack home

XBert MCP server: what it does, what access it gets, how to connect

XBert hosts one remote MCP server (OAuth) that reads client books and practice data across 11 areas and writes only to XBert's own records, after confirmation. Verified 21 Oct 2026.

  • Official MCP serverOfficial remote MCP · read & write (XBert records only)
Hosting
Remote HTTP only, hosted by XBert (https://mcp-gateway.xbert.io/mcp). No local server or public repo.
Auth
OAuth 2.1 with PKCE and automatic client registration; you sign in with your XBert account. No API key, client ID or secret.
Read / write
Reads client ledgers and practice data. Writes are limited to XBert's own tasks, notes, alerts and custom checks, per XBert's setup guide; nothing is posted to Xero, QuickBooks, MYOB or FreeAgent.
Works with
Claude.ai, Claude Desktop, Claude Code, ChatGPT (web, custom MCP), Microsoft Copilot Studio, Goose and other remote MCP clients, per XBert.
Plan requirement
An XBert account; data and reporting tools only cover clients on an AI-enabled plan (Financial AI or Workflow AI). XBert offers a free trial.
Last changed
2026 (XBert publishes no exact date): MCP server launched
Verification
Verified 21 Oct 2026 by theFinanceStack · confidence: high

What can an agent do with XBert through MCP?

It can answer questions about your clients' books and your practice's workload across 11 areas. Once you confirm, it can also change XBert's own tasks, notes, alerts and custom checks. It doesn't post to client ledgers.

XBert groups the server into 11 capability areas.

Six areas read

  • Receivables
  • Payables (including batch payment runs)
  • Bank and reconciliation
  • Xero Practice Manager jobs and WIP
  • Payroll
  • Financial reporting, with BAS figures for Australian files

Five areas are marked as making changes

  • Workflow tasks
  • Client notes
  • Alert review and configuration
  • Custom XBert checks
  • Task updates and documents

How writes behave

  • XBert has no draft step.
  • Each write is marked as a change to confirm, so your AI client asks you first.
  • Once you approve, the change applies in XBert and goes into the XBert audit log.

Money and ledgers

  • XBert's setup guide says the assistant can't create or change transactions in the ledgers.
  • The guide lists no tool that pays, approves or moves money.

Good to know

  • XBert doesn't publish a full tool list.
  • Its Copilot Studio steps say the server exposes seven tools, and three of those find and run the rest of XBert on demand.

Can

  • Read invoices, quotes, credit notes and aged receivables
  • Read bills, purchase orders, supplier payments, batch payment runs and aged payables
  • Read bank, cash and reconciliation data
  • Read P&L, balance sheet, journals, budget versus actual and BAS figures (Australian files)
  • Read payroll: employees with leave, tax, bank and super details, pay runs and payslips, plus STP year-end totals (Australia)
  • Read jobs, tasks, timesheets and WIP (needs Xero Practice Manager)
  • Create and assign workflow tasks and check team capacity; change task status, add comments, reminders and attachments
  • Read and add client notes
  • Review XBert alerts and change alert configuration across many clients
  • Create, test, promote, roll back or switch off custom XBert checks

Cannot

  • Create or change transactions in Xero, QuickBooks, MYOB or FreeAgent, per XBert's setup guide
  • Reach clients the signed-in user can't see in XBert, per XBert
  • Answer cross-client data questions for clients not on Financial AI or Workflow AI, per XBert
  • Read a client that is on hold for an unpaid XBert invoice, per XBert
  • Read practice jobs, timesheets or WIP without Xero Practice Manager, per XBert
  • Answer questions about a client's books unless that client's ledger is connected to XBert, per XBert

What access does it get?

The assistant signs in as you and inherits your XBert role, so it reaches only the clients you can see. The OAuth scopes cover identity only.

WhereScopes and permissions (as documented)Admin requirement
XBert MCP (remote, OAuth)openid, profile, email, offline_access (per XBert's setup guide and OAuth metadata). offline_access is the standard scope for a refresh token, so your AI client can stay connected without signing in again. Your XBert role and each client's plan decide what data it can reach. The scopes only identify you. No read-only mode or way to switch off write areas is documented. To revoke, remove or disable the connector in the AI client; removing a user in XBert also cuts off their assistant, per XBert.XBert doesn't document an admin approval step. Claude Team/Enterprise: an Owner adds the connector. ChatGPT Business/Enterprise/Edu: an admin allows custom MCP servers and publishes XBert.

How do I connect it?

Add https://mcp-gateway.xbert.io/mcp as a custom connector or remote MCP server, then sign in with your XBert account. There's nothing to install.

  1. In Claude, go to Customize › Connectors, choose + Add, then Add custom connector.
  2. Name it XBert, paste https://mcp-gateway.xbert.io/mcp and select Continue; keep Register automatically and leave client ID and secret empty.
  3. Select Add, then sign in with your XBert account (select Connect if no window opens).
  4. Turn XBert on from the chat tools menu, and keep write tools on approval.

Not in Claude's connector directory as of 21 Oct 2026. Team/Enterprise: an Owner or Primary Owner adds it under Organization settings › Connectors first; on Enterprise, so can anyone whose custom role includes Manage access to Libraries, per XBert. Claude Free allows only one custom connector at a time.

What should a finance team watch for?

The ledgers are read-only. Writes inside XBert apply once you confirm, and some, such as bulk alert changes, affect many clients at once.

  • XBert's own pages disagree. Its MCP FAQ gives creating a bill and recording a payment as write examples. Its setup guide and features page say nothing reaches the ledgers. Ask XBert before relying on either.
  • Per XBert, the confirmation prompt comes from your AI client. XBert exposes seven tools, and three of them find and run the rest, so one approval setting in your client covers many different business actions. Never set the XBert tools to Always allow. If you do, task, note, alert and check changes could run without a prompt.
  • Bulk alert configuration and custom XBert changes can affect monitoring across many clients; check the scope of each change before approving.
  • Payroll reads include employee tax and bank details, and anyone whose XBert role can see that client can pull them through the assistant. Check who connects before rolling it out.
  • Client notes, alert details and documents come back as free text. An injected instruction in one could push the agent to change tasks, notes or alert rules, so read each confirmation.
  • Cross-client answers skip clients not on an AI-enabled plan; the assistant says which it left out, per XBert.
  • Firewalls must allow mcp-gateway.xbert.io, auth.xbert.io and cdn.auth0.com, per XBert, plus the Google, Xero or QuickBooks sign-in pages if users sign in to XBert that way. VS Code, Cursor, Zed and several other clients can't complete sign-in yet.
  • XBert says every action is logged in its audit log and credentials stay with XBert. Its MCP pages make no training statement; check its privacy policy and your AI provider's terms.

How could finance teams and accounting firms use it?

XBert is built for bookkeeping and accounting practices. Reads suit questions about client books and workload. Writes suit task and alert housekeeping that a person confirms first.

Inside a company

  • For a business whose books XBert monitors, ask what is overdue in receivables and who owes the most.
  • Review last week's batch payment run: who was paid what.
  • Compare P&L against budget for the month before a management meeting.
  • Check open data-quality alerts on the file before month-end.

At an accounting firm

  • Ask which clients are BAS or VAT ready, or which have open duplicate-payment alerts.
  • Check WIP hours, overdue jobs and who has capacity next week (WIP needs Xero Practice Manager).
  • Create a chase or month-end task and assign it to a team member, confirming the change.
  • Describe a new check in plain English, such as suspense balances over a set amount, and test it before promoting it.

Whatever the use, keep a person approving every task, note, alert or check the assistant changes, and make ledger changes in the ledger itself.

Want XBert connected to Claude for your team?

We configure scoped connections and a review step before anything changes your books. Fixed fee.

Book a 30-minute setup call

Change log

DateChangeSource
2026-10-21Re-verified: remote URL, OAuth scopes, 11 capability areas, no ledger writes per setup guide, Claude Code callback port, ChatGPT and Copilot Studio stepsintelligence.xbert.io/get-started
2026XBert launches its hosted MCP server (no exact date published)www.xbert.io/xbert-mcp

FAQ

Is this official?

Yes. XBert hosts the server at mcp-gateway.xbert.io and documents it on its own MCP, features and setup pages.

Is it free?

XBert doesn't publish a separate MCP price. Data and reporting tools need clients on an AI-enabled plan, and XBert offers a free trial. On the AI side, per XBert: Claude Free allows only one custom connector, and Copilot Studio needs a Copilot Studio or Microsoft 365 Copilot licence plus Copilot Credits (its free trial can't publish an agent).

Does it write to my books?

Not according to XBert's setup guide, which says it can't create or change transactions in Xero, QuickBooks, MYOB or FreeAgent. It can change XBert tasks, notes, alerts and custom checks after you confirm. XBert's MCP FAQ still mentions bills and payments, so confirm with XBert.

Is my data used to train models?

XBert's MCP pages don't address training. Its privacy policy says it may use third-party AI technologies in its services. Check XBert's and your AI provider's terms before connecting.

Can my accountant use it on my behalf?

XBert is built for practices, so a firm user connects with their own XBert login and sees only the clients their role allows. XBert doesn't document access for business owners connecting their own assistant.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.