Skip to content

Conecto Bookkeeping

chat.conecto/bookkeepingconecto.chatstreamable-httpv1.0.0Scanned

Double-entry bookkeeping with bank matching, reports and DATEV export. Pay per action.

61 tools: 6 can delete or cancel things, 7 do something that can't be undone, 30 change things and 18 only read.

Tools: 6 delete, 7 irreversible, 30 write, 18 read.
  • Reads private data · 6
  • Reads text others write · 5
  • Can send data out · 7
  • 8 findings

Anlyon alternative

43 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

61 tools

Deletes or cancels 6Claude Code: deny
  • account_erase_personErases one person across every area when they ask (GDPR Art.No findings

    Why it is in this group

    • The name "account_erase_person" says "erase": a word for removing or ending something.
    • The description says "Can't be undone".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Erases one person across every area when they ask (GDPR Art. 17), once you know it is them (they wrote from that address, or confirmed it). Their CRM contact, chat visitor, past meetings and calls are anonymised, so deals stay without them, and a meeting they were only a guest at drops them; their chats, CRM history, form and routing form answers, job applications with the CV, newsletter subscriptions and events are deleted, and the call log's contents that name them are cleared. Kept, each with its reason in the result: accounting records, employment records, signed documents, the audit log, the account's own settings, upcoming meetings, and emails and tickets (outreach emails and replies too) unless correspondence is true. Their address goes on the suppression lists, so it is never mailed again: outreach campaigns stop for them at once. Can't be undone; the owner is emailed. A key of a team other than the company-wide one gets owner_required: pass the request to the owner. Free. Free.

    Annotations the server declares

    • title: Erase a person's data
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • account_refund_topupRefund a top-up paid in the last 24 hours that none of has been used yet: its credit, with the first top-up's bonus, leaves the balance, and the card gets the credit back with its …No findings

    Why it is in this group

    • The name "account_refund_topup" says "refund": a word that usually means money moves, which cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Refund a top-up paid in the last 24 hours that none of has been used yet: its credit, with the first top-up's bonus, leaves the balance, and the card gets the credit back with its tax. The service fee is kept. Without topup_id, the newest top-up (GET /v1/topups lists them with their ids). Free. Free.

    Annotations the server declares

    • title: Refund a top-up
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • books_close_yearClose a fiscal year once its accounts and tax returns are final: nothing can be booked on or before its last day again, by any tool, invoice or unlock, and every earlier year is cl…No findings

    Why it is in this group

    • The name "books_close_year" says "close": a word for a change.
    • The description says "can't be undone".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Close a fiscal year once its accounts and tax returns are final: nothing can be booked on or before its last day again, by any tool, invoice or unlock, and every earlier year is closed with it. It can't be undone; a correction found later is booked in the open year. Monthly work uses books_lock instead. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Close a fiscal year for good
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • books_delete_assetTake an asset registered by mistake out of the register.No findings

    Why it is in this group

    • The name "books_delete_asset" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Take an asset registered by mistake out of the register. Only while none of its depreciation is booked and it is not sold or written off: else undo its depreciation first (books_depreciate undo_after with asset). The books don't change. Free.

    Annotations the server declares

    • title: Delete an asset
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • books_delete_bank_ruleDelete a bank rule.No findings

    Why it is in this group

    • The name "books_delete_bank_rule" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete a bank rule. What it booked stays booked. Free.

    Annotations the server declares

    • title: Delete a bank rule
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
  • books_delete_budgetDelete a budget.No findings

    Why it is in this group

    • The name "books_delete_budget" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete a budget. The books don't change. Free.

    Annotations the server declares

    • title: Delete a budget
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: false
Can't be undone 7Claude Code: ask
  • account_emit_eventSend an event you name, custom.<name> (custom.lead_qualified, custom.order_shipped), to every channel subscribed to it (notify_subscribe with "custom.*" or its name: Slack, Teams, …Can send data outNo findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • outboundThe description's first verb is "send": it sends or publishes something to other people.
    Description, as the server wrote it
    Send an event you name, custom.<name> (custom.lead_qualified, custom.order_shipped), to every channel subscribed to it (notify_subscribe with "custom.*" or its name: Slack, Teams, a webhook to Zapier, Make, n8n or the business's own systems) and to account_events, where another team's bot can pick it up. data is any JSON object (up to 10 KB); sent_by is added with this bot's name and team. $0.005 for each channel it goes to; free when no channel is subscribed. Costs $0.005 per channel it goes to; nothing if none are found.

    Annotations the server declares

    • title: Send an event of your own
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_bank_linesImported bank lines, by default those still to match, oldest first, each with up to three suggestions of what it was: entries already booked (same amount, close in date), an open i…Can send data out1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Warn

      The server marks "books_bank_lines" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Imported bank lines, by default those still to match, oldest first, each with up to three suggestions of what it was: entries already booked (same amount, close in date), an open invoice it pays (money in) or an open supplier bill it pays (money out), or the account earlier lines from the same party went to. Suggestions are plain rules; you decide, with books_match_bank_lines (pass a suggestion's match as it is). A first suggestion with sure: true is one the books are sure of (a bank rule, or the number and the exact amount, well ahead of any other); such lines can be matched together in one call. Free.

    Annotations the server declares

    • title: List bank lines
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_exportA file in the file store, with a download link: journal (a CSV of every line of every entry from-to, for an accountant or another program), accounts (the chart with balances on to)…Can send data outNo findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.
    Description, as the server wrote it
    A file in the file store, with a download link: journal (a CSV of every line of every entry from-to, for an accountant or another program), accounts (the chart with balances on to) or datev (a DATEV Buchungsstapel for a German tax adviser: one fiscal year, from-to, default the year so far; needs the datev settings once) or fec (the French Fichier des Écritures Comptables for a tax audit: the fiscal year that holds to, every entry; needs the fec settings once). Conecto files no tax returns: for UK VAT (Making Tax Digital) the journal CSV is the digital link into bridging software. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Export the books
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_import_bankRead a bank statement from the file store onto a bank account (default the bank account): CSV as the bank exports it, CAMT.053 (.052, .054) or OFX/QFX.No findings

    Why it is in this group

    • The name "books_import_bank" says "import": a word for a change.
    • The input carries an amount (input.columns.amount) and a currency, so it moves money.
    Description, as the server wrote it
    Read a bank statement from the file store onto a bank account (default the bank account): CSV as the bank exports it, CAMT.053 (.052, .054) or OFX/QFX. CSV columns are found by their headers in several languages; when they aren't, name them with columns. Lines imported before are skipped, so overlapping statements are fine. Each line then waits in books_bank_lines to be matched. Charged per line added. Free.

    Annotations the server declares

    • title: Import a bank statement
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_record_expenseBook a cost the business paid: account is what it was for (an expense, or an asset like equipment), paid_from where the money came from (default the bank account; a card, cash or t…No findings

    Why it is in this group

    • The input carries an amount (input.amount) and a currency, so it moves money.
    Description, as the server wrote it
    Book a cost the business paid: account is what it was for (an expense, or an asset like equipment), paid_from where the money came from (default the bank account; a card, cash or the owner's account). paid_by instead (an email) makes it an expense claim, like Xero's: someone paid with their own money and is paid back with books_repay_claims. With a tax, the tax to reclaim is split off (amount includes it unless amount_includes_tax is false). Attach the receipt from the file store. A negative amount is a refund. Costs $0.01 per call; nothing if it fails.

    Annotations the server declares

    • title: Book an expense
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_repay_claimsPay back what someone paid for the business with their own money (expense claims, from books_record_expense with paid_by), like Xero's: all their open claims in one currency, or th…No findings

    Why it is in this group

    • The description's first verb is "pay": a word that usually means money moves, which cannot be taken back.
    Description, as the server wrote it
    Pay back what someone paid for the business with their own money (expense claims, from books_record_expense with paid_by), like Xero's: all their open claims in one currency, or the claims named, in one entry from paid_from (default the bank account) against Expense claims to repay. sepa_file: true adds a SEPA credit transfer file to their iban, to upload to the bank. Costs $0.01 per call; nothing if it fails.

    Annotations the server declares

    • title: Pay back expense claims
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_reportA report in the base currency.Can send data out2 findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • outboundThe input takes a destination (input.to): what the tool writes goes there.

    Findings

    • Info

      The description is 2,160 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...r those paid in the period. To show a person, put it in a view (view_show). Free."

      What this check looks for
    • Warn

      The server marks "books_report" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    A report in the base currency. profit_and_loss and tax cover from-to (default: this fiscal year so far); balance_sheet and trial_balance are as of to (default today); general_ledger lists each account's lines from-to with running balances (one account, or all, paged); oss is a quarter's sales to consumers in other EU countries for the One Stop Shop return, per country and VAT rate in euros (quarter, default the last one ended; no books needed); reconciliation holds each bank account's books against the closing balance its latest statement on or before to stated: reconciled, to_match (statement lines and entries still to pair explain the difference) or off (unexplained). Like Xero's: profit_and_loss with compare adds columns for earlier months, quarters or years; cash_summary shows the money accounts at the start and end of from-to and what came in and went out, by account; executive_summary (default this month so far) gives cash, profit, margins, what is owed both ways, debtor and creditor days and invoices issued, against the same days a month before; budget_variance holds a budget (books_save_budget) against the actual figures for the months from-to touches; vat_return gives from-to by the boxes of the VAT return the business files itself, Germany's advance return by Kennzahl or the UK's nine boxes (country, default the business's), with what the books can't tell yet. Like Xero's short-term cash flow, cash_forecast projects the money accounts `days` ahead (default 30, up to 180) from open invoices and bills on their due, expected or planned dates and what repeating templates will make, by day and week, with the lowest point and the overdue invoices and bills it leaves out until they have a date to come (each with the id that invoices_set_expected_date or purchasing_set_planned_date takes). snapshot is the year so far (default) against the same days a year before: profit, margins, income and expenses by month, the largest costs, the balance sheet, cash, and the average days from an invoice's or a bill's date to the payment that settled it, for those paid in the period. To show a person, put it in a view (view_show). Free.

    Annotations the server declares

    • title: Run a report
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 30Claude Code: ask
  • account_add_approval_ruleMake a tool wait for a person: every call of it, those whose argument is over a number (like invoices_create_credit_note when amount is over 500), or those whose argument is one of…No findings

    Why it is in this group

    • The name "account_add_approval_rule" says "add": a word for a change.
    Description, as the server wrote it
    Make a tool wait for a person: every call of it, those whose argument is over a number (like invoices_create_credit_note when amount is over 500), or those whose argument is one of some values (like connect_call when method is POST, PUT, PATCH or DELETE). A held call answers approval_required with an approval_id and asks the approver; when they approve, call again with the same arguments, once (a call no person answers for adds the approval: header X-Conecto-Approval, or _meta.approvalId over MCP). The approver is an email, a saved channel, or a team (its managers, or everyone in it); each approver gets a link of their own, and the person whose call it is never approves it. With two_people_over, calls whose argument is over it need two people. Bills like Xero's bill approval: purchasing_create_bill with argument total holds bills over an amount, tax included; a rule on purchasing_pay_bill also holds batches with such a payment. Removing a rule is the owner's, on their account page, when the account has an owner email. $0.001. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Hold a tool for approval
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • account_assign_teamMove a form, a meeting type, a job, an inbox, a phone number, a newsletter, the website chat, a rental, a pipeline, a table or a website to a team.No findings

    Why it is in this group

    • The name "account_assign_team" says "assign": a word for a change.
    Description, as the server wrote it
    Move a form, a meeting type, a job, an inbox, a phone number, a newsletter, the website chat, a rental, a pipeline, a table or a website to a team. What happens through it is charged to that team from now on (a form's responses, a number's calls, an inbox's tickets), and its rental moves with it. Something a bot makes already belongs to the bot's team. Only a key of the company-wide team without limits moves things between teams. $0.001. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Give something to a team
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_balanceThe account balance, how much of it is credit bought (AI visibility and the phone run only on that) and how much free and bonus credit, what running calls are holding, this key's d…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The account balance, how much of it is credit bought (AI visibility and the phone run only on that) and how much free and bonus credit, what running calls are holding, this key's daily budget, the auto-reload state, and how much of this month's free reads and downloads is used. Free.

    Annotations the server declares

    • title: Check balance
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_data_locationsWhere each area's data is stored and processed: the company that runs each place, the country or region, and what it holds.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Where each area's data is stored and processed: the company that runs each place, the country or region, and what it holds. Every area keeps its records in the database and runs on Conecto's servers; some also use a service named here (email, phone, PDFs, search). For the business's records of processing and its transfer assessments (GDPR Art. 30 and 44). Free.

    Annotations the server declares

    • title: See where the data is
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_eventsWhat happened in this account that someone outside the bot did, oldest first: applications, bookings, form responses, signatures, replies, emails received, goals reached on the web…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    What happened in this account that someone outside the bot did, oldest first: applications, bookings, form responses, signatures, replies, emails received, goals reached on the website; and the custom events bots sent with account_emit_event. Kept 30 days. Poll with after = the last event_id you saw. Free.

    Annotations the server declares

    • title: Read recent events
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_export_allEverything this account holds, in ZIP files of up to 24 MB saved to its file store: every record of every area as JSON Lines, and the stored files themselves, with a README saying …1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credentials".

      Matched text

      description: "...es, with a README saying what is where. Credentials are left out. Runs in the background: p..."

      What this check looks for
    Description, as the server wrote it
    Everything this account holds, in ZIP files of up to 24 MB saved to its file store: every record of every area as JSON Lines, and the stored files themselves, with a README saying what is where. Credentials are left out. Runs in the background: poll the call with account_get_call; the result has a download link for each part. The parts open only for this key and for the owner's and admins' own keys that neither only read nor only draft. A key of a team other than the company-wide one gets owner_required. Free (EU Data Act). One at a time, three a day; the owner is emailed when an export is made. Free. Runs in the background: the reply has a call_id; poll it with the account_get_call tool or GET /v1/calls/<id>.

    Annotations the server declares

    • title: Export everything
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • account_export_personEverything account_find_person finds about one person in one ZIP in the file store: their records as JSON Lines (credentials left out) and the files those records point to, like a …Can send data out1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • outboundThe input takes a destination (input.phone): what the tool writes goes there.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...ile store: their records as JSON Lines (credentials left out) and the files those records p..."

      What this check looks for
    Description, as the server wrote it
    Everything account_find_person finds about one person in one ZIP in the file store: their records as JSON Lines (credentials left out) and the files those records point to, like a CV. Give the person the download link when they ask for a copy of their data (GDPR Art. 15 and 20), once you know it is them. The ZIP opens only for this key and for the owner's and admins' own keys that neither only read nor only draft. A key of a team other than the company-wide one gets owner_required: pass the request to the owner. Free; 20 a day. Free.

    Annotations the server declares

    • title: Export a person's data
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • account_pause_teamStops every key of a team at once, this one too if it is the team's: their calls are refused until the owner starts the team again on their account page.No findings

    Why it is in this group

    • The description's first verb is "stop": a word for a change.
    Description, as the server wrote it
    Stops every key of a team at once, this one too if it is the team's: their calls are refused until the owner starts the team again on their account page. For a bot that misbehaves or a team that spends too fast. Free. Free.

    Annotations the server declares

    • title: Pause a team
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • account_request_limitAsk Conecto to raise one of the business's limits: which one (or other, saying which), the number it needs, and why, in 40 to 2,000 characters.No findings

    Why it is in this group

    • The name "account_request_limit" says "request": a word for a change.
    Description, as the server wrote it
    Ask Conecto to raise one of the business's limits: which one (or other, saying which), the number it needs, and why, in 40 to 2,000 characters. Conecto reviews it and approves (maybe with less) or declines; the answer comes as the account.limit_request_answered event and by email to the owner, who is also told now. For an account that has topped up; one request per limit at a time, five in 30 days. Free. Free.

    Annotations the server declares

    • title: Ask for a higher limit
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • account_save_teamA department, location or project group of the account, like Support, Finance or the Hamburg shop.No findings

    Why it is in this group

    • The name "account_save_team" says "save": a word for a change.
    Description, as the server wrote it
    A department, location or project group of the account, like Support, Finance or the Hamburg shop. Its keys (POST /v1/keys with "team") can only work in its areas, only read when read_only is on, and spend against its budget (monthly_budget_usd per budget_period: a month, a fiscal quarter or year, or a project total): a hard budget refuses the call that would pass it, a soft one only warns. At alert_percent you get the event account.budget_alert and the owner an email, once a period. erp_code is the team's cost center in the company's ERP, for statements. drafts_only makes every write of its keys wait for one of its managers (or the owner), for a new bot that should only draft. mailboxes are the Microsoft 365 or Google mailboxes its keys may act as. You may make a team and narrow one; widening its areas, letting it write, ending drafts only, switching a hard budget to soft, and raising or removing a budget are the owner's, on their account page, when the account has an owner email. The company-wide team holds every key no other team does and is never limited to areas. $0.001. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Create or change a team
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_set_brandThe business's name as the sender, its logo (a PNG, JPEG, WebP or GIF from the file store), its colour and a footer line (an address, a legal line), on every email to its customers…No findings

    Why it is in this group

    • The name "account_set_brand" says "set": a word for a change.
    Description, as the server wrote it
    The business's name as the sender, its logo (a PNG, JPEG, WebP or GIF from the file store), its colour and a footer line (an address, a legal line), on every email to its customers (bookings, applications, tests, signatures, invoices, newsletters, replies) and on its published pages (forms, booking, careers, newsletters, status, views). Only what you pass changes; an empty string clears it. Mail from Conecto to you keeps Conecto's look. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Set the business's look
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_set_email_templateChange an email's subject, headline or opening words in the business's own voice, with {variables} from account_list_email_templates (like {name} or {when}).Can send data outNo findings

    Why it is in this group

    • The name "account_set_email_template" says "set": a word for a change.

    What it can reach

    • outboundThe name "account_set_email_template" says "set" and "email": it writes something other people read.
    Description, as the server wrote it
    Change an email's subject, headline or opening words in the business's own voice, with {variables} from account_list_email_templates (like {name} or {when}). The facts under them (times, places, amounts, links and buttons) stay as they are. Only what you pass changes; an empty string brings back the original words. Plain text; a blank line starts a new paragraph. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Rewrite one of the business's emails
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_set_owner_emailWhen the account was made without the owner's email: send that person a link to confirm they own it.Can send data outNo findings

    Why it is in this group

    • The name "account_set_owner_email" says "set": a word for a change.

    What it can reach

    • outboundThe name "account_set_owner_email" says "set" and "email": it writes something other people read.
    Description, as the server wrote it
    When the account was made without the owner's email: send that person a link to confirm they own it. Once they confirm, the owner gets the account's warnings and approval requests, and only the owner raises limits. Nothing changes until they open the link. Free. Free.

    Annotations the server declares

    • title: Name the business's owner
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_apply_bank_rulesBook every new bank line a rule matches, oldest first, each by the first rule that matches (up to limit), on one bank account or all.No findings

    Why it is in this group

    • The name "books_apply_bank_rules" says "apply": a word for a change.
    Description, as the server wrote it
    Book every new bank line a rule matches, oldest first, each by the first rule that matches (up to limit), on one bank account or all. Run it after books_import_bank. Lines no rule matches wait for books_match_bank_lines; a line the books can't take (a locked month) is listed under skipped with why. $0.02 per line booked, as matching it by hand. Costs $0.02 per bank line booked; nothing if none are found.

    Annotations the server declares

    • title: Book lines by the bank rules
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_attach_receiptAttach a receipt or invoice from the file store to an entry that has none.No findings

    Why it is in this group

    • The name "books_attach_receipt" says "attach": a word for a change.
    Description, as the server wrote it
    Attach a receipt or invoice from the file store to an entry that has none. It stays with the books: the file can't be deleted while the entry has it. Costs $0.01 per call; nothing if it fails.

    Annotations the server declares

    • title: Attach a receipt
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_depreciateBook the depreciation of every registered asset through a month's end (default: the end of last month), like Xero's run depreciation: one entry per month, dated its last day, from …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Book the depreciation of every registered asset through a month's end (default: the end of last month), like Xero's run depreciation: one entry per month, dated its last day, from the month after the last one booked, so running it again books nothing twice. Months in a locked period are refused; catch_up: true books them in the first open month instead. undo_after books the opposite of what was booked for the months after that date, for every asset or the one asset names; undo before changing an asset's cost, life or method. Costs $0.01 per call; nothing if it fails.

    Annotations the server declares

    • title: Book depreciation
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_dispose_assetTake an asset out of the books, sold or written off, like Xero's dispose.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Take an asset out of the books, sold or written off, like Xero's dispose. Its depreciation is booked through the month it goes first (to the day with actual_days; what was booked for later months is undone), then one entry takes its cost and accumulated depreciation out, books price to paid_to and the difference as a gain or a loss on gain_account (made as 4950 Gains and losses on assets sold when missing). paid_to is the bank account the money went to, or the income account the invoice to the buyer booked it to, which this then clears. A write-off has no price. undo: true brings it back. Costs $0.01 per call; nothing if it fails.

    Annotations the server declares

    • title: Sell or write off an asset
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_lockLock the books through a date (a closed month, a filed tax return): nothing new can be booked on or before it, by any tool or invoice.No findings

    Why it is in this group

    • The name "books_lock" says "lock": a word for a change.
    Description, as the server wrote it
    Lock the books through a date (a closed month, a filed tax return): nothing new can be booked on or before it, by any tool or invoice. null unlocks. Every change is kept in the books' history. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Lock a period
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_match_bank_linesSay what bank lines were, up to 100 at a time, each one of: entries (entry numbers already booked whose lines on the bank account add up to the line), invoices (the open invoices m…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Say what bank lines were, up to 100 at a time, each one of: entries (entry numbers already booked whose lines on the bank account add up to the line), invoices (the open invoices money in pays: their payments are recorded and posted, the amount spread in the order given unless amounts are given), bills (the open supplier bills money out pays, the same way), account (book it there now, with an optional tax split off: a sale when money came in, a cost when it went out), rule (book it the way a bank rule says), ignore (not for the books, e.g. a duplicate), or unmatch (undo; a line booked to an account is reversed). Each line succeeds or fails on its own; only those done are charged. Costs $0.02 per bank line matched; nothing if none are found.

    Annotations the server declares

    • title: Match bank lines
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_record_entryBook an entry: two or more lines, each a debit or a credit on an account, which must balance.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Book an entry: two or more lines, each a debit or a credit on an account, which must balance. For anything the other tools don't cover: opening balances, a loan, depreciation, owner's drawings, moving money between accounts, a correction. Entries are never edited; undo one with books_reverse_entry. Lines can carry a tax so the tax report counts them. Costs $0.01 per call; nothing if it fails.

    Annotations the server declares

    • title: Book a journal entry
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_reverse_entryUndo an entry by booking its mirror image (entries are never edited or deleted).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Undo an entry by booking its mirror image (entries are never edited or deleted). It is dated like the entry, or today when that period is locked, unless date is given. Bank lines matched to the entry wait to be matched again. Entries posted from invoices follow the invoice: void it, or record a refund. Costs $0.01 per call; nothing if it fails.

    Annotations the server declares

    • title: Reverse an entry
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_save_accountsAdd accounts or change them, matched by code: name, type (only while unused), description, a new code, archived (only with no balance and no role), a bank account's IBAN and BIC, a…No findings

    Why it is in this group

    • The name "books_save_accounts" says "save": a word for a change.
    Description, as the server wrote it
    Add accounts or change them, matched by code: name, type (only while unused), description, a new code, archived (only with no balance and no role), a bank account's IBAN and BIC, and role. Roles are the accounts the books post to on their own: bank, cash, receivable, inventory, input_tax, sales_tax, payable, retained_earnings, opening_balances, sales, cost_of_sales, exchange, depreciation, accumulated_depreciation, asset_disposals, customer_credits, supplier_credits, expense_claims, import_vat. Giving a role moves it from the account that had it. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Add or change accounts
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_save_assetPut an asset the business bought in the register, like Xero's fixed assets: a van, a machine, a laptop, with its cost, purchase date and the asset account its purchase was booked t…No findings

    Why it is in this group

    • The name "books_save_asset" says "save": a word for a change.
    Description, as the server wrote it
    Put an asset the business bought in the register, like Xero's fixed assets: a van, a machine, a laptop, with its cost, purchase date and the asset account its purchase was booked to (registering books nothing). method: straight_line over its life down to residual, declining_balance at rate_percent of its book value at the start of each fiscal year, full (all of it in the month it starts, for something cheap enough to write off at once) or none (land). averaging: full_month counts the month it starts in full, actual_days counts days. Depreciation goes to the depreciation expense and accumulated depreciation accounts (made as 6950 and 1590 when missing) unless expense_account and accumulated_account say otherwise. An asset depreciated before the books started brings opening_accumulated. To change one, pass asset: once its depreciation is booked, only its name, description, serial number, warranty and tracking change. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Register a fixed asset
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_save_bank_ruleA bank rule, like Xero's: which new bank lines it matches and how to book them, so lines that come every month (bank fees, rent, the phone bill) book themselves.No findings

    Why it is in this group

    • The name "books_save_bank_rule" says "save": a word for a change.
    Description, as the server wrote it
    A bank rule, like Xero's: which new bank lines it matches and how to book them, so lines that come every month (bank fees, rent, the phone bill) book themselves. when: conditions on the counterparty, description or reference (contains, equals, starts_with, ends_with; any case), all of them or any (match). Narrow it with direction (in, out), amount_min and amount_max (the line's size, no sign) and bank_account. Book to account with an optional tax split off, or split by percent across accounts (70% phone, 30% private), each part with its own tax. Rules are tried by position, lowest first; the first that matches is the line's first suggestion in books_bank_lines, and books_apply_bank_rules books every line a rule matches. Matched by name; only what you pass changes. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Save a bank rule
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_save_budgetA budget, like Xero's budget manager: an amount per income or expense account for each month from start (12 months unless months says otherwise).No findings

    Why it is in this group

    • The name "books_save_budget" says "save": a word for a change.
    Description, as the server wrote it
    A budget, like Xero's budget manager: an amount per income or expense account for each month from start (12 months unless months says otherwise). Each line gives amounts (one per month), monthly (the same every month) or yearly (spread evenly); a line for an account already in it replaces that line, and remove takes one out. Hold it against what happened with books_report budget_variance. Matched by name. Not a team's spending budget at Conecto. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Save a budget
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_save_taxA tax rate the books use (VAT, GST, sales tax), matched by name.No findings

    Why it is in this group

    • The name "books_save_tax" says "save": a word for a change.
    Description, as the server wrote it
    A tax rate the books use (VAT, GST, sales tax), matched by name. Tax charged on sales is owed on sales_account (default: the sales tax account); tax paid on purchases is reclaimed on purchase_account (default: the tax to reclaim account; null when it can't be reclaimed, and it stays part of the cost). A rate in use can't change: add a new tax and archive the old one. Invoices make the taxes they need on their own. kind makes a new tax one the business owes itself, like Xero's reverse charge rates: rc_eu (services from another EU country), rc_abroad (from outside it), rc_home (reverse charge at home) or eu_goods (goods from another EU country); on an expense or a bank line it books the VAT owed and reclaimed at once, the amount paid being without VAT. kind import is import VAT paid at customs, no rate: what is booked with it is the VAT itself, reclaimed whole on the import VAT account (1310, made with it), where an expense or a bank line counts with no tax named (box 62 in Germany, box 4 in the UK). Conecto gives no tax advice; the rates are the business's. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Add or change a tax
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_save_trackingA tracking category, like Xero's: a department, a region or a project line, with its options.No findings

    Why it is in this group

    • The name "books_save_tracking" says "save": a word for a change.
    Description, as the server wrote it
    A tracking category, like Xero's: a department, a region or a project line, with its options. Up to two at a time. Any line can then carry one option of each (tracking: {"Department": "Service"}): journal entry lines, expenses, bank lines booked to an account, invoice and bill lines; profit and loss splits by a category with books_report by_tracking, or keeps to one option with tracking. Matched by name: options adds options, rename renames them on every line, archive stops new use. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Save a tracking category
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • books_setupStart the business's double-entry books, or change their settings.No findings

    Why it is in this group

    • The description's first verb is "start": a word for a change.
    Description, as the server wrote it
    Start the business's double-entry books, or change their settings. The first call needs currency (the base currency of every report; it can't change once something is booked) and makes the chart: "starter" (cash, bank, receivables, tax, equity, sales and common costs, numbered 1000-8000) or "minimal" (only the eight accounts the books post to on their own). The books start on start_date (default: the start of this fiscal year); enter what the business owned and owed that day as one entry against the opening balances account (3900), unpaid invoices and bills from before included. With post_invoices (default on), sent invoices and supplier bills, their payments and voids post on their own, those from start_date on right away. payment_accounts says where payments land per method, in and out (default: the bank account, cash in the cash account); rates are standing exchange rates for currencies the European Central Bank doesn't publish. Costs $0.001 per call; nothing if it fails.

    Annotations the server declares

    • title: Set up the books
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 18Show 18 read-only tools
  • account_audit_logThe account's admin and security actions, newest first: keys made and revoked, limits and auto-reload, the owner's sign-ins, connectors, exports, vault reads and writes, credential…Reads private data1 finding

    Why it is in this group

    • The name "account_audit_log" says "log": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "vault": it reads secrets.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...ctors, exports, vault reads and writes, credentials set and everything deleted. Ordinary wo..."

      What this check looks for
    Description, as the server wrote it
    The account's admin and security actions, newest first: keys made and revoked, limits and auto-reload, the owner's sign-ins, connectors, exports, vault reads and writes, credentials set and everything deleted. Ordinary work is in the call log (account_list_calls). verify: true also checks the hash chain, which breaks where an entry was changed or removed. Free.

    Annotations the server declares

    • title: Read the audit log
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_find_personEvery record this account holds about one person, by their email address or phone number, across every area: CRM, chats, emails, tickets, forms, bookings, calls, applications, invo…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "account_find_person" says "find": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Every record this account holds about one person, by their email address or phone number, across every area: CRM, chats, emails, tickets, forms, bookings, calls, applications, invoices, orders, newsletters, HR and the call log, with their chats and CRM history. For a person who asks what the business keeps about them (GDPR Art. 15). Shows each kind with its count and ids; account_export_person gives them a copy, account_erase_person erases what may go. Free.

    Annotations the server declares

    • title: Find a person's data
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_get_brandThe name, logo, colour and footer line the business's emails and published pages carry.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "account_get_brand" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    The name, logo, colour and footer line the business's emails and published pages carry. Free.

    Annotations the server declares

    • title: See the business's look
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_get_callOne call by id: its status (queued, running, succeeded, failed), cost and result.No findings

    Why it is in this group

    • The name "account_get_call" says "get": a word for reading.
    Description, as the server wrote it
    One call by id: its status (queued, running, succeeded, failed), cost and result. Use it to poll a background call until it finishes. Free.

    Annotations the server declares

    • title: Get a call
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_get_limitsThe limits a business can ask Conecto to raise (calls a minute, new email addresses a day, phone numbers and more): each one's standard and current value and the most that can be a…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "account_get_limits" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    The limits a business can ask Conecto to raise (calls a minute, new email addresses a day, phone numbers and more): each one's standard and current value and the most that can be asked for, and the business's requests with their answers. Free.

    Annotations the server declares

    • title: Read the limits
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_list_approval_rulesThe tools that wait for a person's approval, with their thresholds and approvers.No findings

    Why it is in this group

    • The name "account_list_approval_rules" says "list": a word for reading.
    Description, as the server wrote it
    The tools that wait for a person's approval, with their thresholds and approvers. Free.

    Annotations the server declares

    • title: List approval rules
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_list_callsRecent calls on this account, newest first, optionally only failed or succeeded ones, or one area's.No findings

    Why it is in this group

    • The name "account_list_calls" says "list": a word for reading.
    Description, as the server wrote it
    Recent calls on this account, newest first, optionally only failed or succeeded ones, or one area's. Free.

    Annotations the server declares

    • title: List calls
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_list_email_templatesEvery email Conecto sends to the business's customers (bookings, applications, interviews, tests, signatures, invoices and quotes, newsletter sign-ups), with when it goes out and i…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "account_list_email_templates" says "list": a word for reading.

    What it can reach

    • private-dataThe name "account_list_email_templates" says "list" and "email": it reads mail.
    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe name "account_list_email_templates" says "list" and "email": it reads inbound email, which other people can write.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Every email Conecto sends to the business's customers (bookings, applications, interviews, tests, signatures, invoices and quotes, newsletter sign-ups), with when it goes out and its subject, headline and opening words as they are now, and the {variables} each can use. Free.

    Annotations the server declares

    • title: See what the business's emails say
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • account_list_teamsThe account's teams, the company-wide one first: each with its areas, whether it only reads, its budget (hard or soft, and its period) and alert line, this period's spend, its ERP …No findings

    Why it is in this group

    • The name "account_list_teams" says "list": a word for reading.
    Description, as the server wrote it
    The account's teams, the company-wide one first: each with its areas, whether it only reads, its budget (hard or soft, and its period) and alert line, this period's spend, its ERP code, whether it is paused, its keys, and its people with who manages it. A person's own assistant works within their teams. Free.

    Annotations the server declares

    • title: List teams
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_getThe base currency, start date, fiscal year, locked period, which accounts hold which role, where invoice payments land, the taxes, how many entries there are and how many bank line…No findings

    Why it is in this group

    • The name "books_get" says "get": a word for reading.
    Description, as the server wrote it
    The base currency, start date, fiscal year, locked period, which accounts hold which role, where invoice payments land, the taxes, how many entries there are and how many bank lines wait to be matched. Free.

    Annotations the server declares

    • title: Read the books' settings
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_list_accountsEvery account with its code, type, role and balance on as_of (default today).No findings

    Why it is in this group

    • The name "books_list_accounts" says "list": a word for reading.
    Description, as the server wrote it
    Every account with its code, type, role and balance on as_of (default today). Balance sheet accounts show their balance; income and expense accounts show the fiscal year so far. Free.

    Annotations the server declares

    • title: List the chart of accounts
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_list_assetsThe asset register: each asset's cost, accumulated depreciation, book value, how it depreciates and through which month that is booked, with totals.No findings

    Why it is in this group

    • The name "books_list_assets" says "list": a word for reading.
    Description, as the server wrote it
    The asset register: each asset's cost, accumulated depreciation, book value, how it depreciates and through which month that is booked, with totals. due: what books_depreciate would book through the end of last month. check: the register held against the books per account, like Xero's fixed asset reconciliation; a difference is a purchase not registered yet, or an asset booked out another way. asset gives one asset with its schedule (depreciation and book value per fiscal year) and the months booked. Free.

    Annotations the server declares

    • title: List the fixed assets
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_list_bank_rulesThe bank rules, in the order they are tried: their conditions, where they book, and how often and when each was last used.No findings

    Why it is in this group

    • The name "books_list_bank_rules" says "list": a word for reading.
    Description, as the server wrote it
    The bank rules, in the order they are tried: their conditions, where they book, and how often and when each was last used. Free.

    Annotations the server declares

    • title: List bank rules
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_list_budgetsThe budgets with their months and every line's amounts and total.No findings

    Why it is in this group

    • The name "books_list_budgets" says "list": a word for reading.
    Description, as the server wrote it
    The budgets with their months and every line's amounts and total. Free.

    Annotations the server declares

    • title: List budgets
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_list_claimsExpense claims: what people paid for the business with their own money, still to repay (the default), repaid, void or all, newest first, with what each person is owed per currency;…No findings

    Why it is in this group

    • The name "books_list_claims" says "list": a word for reading.
    Description, as the server wrote it
    Expense claims: what people paid for the business with their own money, still to repay (the default), repaid, void or all, newest first, with what each person is owed per currency; person keeps to one. Free.

    Annotations the server declares

    • title: List expense claims
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_list_entriesEntries newest first, each with its lines, filtered by dates, an account, where it came from (manual, expense, bank, invoice, invoice_payment, invoice_void, reversal) or text in th…No findings

    Why it is in this group

    • The name "books_list_entries" says "list": a word for reading.
    Description, as the server wrote it
    Entries newest first, each with its lines, filtered by dates, an account, where it came from (manual, expense, bank, invoice, invoice_payment, invoice_void, reversal) or text in the memo, reference or party. Free.

    Annotations the server declares

    • title: List entries
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • books_list_trackingThe tracking categories with their options, archived ones marked.No findings

    Why it is in this group

    • The name "books_list_tracking" says "list": a word for reading.
    Description, as the server wrote it
    The tracking categories with their options, archived ones marked. Free.

    Annotations the server declares

    • title: List tracking categories
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

210 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 5 untrusted-input tools breaks every one.

Reads private data6
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write5
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out7
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__bookkeeping__account_find_person",
      "mcp__bookkeeping__account_get_brand",
      "mcp__bookkeeping__account_get_limits",
      "mcp__bookkeeping__account_list_email_templates",
      "mcp__bookkeeping__account_search"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

4 warn4 info
  • The server marks "books_bank_lines" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "books_report" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for
  • The server marks "account_owner_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "account_owner_link" says "link": a word for a change.

    What this check looks for
  • The server marks "account_dashboard_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "account_dashboard_link" says "link": a word for a change.

    What this check looks for
  • The description is 2,160 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...r those paid in the period. To show a person, put it in a view (view_show). Free."

    What this check looks for
  • The description mentions "Credentials".

    Matched text

    description: "...es, with a README saying what is where. Credentials are left out. Runs in the background: p..."

    What this check looks for
Show 2 more findings

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http bookkeeping https://api.conecto.chat/mcp/books --header 'Authorization: <your-authorization>'
claude mcp add --transport http bookkeeping https://api.conecto.chat/mcp/books --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__bookkeeping__books_get",
      "mcp__bookkeeping__books_list_accounts",
      "mcp__bookkeeping__books_list_claims",
      "mcp__bookkeeping__books_list_entries",
      "mcp__bookkeeping__books_list_bank_rules",
      "mcp__bookkeeping__books_list_tracking",
      "mcp__bookkeeping__books_list_budgets",
      "mcp__bookkeeping__books_list_assets",
      "mcp__bookkeeping__account_get_call",
      "mcp__bookkeeping__account_list_calls",
      "mcp__bookkeeping__account_get_limits",
      "mcp__bookkeeping__account_search",
      "mcp__bookkeeping__account_get_brand",
      "mcp__bookkeeping__account_list_email_templates",
      "mcp__bookkeeping__account_audit_log",
      "mcp__bookkeeping__account_list_teams",
      "mcp__bookkeeping__account_list_approval_rules",
      "mcp__bookkeeping__account_find_person"
    ],
    "ask": [
      "mcp__bookkeeping__books_setup",
      "mcp__bookkeeping__books_save_accounts",
      "mcp__bookkeeping__books_save_tax",
      "mcp__bookkeeping__books_record_entry",
      "mcp__bookkeeping__books_record_expense",
      "mcp__bookkeeping__books_repay_claims",
      "mcp__bookkeeping__books_reverse_entry",
      "mcp__bookkeeping__books_attach_receipt",
      "mcp__bookkeeping__books_import_bank",
      "mcp__bookkeeping__books_bank_lines",
      "mcp__bookkeeping__books_match_bank_lines",
      "mcp__bookkeeping__books_save_bank_rule",
      "mcp__bookkeeping__books_apply_bank_rules",
      "mcp__bookkeeping__books_save_tracking",
      "mcp__bookkeeping__books_save_budget",
      "mcp__bookkeeping__books_save_asset",
      "mcp__bookkeeping__books_depreciate",
      "mcp__bookkeeping__books_dispose_asset",
      "mcp__bookkeeping__books_report",
      "mcp__bookkeeping__books_lock",
      "mcp__bookkeeping__books_export",
      "mcp__bookkeeping__account_balance",
      "mcp__bookkeeping__account_set_owner_email",
      "mcp__bookkeeping__account_owner_link",
      "mcp__bookkeeping__account_dashboard_link",
      "mcp__bookkeeping__account_request_limit",
      "mcp__bookkeeping__account_events",
      "mcp__bookkeeping__account_emit_event",
      "mcp__bookkeeping__account_set_brand",
      "mcp__bookkeeping__account_set_email_template",
      "mcp__bookkeeping__account_export_all",
      "mcp__bookkeeping__account_save_team",
      "mcp__bookkeeping__account_pause_team",
      "mcp__bookkeeping__account_assign_team",
      "mcp__bookkeeping__account_add_approval_rule",
      "mcp__bookkeeping__account_export_person",
      "mcp__bookkeeping__account_data_locations"
    ],
    "deny": [
      "mcp__bookkeeping__books_delete_bank_rule",
      "mcp__bookkeeping__books_delete_budget",
      "mcp__bookkeeping__books_delete_asset",
      "mcp__bookkeeping__books_close_year",
      "mcp__bookkeeping__account_refund_topup",
      "mcp__bookkeeping__account_erase_person"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as bookkeeping. Review it before you use it.

Capability tags behind 13 rules
  • mcp__bookkeeping__books_bank_lines outbound
  • mcp__bookkeeping__books_report outbound
  • mcp__bookkeeping__books_export outbound
  • mcp__bookkeeping__account_set_owner_email outbound
  • mcp__bookkeeping__account_get_limits private-data, untrusted-input
  • mcp__bookkeeping__account_emit_event outbound
  • mcp__bookkeeping__account_search private-data, untrusted-input
  • mcp__bookkeeping__account_get_brand private-data, untrusted-input
  • mcp__bookkeeping__account_list_email_templates private-data, untrusted-input
  • mcp__bookkeeping__account_set_email_template outbound
  • mcp__bookkeeping__account_audit_log private-data
  • mcp__bookkeeping__account_find_person private-data, untrusted-input
  • mcp__bookkeeping__account_export_person outbound

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/chat.conecto/bookkeeping/verify?hash=cb83db4a04059e5ae3d9b9baaf22198de5a920577d4615c4fba8f6d727e43903" | jq -e '.changed == false'

Pinned hash cb83db4a0405, from Nov 2, 2026, 21:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/chat.conecto/bookkeeping/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for chat.conecto/bookkeeping
[![anlyon.dev](https://anlyon.dev/badge/chat.conecto/bookkeeping.svg)](https://anlyon.dev/servers/chat.conecto/bookkeeping)

Source: MCP Registry. Synced Nov 2, 2026, 22:17 UTC.