Skip to content
anlyon.devby Anlyon

bexio MCP by usefulapi

io.usefulapi/bexiousefulapi.iostreamable-httpv1.0.1Scanned

Read bexio contacts, invoices, quotes, bills, projects and journal; log time, draft invoices.

28 tools: 4 can delete or cancel things, 1 do something that can't be undone, 1 change things and 22 only read.

Tools: 4 delete, 1 irreversible, 1 write, 22 read.
  • Reads private data · 13
  • Reads text others write · 28
  • Can send data out · 0
  • 2 findings

Anlyon alternative

6 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

28 tools

Deletes or cancels 4Claude Code: deny
  • bexio_create_contactWRITE: create a new contact (company or person) in bexio.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_create_contact" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: create a new contact (company or person) in bexio. Nothing existing is changed. For a person, name is the last name and first_name the first name. Owner and responsible user default to the signed-in user.

    Annotations the server declares

    • title: Create contact
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • bexio_create_draft_invoiceWRITE: create a DRAFT invoice in bexio for a contact, with custom, item (article) and text lines.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_create_draft_invoice" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: create a DRAFT invoice in bexio for a contact, with custom, item (article) and text lines. It is never issued, sent or booked: the user reviews and issues it in bexio. Taxes must be active sales taxes (bexio_list_taxes with types sales_tax, scope active).

    Annotations the server declares

    • title: Create draft invoice
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • bexio_create_noteWRITE: add a note (call log, meeting minutes, follow-up) to a contact and/or project in bexio.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_create_note" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: add a note (call log, meeting minutes, follow-up) to a contact and/or project in bexio. Nothing existing is changed.

    Annotations the server declares

    • title: Create note
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
  • bexio_create_timesheetWRITE: log time in bexio: either date + duration (HH:MM), or start + end.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_create_timesheet" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    WRITE: log time in bexio: either date + duration (HH:MM), or start + end. Needs a business activity (bexio_list_business_activities). Nothing existing is changed.

    Annotations the server declares

    • title: Create timesheet entry
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
Can't be undone 1Claude Code: ask
  • bexio_list_invoice_paymentsThe payments recorded on one invoice (date, amount, bank account, cash discount).Reads text others write1 finding

    Why it is in this group

    • The name "bexio_list_invoice_payments" says "list": a word for reading.
    • The description's first verb is "payment": a word that usually means money moves, which cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "bexio_list_invoice_payments" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "bexio_list_invoice_payments" says "list": a word for reading.

      What this check looks for
    Description, as the server wrote it
    The payments recorded on one invoice (date, amount, bank account, cash discount).

    Annotations the server declares

    • title: List invoice payments
    • readOnlyHint: true
    • openWorldHint: true
Changes things 1Claude Code: ask
  • bexio_list_articlesList or search items / products (Artikel): code, name, sale and purchase price, tax, unit, stock levels.Reads text others write1 finding

    Why it is in this group

    • The name "bexio_list_articles" says "list": a word for reading.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "bexio_list_articles" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "bexio_list_articles" says "list": a word for reading.

      What this check looks for
    Description, as the server wrote it
    List or search items / products (Artikel): code, name, sale and purchase price, tax, unit, stock levels. Use an id as article_id in a draft invoice.

    Annotations the server declares

    • title: List items
    • readOnlyHint: true
    • openWorldHint: true
Only reads 22Show 22 read-only tools
  • bexio_get_company_profileThe bexio company's profile: name, address, legal form, VAT (MWST) and UID numbers, contact details.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_get_company_profile" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The bexio company's profile: name, address, legal form, VAT (MWST) and UID numbers, contact details. Each bexio account has one profile.

    Annotations the server declares

    • title: Get company profile
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_get_contactOne contact with its address, emails, phones, language, groups and remarks.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_get_contact" says "get": a word for reading.

    What it can reach

    • private-dataThe name "bexio_get_contact" says "get" and "contact": it reads contacts.
    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    One contact with its address, emails, phones, language, groups and remarks.

    Annotations the server declares

    • title: Get contact
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_get_current_userThe signed-in bexio user (id, name, email, superadmin/accountant flags).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_get_current_user" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    The signed-in bexio user (id, name, email, superadmin/accountant flags). Its id is the default user_id of new records.

    Annotations the server declares

    • title: Get current user
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_get_invoiceOne invoice with its positions (line items), taxes, totals, received payments and remaining amount.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_get_invoice" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One invoice with its positions (line items), taxes, totals, received payments and remaining amount.

    Annotations the server declares

    • title: Get invoice
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_get_orderOne sales order with its positions, taxes and totals.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_get_order" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One sales order with its positions, taxes and totals.

    Annotations the server declares

    • title: Get order
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_get_projectOne project with its contact, state, type, dates, invoicing and budget settings.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_get_project" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One project with its contact, state, type, dates, invoicing and budget settings.

    Annotations the server declares

    • title: Get project
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_get_quoteOne quote with its positions, taxes and totals.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_get_quote" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    One quote with its positions, taxes and totals.

    Annotations the server declares

    • title: Get quote
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_accountsThe chart of accounts: account number, name, type (1 earning, 2 expenditure, 3 active/asset, 4 passive/liability, 5 complete/closing), default tax, active/locked flags.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_accounts" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The chart of accounts: account number, name, type (1 earning, 2 expenditure, 3 active/asset, 4 passive/liability, 5 complete/closing), default tax, active/locked flags.

    Annotations the server declares

    • title: List accounts
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_bank_accountsThe company's bank accounts shown in bexio banking: name, bank, IBAN / QR-IBAN, currency, linked ledger account, QR-invoice mode.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_bank_accounts" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    The company's bank accounts shown in bexio banking: name, bank, IBAN / QR-IBAN, currency, linked ledger account, QR-invoice mode.

    Annotations the server declares

    • title: List bank accounts
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_billsSupplier bills (Kreditoren / purchase bills): document number, vendor, title, status, gross/net, pending amount, bill and due date, overdue flag.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_bills" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "document": it reads documents.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Supplier bills (Kreditoren / purchase bills): document number, vendor, title, status, gross/net, pending amount, bill and due date, overdue flag. status: DRAFTS, TODO (booked, not fully paid), PAID, OVERDUE.

    Annotations the server declares

    • title: List supplier bills
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_business_activitiesBusiness activities (Tätigkeiten) for time tracking: id, name, billable default, hourly rate.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_business_activities" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Business activities (Tätigkeiten) for time tracking: id, name, billable default, hourly rate. A timesheet needs one.

    Annotations the server declares

    • title: List business activities
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_business_yearsAccounting business (fiscal) years: start, end, status (open, locked, closed).Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_business_years" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Accounting business (fiscal) years: start, end, status (open, locked, closed).

    Annotations the server declares

    • title: List business years
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_contactsList or search contacts (customers, suppliers, persons, companies).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_contacts" says "list": a word for reading.

    What it can reach

    • private-dataThe name "bexio_list_contacts" says "list" and "contact": it reads contacts.
    • private-dataThe description's first sentence says "list" and "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List or search contacts (customers, suppliers, persons, companies). Without filters it pages through all contacts; with filters it uses bexio's contact search (all filters must match). name_1 is the company name or a person's last name, name_2 a person's first name.

    Annotations the server declares

    • title: List contacts
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_currenciesCurrencies set up in bexio (id, code such as CHF or EUR, rounding), optionally with the exchange rate valid on a date.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_currencies" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Currencies set up in bexio (id, code such as CHF or EUR, rounding), optionally with the exchange rate valid on a date. Use an id as currency_id.

    Annotations the server declares

    • title: List currencies
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_invoicesList or search sales invoices (number, contact, totals, open amount, dates, status).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_invoices" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List or search sales invoices (number, contact, totals, open amount, dates, status). Statuses: draft, pending (issued, open), paid, partial (partially paid), canceled, unpaid (overdue reminder state). Without filters it pages through all invoices; with filters all must match.

    Annotations the server declares

    • title: List invoices
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_journalAccounting journal bookings: date, debit and credit account ids, description, amount, currency, base-currency amount, and the source document (ref_class, ref_id).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_journal" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "document": it reads documents.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Accounting journal bookings: date, debit and credit account ids, description, amount, currency, base-currency amount, and the source document (ref_class, ref_id).

    Annotations the server declares

    • title: List journal entries
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_ordersList or search sales orders (Aufträge): number, contact, totals, recurring flag, status (pending, done, partial, canceled).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_orders" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List or search sales orders (Aufträge): number, contact, totals, recurring flag, status (pending, done, partial, canceled). With filters all must match.

    Annotations the server declares

    • title: List orders
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_projectsList or search projects: number, name, contact, state, type, dates, budget.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_projects" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List or search projects: number, name, contact, state, type, dates, budget. With filters all must match.

    Annotations the server declares

    • title: List projects
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_quotesList or search quotes (Offerten): number, contact, totals, validity, status (draft, pending, confirmed, declined).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_quotes" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List or search quotes (Offerten): number, contact, totals, validity, status (draft, pending, confirmed, declined). With filters all must match.

    Annotations the server declares

    • title: List quotes
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_taxesVAT (MWST) tax codes: id, code, rate, type (sales_tax, pre_tax, ...), validity.Reads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_taxes" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    VAT (MWST) tax codes: id, code, rate, type (sales_tax, pre_tax, ...), validity. For a draft invoice use an active sales tax (types sales_tax, scope active).

    Annotations the server declares

    • title: List taxes
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_timesheetsList or search time tracking entries: date, duration, text, user, contact, project, business activity, billable flag.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_timesheets" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "list" and "contact": it reads contacts.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List or search time tracking entries: date, duration, text, user, contact, project, business activity, billable flag. With filters all must match.

    Annotations the server declares

    • title: List timesheets
    • readOnlyHint: true
    • openWorldHint: true
  • bexio_list_usersThe company's bexio users (id, name, email).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "bexio_list_users" says "list": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    The company's bexio users (id, name, email). Use an id as user_id or owner of contacts, documents and timesheets.

    Annotations the server declares

    • title: List users
    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data13
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write28
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • Warnbexio_list_invoice_payments

    The server marks "bexio_list_invoice_payments" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "bexio_list_invoice_payments" says "list": a word for reading.

    What this check looks for
  • Warnbexio_list_articles

    The server marks "bexio_list_articles" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "bexio_list_articles" says "list": a word for reading.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http bexio https://bexio.usefulapi.io/mcp
claude mcp add --transport http bexio https://bexio.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__bexio__bexio_get_company_profile",
      "mcp__bexio__bexio_get_current_user",
      "mcp__bexio__bexio_list_users",
      "mcp__bexio__bexio_list_contacts",
      "mcp__bexio__bexio_get_contact",
      "mcp__bexio__bexio_list_invoices",
      "mcp__bexio__bexio_get_invoice",
      "mcp__bexio__bexio_list_quotes",
      "mcp__bexio__bexio_get_quote",
      "mcp__bexio__bexio_list_orders",
      "mcp__bexio__bexio_get_order",
      "mcp__bexio__bexio_list_projects",
      "mcp__bexio__bexio_get_project",
      "mcp__bexio__bexio_list_timesheets",
      "mcp__bexio__bexio_list_business_activities",
      "mcp__bexio__bexio_list_accounts",
      "mcp__bexio__bexio_list_journal",
      "mcp__bexio__bexio_list_taxes",
      "mcp__bexio__bexio_list_bank_accounts",
      "mcp__bexio__bexio_list_currencies",
      "mcp__bexio__bexio_list_business_years",
      "mcp__bexio__bexio_list_bills"
    ],
    "ask": [
      "mcp__bexio__bexio_list_invoice_payments",
      "mcp__bexio__bexio_list_articles"
    ],
    "deny": [
      "mcp__bexio__bexio_create_contact",
      "mcp__bexio__bexio_create_note",
      "mcp__bexio__bexio_create_timesheet",
      "mcp__bexio__bexio_create_draft_invoice"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as bexio. Review it before you use it.

Capability tags behind 28 rules
  • mcp__bexio__bexio_get_company_profile private-data, untrusted-input
  • mcp__bexio__bexio_get_current_user private-data, untrusted-input
  • mcp__bexio__bexio_list_users private-data, untrusted-input
  • mcp__bexio__bexio_list_contacts private-data, untrusted-input
  • mcp__bexio__bexio_get_contact private-data, untrusted-input
  • mcp__bexio__bexio_list_invoices private-data, untrusted-input
  • mcp__bexio__bexio_get_invoice untrusted-input
  • mcp__bexio__bexio_list_invoice_payments untrusted-input
  • mcp__bexio__bexio_list_quotes private-data, untrusted-input
  • mcp__bexio__bexio_get_quote untrusted-input
  • mcp__bexio__bexio_list_orders private-data, untrusted-input
  • mcp__bexio__bexio_get_order untrusted-input
  • mcp__bexio__bexio_list_articles untrusted-input
  • mcp__bexio__bexio_list_projects private-data, untrusted-input
  • mcp__bexio__bexio_get_project private-data, untrusted-input
  • mcp__bexio__bexio_list_timesheets private-data, untrusted-input
  • mcp__bexio__bexio_list_business_activities untrusted-input
  • mcp__bexio__bexio_list_accounts untrusted-input
  • mcp__bexio__bexio_list_journal private-data, untrusted-input
  • mcp__bexio__bexio_list_taxes untrusted-input
  • mcp__bexio__bexio_list_bank_accounts untrusted-input
  • mcp__bexio__bexio_list_currencies untrusted-input
  • mcp__bexio__bexio_list_business_years untrusted-input
  • mcp__bexio__bexio_list_bills private-data, untrusted-input
  • mcp__bexio__bexio_create_contact untrusted-input
  • mcp__bexio__bexio_create_note untrusted-input
  • mcp__bexio__bexio_create_timesheet untrusted-input
  • mcp__bexio__bexio_create_draft_invoice untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/bexio/verify?hash=26c33f9a7ffbff1ea000d0e3280f82a03b9e401bef275e447495df8b6953fbc4" | jq -e '.changed == false'

Pinned hash 26c33f9a7ffb, from Oct 23, 2026, 16:25 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/bexio/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for io.usefulapi/bexio
[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/bexio.svg)](https://anlyon.dev/servers/io.usefulapi/bexio)

Source: MCP Registry · repository. Synced Oct 23, 2026, 16:25 UTC.