Precoro MCP by usefulapi
io.usefulapi/precorousefulapi.iostreamable-httpv1.0.0Scanned
Read Precoro purchase orders, invoices, suppliers and budgets; approve, reject and submit documents.
24 tools: 5 can delete or cancel things and 19 only read.
- Reads private data · 8
- Reads text others write · 24
- Can send data out · 0
- No findings
Anlyon alternative
5 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
24 tools
Deletes or cancels 5Claude Code: deny
precoro_approve_documentWRITE: approve a document as the Precoro user the API key belongs to (that user must be a current approver of it).Reads text others writeNo findings
Why it is in this group
- The name "precoro_approve_document" says "approve": a word for a change.
- The description says "Cannot be undone".
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it WRITE: approve a document as the Precoro user the API key belongs to (that user must be a current approver of it). Approving can release spending: an approved purchase order may be sent to the supplier and an approved invoice can go to payment. Find candidates with the list tools and waiting_for_my_approval. Cannot be undone through this server. POST /{document}/{idn}/approve.
Annotations the server declares
- title: Approve a document
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
precoro_create_purchase_requisitionWRITE: create a purchase requisition in draft (open) status for the key user; it is not submitted for approval until precoro_submit_document is called.Reads text others writeNo findings
Why it is in this group
- The name "precoro_create_purchase_requisition" says "create": a word for a change.
- The name "precoro_create_purchase_requisition" also says "purchase": a word that usually means money moves, which cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it WRITE: create a purchase requisition in draft (open) status for the key user; it is not submitted for approval until precoro_submit_document is called. Needs a location id, a currency, a delivery date and at least one item (a catalog item_id, or a name with quantity and price). Find ids with precoro_list_reference_data (locations, legal_entities, document_custom_fields) and precoro_list_items. All required document custom fields (for example department or project) must be passed in custom_fields. Returns the new idn and id. POST /purchaserequisitions.
Annotations the server declares
- title: Create a purchase requisition (draft)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
precoro_create_supplierWRITE: create a supplier.Reads text others writeNo findings
Why it is in this group
- The name "precoro_create_supplier" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it WRITE: create a supplier. The name must be unique in the company (a duplicate name, unique code or registration number is rejected). The supplier is available to all legal entities. Depending on the company's settings it may need approval before it can be used on orders. Returns the new supplier. POST /suppliers.
Annotations the server declares
- title: Create a supplier
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
precoro_reject_documentWRITE: reject (deny) a document that is waiting for the key user's approval.Reads text others writeNo findings
Why it is in this group
- The name "precoro_reject_document" says "reject": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it WRITE: reject (deny) a document that is waiting for the key user's approval. A comment is required; the creator is notified and sees it. POST /{document}/{idn}/reject.
Annotations the server declares
- title: Reject a document
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
precoro_submit_documentWRITE: confirm a draft (open) document so it enters the approval flow (or is approved at once if no approval is needed).Reads text others writeNo findings
Why it is in this group
- The name "precoro_submit_document" says "submit": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it WRITE: confirm a draft (open) document so it enters the approval flow (or is approved at once if no approval is needed). Approvers are notified. POST /{document}/{idn}/confirm.
Annotations the server declares
- title: Submit a draft for approval
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true
Only reads 19Show 19 read-only tools
precoro_get_expenseOne expense document by IDN with items, custom fields and approval steps.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "precoro_get_expense" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "document": it reads documents.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it One expense document by IDN with items, custom fields and approval steps. GET /expenses/{idn}.
Annotations the server declares
- title: Get an expense
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_get_invoiceOne supplier invoice or credit note by IDN with items, taxes, matching to purchase orders and receipts, and payments.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "precoro_get_invoice" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "note": it reads notes.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it One supplier invoice or credit note by IDN with items, taxes, matching to purchase orders and receipts, and payments. GET /invoices/{idn}.
Annotations the server declares
- title: Get an invoice
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_get_itemOne catalog item by id.Reads text others writeNo findings
Why it is in this group
- The name "precoro_get_item" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it One catalog item by id. GET /items/{id}.
Annotations the server declares
- title: Get a catalog item
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_get_purchase_orderOne purchase order by IDN with all items, taxes, custom fields, approval steps, receiving and payment status.Reads text others writeNo findings
Why it is in this group
- The name "precoro_get_purchase_order" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it One purchase order by IDN with all items, taxes, custom fields, approval steps, receiving and payment status. GET /purchaseorders/{idn}.
Annotations the server declares
- title: Get a purchase order
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_get_purchase_requisitionOne purchase requisition by IDN with items, custom fields and approval steps.Reads text others writeNo findings
Why it is in this group
- The name "precoro_get_purchase_requisition" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it One purchase requisition by IDN with items, custom fields and approval steps. GET /purchaserequisitions/{idn}.
Annotations the server declares
- title: Get a purchase requisition
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_get_receiptOne goods receipt by IDN with items and approval steps.Reads text others writeNo findings
Why it is in this group
- The name "precoro_get_receipt" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it One goods receipt by IDN with items and approval steps. GET /receipts/{idn}.
Annotations the server declares
- title: Get a receipt
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_get_supplierOne supplier by id with contacts, conditions, custom field defaults and credit balance.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "precoro_get_supplier" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it One supplier by id with contacts, conditions, custom field defaults and credit balance. Bank details are never returned. GET /suppliers/{id}.
Annotations the server declares
- title: Get a supplier
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_ap_inboxList documents in the accounts-payable inbox (uploaded or emailed supplier invoices read by OCR): file name, supplier, gross total, currency, status, upload and processed dates.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "precoro_list_ap_inbox" says "list": a word for reading.
What it can reach
- private-dataThe name "precoro_list_ap_inbox" says "list" and "inbox": it reads mail.
- private-dataThe description's first sentence says "list" and "document": it reads documents.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe name "precoro_list_ap_inbox" says "list" and "inbox": it reads inbound email, which other people can write.
- untrusted-inputThe description's first sentence says "list" and "inbox": it reads inbound email, which other people can write.
Description, as the server wrote it List documents in the accounts-payable inbox (uploaded or emailed supplier invoices read by OCR): file name, supplier, gross total, currency, status, upload and processed dates. GET /ap/documents.
Annotations the server declares
- title: List AP inbox documents
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_budgetsList budgets with name, period, total sum, how much is used in purchase requisitions, purchase orders, invoices and expenses, and whether the limit is enforced.Reads text others writeNo findings
Why it is in this group
- The name "precoro_list_budgets" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List budgets with name, period, total sum, how much is used in purchase requisitions, purchase orders, invoices and expenses, and whether the limit is enforced. GET /budgets.
Annotations the server declares
- title: List budgets
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_contractsList supplier contracts with number, supplier, begin and end dates and whether they auto-prolong.Reads text others writeNo findings
Why it is in this group
- The name "precoro_list_contracts" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List supplier contracts with number, supplier, begin and end dates and whether they auto-prolong. GET /contracts.
Annotations the server declares
- title: List supplier contracts
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_expensesList expense documents (purchases without a purchase order): supplier, totals, currency, status and payment status.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "precoro_list_expenses" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "document": it reads documents.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List expense documents (purchases without a purchase order): supplier, totals, currency, status and payment status. Filter by status, last-modified time, approval date range, or 'waiting for my approval'. GET /expenses.
Annotations the server declares
- title: List expenses
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_invoicesList supplier invoices and credit notes: supplier, totals, currency, issue and due dates, paid sum, approval/payment status.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "precoro_list_invoices" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "note": it reads notes.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "issue": it reads issues, which other people can write.
Description, as the server wrote it List supplier invoices and credit notes: supplier, totals, currency, issue and due dates, paid sum, approval/payment status. Filter by status, kind, last-modified time, approval date range, or 'waiting for my approval'. GET /invoices.
Annotations the server declares
- title: List invoices
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_itemsList catalog items (products and services): name, SKU, unit, price, currency, supplier, group and custom fields.Reads text others writeNo findings
Why it is in this group
- The name "precoro_list_items" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List catalog items (products and services): name, SKU, unit, price, currency, supplier, group and custom fields. Filter by last-modified time. GET /items.
Annotations the server declares
- title: List catalog items
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_paymentsList payments recorded against invoices and expenses: pay date, sum paid, status (0 paid, 8 canceled), kind (0 payment, 1 credit, 2 supplier credit balance, 3-6 prepayments/credits…Reads text others writeNo findings
Why it is in this group
- The name "precoro_list_payments" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List payments recorded against invoices and expenses: pay date, sum paid, status (0 paid, 8 canceled), kind (0 payment, 1 credit, 2 supplier credit balance, 3-6 prepayments/credits) and the invoice or expense paid. GET /payments.
Annotations the server declares
- title: List payments
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_purchase_ordersList purchase orders (POs) with number (idn), supplier, location, totals, currency, required date, approval status, receiving status (0 not received, 1 partly, 2 received) and paym…Reads text others writeNo findings
Why it is in this group
- The name "precoro_list_purchase_orders" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List purchase orders (POs) with number (idn), supplier, location, totals, currency, required date, approval status, receiving status (0 not received, 1 partly, 2 received) and payment status (0 needs invoice, 1 not paid, 2 partly paid, 3 paid). Line items come only from precoro_get_purchase_order. Filter by status, last-modified time, approval date range, or 'waiting for my approval'. Page with next_page. GET /purchaseorders.
Annotations the server declares
- title: List purchase orders
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_purchase_requisitionsList purchase requisitions (purchase requests): requester, location, totals, required date, approval status.Reads text others writeNo findings
Why it is in this group
- The name "precoro_list_purchase_requisitions" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List purchase requisitions (purchase requests): requester, location, totals, required date, approval status. Line items come only from precoro_get_purchase_requisition. Filter by status, last-modified time, approval date range, or 'waiting for my approval'. GET /purchaserequisitions.
Annotations the server declares
- title: List purchase requisitions
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_receiptsList goods receipts (what was delivered against purchase orders): purchase order, status and dates.Reads text others writeNo findings
Why it is in this group
- The name "precoro_list_receipts" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List goods receipts (what was delivered against purchase orders): purchase order, status and dates. Line items and received quantities come only from precoro_get_receipt. Filter by status, last-modified time, approval date range, or 'waiting for my approval'. GET /receipts.
Annotations the server declares
- title: List receipts
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_reference_dataList a configuration table: users (name, email, roles), locations, legal_entities, taxes, payment_terms, units, warehouses, product_groups, document_custom_fields (departments, pro…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "precoro_list_reference_data" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "table": it reads databases.
- private-dataThe input names a table (input.table), and the tool reads: it reads databases.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it List a configuration table: users (name, email, roles), locations, legal_entities, taxes, payment_terms, units, warehouses, product_groups, document_custom_fields (departments, projects, classes, GL accounts), item_custom_fields or supplier_custom_fields. Use it to find the ids that purchase requisitions and suppliers need (location, legal entity, custom field). Bank details are never returned. GET /users, /locations, /legalentities, /taxes, /paymentterms, /units, /warehouses, /groups, /documentcustomfields, /itemcustomfields, /suppliercustomfields.
Annotations the server declares
- title: List reference data
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
precoro_list_suppliersList suppliers: name, unique code, currencies, payment conditions, minimum order sum, contact and address fields, accounting ids, status.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "precoro_list_suppliers" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it List suppliers: name, unique code, currencies, payment conditions, minimum order sum, contact and address fields, accounting ids, status. Bank details are never returned. Filter by last-modified time. GET /suppliers.
Annotations the server declares
- title: List suppliers
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data8
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write24
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http precoro https://precoro.usefulapi.io/mcpclaude mcp add --transport http precoro https://precoro.usefulapi.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__precoro__precoro_list_purchase_orders",
"mcp__precoro__precoro_get_purchase_order",
"mcp__precoro__precoro_list_purchase_requisitions",
"mcp__precoro__precoro_get_purchase_requisition",
"mcp__precoro__precoro_list_invoices",
"mcp__precoro__precoro_get_invoice",
"mcp__precoro__precoro_list_expenses",
"mcp__precoro__precoro_get_expense",
"mcp__precoro__precoro_list_receipts",
"mcp__precoro__precoro_get_receipt",
"mcp__precoro__precoro_list_payments",
"mcp__precoro__precoro_list_budgets",
"mcp__precoro__precoro_list_contracts",
"mcp__precoro__precoro_list_ap_inbox",
"mcp__precoro__precoro_list_suppliers",
"mcp__precoro__precoro_get_supplier",
"mcp__precoro__precoro_list_items",
"mcp__precoro__precoro_get_item",
"mcp__precoro__precoro_list_reference_data"
],
"ask": [],
"deny": [
"mcp__precoro__precoro_approve_document",
"mcp__precoro__precoro_reject_document",
"mcp__precoro__precoro_submit_document",
"mcp__precoro__precoro_create_purchase_requisition",
"mcp__precoro__precoro_create_supplier"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as precoro. Review it before you use it.
Capability tags behind 24 rules
- mcp__precoro__precoro_list_purchase_orders untrusted-input
- mcp__precoro__precoro_get_purchase_order untrusted-input
- mcp__precoro__precoro_list_purchase_requisitions untrusted-input
- mcp__precoro__precoro_get_purchase_requisition untrusted-input
- mcp__precoro__precoro_list_invoices private-data, untrusted-input
- mcp__precoro__precoro_get_invoice private-data, untrusted-input
- mcp__precoro__precoro_list_expenses private-data, untrusted-input
- mcp__precoro__precoro_get_expense private-data, untrusted-input
- mcp__precoro__precoro_list_receipts untrusted-input
- mcp__precoro__precoro_get_receipt untrusted-input
- mcp__precoro__precoro_list_payments untrusted-input
- mcp__precoro__precoro_list_budgets untrusted-input
- mcp__precoro__precoro_list_contracts untrusted-input
- mcp__precoro__precoro_list_ap_inbox private-data, untrusted-input
- mcp__precoro__precoro_list_suppliers private-data, untrusted-input
- mcp__precoro__precoro_get_supplier private-data, untrusted-input
- mcp__precoro__precoro_list_items untrusted-input
- mcp__precoro__precoro_get_item untrusted-input
- mcp__precoro__precoro_list_reference_data private-data, untrusted-input
- mcp__precoro__precoro_approve_document untrusted-input
- mcp__precoro__precoro_reject_document untrusted-input
- mcp__precoro__precoro_submit_document untrusted-input
- mcp__precoro__precoro_create_purchase_requisition untrusted-input
- mcp__precoro__precoro_create_supplier untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/precoro/verify?hash=25997a9900fbc9e2a4c8a2b8d712ea153323a4035d860c60517264f0b08541c1" | jq -e '.changed == false'Pinned hash 25997a9900fb, from Oct 24, 2026, 12:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.usefulapi/precoro/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.usefulapi/precoro)Source: MCP Registry · repository. Synced Oct 24, 2026, 12:17 UTC.