Home / Developers / MCP server
Model Context Protocol

Connect your AI assistant to your books

The open-source KikoBooks MCP server gives Claude, Cursor, and GitHub Copilot 116 governed tools across bookkeeping, reports, banking, CRM, proposals, and workflow. Run it read-only, or allow changes your assistant asks you to confirm.

  • 116 tools
  • MIT licensed
  • npm provenance
Your assistant + KikoBooks
Show me AR aging and who’s overdue.
Calling get_ar_aging and search_invoices
You have $12,640 overdue across 3 customers. Northwind Studio owes $6,400 on INV-1042, 38 days past due.
Draft a journal entry for September payroll accruals.
Your assistant asks first
Allow create_journal_entry?
Allow onceDeny
Quick start

Connected in about five minutes

Create an API key under Settings → API Keys, add one block to your assistant’s config, and start asking. npx pulls the server from npm, so there’s nothing to install or host.

Claude Desktop · claude_desktop_config.json

{
  "mcpServers": {
    "kikobooks": {
      "command": "npx",
      "args": ["-y", "@agentkiko/kikobooks-mcp-server@latest"],
      "env": {
        "KIKOBOOKS_BASE_URL": "https://ai.kikobooks.com",
        "KIKOBOOKS_API_KEY": "your_api_key"
      }
    }
  }
}

Cursor (~/.cursor/mcp.json) and Windsurf use the same mcpServers block.

VS Code · .vscode/mcp.json

{
  "servers": {
    "kikobooks": {
      "command": "npx",
      "args": ["-y", "@agentkiko/kikobooks-mcp-server@latest"],
      "env": {
        "KIKOBOOKS_BASE_URL": "https://ai.kikobooks.com",
        "KIKOBOOKS_API_KEY": "your_api_key"
      }
    }
  }
}

Claude Code · terminal

claude mcp add kikobooks \
  -e KIKOBOOKS_BASE_URL=https://ai.kikobooks.com \
  -e KIKOBOOKS_API_KEY=your_api_key \
  -- npx -y @agentkiko/kikobooks-mcp-server@latest

Read-only mode · add to any env block

"KIKOBOOKS_DISABLE_WRITE": "true",
"KIKOBOOKS_DISABLE_UPDATE": "true",
"KIKOBOOKS_DISABLE_DELETE": "true"

Only get_*, search_*, and list_* tools load. Remove the flags when you want your assistant to draft and post.

You set the access

Scope tiers you control

Read tools always load. Mutating tools load by default and can be switched off at startup, tier by tier.

TierSwitch off withWhat it covers
ReadAlways onEvery get_*, search_*, and list_* tool for reporting, analysis, and discovery
WriteKIKOBOOKS_DISABLE_WRITEcreate_*, post_*, reverse_*, send_*, generate_*, start_*, complete_*, run_*, and other action tools
UpdateKIKOBOOKS_DISABLE_UPDATEupdate_* tools
DeleteKIKOBOOKS_DISABLE_DELETEdelete_* and void_* tools
116 tools, one ledger

What your assistant can work with

Core bookkeeping

Chart of accounts, customers, invoices, payments, credit memos, sales receipts, vendors, bills, bill payments, expenses, items, and journal entries.

Reports

Trial balance, profit & loss, AR and AP aging, cash position, income and expense by category, and business health.

Banking & treasury

Bank accounts and transactions, reconciliation sessions, deposits, fixed assets and depreciation, recurring schedules, and statements.

CRM

Leads, deals, the pipeline, stage moves, and promoting a deal to a customer. Requires the Sales module.

Proposals

Search and copy proposals, then turn an accepted one into an invoice or a project. Requires the Sales module.

Workflow

Projects and tasks, status updates, and billing a project. Requires the Workflow module.

Full list in the README. Agents should call get_connection_status and get_enabled_modules first; see the operating guide.

Security

Governed by the same rules as Kiko

Keys stay secret

Your org API key is exchanged for short-lived tokens. It is never written to disk, logged, or returned to the model. Keys can be scoped, set to expire, and revoked.

Same permissions as your team

Every call goes through the KikoBooks API, scoped to the key’s organization. Posted entries can only be reversed, never edited.

You confirm each change

MCP clients ask before running a tool. The operating guide tells agents to check status first and read back every write.

FAQ

MCP, answered

Which AI assistants work with it?
Any Model Context Protocol client that can run a local (stdio) server, including Claude Desktop, Claude Code, Cursor, Windsurf, and GitHub Copilot in VS Code. ChatGPT connectors need a hosted MCP endpoint, which is not available yet.
Can my assistant change my books, or just read them?
Your choice. Write, update, and delete tools load unless you turn them off with KIKOBOOKS_DISABLE_WRITE, _UPDATE, and _DELETE. Set all three to start read-only, then remove them when you’re ready. Your assistant asks you to confirm each write before it runs.
Do I need to be a developer?
No. Paste one config block into your assistant and add your API key. There’s no build step and no server to host.
Does it work for firms with multiple clients?
Yes. Use one API key per client organization and set the access per client. CRM, Proposals, and Workflow tools need those modules enabled; they’re always on for accounting firms and opt-in for businesses.

Point your AI assistant at your books

Start free, create an API key, and connect in minutes.