sevDesk

Local install

io.github.jaylann/mcp-server-sevdeskv1.0.0 GitHub verified

Safety-first MCP server for sevDesk accounting: invoices, receipts, banking, reports. Unofficial.

Finance & Payments

Watch Source Website

Registry entry

Open in the registry

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-11-10T17:24:53.358976Z",
      "publishedAt": "2026-11-10T17:24:53.358976Z",
      "statusChangedAt": "2026-11-10T17:24:53.358976Z"
    }
  },
  "server": {
    "name": "io.github.jaylann/mcp-server-sevdesk",
    "title": "sevDesk",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "1.0.0",
    "packages": [
      {
        "version": "1.0.0",
        "transport": {
          "type": "stdio"
        },
        "identifier": "mcp-server-sevdesk",
        "runtimeHint": "npx",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "SEVDESK_API_TOKEN",
            "format": "string",
            "isSecret": true,
            "isRequired": true,
            "description": "sevDesk API token (Settings > Users > API token). It has full access to the account; ideally create it for a dedicated user. To keep it out of the client configuration, set up the server by hand with SEVDESK_API_TOKEN_KEYCHAIN (OS keychain) or SEVDESK_API_TOKEN_FILE instead: https://sevdeskmcp.lanfermann.dev/docs/en/configuration#token"
          },
          {
            "name": "SEVDESK_ALLOW",
            "format": "string",
            "default": "read",
            "description": "Comma-separated permission tiers to enable: read, write, commit, external, or all. Tools above the allowed tiers are not registered. read is always on."
          },
          {
            "name": "SEVDESK_READ_ONLY",
            "format": "boolean",
            "default": "false",
            "description": "Set to true to allow only read tools, whatever SEVDESK_ALLOW says."
          },
          {
            "name": "SEVDESK_DRY_RUN",
            "format": "boolean",
            "default": "false",
            "description": "Set to true to make write tools only return a preview of what they would do, without sending anything."
          },
          {
            "name": "SEVDESK_CONFIRM",
            "format": "string",
            "default": "elicit",
            "description": "How a human confirms commit and external actions: elicit (in the client), browser (local approval page) or off (also needs SEVDESK_I_UNDERSTAND_NO_CONFIRM=1)."
          },
          {
            "name": "SEVDESK_AUDIT_LOG",
            "format": "filepath",
            "description": "Path of a local JSON Lines file that records every write the server makes (redacted). Unset: no audit log."
          },
          {
            "name": "SEVDESK_TOOLSETS",
            "format": "string",
            "description": "Comma-separated toolsets to load, e.g. invoices,vouchers,banking. Unset loads all except advanced; all adds advanced."
          },
          {
            "name": "SEVDESK_FILE_DIRS",
            "format": "string",
            "description": "Absolute folders (separated like PATH) that receipts and e-invoices may be read from, for voucher uploads and e-invoice import. Unset: no local file is read."
          },
          {
            "name": "SEVDESK_OUTPUT_DIR",
            "format": "string",
            "description": "Folder where PDFs, e-invoice XML, CSV and DATEV exports may be saved. Unset: the file-saving tools are not offered."
          }
        ]
      },
      {
        "transport": {
          "type": "stdio"
        },
        "identifier": "ghcr.io/jaylann/mcp-server-sevdesk:1.0.0",
        "runtimeHint": "docker",
        "registryType": "oci",
        "packageArguments": [
          {
            "type": "positional",
            "value": "--stdio",
            "valueHint": "transport",
            "description": "Serve MCP over stdio (the image's default command is --http)."
          }
        ],
        "environmentVariables": [
          {
            "name": "SEVDESK_API_TOKEN",
            "format": "string",
            "isSecret": true,
            "isRequired": true,
            "description": "sevDesk API token (Settings > Users > API token). It has full access to the account; ideally create it for a dedicated user. To keep it out of the client configuration, run the image by hand with SEVDESK_API_TOKEN_FILE and a mounted secret file instead: https://sevdeskmcp.lanfermann.dev/docs/en/configuration#token"
          },
          {
            "name": "SEVDESK_ALLOW",
            "format": "string",
            "default": "read",
            "description": "Comma-separated permission tiers to enable: read, write, commit, external, or all. Tools above the allowed tiers are not registered. read is always on."
          },
          {
            "name": "SEVDESK_READ_ONLY",
            "format": "boolean",
            "default": "false",
            "description": "Set to true to allow only read tools, whatever SEVDESK_ALLOW says."
          },
          {
            "name": "SEVDESK_DRY_RUN",
            "format": "boolean",
            "default": "false",
            "description": "Set to true to make write tools only return a preview of what they would do, without sending anything."
          },
          {
            "name": "SEVDESK_CONFIRM",
            "format": "string",
            "default": "elicit",
            "description": "How a human confirms commit and external actions: elicit (in the client) or off (also needs SEVDESK_I_UNDERSTAND_NO_CONFIRM=1). The browser mode's local approval page is not reachable from outside the container."
          },
          {
            "name": "SEVDESK_AUDIT_LOG",
            "format": "filepath",
            "description": "Path inside the container (on a mounted, writable volume) of a JSON Lines file that records every write the server makes (redacted). Unset: no audit log."
          },
          {
            "name": "SEVDESK_TOOLSETS",
            "format": "string",
            "description": "Comma-separated toolsets to load, e.g. invoices,vouchers,banking. Unset loads all except advanced; all adds advanced."
          },
          {
            "name": "SEVDESK_FILE_DIRS",
            "format": "string",
            "description": "Absolute folders inside the container (separated by colons) that receipts and e-invoices may be read from; mount them into the container. Unset: no local file is read."
          },
          {
            "name": "SEVDESK_OUTPUT_DIR",
            "format": "string",
            "description": "Folder inside the container (mount it, writable) where PDFs, e-invoice XML, CSV and DATEV exports may be saved. Unset: the file-saving tools are not offered."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/jaylann/mcp-server-sevdesk",
      "source": "github"
    },
    "websiteUrl": "https://sevdeskmcp.lanfermann.dev",
    "description": "Safety-first MCP server for sevDesk accounting: invoices, receipts, banking, reports. Unofficial."
  }
}

Maintain this server? Claim it

Try it

This server only runs locally, from a package. Install it with the instructions on this page to try it.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM StudioThen replace the YOUR_ values and {placeholders} with your own.

Run in a terminal

claude mcp add mcp-server-sevdesk \
  -e SEVDESK_API_TOKEN=YOUR_SEVDESK_API_TOKEN \
  -- npx -y [email protected]

Environment

SEVDESK_API_TOKEN (required): sevDesk API token (Settings > Users > API token). It has full access to the account; ideally create it for a dedicated user. To keep it out of the client configuration, set up the server by hand with SEVDESK_API_TOKEN_KEYCHAIN (OS keychain) or SEVDESK_API_TOKEN_FILE instead: https://sevdeskmcp.lanfermann.dev/docs/en/configuration#token
SEVDESK_ALLOW (optional, not in the config above): Comma-separated permission tiers to enable: read, write, commit, external, or all. Tools above the allowed tiers are not registered. read is always on.
SEVDESK_READ_ONLY (optional, not in the config above): Set to true to allow only read tools, whatever SEVDESK_ALLOW says.
SEVDESK_DRY_RUN (optional, not in the config above): Set to true to make write tools only return a preview of what they would do, without sending anything.
SEVDESK_CONFIRM (optional, not in the config above): How a human confirms commit and external actions: elicit (in the client), browser (local approval page) or off (also needs SEVDESK_I_UNDERSTAND_NO_CONFIRM=1).
SEVDESK_AUDIT_LOG (optional, not in the config above): Path of a local JSON Lines file that records every write the server makes (redacted). Unset: no audit log.
SEVDESK_TOOLSETS (optional, not in the config above): Comma-separated toolsets to load, e.g. invoices,vouchers,banking. Unset loads all except advanced; all adds advanced.
SEVDESK_FILE_DIRS (optional, not in the config above): Absolute folders (separated like PATH) that receipts and e-invoices may be read from, for voucher uploads and e-invoice import. Unset: no local file is read.
SEVDESK_OUTPUT_DIR (optional, not in the config above): Folder where PDFs, e-invoice XML, CSV and DATEV exports may be saved. Unset: the file-saving tools are not offered.

Install

Pick your client. Values in capitals, like YOUR_TOKEN, are yours to fill in.

One click: Add to Cursor Add to VS Code Add to LM StudioThen replace the YOUR_ values and {placeholders} with your own.

Run in a terminal

claude mcp add mcp-server-sevdesk \
  -e SEVDESK_API_TOKEN=YOUR_SEVDESK_API_TOKEN \
  -- npx -y [email protected]

Environment

SEVDESK_API_TOKEN (required): sevDesk API token (Settings > Users > API token). It has full access to the account; ideally create it for a dedicated user. To keep it out of the client configuration, set up the server by hand with SEVDESK_API_TOKEN_KEYCHAIN (OS keychain) or SEVDESK_API_TOKEN_FILE instead: https://sevdeskmcp.lanfermann.dev/docs/en/configuration#token
SEVDESK_ALLOW (optional, not in the config above): Comma-separated permission tiers to enable: read, write, commit, external, or all. Tools above the allowed tiers are not registered. read is always on.
SEVDESK_READ_ONLY (optional, not in the config above): Set to true to allow only read tools, whatever SEVDESK_ALLOW says.
SEVDESK_DRY_RUN (optional, not in the config above): Set to true to make write tools only return a preview of what they would do, without sending anything.
SEVDESK_CONFIRM (optional, not in the config above): How a human confirms commit and external actions: elicit (in the client), browser (local approval page) or off (also needs SEVDESK_I_UNDERSTAND_NO_CONFIRM=1).
SEVDESK_AUDIT_LOG (optional, not in the config above): Path of a local JSON Lines file that records every write the server makes (redacted). Unset: no audit log.
SEVDESK_TOOLSETS (optional, not in the config above): Comma-separated toolsets to load, e.g. invoices,vouchers,banking. Unset loads all except advanced; all adds advanced.
SEVDESK_FILE_DIRS (optional, not in the config above): Absolute folders (separated like PATH) that receipts and e-invoices may be read from, for voucher uploads and e-invoice import. Unset: no local file is read.
SEVDESK_OUTPUT_DIR (optional, not in the config above): Folder where PDFs, e-invoice XML, CSV and DATEV exports may be saved. Unset: the file-saving tools are not offered.