What it lets you do
Once connected, you can ask Claude to work with your Holded account data in natural language. For example:
Look up and list invoices, quotes and tickets
Search contacts and review their data
Check products, stock and warehouses
Review expenses and purchases
Generate quick summaries of your sales or accounting data
⚠️ Prerequisite: a Holded account with API access enabled.
Option A — Install from the Connectors Directory (when available)
The fastest way, once Holded is published in Anthropic's directory:
Open claude.ai → Customize → Connectors
Search for "Holded"
Click Connect
Log in to Holded and authorize access
Done
This option will be available when Holded is published in Anthropic's Connectors Directory.
Option B — Manual installation with the URL
Works today on all Claude clients. You only need one URL:
https://mcp.holded.com/mcp
No configuration files or JSON needed: Claude automatically handles discovery, registration and sign-in.
Who can add the connector:
Free, Pro and Max plans: you can add it yourself from Customize → Connectors. (On Free you can only have one custom connector.)
Team and Enterprise plans: an Owner of the organization must add it first in Organization Settings → Connectors. From there, each member can connect it from Customize → Connectors.
Claude.ai (web)
Open claude.ai → profile icon → Customize → Connectors
Click "+" → Add custom connector
Paste
https://mcp.holded.com/mcpClick Connect: the browser redirects you to Holded's login
Authorize access and you're done
Claude Desktop
Open Claude Desktop → Settings → Connectors
Click Add custom connector
Paste
https://mcp.holded.com/mcpThe browser opens: log in, authorize and done
Claude Code (CLI)
bash
claude mcp add --transport http holded https://mcp.holded.com/mcp
The browser opens to authorize the first time you use it.
Use with other AI assistants
Holded's connection is built on MCP, an open standard, so it's not limited to Claude. Any AI assistant that supports remote MCP connectors can use the same URL:
https://mcp.holded.com/mcp
ChatGPT (Plus, Pro, Enterprise, Business or Edu plans):
Open ChatGPT → Settings → enable Developer mode
Go to Apps and Connectors → Add / Create app
Enter the server URL
https://mcp.holded.com/mcpComplete Holded login and authorize access
Write access in ChatGPT may require a Business, Enterprise or Edu plan.
Other assistants (Gemini, Cursor and others): look for the option to add a remote MCP server or custom connector, paste the same URL and authorize when prompted.
Menu names and exact steps vary by assistant and may change over time: check your assistant's documentation if something doesn't match.
Check that it works
Ask Claude something like:
"List my Holded invoices"
"Show me my contacts"
Claude will use Holded's tools to fetch real data from your account.
Manage the connection
Disconnect: Customize → Connectors → click Holded → Disconnect
Reconnect: repeat the installation steps above
☝️ About the access token: when connecting, Holded automatically creates an access token with exactly the permissions you granted during authorization. You can review it at any time in Holded under Developers → Credentials.
Troubleshooting
Problem | What to do |
0 visible tools | Your Holded account may not have the necessary permissions. Check your API access and account permissions. |
Session not found | Disconnect and reconnect. |
OAuth error | Make sure your Holded account has API access enabled. |
Permissions: what Claude can access
When authorizing the connection you'll see a permissions screen where you choose what Claude can do with your account (we recommend starting with read-only).
You'll only see the areas you already have access to. The screen inherits your Holded user permissions: you cannot grant Claude a permission you don't have yourself. For example, if your user doesn't have access to Inventory, that area won't appear and Claude won't be able to access it either.
Holded MCP Permission Profiles
When you connect an AI assistant (like Claude) to Holded via MCP, you choose what it can do with your data. To make it easy, we offer two recommended profiles. In both cases, the assistant can never access more than what your own user can already see or do in Holded.
1. Analytical: Read-only (recommended)
This is preselected. The assistant can query and analyze your data — invoices, treasury, stock, contacts, accounting… — but cannot modify anything. Ideal for asking questions, reviewing, and pulling reports with no risk at all.
For security, a few sensitive areas are excluded by default: developer tokens, payroll, and bank mandates/direct debits. If you need them, you can add them manually.
2. Operational: Read and write
Adds write capability, but only for operational, reversible tasks, and always after a heads-up and your confirmation.
The idea is simple: the AI drafts and organizes; you issue and collect. Anything that moves money, has tax implications, or affects people stays read-only.
The assistant can create and edit:
Contacts
CRM and pipeline: opportunities, events, funnels, bookings, and activities
Quotes and pro forma invoices (drafts that you convert into invoices)
Projects
Operational inventory: products, warehouses, sales and purchase orders, shipments, and production orders
Inbox (uploading documents to process) and tags
It always stays read-only:
Accounting: journal entries, remittances, taxes/AEAT, payments, and payroll
Invoices and tax documents: invoices, receipts, SII, e-invoicing, and POS
Team and HR
Settings and configuration
Developer tools and system administration
Digital signature and anything that sets pricing or billing
Customize permissions (advanced)
In addition to the two recommended profiles, you can tailor permissions to your needs with two modes:
Global permission: applies the same level — none, read-only, or read and write — to all areas at once.
Permission by area: defines the access level for each area separately (Sales, Contacts, CRM, Projects, Accounting, Inventory, Team…). This way, for example, you can give read-only access to everything and enable write access only for Contacts.
In all cases, the assistant remains limited to what your user can already do in Holded.
Do you need the AI to write in an area that's read-only (for example, creating accounting entries)? From Permission by area you can enable write access only for that area, at your own responsibility. The recommended profiles don't include this due to the risk involved.
Which one should I choose?
Always start with Read-only. It covers most cases: querying, analyzing, and pulling reports.
Move to Read and write only if you want the AI to prepare operational tasks for you (creating contacts, moving opportunities, putting together quotes…).
Need finer control? Use Permission by area to enable write access only where you need it.