MCP.Market

Xestando MCP server

online · 100% uptime
by javyxx·io.github.javyxx/xestando·v1.0.0

Spanish SME suite: VeriFactu invoices, time clock, e-sign. AI drafts; you approve.

A97/100grade A
What users say
No reviews yet
Be the first
Safety scan
A97/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed Xestando yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Xestando tools

Tool list not cached yet. `describe` through the gateway fetches it live.

Public scan report

scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 682ms (auth required)20/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityOAuth resource metadata advertised on 40115/15
  • Maintenancelast push 22 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 97/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Xestando compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
97/100
higher than 98% of 48,243 servers
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
931 ms
faster than 15% of 30,027 servers

Install Xestando in Claude Code, Cursor or VS Code

claude mcp add --transport http xestando https://api.xestando.com/mcp
Add to Cursor

What the publisher says

From the Xestando repository's README, as published. We do not edit it. Read it on GitHub

Xestando for Claude Code and Cursor

Connect Claude Code and Cursor to Xestando, the Spanish business suite for freelancers and small companies: VERI*FACTU invoicing, expenses, quotes, contacts, calendar, email, file storage, company knowledge and HTML templates.

The AI proposes, you decide. Every write goes through Xestando's approval flow: the hosted MCP creates a pending task, sends a push to your Xestando app, and nothing is saved until you review and approve it there. Prompt Shield redacts tax IDs, emails, phones and IBANs before they reach the model. See xestando.com/ia-conectada.

Install

Claude Code

/plugin marketplace add javyxx/xestando-claude-plugin
/plugin install xestando@xestando

Then run /mcp, pick xestando and sign in.

Cursor

When the plugin is listed in the Cursor Marketplace, install Xestando from Customize. Until then, add the GitHub repo as a plugin source (/add-plugin https://github.com/javyxx/xestando-claude-plugin) or load it from ~/.cursor/plugins/local/xestando.

Authentication is OAuth 2.1 with PKCE against oauth2.xestando.com; the client registers itself dynamically, so there are no tokens or secrets to paste or store in the repository. You need a Xestando account.

What you get

Skills you can also invoke as slash commands, a skill that teaches the approval flow and Spanish invoicing conventions, and Xestando's hosted MCP server (https://api.xestando.com/mcp).

The MCP server also exposes tools for contacts, calendar events, email and email campaigns, LinkedIn posts, letting the user pick a record by push, file storage and requesting information from a person by push or WhatsApp. Claude and Cursor pick them as needed.

Data and safety

and a task; the operation only runs after you approve it in Xestando, and it expires if you don't.

  • Nothing is written without your approval. Write tools return a confirmationUrl

credentials and card numbers stay in Xestando; the agent does not ask for them.

  • Write tools only send published fields. Tax IDs, addresses, health data,

reaches the model; real values are restored server-side only after authorization.

  • Prompt Shield redacts emails, phone numbers, tax IDs and IBANs before context

return data from your own account to the model in the conversation, as any MCP tool does.

  • Read tools (clients, providers, employees, file listings, knowledge search)

tickets from disk send only the published fields of the resulting accounting entry.

  • Local files stay local unless you ask for them: the commands that read invoices or

and markdown skills.

  • The plugin ships no binaries, no hooks and no scripts — manifests, an MCP endpoint

En español

Este plugin conecta Claude Code y Cursor con tu cuenta de Xestando. En Claude Code instálalo con /plugin marketplace add javyxx/xestando-claude-plugin y /plugin install xestando@xestando. En Cursor, desde el marketplace o añadiendo el repositorio. Ejecuta /mcp y entra con tu cuenta.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Xestando: common questions

Is Xestando MCP server safe?
Yes, by our scan: it is graded A (97/100). Read the Xestando safety report
How do I install Xestando?
It runs remotely at api.xestando.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Xestando need an API key?
No key to paste: it signs you in with OAuth when your client connects.
Is Xestando maintained?
The last commit was 55 days ago (2026-09-11). The latest release is v1.0.0.
Is Xestando up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does Xestando compare with other MCP servers?
safety score 97/100 (higher than 98% of 48,243 servers); uptime 100% (of our recent checks; the typical remote server answers 100%); response time 931 ms (faster than 15% of 30,027 servers). Full comparison.