MCP.Market

MCP Holded MCP server

by t4dhg·io.github.t4dhg/mcp-holded·v2.1.1

MCP server for Holded (Spanish ERP): invoicing, accounting, treasury, CRM, projects, payroll.

B78/100grade B
What users say
No reviews yet
Be the first
Safety scan
B78/100

full report

Adoption
New

0 stars42 downloads/wk

Reviews

Write one

Nobody has reviewed MCP Holded yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

MCP Holded tools (15, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • holded_accounting
  • holded_calendar

    Events and bookings. Actions: list_events, get_event, create_event, update_event, delete_event, list_bookings (start_date, end_date, service_id, sort_field, sort_order), get_booking, create_booking, update_booking, cancel_booking, list_locations, slots (id is the location id; data carries the query, for example { date, service_id }).

  • holded_catalog

    Products, services, warehouses, price lists and production orders. Actions: list_products (name), get_product, product_stock, create_product, update_product, update_stock (data.warehouse_id, data.stock_variation), delete_product, list_services (include_archived), get_service, create_service, update_service, delete_service, list_warehouses, get_warehouse, warehouse_stock, create_warehouse, update_w

  • holded_contacts

    Customers and suppliers. Actions: list (filters email, code, phone, mobile, custom_id are exact matches), search (substring on name), get, create, update, delete, bulk_archive, bulk_delete, list_attachments, attach, portal_link, list_groups, get_group, create_group, update_group, delete_group.

  • holded_crm

    Funnels and leads. Actions: list_funnels, get_funnel, create_funnel, update_funnel, delete_funnel, list_leads, get_lead, create_lead, update_lead, delete_lead, move_stage (stage_id), update_dates (due_date), add_note, update_note, add_task, update_task, delete_task (task_id).

  • holded_discover

    List the Holded tool domains. Each domain is one tool named holded_<domain> with an `action` parameter; call it with no action to see the actions in its error message, or read the tool description.

  • holded_inbox

    Incoming documents scanned by Holded. Actions: list (status, start_date, end_date, user_id), get, upload (file_path), download (filename, output_path), update, attach (data.documentId, data.documentType), delete.

  • holded_payments

    Payments (money out) and collections (money in). Actions: list (start_date, end_date, banking_account_id, document_id), get, create, update, delete, list_methods, get_method. Amounts are strings with a dot decimal separator.

  • holded_projects

    Projects, tasks and time tracking. Actions: list_projects (status), get_project, project_summary, create_project, update_project, delete_project, list_tasks, get_task, create_task, update_task, delete_task, list_times (project_id optional), get_time (project_id, time_id), create_time (project_id), update_time, delete_time.

  • holded_purchaseswrite action

    Purchase documents by `type`: purchase (supplier bill), purchase_refund, purchase_order, purchase_shipment. Actions: list, get, pdf (output_path), list_attachments, attach (file_path), received_items (orders), create, update, delete, approve, send, set_pipeline, record_payment, receive (orders). Amounts in responses are strings with a comma decimal separator.

  • holded_request

    Low-level escape hatch for the ~350 v2 operations. `path` is relative to https://api.holded.com/api/v2 and must start with "/". Responses are returned unvalidated. DELETE, PUT, PATCH, and POST to paths containing bulk, cancel, archive, approve, send, reconcile, ship, skip, clock-in or clock-out require `confirm: true`; the first call returns the exact request and sends nothing. Prefer the domain t

  • holded_sales

    Sales documents by `type`: invoice, credit_note, estimate, proforma, sales_receipt, sales_order, waybill, receipt_note, recurring_invoice. Actions: list, get, find_by_number (invoices), pdf (needs output_path), list_attachments, attach (file_path), schedule (recurring), create, update, delete, approve, cancel (invoices), send (emails), set_pipeline, record_payment, convert, accept, reject (estimat

  • holded_team

    Employees and payroll records. Actions: list_employees (search), get_employee, employee_contract, create_employee, list_times (employee_id optional), list_salary_records (employee_id, start_date, end_date), get_salary_record, salary_record_pdf (output_path), list_payslips (employee_id, dates, kind, is_draft), get_payslip, payslip_pdf, create_payslip_payment, delete_payslip_payment (payment_id). Sa

  • holded_treasury

    Banking accounts and their movements. Actions: list_accounts (type, archived), get_account, create_account, update_account, archive_account, delete_account, list_movements (bank movements of account `id`, start_date, end_date), list_cash_movements, create_movements (manual movements), reconcile (movement_id plus data.documents), list_remittances, get_remittance, list_forecasts, get_forecast, creat

  • holded_webhooks

    Webhooks and API usage. Actions: list, get, events (supported event types), create, update, enable, disable, delete, usage (API quota for the current month).

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

no findings
  • Code scan133 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 37 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 78/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How MCP Holded compares

Against every graded Sales and outbound MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
78/100
higher than 66% of 876 Sales and outbound servers
Tools
15
the typical Sales and outbound server has 8
Tools that change things
7%
typical: 11%. Fewer write tools means less an agent can break
Downloads a week
42
more than 35% of 156 Sales and outbound servers with a package

What its tools let an agent do: 14 read · 1 change

Install MCP Holded in Claude Code, Cursor or VS Code

Runs npx -y @t4dhg/mcp-holded on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-holded -- npx -y @t4dhg/mcp-holded
Add to Cursor

What the publisher says

From the MCP Holded repository's README, as published. We do not edit it. Read it on GitHub

MCP Holded

Model Context Protocol server for Holded, on the v2 API

A community project. Not affiliated with, endorsed by, or supported by Holded. "Holded" and the Holded logo are trademarks of their owner, used here to identify the API this server speaks to.

An MCP server for the Holded API v2: contacts, sales and purchase documents, payments, treasury, accounting, catalog, team, CRM, projects, calendar, inbox and webhooks. Thirteen hierarchical tools with an action parameter, Zod validation of every request and response, retries on reads, and a confirmation gate on every destructive operation.

Holded deprecated its classic API (/api/invoicing/v1, key header). New keys use the format pat and only authenticate against v2** (https://api.holded.com/api/v2, Authorization: Bearer). This server speaks v2 only.

Why this one

  • v2 only, which is the API that still works. Holded deprecated the classic API (/api/invoicing/v1, key header). New tokens are pat__ and authenticate only against v2. This server speaks v2 and nothing else.
  • Thirteen hierarchical tools with an action parameter, not one tool per endpoint, so the tool list stays small in a model's context while covering contacts, sales, purchases, payments, treasury, accounting, catalog, team, CRM, projects, calendar, inbox and webhooks.
  • Seven MCP resources and six MCP prompts. The resources carry the account's own tax keys, numbering series, payment methods and chart of accounts, plus the API behaviour a schema cannot express. The prompts run the real workflows: aged receivables, VAT summary, bank reconciliation, statements, month-end close.
  • A confirmation gate on every destructive operation, with a structural test that keeps the documented list equal to the code. Nothing that deletes, overwrites, approves or emails goes through without confirm: true.
  • Zod validation of every request and every response. A shape the server has not seen surfaces as a clear schema error rather than a silent success.
  • Over 200 tests against anonymised real v2 responses, npm provenance via trusted publishing, and Node 18 or later.

How it compares

Four MCP servers for Holded exist on npm. This compares the published code of each, not their descriptions, as at 2026-09-08: @t4dhg/mcp-holded 2.1.1, @nubiia/mcp-holded 2.0.2, @energio/holded-mcp 1.5.1 and holded-mcp 1.0.0. It is a snapshot and will age; check the current versions yourself before relying on it.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

MCP Holded: common questions

Is MCP Holded MCP server safe?
Mostly: it is graded B (78/100). Read the MCP Holded safety report
How do I install MCP Holded?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does MCP Holded need an API key?
Yes. The registry entry asks for HOLDED_API_KEY.
Is MCP Holded maintained?
The last commit was 57 days ago (2026-09-08). The latest release is v2.1.1.
What can I use instead of MCP Holded?
Servers from other publishers that do the same job: Apideck MCP server, BoondManager MCP Server and BoondManager MCP Server.
How does MCP Holded compare with other Sales and outbound MCP servers?
safety score 78/100 (higher than 66% of 876 Sales and outbound servers); tools 15 (the typical Sales and outbound server has 8); tools that change things 7% (typical: 11%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to MCP Holded

Same job from other publishers: the closest match first, then the best rated.

  • Apideck
    Apideck Unified API MCP — 330 tools across 200+ SaaS connectors (accounting, CRM, HRIS, ATS).
    A
  • BoondManager MCP Server
    MCP Server for BoondManager API - 182 tools, 12 prompts, 22 resources (ERP/CRM)
    A
  • BoondManager MCP Server
    MCP Server for BoondManager API - 185 tools, 13 prompts, 22 resources (ERP/CRM)
    A
  • Weeeking
    MCP server for Weeek with full public API coverage: tasks, projects, CRM, time tracking.
    C
  • SMB Sandbox
    Mock small-business CRM, inbox, calendar, invoicing and phone tools for testing AI agents safely.
    A

More from t4dhg →