MCP Holded MCP server
MCP server for Holded (Spanish ERP): invoicing, accounting, treasury, CRM, projects, payroll.
0 stars42 downloads/wk
Reviews
Write oneNobody has reviewed MCP Holded yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
MCP Holded tools (15, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
holded_accountingholded_calendarEvents and bookings. Actions: list_events, get_event, create_event, update_event, delete_event, list_bookings (start_date, end_date, service_id, sort_field, sort_order), get_booking, create_booking, update_booking, cancel_booking, list_locations, slots (id is the location id; data carries the query, for example { date, service_id }).
holded_catalogProducts, services, warehouses, price lists and production orders. Actions: list_products (name), get_product, product_stock, create_product, update_product, update_stock (data.warehouse_id, data.stock_variation), delete_product, list_services (include_archived), get_service, create_service, update_service, delete_service, list_warehouses, get_warehouse, warehouse_stock, create_warehouse, update_w
holded_contactsCustomers and suppliers. Actions: list (filters email, code, phone, mobile, custom_id are exact matches), search (substring on name), get, create, update, delete, bulk_archive, bulk_delete, list_attachments, attach, portal_link, list_groups, get_group, create_group, update_group, delete_group.
holded_crmFunnels and leads. Actions: list_funnels, get_funnel, create_funnel, update_funnel, delete_funnel, list_leads, get_lead, create_lead, update_lead, delete_lead, move_stage (stage_id), update_dates (due_date), add_note, update_note, add_task, update_task, delete_task (task_id).
holded_discoverList the Holded tool domains. Each domain is one tool named holded_<domain> with an `action` parameter; call it with no action to see the actions in its error message, or read the tool description.
holded_inboxIncoming documents scanned by Holded. Actions: list (status, start_date, end_date, user_id), get, upload (file_path), download (filename, output_path), update, attach (data.documentId, data.documentType), delete.
holded_paymentsPayments (money out) and collections (money in). Actions: list (start_date, end_date, banking_account_id, document_id), get, create, update, delete, list_methods, get_method. Amounts are strings with a dot decimal separator.
holded_projectsProjects, tasks and time tracking. Actions: list_projects (status), get_project, project_summary, create_project, update_project, delete_project, list_tasks, get_task, create_task, update_task, delete_task, list_times (project_id optional), get_time (project_id, time_id), create_time (project_id), update_time, delete_time.
holded_purchaseswrite actionPurchase documents by `type`: purchase (supplier bill), purchase_refund, purchase_order, purchase_shipment. Actions: list, get, pdf (output_path), list_attachments, attach (file_path), received_items (orders), create, update, delete, approve, send, set_pipeline, record_payment, receive (orders). Amounts in responses are strings with a comma decimal separator.
holded_requestLow-level escape hatch for the ~350 v2 operations. `path` is relative to https://api.holded.com/api/v2 and must start with "/". Responses are returned unvalidated. DELETE, PUT, PATCH, and POST to paths containing bulk, cancel, archive, approve, send, reconcile, ship, skip, clock-in or clock-out require `confirm: true`; the first call returns the exact request and sends nothing. Prefer the domain t
holded_salesSales documents by `type`: invoice, credit_note, estimate, proforma, sales_receipt, sales_order, waybill, receipt_note, recurring_invoice. Actions: list, get, find_by_number (invoices), pdf (needs output_path), list_attachments, attach (file_path), schedule (recurring), create, update, delete, approve, cancel (invoices), send (emails), set_pipeline, record_payment, convert, accept, reject (estimat
holded_teamEmployees and payroll records. Actions: list_employees (search), get_employee, employee_contract, create_employee, list_times (employee_id optional), list_salary_records (employee_id, start_date, end_date), get_salary_record, salary_record_pdf (output_path), list_payslips (employee_id, dates, kind, is_draft), get_payslip, payslip_pdf, create_payslip_payment, delete_payslip_payment (payment_id). Sa
holded_treasuryBanking accounts and their movements. Actions: list_accounts (type, archived), get_account, create_account, update_account, archive_account, delete_account, list_movements (bank movements of account `id`, start_date, end_date), list_cash_movements, create_movements (manual movements), reconcile (movement_id plus data.documents), list_remittances, get_remittance, list_forecasts, get_forecast, creat
holded_webhooksWebhooks and API usage. Actions: list, get, events (supported event types), create, update, enable, disable, delete, usage (API quota for the current month).
Public scan report
scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it
- Code scan133 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 37 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How MCP Holded compares
Against every graded Sales and outbound MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 78/100
- higher than 66% of 876 Sales and outbound servers
- Tools
- 15
- the typical Sales and outbound server has 8
- Tools that change things
- 7%
- typical: 11%. Fewer write tools means less an agent can break
- Downloads a week
- 42
- more than 35% of 156 Sales and outbound servers with a package
What its tools let an agent do: 14 read · 1 change
Install MCP Holded in Claude Code, Cursor or VS Code
Runs npx -y @t4dhg/mcp-holded on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-holded -- npx -y @t4dhg/mcp-holded
What the publisher says
From the MCP Holded repository's README, as published. We do not edit it. Read it on GitHub
MCP Holded
Model Context Protocol server for Holded, on the v2 API
A community project. Not affiliated with, endorsed by, or supported by Holded. "Holded" and the Holded logo are trademarks of their owner, used here to identify the API this server speaks to.
An MCP server for the Holded API v2: contacts, sales and purchase documents, payments, treasury, accounting, catalog, team, CRM, projects, calendar, inbox and webhooks. Thirteen hierarchical tools with an action parameter, Zod validation of every request and response, retries on reads, and a confirmation gate on every destructive operation.
Holded deprecated its classic API (/api/invoicing/v1, key header). New keys use the format pat and only authenticate against v2** (https://api.holded.com/api/v2, Authorization: Bearer). This server speaks v2 only.
Why this one
- v2 only, which is the API that still works. Holded deprecated the classic API (/api/invoicing/v1, key header). New tokens are pat__ and authenticate only against v2. This server speaks v2 and nothing else.
- Thirteen hierarchical tools with an action parameter, not one tool per endpoint, so the tool list stays small in a model's context while covering contacts, sales, purchases, payments, treasury, accounting, catalog, team, CRM, projects, calendar, inbox and webhooks.
- Seven MCP resources and six MCP prompts. The resources carry the account's own tax keys, numbering series, payment methods and chart of accounts, plus the API behaviour a schema cannot express. The prompts run the real workflows: aged receivables, VAT summary, bank reconciliation, statements, month-end close.
- A confirmation gate on every destructive operation, with a structural test that keeps the documented list equal to the code. Nothing that deletes, overwrites, approves or emails goes through without confirm: true.
- Zod validation of every request and every response. A shape the server has not seen surfaces as a clear schema error rather than a silent success.
- Over 200 tests against anonymised real v2 responses, npm provenance via trusted publishing, and Node 18 or later.
How it compares
Four MCP servers for Holded exist on npm. This compares the published code of each, not their descriptions, as at 2026-09-08: @t4dhg/mcp-holded 2.1.1, @nubiia/mcp-holded 2.0.2, @energio/holded-mcp 1.5.1 and holded-mcp 1.0.0. It is a snapshot and will age; check the current versions yourself before relying on it.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
MCP Holded: common questions
- Is MCP Holded MCP server safe?
- Mostly: it is graded B (78/100). Read the MCP Holded safety report
- How do I install MCP Holded?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does MCP Holded need an API key?
- Yes. The registry entry asks for
HOLDED_API_KEY. - Is MCP Holded maintained?
- The last commit was 57 days ago (2026-09-08). The latest release is v2.1.1.
- What can I use instead of MCP Holded?
- Servers from other publishers that do the same job: Apideck MCP server, BoondManager MCP Server and BoondManager MCP Server.
- How does MCP Holded compare with other Sales and outbound MCP servers?
- safety score 78/100 (higher than 66% of 876 Sales and outbound servers); tools 15 (the typical Sales and outbound server has 8); tools that change things 7% (typical: 11%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to MCP Holded
Same job from other publishers: the closest match first, then the best rated.
- ApideckApideck Unified API MCP — 330 tools across 200+ SaaS connectors (accounting, CRM, HRIS, ATS).not reviewedEstablishedA
BoondManager MCP ServerMCP Server for BoondManager API - 182 tools, 12 prompts, 22 resources (ERP/CRM)not reviewedEstablishedA
BoondManager MCP ServerMCP Server for BoondManager API - 185 tools, 13 prompts, 22 resources (ERP/CRM)not reviewedGrowingA- WeeekingMCP server for Weeek with full public API coverage: tasks, projects, CRM, time tracking.not reviewedGrowingC
- SMB SandboxMock small-business CRM, inbox, calendar, invoicing and phone tools for testing AI agents safely.not reviewedGrowingA