Sevdesk

103 tools. 62 can modify or destroy data without limits.

19 destructive tools with no built-in limits. Policy required.

Last updated:

62 can modify or destroy data
41 read-only
103 tools total

Community server · catalogue entry verified 29/06/2026

How to control Sevdesk ↓

What Sevdesk exposes to your agents

Read (41) Write / Execute (43) Destructive / Financial (19)
Critical Risk

The most dangerous Sevdesk tools

62 of Sevdesk's 103 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control Sevdesk

PolicyLayer is an MCP gateway — it sits between your AI agents and Sevdesk, and nothing reaches the server without passing your rules. These are the rules we recommend:

Block financial tools by default
{
  "book_voucher_payment": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Requires human approval."
      }
    ]
  }
}

Financial tools should be explicitly enabled per use case, not open by default.

Deny destructive operations
{
  "delete_check_account": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "add_tag_to_object": {
    "limits": [
      {
        "counter": "add_tag_to_object_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "export_datev": {
    "limits": [
      {
        "counter": "export_datev_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Sevdesk — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON SEVDESK →

Instant setup, no code required.

All 103 Sevdesk tools

WRITE 41 tools
Write add_tag_to_object Add a tag to an object (contact, invoice, etc.) Write book_invoice_payment Book a payment on an invoice in sevdesk Write change_order_status Change order status in sevdesk Write create_check_account Create a new bank account in sevdesk Write create_communication_way Create a new communication way for a contact Write create_contact Create a new contact (customer/supplier/partner) in sevdesk Write create_contact_address Create a new address for a contact Write create_credit_note Create a new credit note in sevdesk Write create_credit_note_position Create a new position on a credit note Write create_invoice Create a new invoice in sevdesk Write create_invoice_position Create a new position on an invoice Write create_order Create a new order in sevdesk Write create_order_position Create a new position on an order Write create_part Create a new part (product/service) in sevdesk Write create_recurring_invoice Create a recurring invoice in sevdesk (auto-generates invoices at set intervals) Write create_tag Create a new tag in sevdesk Write create_transaction Create a new bank transaction in sevdesk Write create_voucher Create a new expense voucher in sevdesk Write create_voucher_position Create a new position on a voucher Write enshrine_voucher Enshrine (finalize) a voucher in sevdesk Write mark_invoice_sent Mark invoice as sent in sevdesk v2.0 (transitions draft→open) Write reset_credit_note_to_draft Reset a credit note to draft status (100) in sevdesk v2.0 Write reset_credit_note_to_open Reset a credit note to open status (200) in sevdesk v2.0 Write reset_invoice_to_draft Reset an invoice to draft status (100) in sevdesk v2.0 Write send_order_email Send an order via email from sevdesk Write update_check_account Update an existing bank account in sevdesk Write update_communication_way Update an existing communication way Write update_contact Update an existing contact in sevdesk Write update_contact_address Update an existing contact address Write update_credit_note Update an existing credit note in sevdesk Write update_credit_note_position Update an existing credit note position Write update_invoice Update an existing invoice in sevdesk Write update_invoice_position Update an existing invoice position Write update_order Update an existing order in sevdesk Write update_order_position Update an existing order position Write update_part Update an existing part in sevdesk Write update_tag Update an existing tag in sevdesk Write update_transaction Update an existing transaction in sevdesk Write update_voucher Update an existing voucher in sevdesk Write update_voucher_position Update an existing voucher position Write upload_voucher_file Upload a file (PDF, image) to attach to a voucher
READ 41 tools
Read export_datev Export booking data in DATEV format from sevdesk (CSV). Scope: E=Earnings, X=Expenditure, T=Transactions, C=Ca Read export_invoice_csv Export invoices as CSV from sevdesk Read export_transactions_csv Export bank transactions as CSV from sevdesk Read export_voucher_csv Export vouchers/receipts list as CSV from sevdesk Read get_check_account Get a specific bank account by ID from sevdesk Read get_check_account_balance Get bank account balance at a specific date from sevdesk Read get_communication_way Get a specific communication way by ID Read get_contact Get a specific contact by ID from sevdesk Read get_contact_address Get a specific contact address by ID Read get_credit_note Get a specific credit note by ID from sevdesk Read get_credit_note_pdf Get credit note PDF as base64 from sevdesk Read get_credit_note_position Get a specific credit note position by ID Read get_invoice Get a specific invoice by ID from sevdesk Read get_invoice_pdf Get invoice PDF as base64 from sevdesk Read get_invoice_position Get a specific invoice position by ID Read get_next_customer_number Get the next available customer number from sevdesk Read get_order Get a specific order by ID from sevdesk Read get_order_pdf Get order PDF as base64 from sevdesk Read get_order_position Get a specific order position by ID Read get_part Get a specific part by ID from sevdesk Read get_part_stock Get current stock level for a part Read get_tag Get a specific tag by ID from sevdesk Read get_transaction Get a specific transaction by ID from sevdesk Read get_voucher Get a specific voucher/receipt by ID from sevdesk Read get_voucher_position Get a specific voucher position by ID Read list_check_accounts List bank accounts from sevdesk Read list_communication_ways List communication ways (email, phone, etc.) for contacts Read list_contact_addresses List addresses for contacts Read list_contacts List contacts (customers, suppliers, partners) from sevdesk Read list_credit_note_positions List positions for a credit note Read list_credit_notes List credit notes from sevdesk Read list_invoice_positions List positions/line items for an invoice Read list_invoices List sales invoices from sevdesk Read list_order_positions List positions for an order Read list_orders List orders (offers, confirmations) from sevdesk Read list_parts List parts (products/services) from sevdesk Read list_tag_relations List tag relations (objects linked to tags) Read list_tags List tags from sevdesk Read list_transactions List bank account transactions from sevdesk Read list_voucher_positions List positions for a voucher Read list_vouchers List expense vouchers/receipts from sevdesk

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about Sevdesk

Can an AI agent move money through the Sevdesk MCP server? +

Yes. The Sevdesk server exposes 1 financial tools including book_voucher_payment. Without a policy, an autonomous agent can call these with no spend caps, no rate limits, and no approval flow. PolicyLayer lets you block financial tools by default, require human approval, or set per-tool rate limits — enforced on every call.

Can an AI agent delete data through the Sevdesk MCP server? +

Yes. The Sevdesk server exposes 18 destructive tools including delete_check_account, delete_communication_way, delete_contact. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Sevdesk? +

The Sevdesk server has 41 write tools including add_tag_to_object, book_invoice_payment, change_order_status. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Sevdesk.

How many tools does the Sevdesk MCP server expose? +

103 tools across 4 categories: Destructive, Financial, Read, Write. 41 are read-only. 62 can modify, create, or delete data.

How do I enforce a policy on Sevdesk? +

Register the Sevdesk MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Sevdesk tool call.

Deterministic rules across all 103 Sevdesk tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

103 Sevdesk tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.