MCP: the AI assistant can now act in Spendesk

Since 25 September 2026, an AI assistant connected to the Spendesk MCP server can act on your Spendesk data, not only read it. These write actions are in Beta; reading stays generally available. The server now has 62 tools: 36 that read and 26 that act.

With the matching permission, the assistant can:

Manage purchase orders — create, cancel or close them.
Manage payables — update accounting fields, mark a payable as ready for export, mark a payable or a settlement as exported.
Manage suppliers — create and update them, including bank details, and archive or unarchive them.
Manage the chart of accounts — create, update and archive accounts.
Manage accounting exports — generate journal exports, as a preview by default or committed on request.
Manage analytical fields and expense categories — create, update and delete them.

What does not change:

Write permissions are opt-in, twice. They are off by default on every connection: an Account Owner or Admin turns on the ones the team needs, from the connection's Permissions tab. Then, on the approval screen, read permissions are ticked by default and write permissions are not: each user disconnects, connects again and ticks the ones they need — refreshing the tool list is not enough.
Your role applies. Only Controllers and Account Owners can use the assistant, and every action is checked against your role in the company.
The assistant is told to confirm first. Spendesk instructs it to act only when you ask, and to name what it is about to change before doing it. This is guidance, not a lock: to keep a decision on each action, use your assistant's own approval (in Claude, Allow once).

Some actions cannot be undone — for example cancelling or closing a purchase order, committing an accounting export, marking entries as exported, deleting analytical fields or expense categories. The new page Assistant actions and safety lists every action, the complete table of what cannot be undone, and how to choose permissions.