KosmoKrator

accounting

Invoice Ninja MCP Gateway for AI Agents

Expose Invoice Ninja tools to Claude Code, Cursor, Codex, and other MCP clients through the local KosmoKrator MCP gateway.

8 functions 6 read 2 write API token auth

Invoice Ninja MCP Gateway

Expose Invoice Ninja to MCP clients with `kosmokrator mcp:serve --integration=invoiceninja`.

If the client has never used KosmoKrator before, install it first, then register this integration as a stdio MCP server. The gateway exposes only the selected integration in the example below.

curl -fsSL https://raw.githubusercontent.com/OpenCompanyApp/kosmokrator/main/install.sh | bash
kosmokrator mcp:gateway:install --integration=invoiceninja --write=deny --json
{
  "mcpServers": {
    "kosmokrator-invoiceninja": {
      "type": "stdio",
      "command": "kosmo",
      "args": [
        "mcp:serve",
        "--integration=invoiceninja",
        "--write=deny"
      ]
    }
  }
}

Serve Manually

kosmokrator mcp:serve --integration=invoiceninja --write=deny

MCP Tool Names

KosmoKrator exposes integration tools through the gateway with stable names:

MCP toolSource functionType
integration__invoiceninja__invoiceninja_list_invoices invoiceninja.invoiceninja_list_invoices Read read
integration__invoiceninja__invoiceninja_get_invoice invoiceninja.invoiceninja_get_invoice Read read
integration__invoiceninja__invoiceninja_create_invoice invoiceninja.invoiceninja_create_invoice Write write
integration__invoiceninja__invoiceninja_list_clients invoiceninja.invoiceninja_list_clients Read read
integration__invoiceninja__invoiceninja_create_client invoiceninja.invoiceninja_create_client Write write
integration__invoiceninja__invoiceninja_list_products invoiceninja.invoiceninja_list_products Read read
integration__invoiceninja__invoiceninja_list_payments invoiceninja.invoiceninja_list_payments Read read
integration__invoiceninja__invoiceninja_get_current_user invoiceninja.invoiceninja_get_current_user Read read

Write Access

Start with --write=deny for read-only MCP clients. Use --write=ask or --write=allow only when the client and workspace are trusted.