BILL MCP Server: Tools, Setup and Security

The BILL MCP server lets an AI app answer questions about your BILL account in plain language: bills you owe, payments you've sent, invoices customers owe you and card spend. BILL (formerly Bill.com) publishes and hosts it. BILL says it is in beta and, for now, read-only.

Checked against: BILL's MCP server docs on 28 October 2026. eSEOspace did not install or test this server.

At a glance

What it can do

BILL groups the server's abilities by task, not by tool name. Its docs list four areas:

• Review what you owe: search and analyze bills by vendor, due date, amount, approval status and payment status. Review line items, approvers and credits, and check recurring templates.
• Track payments you have sent: search outgoing payments, see how and where a payment is in delivery, check whether it can still be voided and find payments by confirmation number.
• Chase what you are owed: search and analyze invoices by customer, status, dates or outstanding amount, and find invoices by number.
• Analyze card spend: search Spend & Expense transactions by date, amount, merchant, card, budget or cardholder.

BILL warns that "names, parameters, and responses can change between releases" while the tool surface expands. It does not publish tool names on this page.

Not supported yet: BILL partner organizations, international organizations, and acting on several managed organizations in one Accountant Console session.

How to connect it

BILL says it is not yet listed in official connector directories, so you add it by URL.

Claude (desktop app; BILL says the steps apply across Cowork, Chat and Code):

1. Select Settings > Connectors > Add custom connector.
2. Enter a name and the server URL.
3. Check that Authentication is Sign in now and OAuth client is Use Claude's published identity.
4. Select Add, then Connect. Claude redirects you to BILL.
5. Sign in, choose the organization, agree to the data-sharing terms and approve access.

BILL notes that direct setup via the Claude CLI is not currently supported.

ChatGPT (web app):

1. Select Plugins > Add dropdown > Create MCP App.
2. Enter a name and, optionally, a description.
3. Enter the server URL in the Connection field.
4. Check that Authentication is OAuth.
5. Agree to the terms, select Create, then sign in to BILL and approve access.

Test with a question only your account can answer, such as "What bills are due in the next two weeks?"

Other clients must be approved first. BILL asks developers to email its developer program with the URL where the client publishes its identity.

Security notes

• Runs as you. "Every call runs as you, against the BILL role you already have." A bill you can't see in BILL is one the AI can't see.
• Read-only today. No creating, editing, approving or paying. That limits damage from a confused or manipulated assistant.
• One organization per connection. To switch, disconnect and reconnect.
• Review connections. In the BILL app, go to your profile icon, then Connected apps, to see and disconnect AI assistant connections.
• Read data is still sensitive. Vendor, payment and card data can leak through prompt injection. Keep the connector in trusted sessions.

See our guides to data exfiltration and prompt injection, and the MCP security center.

Alternatives

• Ramp, which can also approve transactions and reimbursements.
• Expensify, a read-only expense and report search server.
• QuickBooks Online, for bills and invoices inside your general ledger.

Browse more in the MCP server directory.

Next step

Want AP and AR answers feeding your close? Read MCP for Accounting and Bookkeeping.

Frequently asked questions