This profile is part of our MCP server directory, within The MCP Guide. Profiles are checked against each vendor's own documentation. Need a server built? See MCP development.
The Mercury MCP server lets an AI app read your Mercury business banking data and take a few supported actions. It can request payments and internal transfers, edit custom expense categories and update transaction notes. Mercury publishes and hosts it, and the docs say it is "currently in Beta."
Checked against: Mercury's MCP docs on 28 October 2026. eSEOspace did not install or test this server.
Key Takeaways
- The server URL is
https://mcp.mercury.com/mcp, and sign-in uses OAuth with separate scopes for reading and for each write action. - There are five write tools; payment and transfer requests "require approval in Mercury" before money moves.
- Category and note changes apply immediately, with no separate approval.
- Existing read-only connections must reauthorize to gain write access.
- Mercury says it "does not offer a non-hosted MCP at this time."
At a glance
| Item | Detail |
|---|---|
| Publisher | Mercury |
| Official? | Yes |
| Hosting | Remote URL (https://mcp.mercury.com/mcp) |
| Transport | Streamable HTTP |
| Sign-in | OAuth 2.0 with PKCE; dynamic client registration supported |
| Read or write | Both (writes are scoped) |
| Price | No separate MCP price listed |
| Source code | Closed |
| Status | Beta |
What it can do
Mercury's supported tools page lists five write tools, each with its own OAuth scope:
| Tool | Scope | What happens |
|---|---|---|
requestSendMoney | transactions:request | Creates a payment request to an existing recipient; needs approval in Mercury |
requestTransferMoney | transfers:request | Creates a transfer between your own Mercury accounts; needs approval |
createCategory | categories:create | Creates a custom expense category immediately |
editCategory | categories:edit | Updates a custom category immediately |
updateTransaction | transactions:update | Updates or clears a transaction's note or category immediately |
Read tools include getAccounts, getAccount, getAccountStatements, listTransactions, getTransactionById, listCards, getRecipients, getTreasury, listCredit, getOrganization, getUsers, listInvoices, listCustomers and getSafeRequests. Some business tools are only available for eligible business accounts.
Mercury lists limits too. The write tools don't create recipients, delete categories, manage cards or create invoices.
How to connect it
Mercury lists official integrations for ChatGPT, Claude, Cursor, Perplexity, Gemini Enterprise and others. You search for Mercury in your platform's connector directory and follow the prompts.
For Claude Code, the connection guide gives:
claude mcp add --transport http -s user mercury https://mcp.mercury.com/mcp
claude mcp login mercury
claude mcp listYour browser opens Mercury's sign-in page. Review the account and permissions, then select Allow. For Codex CLI:
codex mcp add mercury --url https://mcp.mercury.com/mcpFor other clients, set the URL over streamable HTTP and let the client run OAuth. If it can't find the authorization server, point it at https://mcp.mercury.com/.well-known/oauth-protected-resource.
Mercury notes that a Claude connector session lasts about 3 days on the same chat thread. Command line tools last longer if they request the offline_access scope.
Security notes
Mercury's security best practices page is unusually specific:
- Verify the endpoint. Only connect to
https://mcp.mercury.com/mcp. - No money moves from chat. "Your AI tool creates a request; it cannot approve the request or move money on its own." A confirmation in the AI tool is not approval in Mercury.
- Some writes are instant. Category and note changes "do not move money, but they can change existing records."
- Read access is sensitive. It exposes balances, full transaction history and recipient routing and account details.
- Prompt injection. Mercury warns that malicious instructions could leak data or create unwanted payment requests.
- Data handling. Avoid shared or public AI sessions, and check whether your AI provider may train on your data.
- Revoke anytime. Tokens are time-limited and access can be revoked from the Mercury dashboard.
Grant only the scopes you need. A reporting assistant needs read, not payment scopes. See our guides to prompt injection and data exfiltration, and the MCP security center.
Alternatives
- Airwallex, whose AgentOS MCP acts on production accounts with money-out actions off by default.
- Ramp, for corporate cards, spend and approvals.
- Plaid, a payments-infrastructure server.
See all profiles in the MCP server directory.
Next step
Want bank data flowing into your books? Compare options in Best MCP Accounting and Bookkeeping Tools.
Frequently asked questions
Does Mercury have an official MCP server?
Yes. Mercury hosts it at https://mcp.mercury.com/mcp and documents it on docs.mercury.com. It is in beta.
Can Mercury MCP send money?
No, not on its own. It can create payment and transfer requests, but Mercury says those require approval in Mercury before money moves.
Can I run Mercury's MCP server locally?
No. Mercury says it does not offer a non-hosted MCP at this time.
How do I add write access to an existing connection?
Reauthorize through your AI tool's connection settings and grant the write permissions on Mercury's consent screen. Existing connections don't gain write access automatically.
