Connect
Optimize
Secure
FreshBooks MCP Server
for AI Agents
Production-ready FreshBooks MCP server with 80 extensible actions — plus built-in authentication, security, and optimized execution.
FreshBooks MCP Server
Built by 
StackOne
StackOne 
Coverage
80 Agent Actions
Create, read, update, and delete across FreshBooks — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your FreshBooks MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every FreshBooks tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every FreshBooks call.
Tools Discovery →What is the FreshBooks MCP Server?
A FreshBooks MCP server lets AI agents read and write FreshBooks data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's FreshBooks MCP server ships with 80 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, and optimized agent context. Connect it from MCP clients like Claude Desktop, Cursor, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All FreshBooks MCP Tools and Actions
Every action from FreshBooks's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
Accounts
- Create Account
Create a new account in the chart of accounts.
- List Accounts
Retrieve a paginated list of chart of accounts entries for the business.
- Get Account
Retrieve a single chart of accounts entry by UUID.
Clients
- Create Client
Create a new client in the account.
- List Clients
Retrieve a paginated list of clients for the account.
- Get Client
Retrieve a single client by ID.
- Update Client
Update an existing client's information.
- Delete Client
Archive (soft-delete) a client by setting their visibility state to deleted.
Credits
- Create Credit
Create a new credit note for a client.
- List Credits
Retrieve a paginated list of credit notes for the account.
- Get Credit
Retrieve a single credit note by ID.
- Update Credit
Update an existing credit note.
- Delete Credit
Archive (soft-delete) a credit note by setting its visibility state to deleted.
Estimates
- Create Estimate
Create a new estimate for a client.
- List Estimates
Retrieve a paginated list of estimates for the account.
- Get Estimate
Retrieve a single estimate by ID.
- Update Estimate
Update an existing estimate's details.
- Delete Estimate
Archive (soft-delete) an estimate by setting its visibility state to deleted.
Expenses
- Create Expense
Create a new expense record.
- List Expenses
Retrieve a paginated list of expenses for the account.
- Get Expense
Retrieve a single expense record by ID.
- Update Expense
Update an existing expense record.
- Delete Expense
Archive (soft-delete) an expense by setting its visibility state to deleted.
Invoices
- Create Invoice
Create a new invoice for a client.
- List Invoices
Retrieve a paginated list of invoices for the account.
- Get Invoice
Retrieve a single invoice by ID.
- Update Invoice
Update an existing invoice's details.
- Delete Invoice
Archive (soft-delete) an invoice by setting its visibility state to deleted.
Items
- Create Item
Create a new item (product or service) for the account.
- List Items
Retrieve a paginated list of items (products and services) for the account.
- Get Item
Retrieve a single item by ID.
- Update Item
Update an existing item's details.
- Delete Item
Archive (soft-delete) an item by setting its visibility state to deleted.
Journal Entrys
- Create Journal Entry
Create a new adjustment journal entry.
- Update Journal Entry
Update an existing adjustment journal entry.
Other Incomes
- Create Other Income
Create a new other income entry.
- List Other Income
Retrieve a paginated list of other income entries for the account.
- Get Other Income
Retrieve a single other income entry by ID.
- Update Other Income
Update an existing other income entry.
- Delete Other Income
Delete an other income entry.
Payments
- Create Payment
Record a new payment applied to an invoice.
- List Payments
Retrieve a paginated list of payments applied to invoices.
- Get Payment
Retrieve a single payment record by ID.
- Update Payment
Update an existing payment record.
- Delete Payment
Archive (soft-delete) a payment by setting its visibility state to deleted.
Projects
- Create Project
Create a new project for a client.
- List Projects
Retrieve a paginated list of projects for the business.
- Get Project
Retrieve a single project by ID.
- Update Project
Update an existing project's details.
- Delete Project
Permanently delete a project.
Services
- Create Service
Create a new service for the business.
- List Services
Retrieve a paginated list of services for the business.
- Get Service
Retrieve a single service by ID.
Service Rates
- Create Service Rate
Set the hourly rate for a service.
- Get Service Rate
Retrieve the hourly rate for a service.
- Update Service Rate
Update the hourly rate for a service.
Staffs
- List Staff
Retrieve a paginated list of staff members for the account.
- Get Staff
Retrieve a single staff member by ID.
Taxs
- Create Tax
Create a new tax definition for the account.
- Get Tax
Retrieve a single tax definition by ID.
- Update Tax
Update an existing tax definition.
- Delete Tax
Permanently delete a tax definition.
Team Members
- List Team Members
Retrieve a paginated list of team members for the business.
- Get Team Member
Retrieve a single team member by UUID.
Time Entrys
- Create Time Entry
Log a new time entry for a project or client.
- Get Time Entry
Retrieve a single time entry by ID.
- Update Time Entry
Update an existing time entry's details.
- Delete Time Entry
Permanently delete a time entry.
Other (12)
- List Expense Categories
Retrieve a paginated list of expense categories for the account.
- Get Expense Category
Retrieve a single expense category by ID.
- Get Current User
Retrieve the authenticated user's identity, profile, and business memberships.
- List Journal Entries
Retrieve a paginated list of adjustment journal entries.
- List Journal Entries By Account
Retrieve journal entries for a specific account.
- Get Account Aging Report
Retrieve the account aging report showing overdue invoice amounts by time interval.
- Get Balance Sheet Report
Retrieve the balance sheet report showing assets, liabilities, and equity.
- Get Cash Flow Report
Retrieve the cash flow report showing operating, investing, and financing activities.
- Get Expense Details Report
Retrieve the expense details report showing all expenses grouped by category, client, vendor, or author.
- Get General Ledger Report
Retrieve the general ledger report showing all account transactions with debits and credits.
- List Taxes
Retrieve a list of tax definitions for the account.
- List Time Entries
Retrieve a paginated list of time entries for the business.
Set Up Your FreshBooks MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to FreshBooks in under 10 lines of code.
MCP Clients
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}More Accounting MCP Servers
Chargify (Maxio)
118+ actions
Zoho Books
104+ actions
QuickBooks Online
95+ actions
Xero
71+ actions
Microsoft Dynamics 365 Business Central
70+ actions
Fastbill
57+ actions
Plaid
30+ actions
FreshBooks MCP Server Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
FreshBooks MCP Server FAQ
FreshBooks MCP server vs direct API integration — what's the difference?
A FreshBooks MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software — backend code calling FreshBooks. A FreshBooks MCP server is for AI agents — MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI — discovering and calling FreshBooks at runtime. StackOne provides both.
How does FreshBooks authentication work for AI agents?
FreshBooks authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK — you get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own FreshBooks account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via
origin_owner_id.Are FreshBooks MCP tools vulnerable to prompt injection?
Yes — FreshBooks MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content — documents, messages, tickets, records, or free-text fields — is a potential vector. StackOne Defender scans every tool response before it enters the agent's context — regex patterns in ~1ms, then a MiniLM classifier in ~4ms. 88.7% accuracy, CPU-only.
What is the context bloat of a FreshBooks agent and how do I avoid it?
Context bloat happens when FreshBooks tool schemas and API responses eat your FreshBooks agent's memory, preventing it from reasoning effectively. A single FreshBooks query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery and Code Mode reduce context bloat — loading only relevant tools per query and keeping raw responses out of the agent's context.
Can I limit which actions my FreshBooks agent can access?
Yes — you can limit which actions your FreshBooks agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my FreshBooks MCP server?
Yes — you can create custom agent actions for your FreshBooks MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research FreshBooks's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a FreshBooks MCP server?
Skip a FreshBooks MCP server if your integration is purely software-to-software — direct FreshBooks API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call FreshBooks actions at runtime.
What AI frameworks and AI clients does the StackOne FreshBooks MCP server support?
The StackOne FreshBooks MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.