The server itself exposes 43 tools, and some of them can write to your Brex account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Brex.

How is this different from connecting Brex MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Brex MCP API changes?

We track the Brex MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Brex tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Brex?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Brex MCP server myself?

No. TrustGate connects to the Brex MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Brex directly.

Connect Brex MCP to your AI agents, securely.

One secured endpoint for every Brex call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Brex MCP now

What your agents can ask once Brex MCP is connected.

Select the tools your AI agents can call

43 tools from the Brex MCP schema.

Showing 43 tools

get_user_myselfreadGets the current authenticated user.
get_user_by_idreadGets a user by their unique ID.
list_users_by_name_or_emailreadLists users by name or email.
list_usersreadLists users with optional filtering and pagination.
list_cost_centersreadLists cost centers.
list_departmentsreadLists departments.
list_locationsreadLists locations.
list_legal_entitiesreadLists legal entities.
list_titlesreadLists employee titles.
list_rolesreadLists Brex account roles.
list_expensesreadLists expenses with comprehensive filtering. Requires the view expenses capability.
get_expense_by_idreadGets an expense by its ID. Requires the view expenses capability.
query_expense_analyticsreadAsks high-level company spend questions. Requires account admin or card admin.
update_expense_memowriteUpdates the memo for multiple expenses in bulk.
upload_card_expense_receipt_from_urlshigh riskUploads receipts to a card expense by downloading them from provided URLs. The server fetches whatever those URLs return.
replace_attendees_for_card_expensewriteUpdates the attendees recorded on a card expense.
assign_limit_for_card_expenseshigh riskAssigns one or more card expenses to a spend limit, changing how spend is attributed and budgeted.
get_reimbursement_payout_datereadGets the expected payout date for a reimbursement expense.
start_expense_downloadreadStarts an asynchronous expense download job. Requires the view expenses capability.
get_expense_download_resultreadChecks the status of an expense download job and gets the download URL when ready.
list_cardsreadLists cards with comprehensive filtering.
get_card_by_idreadGets a card by its ID. Requires the view cards and limits capability.
get_expense_policyreadGets expense policy information for a limit as structured, validatable content. Requires the view policy capability.
list_my_limitsreadGets all spend limits that apply to the current user, with pagination.
get_reward_pointsreadGets the Brex reward points balance and redemption eligibility for the account. Requires the view rewards capability.
list_business_accountsreadLists business bank accounts. Requires the view accounts and balances capability.
get_business_accountreadGets a business bank account by ID. Requires the view accounts and balances capability.
list_banking_transactionsreadLists banking transactions with filtering. Requires the view accounts and balances capability.
get_banking_transactionreadGets a banking transaction by ID. Requires the view accounts and balances capability.
list_billsreadLists bills with filtering. Requires the view bills and vendors capability.
get_bill_by_idreadGets a bill by its ID. Requires the view bills and vendors capability.
get_vendor_by_idreadGets a vendor by ID. Requires the view bills and vendors capability.
list_vendorsreadGets all vendors for the current authenticated user. Requires the view all bills and vendors capability.
get_active_integrationreadGets the active accounting integration. Requires the manage accounting integration capability.
list_accounting_recordsreadLists accounting records. Requires the view transactions capability.
list_gl_accountsreadLists general ledger accounts. Requires the manage mappings, fields and rules capability.
list_tripsreadLists travel trips across the company with filtering, sorting and pagination. Requires the view travel capability.
list_bookingsreadLists travel bookings across the company with filtering, sorting and pagination. Requires the view travel capability.
list_group_eventsreadLists group travel events such as company offsites and conferences. Requires the view travel capability.
list_merchantsreadSearches card merchants by name.
list_merchant_categoriesreadLists merchant categories such as Restaurants, Software and Travel.
list_expense_categoriesreadLists all available expense categories, known as expense types in Brex, for filtering expenses.
submit_feedbackwriteSubmits feedback about the Brex API or MCP tools to the Brex product team on behalf of the user.

What Brex MCP exposes

Brex MCP groups its 43 tools into 8 categories, each with a suggested starting policy.

All 43 tools as JSON, ready to paste.

Category	Covers	Access	Suggested policy
Users & Org	The authenticated user, user lookup, cost centres, departments, locations, legal entities, titles and roles	Read	Available to all users; still personal data, so limit organization-wide listing
Expenses	Expense listing and detail, spend analytics, memos, receipts, attendees, limit assignment and bulk downloads	Read / Write	Spend analytics requires an admin capability; approve any expense write
Cards & Limits	Cards, card detail, expense policy, the limits applying to the user and reward points	Read	Card detail needs the view cards and limits capability
Banking	Business bank accounts and the transactions on them	Read	Requires the view accounts and balances capability; treat as confidential
Bills & Vendors	Bills, bill detail and the vendors behind them	Read	Requires the view bills and vendors capability
Accounting	The active accounting integration, accounting records and general ledger accounts	Read	GL access needs the manage mappings capability; limit to finance
Travel	Trips, bookings and group travel events across the company	Read	Requires the view travel capability; itineraries are personal data
Reference & Feedback	Merchants, merchant categories, expense categories and product feedback	Read / Write	Reference lookups are safe to allow broadly

Connect Brex MCP to your AI agent

Four steps, under ten minutes.

01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
03
Connect Brex
Find Brex in the tool list and connect it.
04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.

Permissions down to the single tool

You do not allow Brex MCP or block it. You allow the exact tools each agent can call, one by one.

Brex MCP	43 TOOLS AVAILABLE
Code review agent	4 tools, read only
Issue triage bot	9 tools
Platform team assistant	all 43 tools

Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
Default denyA tool you have not enabled is never exposed to the agent.
Approval on writesTools that change or delete things can require a human to confirm.

Is Brex MCP secure?

One endpoint instead of raw credentials. Every call is checked against policy and logged.

AI agentsConnect through your MCP client configuration.	NeuralTrustApply controls based on your configuration.	Brex MCP43 documented tools.
Coding assistants	Connection & credentialsper user	Users & Org10 tools
Internal copilots	Tool access policiesdeny by default	Expenses10 tools
Workflow automations	Request & response inspectioninline	Cards & Limits5 tools
Compatible MCP clients	Activity monitoringalerts and logs	All other tools18 tools