)
Connect Holded MCP to your AI agents, securely.
One secured endpoint for every Holded call your AI agents make, scoped per user, inspected, and logged.Try Holded MCP now
What your agents can ask once Holded MCP is connected.
Select the tools your AI agents can call
360 tools from the Holded MCP schema.
Showing 360 tools
What Holded MCP exposes
Holded MCP groups its 360 tools into 11 categories, each with a suggested starting policy.
All 360 tools as JSON, ready to paste.
| Category | Covers | Access | Suggested policy |
|---|---|---|---|
| Sales | Invoices and recurring invoices, sales receipts, receipt notes, estimates, proformas, credit notes, services, sales channels and numbering series | Read / Write | Sending a document emails it to the customer; bulk operations act on many records at once |
| Inventory | Products and stock, price lists, warehouses, sales orders, waybills, purchase orders, purchase shipments, document conversion and production orders | Read / Write | Shipping and receiving move real stock; approve them |
| Team & HR | Employees and contracts, time tracking and clock in/out, salary records, payslips and time off | Read / Write | Payroll and salary data are the most sensitive records in the account |
| Accounting | Chart of accounts, ledger entries, expense accounts, payments, purchases, purchase refunds and taxes | Read / Write | Ledger entries are the accounting record of truth; approve any write |
| Treasury | Banking accounts and movements, reconciliation, payment methods, remittances, invoicing forecasts and business plan | Read / Write | Reconciliation changes how money is matched to documents |
| Contacts | Contacts and their attachments, the client portal link, contact groups and tags | Read / Write | Contact records are personal data; bulk delete is irreversible |
| CRM | Funnels, leads, lead notes, tasks, dates and pipeline stages | Read / Write | Stage changes drive reporting and forecasting |
| Projects | Projects and their summaries, tasks and project time tracking | Read / Write | Time entries feed billing; audit changes |
| Calendar | Events and bookings, booking locations and available slots | Read / Write | Bookings reach real customers; approve them |
| Inbox | Incoming documents: upload, attach, convert into a purchase document, preview and download | Read / Write | Converting an incoming document creates an accounting record |
| Developers | API usage metering and webhook management | Read / Write | Webhooks route account data to external endpoints; approve changes |
Connect Holded MCP to your AI agent
Four steps, under ten minutes.
- 01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
- 02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
- 03
Connect Holded
Find Holded in the tool list and connect it.
- 04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.
Permissions down to the single tool
You do not allow Holded MCP or block it. You allow the exact tools each agent can call, one by one.
| Holded MCP | 360 TOOLS AVAILABLE |
|---|---|
| Code review agent | 4 tools, read only |
| Issue triage bot | 9 tools |
| Platform team assistant | all 360 tools |
- Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
- Default denyA tool you have not enabled is never exposed to the agent.
- Approval on writesTools that change or delete things can require a human to confirm.
Is Holded MCP secure?
One endpoint instead of raw credentials. Every call is checked against policy and logged.
| AI agentsConnect through your MCP client configuration. | NeuralTrustApply controls based on your configuration. | Holded MCP360 documented tools: 151 read-only and 209 write. |
|---|---|---|
| Coding assistants | Connection & credentialsper user | Sales104 tools |
| Internal copilots | Tool access policiesdeny by default | Inventory78 tools |
| Workflow automations | Request & response inspectioninline | Team & HR37 tools |
| Compatible MCP clients | Activity monitoringalerts and logs | All other tools141 tools |
Use Holded MCP with any AI agent framework
Setup guides for the tools your team already uses.
Claude CodeAdd Holded MCP to Claude Code from the terminal
CursorUse Holded MCP tools inside Cursor's agent
CodexConnect Holded MCP to the OpenAI Codex CLI
WindsurfGive Windsurf's Cascade access to Holded MCP
Gemini CLICall Holded MCP from Gemini CLI prompts
Google AntigravityLet Antigravity agents work with Holded MCP
GitHub CopilotUse Holded MCP in Copilot agent mode
Claude EnterpriseRoll out Holded MCP across your Claude workspace
Microsoft Copilot StudioAdd Holded MCP as a tool for Copilot Studio agents
Open WebUIBring Holded MCP tools into Open WebUI chats
LangChainLoad Holded MCP tools into LangChain agents
HaystackPlug Holded MCP into Haystack agent pipelines
Strands AgentsGive Strands agents Holded MCP tools
Vercel AI SDKCall Holded MCP from Vercel AI SDK apps
n8nUse Holded MCP in n8n AI agent workflows
Common questions about running Holded MCP through TrustGate.
Other MCP servers
More servers from the catalog.
)
NetSuite
Securely connect your AI agents to NetSuite through TrustGate: records, SuiteQL queries, saved searches and reports from the MCP Standard Tools SuiteApp, scoped per agent and logged.
25 toolsViewBrex
Securely connect your AI agents to Brex through TrustGate: expenses, cards, spend limits, banking, bills, vendors, accounting and travel, scoped per agent and logged.
43 toolsViewStripe
Securely connect your AI agents to Stripe through TrustGate: Stripe API reads and writes, analytics, balances, Treasury transfers and documentation search, scoped per agent and logged.
15 toolsViewShopify
Securely connect your AI agents to Shopify through TrustGate: developer documentation search, API guidance and GraphQL, component and Liquid validation, scoped per agent and logged.
8 toolsView
Connect Holded MCP instantly
Pick the tools, point your agent at TrustGate, and Holded MCP is live: scoped, inspected, logged.