How is this different from connecting Mercury MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Mercury MCP API changes?

We track the Mercury MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Mercury tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Mercury?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Mercury MCP server myself?

No. TrustGate connects to the Mercury MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Mercury directly.

Connect Mercury MCP to your AI agents, securely.

Q: Is Mercury MCP secure?

The server itself exposes 35 tools, and some of them can write to your Mercury account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Mercury.

One secured endpoint for every Mercury call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Mercury MCP now

What your agents can ask once Mercury MCP is connected.

Select the tools your AI agents can call

35 tools from the Mercury MCP schema.

Showing 35 tools

requestSendMoneyhigh riskCreates a payment request to an existing recipient. Requires the transactions:request scope and approval in Mercury before money is sent.
requestTransferMoneyhigh riskCreates a transfer request between the organization's own Mercury accounts. Requires the transfers:request scope and approval in Mercury before money moves.
listSendMoneyApprovalRequestsreadLists send money approval requests for the organization, filterable by account and status.
createCategorywriteCreates a custom expense category immediately. Requires the categories:create scope. No separate approval in Mercury.
editCategorywriteUpdates a custom expense category immediately. Requires the categories:edit scope. No separate approval in Mercury.
updateTransactionwriteUpdates or clears an existing transaction's note or category immediately. Requires the transactions:update scope. Can overwrite existing values and does not wait in the approval queue.
listTransactionsreadLists transactions with filtering by date range, status and category, and cursor-based pagination handled automatically for complete results.
getTransactionreadRetrieves a specific transaction using account ID and transaction ID.
getTransactionByIdreadRetrieves a single transaction by its ID, including attachments, check images and related metadata.
listCategoriesreadLists the organization's custom expense categories, which are distinct from Mercury's built-in ones.
getAccountreadRetrieves the details of a specific Mercury account by its account ID.
getAccountsreadRetrieves the list of all Mercury accounts for the organization.
getAccountStatementsreadRetrieves monthly statements for a specific account, with date range filtering.
listCreditreadLists all credit accounts for the organization.
getTreasuryreadRetrieves all treasury accounts associated with the authenticated organization.
getTreasuryTransactionsreadRetrieves paginated treasury transactions for a specific treasury account.
getAccountCardsreadRetrieves all debit and credit cards associated with a specific account.
getCardreadRetrieves the details of a specific card by its ID.
listCardsreadRetrieves a paginated list of cards.
getRecipientreadRetrieves the details of a specific recipient by ID.
getRecipientsreadRetrieves the list of all recipients.
listRecipientsAttachmentsreadLists all recipient tax form attachments across every recipient in the organization.
getCustomerreadRetrieves the details of a specific customer by their ID.
listCustomersreadRetrieves a paginated list of customers with cursor-based pagination.
getInvoicereadRetrieves the details of an invoice by its ID.
listInvoicesreadRetrieves a paginated list of invoices with cursor-based pagination.
listInvoiceAttachmentsreadLists all attachments for a specific invoice.
getAttachmentreadRetrieves attachment details, including a download URL.
getOrganizationreadRetrieves information about the organization including EIN, legal business name and DBAs.
getUserreadRetrieves the details of a specific user by their user ID, including their role.
getUsersreadRetrieves the list of all users for the organization.
getWebhookreadRetrieves the details of a specific webhook endpoint by ID, including its subscribed events.
getWebhooksreadRetrieves the list of all webhook endpoints for the organization, filterable by status.
getSafeRequestreadRetrieves a specific SAFE request by its ID, including its terms.
getSafeRequestsreadRetrieves all SAFE (Simple Agreement for Future Equity) requests for the organization.

What Mercury MCP exposes

Mercury MCP groups its 35 tools into 9 categories, each with a suggested starting policy.

All 35 tools as JSON, ready to paste.

Category	Covers	Access	Suggested policy
Transactions & Categories	Transactions by ID, transactions with attachments and check images, filtered transaction listing with cursor pagination, custom expense categories, and creating, editing and applying them	Read / Write	These three write tools apply immediately with no approval queue, and updateTransaction can overwrite an existing note or category; require approval at the gateway instead
Accounts & Treasury	Account details and listings, monthly statements with date filtering, credit accounts, and treasury accounts and their transactions	Read	Read-only balance and statement data; business-specific tools only appear on eligible business accounts
Invoicing	Customers and customer listings, invoices and invoice listings, invoice attachments, and attachment details with download URLs	Read	getAttachment returns a download URL; the write tools cannot create invoices, so this surface is read-only
Cards	Debit and credit cards on an account, a single card by ID and a paginated card listing	Read	Read-only; the MCP write tools explicitly cannot issue or manage cards
Recipients	A recipient by ID, all recipients, and recipient tax form attachments across the organization	Read	Recipient records and tax forms carry counterparty banking details; restrict and log. Payment requests can only target recipients that already exist
Payments & Transfers	Creating a payment request to an existing recipient, creating an internal transfer request between Mercury accounts, and listing send money approval requests	Read / Write	Both money tools stop at Mercury's approval queue; check for an existing request before creating another after an uncertain result
Organization & Users	Organization information including EIN, legal business name and DBAs, plus users and their roles	Read	getOrganization exposes business identifiers; restrict it
Webhooks	Webhook endpoints by ID and the full list, filterable by status	Read	Read-only; webhooks cannot be created or changed through the MCP server
SAFEs	Simple Agreement for Future Equity requests, individually and as a list	Read	SAFE terms are sensitive corporate finance data; restrict to finance roles

Connect Mercury MCP to your AI agent

Four steps, under ten minutes.

01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
03
Connect Mercury
Find Mercury in the tool list and connect it.
04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.

Permissions down to the single tool

You do not allow Mercury MCP or block it. You allow the exact tools each agent can call, one by one.

Mercury MCP	35 TOOLS AVAILABLE
Code review agent	4 tools, read only
Issue triage bot	9 tools
Platform team assistant	all 35 tools

Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
Default denyA tool you have not enabled is never exposed to the agent.
Approval on writesTools that change or delete things can require a human to confirm.

Is Mercury MCP secure?

One endpoint instead of raw credentials. Every call is checked against policy and logged.

AI agentsConnect through your MCP client configuration.	NeuralTrustApply controls based on your configuration.	Mercury MCP35 tools in Mercury's published table: 5 write and 30 read. Available tools also depend on account type, Mercury permissions and the OAuth scopes granted.
Coding assistants	Connection & credentialsper user	Transactions & Categories7 tools
Internal copilots	Tool access policiesdeny by default	Accounts & Treasury6 tools
Workflow automations	Request & response inspectioninline	Invoicing6 tools
Compatible MCP clients	Activity monitoringalerts and logs	All other tools16 tools