)
Connect Ramp MCP to your AI agents, securely.
One secured endpoint for every Ramp call your AI agents make, scoped per user, inspected, and logged.Try Ramp MCP now
What your agents can ask once Ramp MCP is connected.
Select the tools your AI agents can call
220 tools from the Ramp MCP schema.
Showing 220 tools
What Ramp MCP exposes
Ramp MCP groups its 220 tools into 8 categories, each with a suggested starting policy.
All 220 tools as JSON, ready to paste.
| Category | Covers | Access | Suggested policy |
|---|---|---|---|
| Procurement & Sourcing | Unified requests and purchase orders: searching, reviewing and approving requests, drafting and submitting procurement requests, closing and reopening POs; sourcing events and RFX questionnaires from draft to publish, vendor invitations, grading, award and hand-off to procurement | Read / Write | The largest group and the one that reaches outside the company. ramp_publish_rfx sends the questionnaire to every active vendor contact and ramp_revoke_rfx_vendor_invitation is documented as irreversible, so both belong behind approval. ramp_approve_or_reject_request approves fund, PO and procurement requests, which is spend authority rather than data entry |
| Expenses & Reimbursements | Card transactions and out-of-pocket reimbursements: searching and reading transactions, missing items, receipts and suggested memos, editing and splitting transactions, uploading receipts, creating, editing, submitting, approving and deleting reimbursements, mileage and per diem estimates | Read / Write | Most of this is the everyday expense chore and fine to allow for the acting user. Approving a reimbursement leads to an employee payout and ramp_delete_reimbursement removes the record, so keep those two behind human approval and log the reimbursement UUID |
| Cards & Funds | Cards and funds (spend allocations): listing and reading funds and cards, locking and unlocking, activating, sharing and ownership changes, merchant and category restrictions, spend intervals, limit increases, issuing one-off funds, spend programs, decline explanations, agent card credentials, Stripe MPP credentials and Agent Wallet policies | Read / Write | This is where spending power is created. ramp_issue_one_off_funds is documented as bypassing approval flows, ramp_limit_increase and ramp_update_transaction_amount_limit raise ceilings, and ramp_get_agent_card_creds and ramp_mpp_creds hand back payment credentials. Allow the reads, gate every tool that issues funds, raises limits or returns credentials |
| Accounting & Analytics | Accounting sync status and failures, tracking categories, marking objects ready to sync, ERP connection status, read-only analyst SQL and its catalog, semantic reporting datasets and queries, AI token and AI vendor spend, and audit log events | Read / Write | Almost entirely read-only, but it is the broadest view of company finances in the server: ramp_execute_analyst_query and ramp_reporting_query aggregate across the business, and ramp_audit_logs_list exposes who did what. MCP caps a query response at 100 rows. ramp_mark_ready_to_sync is the one write and pushes records toward the ERP |
| Travel | Trips, bookings and traveler profiles: searching flights and hotels, hotel rates, booking, modifying and cancelling flights and hotels, travel requests, loyalty programs, preferences and traveler identity and travel document details | Read / Write | Searches are harmless; the submit tools spend company money and the cancellation tools can forfeit it. Keep ramp_submit_flight_booking, ramp_submit_hotel_booking and the modification and cancellation tools behind confirmation. ramp_update_traveler_profile writes travel document numbers, which are personal data |
| Bills & Vendors | Bills and vendors: listing, searching and reading bills, history, invoices and metrics, drafting, updating and submitting bills, approving or rejecting bills, reminding approvers, creating payees, vendor holds and vendor agreements | Read / Write | Drafting and submitting do not pay anything, as the docs state. ramp_approve_or_reject_bill does: a bill that becomes fully approved with payment details and a date may proceed to payment automatically, so it needs human approval. Some actions need step-up verification the agent cannot complete and return a link for a person instead |
| Banking & Treasury | Ramp Checking, Treasury, investment and managed portfolio balances and history, bank and wallet accounts, statements and statement downloads, card statement balance and schedule, manual bank accounts, fund requests, and the x402 stablecoin wallet | Read / Write | Balances and statements are read-only but sensitive. The x402 tools move real money: ramp_pay_with_x402 pays from the stablecoin balance and ramp_fund_x402_wallet and ramp_withdraw_x402_wallet transfer between it and Ramp Checking. Do not expose those to an agent that only needs reporting |
| Organization & Policy | Users, departments, org chart, custom roles, business entities and advisor access; expense policy questions, policies and their workflows, policy simulation, submission requirements, Help Center search, the attention feed, comments and feedback | Read / Write | Mostly reads that tell an agent who people are and how policy routes approvals. The writes are small: creating and renaming departments, posting comments on Ramp objects and reporting missing capabilities. ramp_list_users returns the whole directory, so scope it where an agent only needs its own user |
Connect Ramp MCP to your AI agent
Four steps, under ten minutes.
- 01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
- 02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
- 03
Connect Ramp
Find Ramp in the tool list and connect it.
- 04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.
Permissions down to the single tool
You do not allow Ramp MCP or block it. You allow the exact tools each agent can call, one by one.
| Ramp MCP | 220 TOOLS AVAILABLE |
|---|---|
| Code review agent | 4 tools, read only |
| Issue triage bot | 9 tools |
| Platform team assistant | all 220 tools |
- Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
- Default denyA tool you have not enabled is never exposed to the agent.
- Approval on writesTools that change or delete things can require a human to confirm.
Is Ramp MCP secure?
One endpoint instead of raw credentials. Every call is checked against policy and logged.
| AI agentsConnect through your MCP client configuration. | NeuralTrustApply controls based on your configuration. | Ramp MCP220 documented tools in Ramp's generated Agent Tools reference, shared by Ramp MCP and the Ramp CLI. The hosted server is at mcp.ramp.com, with a sample-data server at demo-mcp.ramp.com. The connection acts as the Ramp user who completes browser authorization, runtime access follows that user's permissions, and custom clients and gateways need their exact redirect URI allowlisted by Ramp. |
|---|---|---|
| Coding assistants | Connection & credentialsper user | Procurement & Sourcing34 tools |
| Internal copilots | Tool access policiesdeny by default | Expenses & Reimbursements34 tools |
| Workflow automations | Request & response inspectioninline | Cards & Funds33 tools |
| Compatible MCP clients | Activity monitoringalerts and logs | All other tools119 tools |
Use Ramp MCP with any AI agent framework
Setup guides for the tools your team already uses.
Claude CodeAdd Ramp MCP to Claude Code from the terminal
CursorUse Ramp MCP tools inside Cursor's agent
CodexConnect Ramp MCP to the OpenAI Codex CLI
WindsurfGive Windsurf's Cascade access to Ramp MCP
Gemini CLICall Ramp MCP from Gemini CLI prompts
Google AntigravityLet Antigravity agents work with Ramp MCP
GitHub CopilotUse Ramp MCP in Copilot agent mode
Claude EnterpriseRoll out Ramp MCP across your Claude workspace
Microsoft Copilot StudioAdd Ramp MCP as a tool for Copilot Studio agents
Open WebUIBring Ramp MCP tools into Open WebUI chats
LangChainLoad Ramp MCP tools into LangChain agents
HaystackPlug Ramp MCP into Haystack agent pipelines
Strands AgentsGive Strands agents Ramp MCP tools
Vercel AI SDKCall Ramp MCP from Vercel AI SDK apps
n8nUse Ramp MCP in n8n AI agent workflows
Common questions about running Ramp MCP through TrustGate.
Other MCP servers
More servers from the catalog.
Brex
Securely connect your AI agents to Brex through TrustGate: expenses, cards, spend limits, banking, bills, vendors, accounting and travel, scoped per agent and logged.
43 toolsViewMercury
Securely connect your AI agents to Mercury through TrustGate: accounts, balances, transactions, cards, recipients, invoicing, treasury and approval-gated payment requests, scoped per agent and logged.
35 toolsView)
NetSuite
Securely connect your AI agents to NetSuite through TrustGate: records, SuiteQL queries, saved searches and reports from the MCP Standard Tools SuiteApp, scoped per agent and logged.
25 toolsViewStripe
Securely connect your AI agents to Stripe through TrustGate: Stripe API reads and writes, analytics, balances, Treasury transfers and documentation search, scoped per agent and logged.
15 toolsView
Connect Ramp MCP instantly
Pick the tools, point your agent at TrustGate, and Ramp MCP is live: scoped, inspected, logged.