Name: Mercoa
Author: usefulapi

Mercoa MCP

Query and manage Mercoa AP/AR bill-pay: entities, invoices, transactions and payment methods.

Tool-list grade A Remote · Streamable HTTP No auth needed 17 tools v1.11.1

No reviews yet by usefulapiGitHub The publisher’s own endpoint — this marketplace is not in the path

93/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Query and manage Mercoa AP/AR bill-pay: entities, invoices, transactions and payment methods.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http mercoa-mcp https://mercoa.usefulapi.io/mcp

# 2 — ask your agent for something these tools do
#   mercoa_find_entities, mercoa_get_entity, mercoa_get_entity_events and 14 more

Mercoa costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

usefulapi334 servers

24 categories

All 334 servers

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Find/search entities (buyers, vendors, payors, payees). Use to look up counterparties by name/email/foreignId or list all. GET /entity.

Parameter	Type	Required	Notes
search	string	no	Search by name, email, emailTo, entity ID, or foreign ID (partial matches).
isCustomer	boolean	no	If true, only entities with a direct relationship to your organization.
isPayor	boolean	no	Filter entities marked as payors.
isPayee	boolean	no	Filter entities marked as payees.
foreignId		no	Your system's ID(s) for the entity.
status		no	Entity status filter (e.g. verified, pending).
paymentMethods	boolean	no	If true, include payment methods in the response.
returnMetadata		no	Metadata key(s) to include in the response.
limit	integer	no	Max entities to return (1-100, default 10).
startingAfter	string	no	Entity ID cursor for pagination.

Get a single entity by ID (or foreign ID). GET /entity/{entityId}.

Parameter	Type	Required	Notes
entityId	string	yes	Entity ID (e.g. ent_...) or foreign ID.

Get the event/audit log for an entity. GET /entity/{entityId}/events.

Parameter	Type	Required	Notes
entityId	string	yes	Entity ID or foreign ID.
startDate	string	no	Start date filter (ISO 8601).
endDate	string	no	End date filter (ISO 8601).
limit	integer	no	Max events to return (1-100).
startingAfter	string	no	Event ID cursor for pagination.

Get aggregate invoice metrics (totals/counts, grouped by currency) for an entity's payables/receivables — for AP/AR dashboards and aging. GET /entity/{entityId}/invoice-metrics.

Parameter	Type	Required	Notes
entityId	string	yes	Entity ID or foreign ID.
search	string	no	Search by vendor name, invoice number, check number, or amount.
excludePayables	boolean	no	Only return receivables (exclude payables).
excludeReceivables	boolean	no	Only return payables (exclude receivables).
returnByDate	string	no	Group metrics by date, e.g. CREATION_DATE or DUE_DATE.
returnByDateFrequency	string	no	Frequency for date grouping (e.g. DAILY, MONTHLY).
groupBy		no	Additional grouping (e.g. by status).
payerId		no	Filter by payer ID(s).
vendorId		no	Filter by vendor ID(s).
approverId		no	Filter by assigned approver user ID(s).
invoiceId		no	Filter by invoice ID(s) or foreign ID(s).
status		no	Invoice status filter (e.g. NEW, SCHEDULED, PAID).
startDate	string	no	Start date filter (ISO 8601).
endDate	string	no	End date filter (ISO 8601).
dateType	string	no	Date type to filter by (e.g. CREATED_AT, DUE_DATE).
currency		no	Currency code(s) to filter on, e.g. USD.

List an entity's payment methods (bank accounts, cards, check, etc.). GET /entity/{entityId}/paymentMethods.

Parameter	Type	Required	Notes
entityId	string	yes	Entity ID or foreign ID.
type	string	no	Filter by payment method type (e.g. bankAccount, card, check).

Get a single payment method for an entity. GET /entity/{entityId}/paymentMethod/{paymentMethodId}.

Parameter	Type	Required	Notes
entityId	string	yes	Entity ID or foreign ID.
paymentMethodId	string	yes	Payment method ID (e.g. pm_...).

List the users belonging to an entity (approvers, admins, etc.). GET /entity/{entityId}/users.

Parameter	Type	Required	Notes
entityId	string	yes	Entity ID or foreign ID.

Find/search invoices (bills) across payers and vendors. Filter by status, entity, date, approver and more. GET /invoices (plural list endpoint).

Parameter	Type	Required	Notes
entityId		no	Filter by entity (payer or vendor) ID(s) or foreign ID(s).
entityGroupId	string	no	Filter by entity group ID.
status		no	Invoice status filter (e.g. DRAFT, NEW, APPROVED, SCHEDULED, PAID).
payerId		no	Filter by payer ID(s) or foreign ID(s).
vendorId		no	Filter by vendor ID(s) or foreign ID(s).
invoiceId		no	Filter by invoice ID(s) or foreign ID(s).
search	string	no	Search by vendor name, invoice number, check number, or amount.
startDate	string	no	Start date filter (ISO 8601).
endDate	string	no	End date filter (ISO 8601).
dateType	string	no	Date type to filter by (e.g. CREATED_AT, DUE_DATE).
orderBy	string	no	Field to order by (e.g. CREATED_AT, AMOUNT, DUE_DATE).
orderDirection	string	no	asc or desc.
paymentType		no	Filter by payment type (e.g. recurring).
approverId		no	Filter by assigned approver user ID(s).
approverAction		no	Filter by approver action (use with approverId), e.g. APPROVE.
creatorUserId		no	Filter by the user ID(s) that created the invoice.
invoiceTemplateId		no	Filter by invoice template ID(s).
returnPayerMetadata	boolean	no	Include payer metadata in the response.
returnVendorMetadata	boolean	no	Include vendor metadata in the response.
returnPaymentTiming	boolean	no	Include payment timing in the response.

Get a single invoice (bill) by ID. GET /invoice/{invoiceId}.

Parameter	Type	Required	Notes
invoiceId	string	yes	Invoice ID (e.g. in_...) or foreign ID.

Get the event/audit log for an invoice (status changes, approvals, payments). GET /invoice/{invoiceId}/events.

Parameter	Type	Required	Notes
invoiceId	string	yes	Invoice ID or foreign ID.
startDate	string	no	Start date filter (ISO 8601).
endDate	string	no	End date filter (ISO 8601).
limit	integer	no	Max events to return (1-100).
startingAfter	string	no	Event ID cursor for pagination.

List/search payment transactions. Filter by entity, invoice, status, type and date. GET /transactions.

Parameter	Type	Required	Notes
entityId		no	Filter by entity ID(s) or foreign ID(s).
entityGroupId	string	no	Filter by entity group ID.
payerId		no	Filter by payer ID(s).
vendorId		no	Filter by vendor ID(s).
invoiceId		no	Filter by invoice ID(s) or foreign ID(s).
transactionId		no	Filter by transaction ID(s).
status		no	Transaction status filter.
transactionType		no	Filter by transaction type.
search	string	no	Search by vendor name, invoice number, check number, or amount.
startDate	string	no	CREATED_AT start date filter (ISO 8601).
endDate	string	no	CREATED_AT end date filter (ISO 8601).
limit	integer	no	Max transactions to return (1-100, default 10).
startingAfter	string	no	Transaction ID cursor for pagination.

Get a single payment transaction by ID. GET /transaction/{transactionId}.

Parameter	Type	Required	Notes
transactionId	string	yes	Transaction ID.

Get the caller's Mercoa organization configuration (settings, payment methods enabled, etc.). GET /organization.

No parameter schema on file.

WRITE — creates a real entity (customer/vendor/payor/payee) in Mercoa. Supply role flags, accountType, and a nested profile object (business or individual details). POST /entity.

Parameter	Type	Required	Notes
isCustomer	boolean	no	Whether this entity has a direct relationship with your organization.
isPayor	boolean	no	Whether this entity can pay invoices (AP).
isPayee	boolean	no	Whether this entity can receive payments (AR / vendor).
accountType	string	no	business or individual.
foreignId	string	no	Your system's ID for this entity.
email	string	no	Primary email for the entity.
profile	object	no	Nested profile object, e.g. { "business": { "legalBusinessName": "Acme Inc.", "email": "ap@acme.com", "businessType": "llc" } } or { "individual": { "name": {...}, "email": "..." } }.

WRITE — creates a real invoice/bill in Mercoa. Set status (DRAFT to stage, NEW to submit), amount, currency, payer/vendor, dates and line items. POST /invoice.

Parameter	Type	Required	Notes
status	string	no	Invoice status, e.g. DRAFT, NEW, APPROVED, SCHEDULED.
amount	number	no	Total invoice amount.
currency	string	no	Currency code, e.g. USD.
payerId	string	no	Payer entity ID (who owes).
vendorId	string	no	Vendor entity ID (who is paid).
creatorEntityId	string	no	Entity ID on whose behalf the invoice is created.
creatorUserId	string	no	User ID creating the invoice.
invoiceDate	string	no	Invoice date (ISO 8601).
dueDate	string	no	Due date (ISO 8601).
deductionDate	string	no	Scheduled payment/deduction date (ISO 8601).
invoiceNumber	string	no	Human-readable invoice number, e.g. INV-123.
noteToSelf	string	no	Internal note.
paymentSourceId	string	no	Payment method ID to pay from (payer's).
paymentDestinationId	string	no	Payment method ID to pay to (vendor's).
lineItems	array	no	Line items array, e.g. [{ "amount": 100, "currency": "USD", "description": "Product A", "quantity": 1, "unitPrice": 100 }].
metadata	object	no	Arbitrary key/value metadata.

WRITE — updates an existing invoice/bill (all fields optional). Commonly used to advance status (e.g. DRAFT→NEW→SCHEDULED) or change amounts, dates, or payment methods. POST /invoice/{invoiceId}.

Parameter	Type	Required	Notes
invoiceId	string	yes	Invoice ID to update.
status	string	no	New invoice status, e.g. NEW, APPROVED, SCHEDULED.
amount	number	no	Total invoice amount.
currency	string	no	Currency code, e.g. USD.
payerId	string	no	Payer entity ID.
vendorId	string	no	Vendor entity ID.
invoiceDate	string	no	Invoice date (ISO 8601).
dueDate	string	no	Due date (ISO 8601).
deductionDate	string	no	Scheduled payment/deduction date (ISO 8601).
invoiceNumber	string	no	Human-readable invoice number.
noteToSelf	string	no	Internal note.
paymentSourceId	string	no	Payment method ID to pay from.
paymentDestinationId	string	no	Payment method ID to pay to.
lineItems	array	no	Replacement line items array.
metadata	object	no	Arbitrary key/value metadata.

WRITE — adds a comment to an invoice (visible in its activity log). POST /invoice/{invoiceId}/comment.

Parameter	Type	Required	Notes
invoiceId	string	yes	Invoice ID to comment on.
text	string	yes	Comment text.
userId	string	no	ID or foreign ID of the user creating the comment.

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install Mercoa or to call it, at any volume.

ATool-list grade · score 93 / 100

Release 1.11.1 · scanned 20 Oct 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 0 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digest7dc4542b318a471817a869cd0d72df7f791be3bb155a7705f1728e4316253c81

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
mercoa_find_entities	no tags
mercoa_get_entity	no tags
mercoa_get_entity_events	no tags
mercoa_get_entity_invoice_metrics	no tags
mercoa_list_entity_payment_methods	no tags
mercoa_get_payment_method	no tags
mercoa_list_entity_users	no tags
mercoa_find_invoices	no tags
mercoa_get_invoice	no tags
mercoa_get_invoice_events	no tags
mercoa_find_transactions	no tags
mercoa_get_transaction	no tags
mercoa_get_organization	no tags
mercoa_create_entity	state-write	state-write: declares destructiveHint: true
mercoa_create_invoice	state-write	state-write: declares destructiveHint: true
mercoa_update_invoice	state-write	state-write: declares destructiveHint: true
mercoa_add_invoice_comment	state-write	state-write: declares destructiveHint: true

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.

Supply chain and provenance

Integrityfirst-seen

Surface digest7dc4542b318a4718

Scanned2026-10-20

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

Where are you running it?

Tool surface

Release history

Mercoa MCP

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also