Lexoffice for AI agents

Lexoffice is German cloud accounting software freelancers and small businesses use for invoicing, quotes, and expense tracking synced with their bank accounts. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

Finance and accountingAPI keyMCP + RESTlexoffice.de
AUDIT LOG · LEXOFFICEPOLICY: acme-support
09:41:07 · claude · u_8f2read
lexoffice.list_articles
List Articles✓ allowed · 212ms
09:41:08 · claude · u_8f2read
lexoffice.get_article
Get Article✓ allowed · 164ms
09:41:09 · claude · u_8f2write
lexoffice.create_article
Create Article✓ approved · approved by user
09:41:12 · claude · u_8f2destructive
lexoffice.delete_article
Delete Article✕ blocked · policy: deny
EVERY LEXOFFICE CALL, ON THE RECORD
01 · USE CASES

What agents do in Lexoffice.

01

Create a new invoice

Create an invoice for a customer with line items pulled from a completed order.

02

Look up a contact's details

Pull a customer or vendor contact's details before creating a document for them.

03

Approve before deleting an article

Require approval before deleting a product article, since it may be referenced on past documents.

02 · ACTIONS

44 Lexoffice actions, graded by risk.

Every Lexoffice action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

29

Look things up. Allowed by default.

  • lexoffice.get_article
    Get Article
  • lexoffice.get_contact
    Get Contact
  • lexoffice.get_dunning
    Get Dunning
  • lexoffice.get_invoice
    Get Invoice
  • lexoffice.get_payment
    Get Payment Information
  • lexoffice.get_profile
    Get Profile
  • lexoffice.get_voucher
    Get Voucher
  • lexoffice.get_quotation
    Get Quotation
  • lexoffice.list_articles
    List Articles
  • lexoffice.list_contacts
    List Contacts
  • lexoffice.list_vouchers
    List Vouchers
  • lexoffice.list_countries
    List Countries
  • lexoffice.get_credit_note
    Get Credit Note
  • lexoffice.list_voucherlist
    List Voucherlist
  • lexoffice.get_delivery_note
    Get Delivery Note
  • lexoffice.list_print_layouts
    List Print Layouts
+ 13 MORE

write

13

Create and change things. Allow, or ask the user first.

  • lexoffice.create_article
    Create Article
  • lexoffice.create_contact
    Create contact
  • lexoffice.create_invoice
    Create Invoice
  • lexoffice.create_voucher
    Create Voucher
  • lexoffice.update_article
    Update Article
  • lexoffice.update_contact
    Update lexoffice contact
  • lexoffice.update_voucher
    Update Voucher
  • lexoffice.create_quotation
    Create Quotation
  • lexoffice.create_credit_note
    Create Credit Note
  • lexoffice.create_delivery_note
    Create Delivery Note
  • lexoffice.create_event_subscription
    Create Event Subscription
  • lexoffice.create_order_confirmation
    Create Order Confirmation
  • lexoffice.upload_voucher_file
    Upload Voucher File

destructive

2

Delete, cancel or archive. Ask first, or deny outright.

  • lexoffice.delete_article
    Delete Article
  • lexoffice.delete_event_subscription
    Delete Event Subscription
03 · HOW IT WORKS

Lexoffice in three steps.

  1. 01Your users connect LexofficeThey add their Lexoffice api key on Arc0 Connect, under your brand. It goes straight into the vault.
  2. 02You set the rulesReads run, writes like “create Article” can wait for the user, and “delete Article” can be denied outright.
  3. 03Any agent can actYour agent calls Lexoffice through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
POLICY.TS
await arc0.policies.set('lexoffice', {
  read: 'allow',
  write: 'ask',        // create_article
  destructive: 'deny',  // delete_article
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2
04 · AUTH AND DATA

How Lexoffice connects.

Users add their Lexoffice api key on Arc0 Connect. It is encrypted in the vault, never shown to the model, and each user can rotate or revoke it at any time.

The same Lexoffice connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH
API key
CREDENTIALS
Per-tenant encrypted vault
MODEL SEES
Results only, never credentials
AUDIT LOG
Every call, on every plan
05 · WORKS WITH

Use Lexoffice from any agent.

Claude
ChatGPT
Cursor
Codex
VS Code
OpenAI Agents SDK
Claude Agent SDK
Vercel AI SDK
Mastra
LangGraph
07 · FAQ

Lexoffice and Arc0, answered.

Q01

Can I use Lexoffice with Claude, ChatGPT or Cursor?

Yes. Connect Lexoffice to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Lexoffice actions you allow.

Q02

How do users connect Lexoffice?

Users add their Lexoffice api key on Arc0 Connect. It is encrypted in the vault, never shown to the model, and each user can rotate or revoke it at any time.

Q03

Which Lexoffice actions can my agent take?

44 in total: 29 read, 13 write and 2 destructive, such as “create Article”. Your policies decide which of them each agent may call.

Q04

Can I stop my agent from deleting things in Lexoffice?

Yes. Actions like “delete Article” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.

Q05

Can my own backend call Lexoffice too?

Yes. The same Lexoffice connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Lexoffice into your agent.

Your users connect Lexoffice once, under your brand. Your agent gets 44 actions behind your policies, with every call on the record.

Free to build · MCP + REST · Audit log on every plan