Acumatica API facts that shape an MCP server
| Fact | Detail | Source |
|---|---|---|
| Official MCP servers | Shipped in Acumatica 2026 R2, generally available October 1, 2026. Acumatica’s release announcement says organizations can connect Claude, ChatGPT, Gemini and other MCP-compatible AI tools directly to their Acumatica data without exporting or duplicating it, that role-based permissions, inherited security and field-level data masking carry over, and that IT keeps centralized governance and auditability for every query. | Acumatica press release: Acumatica 2026 R2 release with embedded AI (October 1, 2026) |
| What the servers expose | Administrators configure MCP servers and expose published generic inquiries as callable tools. Acumatica describes the access as read-only, says every request runs under the user’s existing access rights and is logged, and lets stored generic inquiry results be reused across dashboards, OData, MCP and pivot views. | Acumatica: 2026 R2 product page |
| AI page | Under what’s new for AI in 2026 R2, Acumatica’s AI page lists connecting external AI tools to approved, read-only ERP data through MCP servers, and exposing published generic inquiries as callable tools so connected agents query exactly the data you choose to give them. | Acumatica: Artificial intelligence in Acumatica Cloud ERP |
| Community announcement | Acumatica’s community post introducing 2026 R2 (September 30, 2026, updated October 7) says the new MCP servers let administrators give external AI tools like Claude or ChatGPT governed, read-only access to published generic inquiries. | Acumatica Community: Introducing Acumatica Cloud ERP 2026 R2 |
| MCP Registry | As of October 2026 the official MCP Registry still has no entry from Acumatica, because its MCP servers are configured inside each tenant rather than distributed as a package. The registry’s only Acumatica listing is a community package, io.github.nicholsonpeter/acumatica (version 0.9.0, published April 2026). | Official MCP Registry: search for acumatica |
| Before 2026 R2 | Acumatica’s blog post of September 17, 2026 said its MCP implementation "starts from the Generic Inquiry framework customers already know", and an Acumatica employee had pointed in the Acumatica Community to an official MCP not earlier than early 2027; the MCP servers shipped in 2026 R2 instead. | Acumatica blog: 10 Questions to Ask When Evaluating AI ERP (September 17, 2026) |
| AI Assistant | Acumatica’s built-in AI Assistant answers from generic inquiries an administrator exposes to it and inherits each inquiry’s access rights; during Managed Availability it could not update records. Acumatica said it would become generally available for purchase with 2026 R2, with use measured in AI Units; Acumatica doesn’t say whether MCP calls consume AI Units. | Acumatica Community: AI Assistant 2026 R1 Managed Availability and FAQ |
| REST API endpoints | The contract-based REST API is reached through versioned endpoints such as /entity/Default/25.200.001, the system endpoint (Contract Version 4) used in Acumatica’s 2026 R1 documentation. Apps on a system endpoint keep working in later versions; custom endpoints add what the Default contract lacks but must be maintained, and obsolete system endpoints may be removed. | Acumatica Help (2026 R1): Endpoints and Contracts |
| OAuth 2.0 flows | Acumatica documents authorization code, implicit and resource owner password credentials flows for OAuth 2.0, plus a hybrid flow for OpenID Connect; no client credentials flow is listed. Only the password flow gives the app a user’s username and password and skips the user’s explicit consent, and the implicit flow issues no refresh token. | Acumatica Help (2026 R1): OAuth 2.0 and OIDC, comparison of the flows |
| Sessions and scopes | With the api and offline_access scopes, Acumatica issues a refresh token and keeps one session per grant, so no sign-out is needed. With only the api scope, the access token lasts one hour, and Acumatica recommends signing out because each license limits API users. | Acumatica Help (2026 R1): OAuth 2.0 and OIDC session management |
| API license limits | Every Acumatica license caps web services API users, concurrent API requests and API requests per minute, shown on the License Monitoring Console (SM604000). Once the past minute’s requests reach 50% of the limit, new requests are delayed, and a request is declined when more than 20 are queued or it waits over 10 minutes. | Acumatica Help (2026 R1): License Restrictions for API Users |
| Generic inquiries over OData | Generic inquiries exposed through OData are served at <instance URL>/t/<tenant>/api/odata/gi, and each user gets only the data their access rights allow. Basic authentication there counts as a conventional user sign-in, not an API user, and OAuth 2.0 also works. | Acumatica Help (2026 R1): Generic Inquiry Access Through OData |
| Sandboxes and upgrades | Acumatica’s Always Current Program gives SaaS customers semi-annual upgrades to the latest release, with a free sandbox arranged through their partner for testing first. SaaS sandboxes are for testing only and lose changes on refresh; test tenants inside production keep their data isolated from production data. | Acumatica SaaS FAQ |
Every way to connect Acumatica to AI
| Option | Type | Fits when | Limits |
|---|---|---|---|
| Acumatica’s built-in MCP servers (2026 R2) | Official | Tenants on 2026 R2 whose questions fit published generic inquiries: administrators choose which inquiries become tools, each call runs under the user’s access rights and is logged, and Claude, ChatGPT, Gemini and other MCP clients connect directly. | Read-only, limited to data a published generic inquiry returns, and nothing for releases before 2026 R2. Acumatica hasn’t published pricing, a tool list or per-client setup guides; partners report OAuth 2.0 sign-in and a guideline of 50 tools per server, which we haven’t confirmed on an Acumatica page. |
| Acumatica connector for Power Platform (preview) | Official | Copilot Studio and Power Automate makers who need simple customer, case and opportunity lookups and updates from a connector Acumatica publishes. | Not an MCP server: 12 CRM actions (including deletes), a premium connector, a username and password stored in each connection, and 100 calls per connection per minute. |
| MCP4Acumatica (open source) | Community | A self-hosted pilot for Claude on tenants not yet on 2026 R2, with 51 tools, per-user OAuth against your instance, an access gate, a consent screen, redaction of sensitive fields and audit logs, under Apache 2.0. | Community-built and not affiliated with Acumatica. It targets 2025 R2, is almost entirely read-only (one customer write tool, off by default), and runs on Cloudflare Workers that you operate and update. |
| CData Connect AI | Hosted | Teams that want a hosted MCP endpoint to live Acumatica data for Claude, ChatGPT, Copilot Studio and other clients, next to other CData sources. CData says existing Acumatica permissions carry over. | Data flows through CData’s cloud, and approval steps and your company’s business rules are yours to add. A free trial is offered. |
| Unified.to (Unified MCP) | Hosted | Software vendors that need real-time, pass-through Acumatica access for their own product or agent, next to many other ERP and accounting systems. Unified.to says it stores no end-customer data. | Its Acumatica models (accounts, contacts, sales and purchase orders, items, locations, employees, shipments) are list and get only; writes go through a raw passthrough. Usage-based pricing with a 30-day trial. |
| Custom Acumatica MCP server | Custom | Business-specific tools on reviewed generic inquiries and the REST API, per-user OAuth, writes with a preview and approval by the right role, and workflows that span Acumatica and other systems, hosted in your cloud. | You own hosting, session limits, endpoint upgrades and evaluation, and it uses your license’s API capacity like any other integration. |
Tools a Acumatica MCP server should expose
Start with read-only tools and add write actions once the team trusts the answers. Every write action below runs with a confirmation or approval step.
| Tool | Access | Risk | Purpose | Guard |
|---|---|---|---|---|
get_customer_balance | Read | Low | Open balance, overdue amount, credit limit and aging buckets for a customer. | Runs as the signed-in user through a reviewed generic inquiry; their Acumatica access rights apply. |
list_open_sales_orders | Read | Low | Open sales orders by customer, status or requested date. | Read-only on the Default endpoint; filtered with $filter and paged with $top and $skip. |
get_inventory_availability | Read | Low | On-hand and available quantities for an item by warehouse. | Read-only; an item is required and the warehouse list is capped. |
get_purchase_order_status | Read | Low | Status, promised date and received quantities for purchase orders. | Read-only; a vendor or order number is required. |
get_project_cost_summary | Read | Medium | Budget, actual and committed cost with variance by project, for construction and project-based teams. | Reviewed generic inquiry; returns only projects the user may see; row cap. |
run_approved_inquiry | Read | Medium | Run one of a curated set of generic inquiries, such as margin by customer or a trial balance, with parameters. | Allowlist of inquiries approved for AI use; parameters validated; no free-form queries; results capped and paged. |
create_sales_order | Write | Medium | Build a sales order from customer, items and quantities and show totals before saving. | Saves the order on hold only after the user confirms; prices and taxes come from Acumatica; an idempotency key blocks duplicates on retry. |
release_ar_invoice | Write | High | Release a reviewed AR invoice. | Preview of customer, amount and period, then approval by a user whose role can release AR documents; refused if the financial period is closed; logged with user and reference number. |
update_customer_contact | Write | Medium | Change a customer’s email, phone or address. | Confirmation with before-and-after values; no changes to credit limits, terms or payment methods. |
Connect it to Claude, ChatGPT or Copilot Studio
Claude
Acumatica names Claude first among the AI tools its built-in 2026 R2 MCP servers connect to, but hasn’t published a per-client setup guide, so get the server URL and sign-in steps from the 2026 R2 help or your partner. A custom or community server is added as a custom connector; on Team and Enterprise plans an Owner adds it first, and with a per-user OAuth server each person then signs in with their own Acumatica account. MCP4Acumatica is built for Claude and supports dynamic client registration. Calls come from Anthropic’s cloud, so a private server must allowlist Anthropic’s IP ranges, and claude.ai and Claude Desktop cap tool results at about 150,000 characters, so keep generic inquiry results paged.
ChatGPT
Acumatica lists ChatGPT among the MCP-compatible tools for its built-in 2026 R2 servers. For a custom server, use developer mode (Pro, Plus, Business, Enterprise and Education on the web; on Enterprise and Education an admin grants access) and add the server under ChatGPT Plugins over Streamable HTTP with OAuth. Acumatica has you register each client application on its Connected Applications form, so let the MCP server act as ChatGPT’s OAuth server and handle the Acumatica sign-in behind it. ChatGPT asks for confirmation on tools without a readOnlyHint, so mark reads read-only and let writes ask.
Microsoft Copilot Studio
Acumatica names Claude, ChatGPT, Gemini and "other MCP-compatible AI tools" for its built-in servers but not Copilot, so test the built-in server in Copilot Studio before relying on it. Add a server with the MCP onboarding wizard on the agent’s Tools page (Streamable HTTP only; OAuth 2.0, API key or none) and turn on generative orchestration. For simple CRM steps, Acumatica’s own Power Platform connector (preview, premium) adds customer, case and opportunity actions, but each connection stores a username, password, client ID and secret and is throttled at 100 calls per minute. Power Platform data policies govern both routes.
Claude implementation · Copilot implementation · ChatGPT implementation
Permissions, identity and audit
- On 2026 R2, Acumatica’s built-in MCP servers expose only the generic inquiries an administrator publishes to them, and each request runs under the signed-in user’s access rights and is logged, so review each inquiry’s columns and access rights before publishing it as a tool.
- For a custom server, register it once on the Connected Applications form (SM303010) and use the authorization code flow with PKCE (Acumatica accepts S256 only), so every call runs as the signed-in person and their Acumatica roles decide what the tools can read or change.
- Gate AI access with a role and expose only reviewed generic inquiries, which carry their own access rights. MCP4Acumatica, for example, admits only users who can read a designated canary inquiry.
- Each person’s OAuth grant holds its own API session, and open API sessions count toward the license’s maximum number of API users, so size the rollout to that limit. Acumatica’s session caps (User Types, EP202500, or Users, SM201010) apply per user account, so use them on integration users such as a background agent’s.
- Acumatica documents no client credentials flow, so background agents run as a dedicated integration user with a narrow role (never an administrator), with its refresh token in a secrets manager.
- Keep write tools off until each has a preview, confirmation by a user whose role may release or approve that document, an idempotency key and an open-period check. Log the user, tool and document numbers for every call.
Hosting and network
- Acumatica SaaS runs on AWS, and every tool call goes to your instance URL over HTTPS. The MCP server can run in your AWS or Azure account, on Cloudflare Workers (MCP4Acumatica), or with a hosted provider.
- Claude, ChatGPT and Copilot Studio connect from their own clouds, so publish the server over HTTPS behind OAuth, or use ChatGPT’s Secure MCP Tunnel for a private deployment. A self-hosted Acumatica instance also needs a network path from the MCP server.
- Throttle each user below the license’s per-minute limit, page lists with $top and $skip, and use push notifications (to a webhook or SignalR hub) to refresh caches instead of polling.
- Build against a sandbox or test tenant, pin the endpoint version (Default/25.200.001 or a custom endpoint), and retest every tool after each semi-annual upgrade.
Cost and timeline
- Acumatica hasn’t published pricing for its MCP servers; they ship as part of 2026 R2. AI Assistant use is measured in AI Units, and Acumatica doesn’t say whether MCP calls consume them.
- A focused read-only Acumatica MCP server, built on reviewed generic inquiries and the REST API, typically takes two to four weeks including security and evaluation.
- Write tools with approvals, workflows across Acumatica and other systems, and heavily customized tenants are scoped after a short discovery.
- MCP4Acumatica has no license fee but needs a Cloudflare Workers paid plan; CData and Unified.to offer free trials (Unified.to states 30 days). Every route calls your Acumatica instance, so check your license limits first.
Acumatica MCP questions
Does Acumatica have an MCP server?
Yes, since 2026 R2 (generally available October 1, 2026). Administrators configure MCP servers inside Acumatica that expose published generic inquiries as read-only tools, and Acumatica names Claude, ChatGPT and Gemini as compatible clients. Each request runs under the user’s access rights and is logged. There is still no Acumatica entry in the MCP Registry, because the servers are configured per tenant rather than distributed as a package.
Which Acumatica version has MCP?
2026 R2, generally available October 1, 2026. Acumatica’s own pages describe the MCP servers as read-only access to published generic inquiries. Earlier releases need MCP4Acumatica, a hosted platform or a custom server, and SaaS customers get 2026 R2 through their next Always Current upgrade.
What does Acumatica’s MCP support include?
Read-only access to generic inquiries an administrator publishes as tools, under existing role-based security and field-level masking, with every query logged and governed centrally. Acumatica hasn’t published write support, a tool list, pricing or a per-client setup guide. Partners report OAuth 2.0 sign-in and a recommended limit of 50 tools per server, which Acumatica’s own pages don’t state.
How does this relate to Acumatica’s AI Assistant?
AI Assistant is Acumatica’s chat inside the ERP: it answers from generic inquiries an administrator exposes to it, inherits their access rights and, during Managed Availability, couldn’t update records; Acumatica said it would become generally available with 2026 R2. The MCP servers serve a different need, letting Claude, ChatGPT or Gemini reach Acumatica from outside, and they reuse the same curated generic inquiries.
Can Claude create sales orders in Acumatica?
Not through Acumatica’s built-in servers, which are read-only. Yes through an MCP server with a write tool that calls the contract-based REST API. MCP4Acumatica’s only write tool creates or updates customers and is off by default, so sales orders need a custom tool or a platform with general write access. We build that tool to show a preview with Acumatica’s own prices and taxes, save the order on hold after the user confirms, and block duplicates on retry.
Do API calls count against my Acumatica license?
Yes. Each license caps API users, concurrent API requests and requests per minute, shown on the License Monitoring Console (SM604000), and an MCP server signs in as an API user. Once the past minute’s requests reach half the limit, Acumatica delays new ones, so a busy agent can slow your other integrations. Generic inquiry reads over OData with basic authentication count as a conventional user sign-in instead.
Does it work with ChatGPT and Copilot?
ChatGPT, yes: Acumatica names it among the clients for its built-in 2026 R2 servers. Acumatica doesn’t name Microsoft Copilot, so test the built-in server in Copilot Studio first; a remote custom server with OAuth can be added in ChatGPT developer mode and in Copilot Studio over Streamable HTTP, and Copilot Studio can also use Acumatica’s own Power Platform connector (preview) for customer, case and opportunity actions.
Should we use Acumatica’s built-in server or build our own?
Use the built-in server if read-only answers from generic inquiries are enough and you’re on 2026 R2; the curated inquiries you publish to it are the same ones a custom server would reuse. Build if you need write actions with approvals, tools that span Acumatica and other systems, or you’re on an older version. AIONDATA is independent and not an Acumatica partner, so we will tell you when the built-in server is the better choice.
