SuperBooks Developers
Build on SuperBooks with an MCP-first API, official TypeScript and Python SDKs, API keys, and OAuth.
SuperBooks is a financial operating system for small businesses — bank transactions, invoices, customers, documents, time tracking, and reporting. This site documents everything you need to build on top of it.
An MCP-first API
The public API speaks the Model Context
Protocol. One endpoint,
https://api.superbooks.io/mcp, exposes 45 tools across 12 domains over
Streamable HTTP.
That choice is deliberate. An MCP endpoint is directly usable by AI clients — Claude, Cursor, Windsurf — with no glue code at all, and it is equally usable as a plain JSON-RPC API from any HTTP client. The same tools, the same permissions, and the same rate limits apply either way.
Quickstart
Mint a key and make your first call in a few minutes.
Connect an AI client
Claude Desktop, Claude Code, and Cursor configuration.
Authentication
API keys, OAuth for integrators, and how scopes work.
API reference
Every tool, its parameters, and its scope tier.
What you can reach
| Domain | What it covers |
|---|---|
transactions | Bank transactions: list, get, update, categorise, delete |
invoices | Draft, list, get, send, and void invoices |
customers | The customer book |
categories | Transaction categories |
tags | Free-form labels across customers, transactions, and projects |
documents | Uploaded files and their extracted content |
inbox | Incoming receipts and bills, and matching them to transactions |
tracker | Time-tracking projects and entries |
bank_accounts | Connected accounts |
team | The current team's profile |
search | Cross-domain search |
reports | Revenue, profit and loss, burn rate, runway, spending, and more |
Official SDKs
Two first-party clients wrap the same API, so you do not have to speak JSON-RPC yourself:
TypeScript
npm i superbooks — typed per-domain methods with zero runtime dependencies.
Python
pip install superbooks — sync and async clients with the same surface.
Both packages are published and installable today — superbooks on npm and on
PyPI — and the changelog records each release. The API is live
too, and the quickstart has a cURL path that needs no SDK.
Two ways to authenticate
API keys are the fast path: mint one in the app, send it as a bearer token, done. Use these when the code you are writing acts on behalf of your own team.
OAuth is for integrators building a product that other SuperBooks teams sign in to. It supports dynamic client registration and PKCE, which is what lets an MCP client like Claude offer a "Sign in with SuperBooks" flow with no preregistration.
Both are covered in Authentication.