Enterich

dev.interlusionPublished by interlusion.devv0.4.0Updated Nov 7, 2026

A service for ERPNext accounting behind OAuth: fixed tools, drafts only, one agent user's rights

VerifiedSTDIODesktop onlyFinance Security & Monitoring Business & Commerce

Server details

Identifier: dev.interlusion/enterich
Transport: STDIO
Runtime: Desktop only
Trust: Verified
Published: Nov 1, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to interlusion.dev. It runs from a package rather than a hosted endpoint, so there is no endpoint to match against that domain.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/dev.interlusion%2Fenterich.svg)](https://sourceweft.com/mcp/dev.interlusion%2Fenterich?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

An ERPNext accounting MCP server behind OAuth: a fixed set of read and draft-only tools, limited to one ERPNext agent user's rights.

What you can do: List and read master data and customers/suppliers
List and read sales and purchase invoices, tax templates, receivables and payables
List and read accounts, cost centres, journal entries, general ledger and trial balance
List and read bank accounts, bank transactions and payment entries
Create and update drafts of sales invoices, sales returns, purchase invoices, purchase returns, journal entries and payment entries
When to use it: Useful when an assistant should look up ERPNext accounting data or prepare draft documents for a person to review and submit, without giving it a general ERPNext API bridge or posting rights.
Requirements: Runs as a local service (container image, Streamable HTTP) on a desktop. Needs an ERPNext site URL, public URL, company name, and an ERPNext agent user's API key and secret (ENTERICH_ERPNEXT_API_KEY, ENTERICH_ERPNEXT_API_SECRET). Also needs an external OAuth authorization server: issuer, JWKS URL, client ID, subject, resource URL, plus optional scopes and token algorithms.

Before you install

Requires ERPNext API key and secret for a dedicated agent user; the user's ERPNext roles cap everything the server can do. It creates and updates draft documents, so review drafts before submitting them in ERPNext. Access tokens are validated against an external authorization server, and ENTERICH_MAX_DRAFTS_PER_HOUR is unset by default, meaning no limit on drafts.

Installation

In SourceWeft

Open Enterich in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[Enterich's logo: a drake in a cap, holding a microphone, with an MCP chain]

Enterich

An MCP server for ERPNext with hard limits: a short, fixed list of tools, tokens from an external OAuth authorization server, and only the rights of one ERPNext user.

Status: Every operation is tested against a model of ERPNext v16's API, and weekly against a real ERPNext v16 site. The changelog lists the releases.

What it is

A separate service, not a Frappe app. It calls ERPNext's REST API with the API key of a dedicated agent user and holds no other ERPNext credential. Whatever the service does, ERPNext's role for that user is the upper limit.
A resource server for the MCP authorization spec. It serves the protected resource metadata, answers a missing token with 401, and checks every access token itself (issuer, audience, client, subject). Sign-in happens at an external authorization server such as Keycloak.
A fixed list of operations, each with its own purpose and input schema, read and write separated. No generic document access, method calls or file access.
Client-neutral. It speaks plain MCP (Streamable HTTP) and doesn't rely on any client asking before a write.

What it is not

Not a general ERPNext API bridge: tools that take a DocType, report name, method name, field list, filter expression or file path as input are out of scope.
Not a way to post: no tool submits, cancels, amends, deletes or discards a document. The agent prepares drafts; a person reviews and submits them in ERPNext (reviewing drafts).
Not affiliated with or endorsed by Frappe Technologies. ERPNext and Frappe are their trademarks.

Tools

Enterich offers 37 tools. A deployment may offer fewer (ENTERICH_TOOLS); every tool works on one company, within the rights ERPNext gives the agent user.

Master data (REQ-003)

Items.

Order to cash (REQ-004)

Customers, sales invoices, receivables.

Tool	Title	Kind
`list_customers`	List customers	read
`get_customer`	Get customer	read
`list_sales_invoices`	List sales invoices	read
`get_sales_invoice`	Get sales invoice	read
`list_sales_tax_templates`	List sales tax templates	read
`report_accounts_receivable`	Accounts receivable	read
`create_draft_sales_invoice`	Create draft sales invoice	create draft
`update_draft_sales_invoice`	Update draft sales invoice	update draft
`create_draft_sales_return`	Create draft sales return	create draft
`update_draft_sales_return`	Update draft sales return	update draft

Procure to pay (REQ-005)

Suppliers, purchase invoices, payables.

Tool	Title	Kind
`list_suppliers`	List suppliers	read
`get_supplier`	Get supplier	read
`list_purchase_invoices`	List purchase invoices	read
`get_purchase_invoice`	Get purchase invoice	read
`list_purchase_tax_templates`	List purchase tax templates	read
`report_accounts_payable`	Accounts payable	read
`create_draft_purchase_invoice`	Create draft purchase invoice	create draft
`update_draft_purchase_invoice`	Update draft purchase invoice	update draft
`create_draft_purchase_return`	Create draft purchase return	create draft
`update_draft_purchase_return`	Update draft purchase return	update draft

Record to report (REQ-006)

Accounts, cost centres, journal entries, ledger, trial balance.

Tool	Title	Kind
`list_accounts`	List accounts	read
`list_cost_centers`	List cost centres	read
`list_journal_entries`	List journal entries	read
`get_journal_entry`	Get journal entry	read
`report_general_ledger`	General ledger	read
`report_trial_balance`	Trial balance	read
`create_draft_journal_entry`	Create draft journal entry	create draft
`update_draft_journal_entry`	Update draft journal entry	update draft

Bank and cash (REQ-007)

Bank accounts, bank transactions, payments.

Tool	Title	Kind
`list_bank_accounts`	List bank accounts	read
`list_bank_transactions`	List bank transactions	read
`get_bank_transaction`	Get bank transaction	read
`list_payment_entries`	List payment entries	read
`get_payment_entry`	Get payment entry	read
`create_draft_payment_entry`	Create draft payment entry	create draft
`update_draft_payment_entry`	Update draft payment entry	update draft

Scope

Enterich is maintained for our own use. Contributions are welcome (contributing); support isn't promised. Report vulnerabilities privately, as the security policy describes.

Documentation

Start at docs/README.md. The most important parts:

Requirement specifications: the core, and the operations by accounting area
Architecture and decisions
Configuration

Licence

Apache-2.0. Why: ADR-006.

Source: README.md at commit 0ff4da7

Tools

SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

v0.4.0LatestNov 7, 2026
v0.3.0Nov 3, 2026
v0.2.1Nov 1, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts