Tool catalog

The Factuarea MCP server publishes 668 tools across the public API domains. This page is the canonical list; each tool's input schema is discoverable at runtime via tools/list. Every tool maps to the same operation in the REST API Reference. The ten tools that provision managed accounts are not part of that total: they are listed at the end, because a key needs the privileged accounts:* scopes to see them.

How to read this catalog

• Tool — the MCP tool name your agent calls.
• Scope — the fine-grained scope the credential must hold for the tool to appear in tools/list and to be invocable. See Scopes & permissions.
• Category — the rate-limit bucket the tool falls into: read, write, destructive, send or generate. See Errors & rate limits.

A credential only sees the tools its scopes cover. An API key with the super-scope * sees all 668; a narrower key or an OAuth token sees a subset.

Domains

Invoices

Invoices: search, CRUD, correctives, partial-payment ledger, transitions (issue/paid/sent/void/annul), scheduling, bulk operations, reminders, public links, PDFs, presentations, administrative routing and Excel export. (51 tools)

get_invoice returns the full invoice by its public id: commercial data, line ids (UUIDv7), effective centres, snapshot, override, administrative version and revision, and the original structured snapshots. It keeps null and empty lists as stored. get_invoice_pdf returns the exact signed download link when a retained output exists; the compatible mode can still return the PDF as base64. send_invoice can attach the FacturaE file with attach_facturae=true; with submission_id it attaches that existing submission, without creating or retrying one, and it requires attach_facturae=true. update_invoice_public_link takes revoke, activate, extend (with extend_days), reset or publish, the last one with the exact reference and the observed version.

list_invoice_administrative_revisions reads the administrative version, snapshot, override and history by the invoice's public id. It keeps the legacy null distinct from [] and does not look up the contact's current centres. revise_invoice_administrative_routing appends an administrative revision with the full list of centres, a reason and expected_version (a positive integer); [] clears the effective centres, and taxation is not modified. A missing version is answered with 428; a stale one with 409 and current_version. Retrying with the old version does not duplicate the revision. It returns the created revision and its own administrative_version.

assign_invoice_presentation assigns a template_id (UUIDv7) or an explicit null to inherit, with expected_version. It only applies to drafts of the authenticated company and does not change amounts or numbering. get_invoice_presentation reads the visual state and the retained capture of an authorized document, and list_invoice_presentations lists the retained captures in descending order with page/per_page and the captured metadata; neither writes, queries artifacts or generates a PDF. revise_invoice_presentation creates an audited visual revision with its parent, a compare-and-set (CAS) check and the authentic presentation_revision preview tokens; current_legal only admits a real legal correction of an issued invoice. It does not reissue or recalculate. See Document presentations.

Contacts

(28 tools)

Canonical fiscal contacts have cumulative customer, supplier and lead roles; they are the only public MCP surface for third-party identities. Separate client and supplier tools are not published. The CSV template remains a REST download. See Contact migration.

Products

Catalog: search, CRUD, configurable options/combinations, stock ledger, presentations, variants, supplier offers, bulk actions, analytics and media. (40 tools)

create_product, update_product, create_product_variant, update_product_variant, create_product_presentation and update_product_presentation accept gross_weight_kg: the gross transport weight in kg (up to four decimals, greater than zero) per base unit on products and variants and per commercial unit on fixed presentations. In the three update tools, omitting it keeps the current weight and null clears it. Services, mass base units (KGM, GRM) and variable_measure presentations reject it with gross_weight_not_allowed.

preview_product_base_unit_replacement and replace_product_base_unit change the base unit of a product by replacing it with a new one. The preview computes, without writing anything, what happens to the stock, the price, the presentations, the variants, the supplier offers, the price lists and the packs, and which pending documents will keep pointing at the old product; it is a read, but it requires products:write and returns the impact_token that the replacement demands. The replacement is irreversible: the old product is deactivated and keeps its history, it requires that impact_token and accepts idempotency_key.

Price lists

Customer and document pricing: manage active/retired items, compact selector options and resolve configurable catalog selections. (13 tools)

Quotes

Quotes: search, CRUD, accept/reject, send, convert to invoice, bulk operations, lookup by external ID, public links, PDFs and presentations. (24 tools)

get_quote_pdf returns the exact signed download link (download_url) with its expiry (expires_at) when a retained output exists, or its state while it is still being generated; the compatible mode returns the content as base64. update_quote_public_link takes revoke, activate, extend (with extend_days), reset or publish, the last one with the exact reference and the observed version.

assign_quote_presentation assigns a template_id (UUIDv7) or an explicit null to inherit, with expected_version. It only applies to drafts of the authenticated company and does not change amounts or numbering. get_quote_presentation reads the visual state and the retained capture of an authorized document, and list_quote_presentations lists the retained captures in descending order with page/per_page and the captured metadata; neither writes, queries artifacts or generates a PDF. revise_quote_presentation creates an audited visual revision with its parent, a compare-and-set (CAS) check and the authentic presentation_revision preview tokens. It keeps the captured source and admits the purpose complete in A4 format. It does not reissue or recalculate. See Document presentations.

Pro-forma invoices

Pro-formas: search, CRUD, accept/reject, send, convert, bulk operations, lookup by external ID, public links, PDFs and presentations. (24 tools)

get_proforma_pdf returns the exact signed download link (download_url) with its expiry (expires_at) when a prepared output exists, or its state while it is still being generated; 404 pdf_artifact_not_found means no retained PDF matches the document's current presentation, purpose and format; a retained PDF that failed to render or cannot be verified answers the PDF-unavailable error (500), and one erased for privacy answers 410; the compatible mode returns the content as base64. update_proforma_public_link takes revoke, activate, extend, reset or publish, the last one with the exact reference and the observed version.

assign_proforma_presentation assigns a template_id (UUIDv7) or an explicit null to inherit, with expected_version. It only applies to drafts of the authenticated company and does not change amounts or numbering. get_proforma_presentation reads the visual state and the retained capture of an authorized document, and list_proforma_presentations lists the retained captures in descending order with page/per_page and the captured metadata; neither writes, queries artifacts or generates a PDF. revise_proforma_presentation creates an audited visual revision with its parent, a compare-and-set (CAS) check and the authentic presentation_revision preview tokens. It only keeps the captured source and admits the purpose complete in A4 format. It does not reissue or recalculate. See Document presentations.

Delivery notes

Delivery notes: search, CRUD, deliver/cancel/sign, convert, send, bulk operations, lookup by external ID, public links, PDFs, presentations and GDPR signature erasure. (26 tools)

get_delivery_note_pdf returns the exact signed download link (download_url) with its expiry (expires_at) when a prepared output exists, or its state while it is still being generated; 404 pdf_artifact_not_found means no retained PDF matches the document's current presentation, purpose and format; a retained PDF that failed to render or cannot be verified answers the PDF-unavailable error (500), and one erased for privacy answers 410; the compatible mode returns the content as base64. update_delivery_note_public_link takes revoke, activate, extend, reset or publish, the last one with the exact reference and the observed version. In send_delivery_note, presentation_precondition identifies the exact PDF that was reviewed, and expected_presentation_uuid and expected_publication_id pin the expected identities. To accept an exact presentation, sign_delivery_note takes expected_presentation_id, expected_external_version, expected_source_token, expected_artifact_id and an operation_key (UUID v7); expected_publication_id is optional when there was no publication. These fields only take effect when revisioned presentation is enabled for the company; otherwise they are ignored.

assign_delivery_note_presentation assigns a template_id (UUIDv7) or an explicit null to inherit, with expected_version. It only applies to drafts of the authenticated company and does not change amounts or numbering. get_delivery_note_presentation reads the visual state and the retained capture of an authorized document, and list_delivery_note_presentations lists the retained captures in descending order with page/per_page and the captured metadata; neither writes, queries artifacts or generates a PDF. revise_delivery_note_presentation creates an audited visual revision with its parent, a compare-and-set (CAS) check and the authentic presentation_revision preview tokens. It only keeps the captured source and admits the purpose complete in A4 format. It does not reissue or recalculate. See Document presentations.

Transport control documents

Spanish electronic administrative control document (DeCA) for road freight: search, drafts (also pre-filled from delivery notes), issue, modify during the service, close, reopen, cancel, supersede, email the copy to the carrier, issuance evidence and the PDF of each version. (15 tools)

issue_transport_document, modify_transport_document, cancel_transport_document, supersede_transport_document and send_transport_document are irreversible and accept idempotency_key. get_transport_document_pdf returns the permanent public URL and the metadata of the version (sha256, size), never the PDF bytes. The QR code and the proof of issuance are binary REST downloads without a tool (GET /v1/companies/{company}/transport-documents/{transport_document}/qr and /issuance-proof), and loading places are managed only in the app. See Transport control documents.

search_transport_documents takes the same q (1 to 255 characters) and sort as GET /v1/companies/{company}/transport-documents: transport_date, number, created or updated, with a leading - for descending order and -transport_date by default. create_transport_document does not take id, like the REST endpoint: the server generates it and an id argument is ignored. Both the create and the edit tools normalise UUIDs to lower case and answer a shipments[].id that is already in use, or that belongs to another document, with the same 422 on shipments.N.id as the REST API. The tools that leave an entry in the issuance evidence (issue, modify, close, reopen, cancel, supersede and send) attribute it to the credential that calls them (the API key, or the OAuth client with the user who authorised it), never to the user who created the key; get_transport_document_evidence returns that actor in actor_name and reports automatic closes as auto_closed.

Expenses

Expenses: search, CRUD, mark paid, partial-payment ledger, bulk operations, pending/overdue lists, lookup by external ID, file attachments and payment receipts. (19 tools)

create_purchase_invoice and update_purchase_invoice accept the measured-line contract (purchase_measurement, discount_percent, price_source, source_line_index); duplicating from source_purchase_invoice_id also requires purchase_invoices:read. See Measured purchase lines.

Purchase scanner

Receive documents through the multipart API or scanner mailbox, inspect extraction and evidence, correct fields, resolve duplicates and create a purchase draft. Upload and original downloads use HTTP; MCP manages the persisted scans. See the document scanner guide. (10 tools)

Two purchase-scanner operations stay off MCP by design and are REST-only: uploading a scan (POST /v1/companies/{company}/purchase-scans) is a multipart/binary upload MCP cannot carry, and downloading the original file (GET /v1/companies/{company}/purchase-scans/{id}/source) returns the encrypted binary, so MCP exposes its metadata instead. PublicApiV1McpToolParityTest.php keeps both on its allowlist. Replacing the original file has no v1 endpoint at all — it's only available from the web app.

Recurring invoices

Recurring templates: search, CRUD, create from an invoice, activate/pause/resume/cancel/skip, bulk status change, preview, generate now, lookup by external ID, logs and activity. (19 tools)

generate_recurring_invoice generates an invoice now from a recurrence of the authenticated company and, depending on generation_mode, can issue and send it. It is irreversible: it needs confirmation from the host or UI and an idempotency key, and retries replay the same response. It changes neither the configuration nor the date of the attempt. It requires recurring_invoices:transition, like pausing and resuming, which is what the OAuth scope recurring.generate_now grants; the REST operation POST /v1/companies/{company}/recurring-invoices/{recurring_invoice}/generate keeps requiring recurring_invoices:write.

Series

Numbering series (editable under the fiscal guards of the numbering, never deleted): search, create, update, archive/unarchive, set default, bootstrap the four default series of a brand-new company, stats, PDF template preference and activity. (15 tools)

create_series with a pdf_template_id requires the same authorization as update_series. get_series_pdf_template reads the PDF preference of one of your series, its version and its availability. It keeps the saved reference even when it is not currently eligible, and it neither generates documents nor alters the numbering. assign_series_pdf_template assigns a compatible company template, or clears the preference with null to inherit. expected_version is the visual CAS version read from the series, and a replay with the same key is resolved before that check. It does not renumber or generate a PDF. unarchive_series always succeeds: if the PDF template the series kept is no longer selectable, the response adds warnings with inherited_candidate_unavailable and the series uses the applicable default template, without losing the saved reference.

PDF templates

Company PDF template library: templates, commercial identities (brands), private assets, per-contact and company preferences, revisions and impact. Gated by the pdf_templates module. (25 tools)

Creating, renaming, archiving, restoring and publishing a revision, and saving preferences, require an administrator. The tools that change an existing entity take expected_version (a compare-and-set check), and a replay with the same key is resolved before that check. create_pdf_template and create_pdf_commercial_identity create a new entity, so they take no expected_version; upload_pdf_template_asset creates a new private asset and takes none either. Reuse the idempotency_key when retrying them so nothing is created or uploaded twice. duplicate_pdf_template takes the expected_version of the source template you read and, with idempotency_key, avoids creating two copies. The read tools are authorized reads of the issuer and need neither an idempotency key nor a write precondition. See the PDF template library guide.

PDF artifacts and previews

PDF artifacts and previews: prepare the PDF of an authorized capture, run the retained plan, read the metadata and verify the original, and preview a template. (5 tools)

prepare_pdf_artifact prepares the PDF of an exact authorized capture; it never creates a capture. render_pdf_artifact runs the exact retained plan in sync or async mode, with no live fallback. get_pdf_artifact reads the safe metadata of the exact artifact; polling never generates anything. read_pdf_artifact verifies the original PDF and returns its metadata with a short signed link, never base64. preview_pdf_template prepares a preview with the authority and the scopes pdfs:read + pdf_templates:read; it neither captures nor publishes. See PDF previews and artifacts.

Taxes

Taxes (Factuarea catalog plus your own taxes): search, create, update, delete, defaults per company, in-use checks, tax/total calculations and the read-only AEAT tax catalog (regimes, exemption causes, IRPF rates and the legal VAT ↔ equivalence-surcharge pairs). (18 tools)

VeriFactu

AEAT SIF: records, events, chain validation, retry (one record or every blocked one), subsanación of accepted or rejected records, third-party remission representation, certificates, settings, responsible declaration and AEAT access log. (31 tools)

FacturaE (FACe)

B2G electronic invoicing: download the FacturaE 3.2.2 XML of an invoice and manage its FACe submissions (submit, track, cancel). Gated by the facturae module. (5 tools)

cancel_face_submission also requires the edit capability on the facturae module; without it the call answers 403 facturae_operation_forbidden.

Tax reports

AEAT filings computed from your own invoicing data: generate Modelo 303, 347 and 130 as the official positional file, a PDF or a review workbook; preview the breakdown without persisting anything; and read the generation history, stats, activity and files. (9 tools)

Only txt_aeat is filed with the AEAT; the PDF and the workbook are review material built from the same calculation. See Tax reports.

Webhooks & events

Webhook endpoints of a tax ID, deliveries, secret rotation, ping/replay, test events, and the published event catalog. The account has its own endpoints: Account webhooks. (13 tools)

Automations

The automation engine: rules in the when → if → do shape, the immutable versions of each rule's definition, the dry run that reports what a rule would do without doing it, the run history with its steps and their typed discard reasons, replay of a parked step or of a whole run, the trigger/action catalog with the fields each trigger exposes, and the monthly execution quota. Gated by the automations module. (18 tools)

Account

Account fiscal identity and personalization: verify the company's registered name + NIF against the AEAT census, read personalization templates and update account personalization. (4 tools)

Account administration

Ownership of the account and the transfer of tax IDs between accounts: issue, list, accept and revoke a tax ID transfer, and hand the ownership of the account to another member. These tools act on the account, not on the data of a tax ID. Issuing a transfer returns its secret once; the receiving account accepts it with that secret, and the giving account can revoke it until then. accept_nif_transfer, create_nif_transfer, revoke_nif_transfer and transfer_account_ownership are irreversible: the server publishes them with destructiveHint: true and an idempotency_key input (see Protocol and transport). When the accepted tax IDs need contracted seats and none is free, accept_nif_transfer buys the missing ones, so always send an idempotency_key. (not part of the totals above: * does not cover their scopes)

Account members

The people of the account: list and read the members with their account role (owner, admin or member) and their external-advisor mark, add a member, change their role or their external-advisor mark and remove them, read, set and revoke the grant of a member on one tax ID, read and set their module access, and manage the invitations that create them. delete_account_member is irreversible: the server publishes it with destructiveHint: true and an idempotency_key input. (not part of the totals above: * does not cover their scopes)

Tax IDs of the account

The tax ID portfolio of the account: list, find by fiscal identifier, read, register, update, activate (one or many), deactivate and archive tax IDs, follow and reconcile the creation of one, the invoicing statistics per tax ID, whether a tax ID can already issue and a preview of the charge of adding or activating additional tax IDs, plus the usage of the account in the current period (requests and documents, broken down by tax ID). Additional tax IDs are billed by contracted seat: get_additional_nif_seats reads the contracted, occupied and free seats of the account, preview_additional_nif_seat_change previews, without charging, setting them to a quantity, and update_additional_nif_seats sets it (absolute quantity, idempotent with idempotency_key). Buying seats charges the prorated difference at once; reducing them takes effect at renewal. Below the occupied seats, deactivate lists the UUIDs of the tax IDs that will be deactivated at renewal, exactly as many as exceed the seats; if the reduction ends an applied offer package, accept_offer_package_loss (boolean) confirms the loss. create_company, activate_company and activate_companies buy the seats that are missing when none is free and the account pays, so send an idempotency_key. Registering or reactivating an additional tax ID can be charged: see Additional tax IDs. (18 tools)

Account webhooks

The webhook endpoints of the account, separate from the endpoints of one tax ID: create, read, list, update and delete an endpoint, rotate its signing secret, send a test delivery, read its deliveries and retry a failed one. An account endpoint receives the events of the account and, by account_relationship (own, managed or all), those of its tax IDs. See Account webhooks. (10 tools)

These tools use the same webhooks:* scopes as Webhooks & events, but they work only with an API key: an OAuth token never lists them, and calling one answers 403 forbidden_action. A test key reads the test endpoints; creating, updating, deleting, rotating, testing and retrying need a live key. The person who issued the key must be an owner or admin of the account today, and the key must cover all its tax IDs. delete_account_webhook and rotate_account_webhook_secret are irreversible: the server publishes them with destructiveHint: true and an idempotency_key input.

API keys

Self-service API keys of your account: list, create, get, read its daily usage, rotate the secret, revoke and replace the tax ID scope of a key. A new scope can never exceed the one of the credential that changes it. The secret is returned once, at creation and rotation. revoke_api_key and rotate_api_key_secret are irreversible: the server publishes them with destructiveHint: true and an idempotency_key input. See scoped keys. (7 tools)

Portfolio workforce

Consolidated time-tracking compliance across the tax ID portfolio: one row per active tax ID within the scope of the credential, the owner company of the account excluded, with the state of its latest monthly close and the totals of the last closed one (balance, overtime and number of employees). One call aggregates the whole portfolio, where every other time-tracking tool operates on one tax ID. (1 tools)

Payments & gateways

Payment and store integrations: Stripe auto-invoicing, connected accounts, payouts, the integration event inbox, WooCommerce and Shopify store management and diagnostics. These tools are API-key-only. Availability also depends on the company’s modules and provider configuration. (26 tools)

Emails

Sent-email log: list the emails Factuarea sent on the company's behalf (invoices, quotes, delivery notes, payment reminders), read one by its id, and summarise the outcome for a batch of up to 100 documents in a single call. Use it to answer "did the email for this invoice go out?" and to investigate failed sends. (3 tools)

API request logs

The traffic of your integration against the public v1 API over the last 30 days: list the calls with their method, path, status code, duration, API-key prefix and environment, filtering by errors only or by any of those fields, and read a single one by its request_id — the opaque identifier every response returns in its header. list_developers_request_logs and get_developers_request_logs show the requests of one tax ID; list_account_request_logs and get_account_request_log show those of every key of the account, in the environment of the key that calls. The account tools work only with an API key, issued by an owner or admin of the account and covering all its tax IDs: see account request logs. Use them to debug an integration: what it called, when, with which status and how long it took. Headers, body and query string are not stored and are never returned. (4 tools)

Employees

Workforce roster: search, CRUD-lite (create/update/deactivate/reactivate), stats and the invitation lifecycle (send/resend/cancel and list employee invitations). Gated by the control_horario module. (18 tools)

create_employee and reactivate_employee buy the contracted seats that are missing when none is free and the account pays: send an idempotency_key so a retry does not charge twice. See Employee seats.

Durable employee batches support preparation, quote review, confirmation and recovery through the same operation.

Employee seats

Employee-seat billing by contracted seat: preview and read the charge and the billing, subscribe, set the contracted seats, change the quantity and cancel the add-on, plus the seat offer redemptions. update_employee_seats sets the contracted seats (absolute quantity, idempotent with idempotency_key): buying charges the prorated difference at once, and reducing takes effect at renewal without a refund. preview_employee_seat_charge previews the charge, without charging, of hiring employees or, with contracted_seats, of setting the seats; contracted_seats cannot be combined with count or employee_ids. When the new quantity is below the occupied seats, update_employee_seats, update_additional_nif_seats and cancel_employee_seat_addon accept deactivate, the list of UUIDs of what is deactivated at renewal, and accept_offer_package_loss, a boolean that confirms the loss of an applied offer package if the reduction breaks it. Gated by the control_horario module. (12 tools)

Managed-company seat offers

Private managed-company seat offers use the paying master company and the current companies:* scope. Preparing or refreshing a quote does not activate companies or charge. prepare_employee_seat_offer_redemption and prepare_gestoria_seat_offer_redemption accept kind: apply_to_existing, which applies the code to the seats the account already has and creates, activates and reactivates nothing; it carries no other key. During the trial a seat redemption answers 422 customer_offer_not_eligible with details.reason = trial_active, and an offer package code, which MCP does not redeem, answers reason = product (see Offers). (6 tools)

Work schedules

Weekly work schedules and their assignments: search, CRUD, archive/unarchive, assign/unassign to employees, and read an employee's effective schedule. Gated by the control_horario module. (11 tools)

Time tracking

Time clock (RD-ley 8/2019): clock in/out with pauses, manual entries, the time-correction workflow, balances and monthly time sheets, the tamper-evident monthly register close (close/reopen/seal, signature, chain validation) and its exports, plus payroll exports. Gated by the control_horario module. (29 tools)

Absences

Absences: types, policies (with carryover configuration and assignments), requests (create/approve/reject/cancel), balances and the team absence calendar. Gated by the control_horario module. (25 tools)

Presence

Presence: the live presence board and per-employee / daily presence state. Gated by the control_horario module. (3 tools)

Holidays

Holidays: read the company holiday calendar and resolve the holidays applicable to an employee's region (CCAA). Gated by the control_horario module. (3 tools)

Projects

Task projects and their boards: create, edit, archive and delete projects, resolve one by its key (DEV), manage the columns of its board and its task custom fields, export and import its tasks as JSON, read the time logged on it and turn billable time into a draft invoice (invoice_project_time needs invoices:write, because it creates an invoice). Gated by the tasks module. delete_project, delete_project_column and delete_project_custom_field are irreversible, like the delete tools of Tasks. (22 tools)

Tasks

Tasks on the board: search, create, edit, duplicate, move, reposition and delete tasks — one by one or in bulk —, resolve one by its key (DEV-12), change its status, assign it, label it, comment on it, relate it to other tasks, link it to documents and contacts, attach files or create a single-use upload link, log time with a timer and read its activity. The time logged here is task time, not the working-day clock-in of Time tracking. Gated by the tasks module. (52 tools)

Users

The members of the company — the people a task can be assigned to — and the user behind the credential. Not tied to a plan module. (2 tools)

Notifications

The in-app notifications of the credential holder: list them and mark one or all of them as read. Not tied to a plan module. (3 tools)

Agenda

The combined agenda of a date window of up to 93 days: due tasks and, for each layer the credential can also read, invoice and expense due dates, quote and pro-forma expiries, recurring invoice runs, tax deadlines, absences and holidays. Gated by the tasks module. (1 tools)

Managed-account tools

The ten tools that provision and administer managed accounts are not part of the 668 above, and they do not count in the 41 domains. Their scopes, accounts:read and accounts:write, are privileged: the super-scope * does not cover them, so a key that only holds * does not see these tools in tools/list. List the scope explicitly. Every call also checks that your account holds the managed-account provider privilege that we grant, and answers 403 privileged_scope_required if it does not. They never come through OAuth: use an API key. Managed accounts explains the operation each tool mirrors.

provision_managed_account, change_managed_account_plan, reissue_managed_account_claim and end_account_management are irreversible: the server publishes them with destructiveHint: true and an idempotency_key input.

Three things have no tool, by design:

• The bulk import. It reads uploaded CSV files, which the MCP server does not carry, and it is privileged too. Use the REST API: Bulk import.
• The client's side of a managed account. What the client does with their account — claiming it, raising or lowering the level the provider keeps, ending the management and taking over the payment — happens in the app, and has no /v1 operation either.
• The management of granted access. Giving, resending, accepting, declining, revoking, changing the level or the scope of, or renouncing an access between accounts happens in the app, never through the API or MCP. Granted access explains it.