Ramp

Ramp

This connector reads one Ramp business through the official Ramp Developer API (https://api.ramp.com/developer/v1): business and balance, users, departments, locations, entities, physical and virtual cards, funds (spend limits) and spend programs, transactions, reimbursements, bills, vendors, receipts, general ledger accounts and statements. Three admin actions are included and installed switched off: lock a card, unlock a card and set a transaction memo.

It cannot send money, by design. There is no tool for bill payments, reimbursement payouts, transfers, card issuing or limit changes, not even a switched-off one. It cannot approve anything either.

Setup (about 10 minutes, Ramp admin or business owner)

1. Sign in to https://app.ramp.com and open Company, then Developer. Click Create New App, name it (for example AnythingMCP) and accept the terms.
2. Under Grant types, add Client Credentials.
3. Under Scopes, click Configure allowed scopes and allow exactly these read-only scopes: business:read, users:read, departments:read, locations:read, entities:read, cards:read, funds:read, spend_programs:read, transactions:read, reimbursements:read, bills:read, vendors:read, receipts:read, accounting:read, statements:read. The connector asks for all of them when it gets a token, so every one must be allowed, or Ramp refuses the token with invalid_scope.
4. Copy the Client ID into RAMP_CLIENT_ID and the Client Secret into RAMP_CLIENT_SECRET, then install. AnythingMCP gets an access token (valid 10 days) with HTTP Basic auth and renews it by itself.
5. Run ramp_get_business to check.

Read-only by default. With these scopes the token cannot change anything in Ramp. To use the switched-off actions, also allow cards:write (for ramp_lock_card and ramp_unlock_card) or memos:write (for ramp_update_transaction_memo) in the Ramp app, add the same scope to the scope list in the connector's OAuth settings, and switch the tool on. Ramp's cards:write scope also lets software issue cards; this connector has no such tool. Never allow bills:write, reimbursements:write, cards:read_vault or limits:write for this app.

Financial data is sensitive. Balances, transactions, bills, reimbursements, cards and employees are confidential company data. Share this MCP server only with people allowed to see them, read only what the user asks for and do not copy it elsewhere. Card numbers and CVCs are never returned (the vault endpoints are not used), and bank account details of entities and vendors are left out.

Writes: confirm first. Before ramp_lock_card, ramp_unlock_card or ramp_update_transaction_memo, show the user what will change and wait for a clear yes.

How to work

1. Company: ramp_get_business, ramp_get_business_balance, ramp_list_entities, ramp_list_departments, ramp_list_locations.
2. People: ramp_list_users, ramp_get_user.
3. Cards and limits: ramp_list_physical_cards, ramp_get_physical_card, ramp_list_virtual_cards, ramp_get_virtual_card, ramp_list_funds, ramp_get_fund, ramp_list_spend_programs, ramp_get_spend_program; actions ramp_lock_card, ramp_unlock_card.
4. Spend: ramp_list_transactions (requires_memo=true finds transactions missing a memo), ramp_get_transaction, ramp_update_transaction_memo, ramp_list_receipts, ramp_get_receipt.
5. Reimbursements and bills: ramp_list_reimbursements, ramp_get_reimbursement, ramp_list_bills, ramp_get_bill, ramp_list_vendors, ramp_get_vendor.
6. Accounting and statements: ramp_list_gl_accounts, ramp_list_statements, ramp_get_statement.

Amounts: transaction amount is a plain number in dollars (90.0). Objects such as {"amount": 9000, "currency_code": "USD"} are in the smallest unit (cents): divide by 100.

Paging: lists answer with data and next_page, a URL. Pass the value of its start parameter as start to get the next page; next_page is null on the last page. page_size is 2 to 100 (default 20).

Rate limit: 200 requests per 10 seconds per IP address; a 429 means wait a few seconds.

Sandbox: Ramp's sandbox is at https://demo-api.ramp.com. With a sandbox app, change the connector's base URL to https://demo-api.ramp.com/developer/v1 and its token URL to https://demo-api.ramp.com/developer/v1/token. Production and sandbox credentials are separate.

Common errors

• Could not obtain an access token: the client ID or secret is wrong, Client Credentials is not enabled, or a requested scope is not allowed in the app (invalid_scope).
• 403: the token lacks the scope of that tool.
• 404 with DEVELOPER_7002 "Access token ... not found": Ramp does not know the token (revoked, or a sandbox token on production). Ramp answers 404 here instead of 401. Check the base URL and create a new client secret if needed.
• Other 404: the id does not exist.

Out of scope: paying bills or reimbursements, transfers, issuing or terminating cards, changing funds and limits, approvals, uploading receipts, users, vendors and accounting setup.