Brex

Brex

This connector reads one Brex account through the official Brex API (https://api.brex.com): company, users, departments, locations, cards, card and cash accounts, card and cash transactions, statements, expenses, budgets, spend limits, vendors and Brex Travel trips. Three small admin actions are included and installed switched off: lock a card, unlock a card and set an expense memo.

It cannot send money, by design. There is no tool for transfers, payments, payouts, bill payments, ACH, wires, checks, card creation or limit changes, not even a switched-off one. Asking the model to pay someone will not work.

Setup (about 5 minutes, Brex account admin or card admin)

1. Sign in to https://dashboard.brex.com and open Developer, then Settings (accept the developer API terms if Brex asks).
2. Click Create Token, give it a name such as AnythingMCP and select only the read-only scopes this connector uses: companies.readonly, users.readonly, departments.readonly, locations.readonly, cards.readonly, accounts.card.readonly, accounts.cash.readonly, transactions.card.readonly, transactions.cash.readonly, statements.card.readonly, statements.cash.readonly, expenses.card.readonly, budgets.readonly, vendors.readonly, travel.trips.readonly. Leave out the ones you do not need; the matching tools then answer 403.
3. Do not select transfers, incoming_transfers, cards.pan or any other write scope unless you want the switched-off admin actions below.
4. Click Allow Access, copy the token (it starts with bxt_) into BREX_API_TOKEN and install. Brex shows it only once.
5. Run brex_get_company to check.

Read-only by default. A token with only .readonly scopes cannot change anything in Brex. To use the admin actions, create a token that also has cards (for brex_lock_card and brex_unlock_card) or expenses.card (for brex_update_expense_memo) and switch those tools on in the connector. Brex's cards scope would also let other software create cards; this connector has no such tool.

Financial data is sensitive. Balances, transactions, expenses, card details and employees are confidential company data. Share this MCP server only with people allowed to see them, read only what the user asks for and do not copy it elsewhere. Card numbers, CVCs and bank account and routing numbers are never returned: the tools only show the last four card digits and drop bank details.

Writes: confirm first. Before brex_lock_card, brex_unlock_card or brex_update_expense_memo, show the user what will change (card name and last four digits, or expense and new memo) and wait for a clear yes.

How to work

1. Who and where: brex_get_company, brex_get_current_user, brex_list_users, brex_get_user, brex_list_departments, brex_list_locations.
2. Cards: brex_list_cards, brex_get_card; admin actions brex_lock_card, brex_unlock_card.
3. Card spend: brex_list_card_accounts (balances and limit), brex_list_card_transactions (settled card transactions, filter with posted_at_start), brex_list_card_statements.
4. Business account: brex_list_cash_accounts, brex_get_cash_account, brex_list_cash_transactions, brex_list_cash_statements.
5. Expenses: brex_list_expenses (use compliance_status DUE or OVERDUE to find missing receipts or memos), brex_get_expense, brex_update_expense_memo.
6. Budgets and limits: brex_list_budgets, brex_get_budget, brex_list_spend_limits, brex_get_spend_limit.
7. Vendors and travel: brex_list_vendors, brex_get_vendor, brex_list_trips, brex_get_trip.

Amounts are objects {amount, currency} in the smallest unit of the currency: {"amount": 700, "currency": "USD"} is 7.00 USD. Divide by 100 for USD and EUR before showing them.

Paging: list tools answer with next_cursor and items. Pass cursor = next_cursor for the next page; it is null on the last page. limit is up to 1000 (expenses up to 100).

Limits and tokens: Brex allows 1,000 requests per 60 seconds per account; a 429 means wait a minute. A token that is not used for 90 days expires, and a token stops working when its user is no longer active. Revoke it any time under Developer, Settings.

Common errors

• 403 "Invalid or Revoked Token" (or 401): the token is wrong, revoked or expired. Create a new one.
• 403 on some tools only: the token lacks the scope of that tool, or the token's user lacks the Brex role (most data needs an account admin).
• 404: the id does not exist in this Brex account.

Out of scope: moving money of any kind, issuing or terminating cards, changing limits or budgets, approving expenses, uploading receipts, managing users and webhooks. There is no sandbox: Brex only offers production.