Use Moss with AI via MCP
Corporate cards, incoming invoices and employee expenses all converge in Moss – a data set that answers many finance questions directly. No MCP server exists for it yet, so we use the vendor's public REST API for CompanyGPT.
What is Moss?
Moss is a spend management platform from Moss GmbH in Berlin, licensed by BaFin as an electronic money institution. Companies use it to manage corporate credit cards, incoming invoices with approval workflows, expense reimbursement and automated pre-accounting including DATEV export. More than 7,000 companies use the platform, supported by over 40 ready-made integrations with systems such as DATEV, Personio, NetSuite and Xero.
For AI agents the value lies in answering questions about ongoing spend. Finding out which costs a team has accumulated, which receipts are still missing or which approvals are pending usually means exporting and filtering lists. Through an integration, an agent answers those questions conversationally and prepares summaries for month-end close or budget discussions.
Connection at a Glance
- MCP server
- None from the vendor – custom integration
- Transport
- REST over HTTPS, exposed as an MCP integration
- Authentication
- OAuth 2.0 client credentials: API key (key ID + secret) from the Moss settings, exchanged for a bearer token
- Operating model
- SaaS
- Recommendation
- Read-only access, restricted to finance roles
- Ecosystem
- Over 40 existing integrations, including DATEV
How to Connect Moss to CompanyGPT
Moss currently offers no MCP server. The vendor does, however, document a public REST API at developers.getmoss.com that exposes spend, transactions and receipt data.
Authentication uses OAuth 2.0 client credentials: an API key created in the Moss settings (key ID + secret) is exchanged for a bearer token. Your administrators create the keys directly in the Moss application (Settings → Company Settings → API Keys), not in a separate developer portal; the token issued at the /oauth2/token endpoint is valid for roughly one hour. From the API specification we build an MCP integration for your CompanyGPT environment; the credentials are stored there and nowhere else. Because financial data is involved, we consistently recommend read-only access and a tight selection of enabled endpoints.
In CompanyGPT, your administrators limit the integration via roles and groups to the people who are meant to see this data anyway – typically accounting, controlling and management. For recurring routines such as monthly reporting, retrieval can additionally be automated in an n8n workflow, which innFactory operates as a dedicated service.
Typical Use Cases
How AI agents in CompanyGPT work with Moss
Put team spend in context
Controlling asks how card spend in one business unit developed over the current quarter and receives a summary highlighting notable items.
Track down missing receipts
Ahead of month-end close, the agent lists transactions without an attached receipt so accounting can follow up in a targeted way instead of filtering manually.
Keep approvals in view
The agent answers which invoices are still awaiting approval and how long they have been pending – useful for the finance team's weekly sync.
Frequently Asked Questions
Moss and AI – the most important answers
Does Moss have an MCP server?
No. Moss does not provide an MCP server so far. The connection to CompanyGPT runs through the public REST API that the vendor documents at developers.getmoss.com.
How is access authenticated?
Via OAuth 2.0 client credentials: an API key created in the Moss settings (key ID + secret) is exchanged for a bearer token. The credentials are stored exclusively in your CompanyGPT environment and can be revoked in Moss at any time.
Can the agent trigger payments or grant approvals?
We do not design the integration that way. For financial data we recommend read-only access; approvals and payments stay within the established Moss workflows and their assigned responsibilities.
Who in the company can query this data?
Only the roles and groups your administrators assign the integration to in CompanyGPT. That keeps access cleanly limited to accounting, controlling and management.
How does this fit our DATEV process?
The integration does not replace any bookkeeping process. It adds enquiry and analysis on top – export to DATEV and pre-accounting continue to run in Moss as before.
Moss and Your AI – GDPR-Compliant with CompanyGPT
CompanyGPT is the enterprise AI assistant in your own cloud tenant: all relevant AI models, your company data and integrations like Moss – centrally managed, with roles and permissions. We set up the connection together with you.
Moss is a trademark of its respective owner (Moss GmbH). Its mention describes compatibility and does not imply any partnership or endorsement. Availability and scope of the connection depend on the respective vendor.