What Is Paraşüt MCP? Connecting Accounting Data to an AI Assistant, Setup, Write Risks and Requirements
You ask the assistant about your customer and supplier accounts, invoices, stock or account transactions; Paraşüt MCP fetches the data through the Paraşüt REST API V4, and you can also have it create records. Paraşüt is a Turkish cloud accounting app. The code has 34 tools: 18 read, 13 write records (they require a confirmation parameter), and 3 send e-invoices (e-Fatura), e-archive invoices (e-Arşiv) and e-SMM freelance receipts to GİB (the Turkish Revenue Administration); these require double confirmation, and the README states that what is sent cannot be undone. It is an MIT-licensed community project by a developer named Yiğit Konur, with no official tie to Paraşüt. You need a Paraşüt account and an API Client ID/Secret issued by Paraşüt; the published npm version (1.0.0) also asks for your Paraşüt username and password. This page is not accounting or tax advice.
- What it does
- Lets the assistant query your Paraşüt data and create records
- Type
- MCP server (local, community project, unofficial)
- Where
- Claude Desktop, Cursor; others are mentioned in the README without setup steps
- Password
- The published version asks for username and password
- Does it write
- Yes: invoices, payments, e-documents; with a confirmation parameter
- Turkish
- Paraşüt and the data are in Turkish; reply language depends on the assistant
- Cost
- MCP is free (MIT); Paraşüt account and API access are separate
What is Paraşüt MCP for?
MCP is the standard that lets AI programs connect to outside tools. This server opens Paraşüt's API to the assistant: you ask "What are this customer's open invoices?" or "What are my cash and bank balances?", and the assistant fetches the customer and invoice lists, stock levels, account transactions and a financial summary (cash, receivables and payables due). On the write side it can create customer/supplier accounts, products, sales and purchase invoices, and record collections and payments, bank fees, salaries and taxes.
18 tools read; the 13 tools that write records require a confirmation parameter, and the 3 tools that send to GİB require double confirmation.
In the code the tools split up like this (per the source files): 18 tools only read; 13 tools write records and return only a preview unless confirm is passed; 3 tools (sending e-Fatura, e-Arşiv and e-SMM) send documents to GİB and additionally require an "irreversible" confirmation. There is no tool that deletes collections, products or customer/supplier accounts; the closest to deletion is the tool that cancels an invoice, whose description says "DESTRUCTIVE", and there is also a tool that reverses the cancellation.
Who it suits: businesses and accountants who use Paraşüt and want to speed up account and invoice queries with an assistant. It is not an official product; know the risks before using it as an accounting tool.
How do you install Paraşüt MCP?
Requirements: a Paraşüt account, the API Client ID and Client Secret issued by Paraşüt, Node.js (the package requires 18 or later) and the company number (company ID). Paraşüt's API documentation says to email destek@parasut.com for the Client ID and Secret.
Add this entry to the claude_desktop_config.json file (the example from the README; replace the key values with your own details):
› { "mcpServers": { "parasut": { "command": "npx", "args": ["-y", "@yigitkonur/parasut-mcp-server"], "env": { "PARASUT_CLIENT_ID": "your-client-id", "PARASUT_CLIENT_SECRET": "your-client-secret", "PARASUT_USERNAME": "your-email@example.com", "PARASUT_PASSWORD": "your-password", "PARASUT_COMPANY_ID": "123456" } } } }!The published package (1.0.0) asks for your Paraşüt password as an environment variable, so it sits in plain text in the configuration file. The README also describes a token-based option, but that option is not in the published package (based on the package's code); it exists only in the latest code in the repository. Don't share the configuration file, and be careful with backups.
In Cursor, add the same parasut entry under Features › MCP Servers or to the .cursor/mcp.json file. The README example has no PARASUT_COMPANY_ID line, but it is required in the published package.
The README mentions Claude Code and Windsurf but gives no setup command for them. The generic stdio command is npx -y @yigitkonur/parasut-mcp-server; you need to provide the environment variables in the client's MCP settings.
The npm package 1.0.0 (January 13, 2026, only release) and the latest code in the repository (September 25, 2026) differ: the HTTP mode, OAuth and token options in the README are not in the published package and are used by building from the repository. The package's repository field and its README point to two different repositories.
How do you use Paraşüt MCP?
Start with read-only tasks, and for every request that requires writing, have the assistant show a preview first and check it.
!Write tools return only a preview unless confirm=true is passed; e-document tools additionally require an "irreversible" confirmation. This safeguard depends on the assistant sending the argument; keep tool approval turned on in your client to make sure you actually approve every operation. For a sent e-document the README says it is "absolutely irreversible"; Paraşüt's API documentation does not list an endpoint for canceling e-documents.
According to its documentation, the Paraşüt API is limited to 10 requests per 10 seconds and the access token is valid for 2 hours; the server handles both itself.
Which programs does Paraşüt MCP work in?
| Claude DesktopYes | The README gives the configuration file paths and the JSON. |
|---|---|
| CursorYes | The README gives a JSON example. |
| Claude Code, WindsurfUnclear | The README mentions them in its intro paragraph but gives no setup steps; "not in the docs" does not mean "doesn't work". |
What does Paraşüt MCP access, and what does it write?
Customer and supplier accounts and contact details, sales and purchase invoices, products and stock, cash and bank accounts and transactions, financial summary, category, tag and employee lists, GİB e-invoice taxpayer status lookup.
Creating and updating customer/supplier accounts, products, invoices, collections, payments, bank fees, salary and tax records; sending e-Fatura, e-Arşiv and e-SMM to GİB.
cancel_invoice cancels the invoice (the README says "or deletes the invoice"; the README does not specify which Paraşüt endpoint it calls) and it can be reversed with recover_invoice. There is no other tool that deletes accounts, products, collections or transactions.
The MCP code runs on your computer and connects to the Paraşüt API (api.parasut.com). The account, invoice and bank data the assistant sees goes to the servers of the AI service you use; that service's privacy terms apply.
!Paraşüt's API documentation says that almost every action done in the Paraşüt web interface can also be done through the API. Connecting with a password, this server uses your account's full permissions; if connecting with a restricted user is possible, prefer that. The official sources do not describe admin approval or team permissions. GitHub Security Advisories and the OSV database list no entries; that does not mean "safe". The only open issue (#3) concerns a multi-replica setup of the HTTP/OAuth mode and applies only to the latest code in the repository.
Is Paraşüt MCP free?
The MCP software is MIT-licensed and free. But it needs a Paraşüt account to work, and the official pages don't say which Paraşüt plan includes API access. Paraşüt's pricing page offers a 14-day trial without a credit card; after that it shows the plan price through a calculator (the page has no fixed price table). So it is not clear whether the total usage is free.
- MIT: you are free to use and modify the code
- Paraşüt's terms of use and API terms also apply
- MCP does not appear on Paraşüt's AI features or pricing pages: this project is not supported by Paraşüt
Sources: README, LICENSE, Paraşüt pricing page and API documentation. This is not legal, financial or accounting advice.
Common problems and fixes
| What happens | What to do |
|---|---|
| The password is written in plain text to an environment variable | The published package has no other way. The token method exists only in the latest code in the repository; using it means building from the repository. |
| The Paraşüt API returns errors | Paraşüt's documentation sets a limit of 10 requests per 10 seconds; according to the README the server applies its own token bucket and retries. |
| The access token returns 401 after 2 hours | Paraşüt's documentation says the token is valid for 2 hours and is renewed with a refresh token; the README says the server refreshes it automatically on a 401. |
| Reported by users In a multi-replica Docker setup, the authorization code is invalid on another replica | Open issue #3: authorization codes are kept in memory; use a single replica. Applies only to the HTTP mode. |
How do you remove Paraşüt MCP?
- Remove from the configuration: Delete the
parasutentry from the Claude Desktop or Cursor configuration file and restart the client. - Clear the password: If you wrote the password into the configuration file, delete it from the file; it may remain in backups or synced folders. Consider changing your password if needed (this is a suggestion, not stated in the official documentation).
- API client: Paraşüt's documentation does not give a way to revoke the Client ID and Secret; contact destek@parasut.com.
Frequently asked questions
Is this Paraşüt's official MCP?
No. The README clearly states that it is unofficial and not affiliated with Paraşüt Yazılım Teknolojileri A.Ş. MCP does not appear on Paraşüt's pricing or AI features pages.
Can the assistant issue an invoice without my approval?
According to the README and the code, write tools return only a preview unless confirm=true is passed; e-document tools additionally require an irreversible confirmation. This safeguard depends on the assistant sending the argument; keep tool approval turned on in your client.
Can a sent e-invoice be undone?
The README says it is absolutely irreversible. Paraşüt's API documentation does not list an endpoint for canceling e-documents; for cancellation and objection options in the Paraşüt interface, see Paraşüt's own help pages.
Do I have to give my Paraşüt password?
In the published npm version, yes: username and password are required. The latest code in the repository also has a token method. According to Paraşüt's documentation, you need to request the Client ID and Secret from destek@parasut.com.
Is it free?
The MCP software is MIT-licensed and free. Paraşüt offers a 14-day trial without a credit card, then the plan price applies; the official pages don't say which plan includes the API.
Related guides
Sources
Not clear in the official sources: Which Paraşüt plan includes the API and any extra fee · Paraşüt API terms of use · whether an e-document can be canceled from the Paraşüt interface · which endpoint the cancel_invoice tool calls · whether it works in Claude Code and Windsurf · quality of replies in Turkish. Each is covered in the relevant section.