PlugWiki
Carbon ERP logo

Carbon ERP MCP Server: Setup for Claude, Cursor and Other Apps

OfficialRemote
Getcrbnos/carbon
Tools
4
2 read · 2 change
Works in
14
apps
Risk
High
can delete
Auth
OAuth
sign in, no key

Lets Claude, Cursor and ChatGPT read and update your Carbon manufacturing data, such as orders, inventory, jobs and quotes.

Carbon is an open-source ERP for manufacturing, and it runs its own MCP server. Your assistant gets four tools to search Carbon's actions, read their details and run them as you. Ask it to list open sales orders, check on-hand stock, draft a quote or list jobs behind schedule.

The server is hosted by Carbon. Claude Desktop, Claude.ai and ChatGPT connect by adding the address and signing in. Claude Code, Cursor, VS Code and Codex use a Carbon API key. API and MCP access needs a Business plan on Carbon Cloud, and a commercial license when self-hosted.

Good for

  • Manufacturers already running Carbon who want to ask about orders and stock in plain language
  • Planners and buyers who check late purchase orders and jobs behind schedule
  • Teams that want an assistant limited to a read-only Carbon API key

Works in

14 should work

Tap an app to see how to set it up and any known problems.

Install Carbon ERP MCP

Claude Code

  1. 1

    Copy this prompt.

    Add the Carbon ERP MCP server to Claude Code. Run this command:

claude mcp add --transport http carbon https://app.carbon.ms/api/mcp --header "Authorization: Bearer <api-key>"

Then check that it loaded and tell me if I need to sign in or restart.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Business plan on Carbon Cloud, API key from Settings > API Keys.

Read-only mode: Create the API key with View access only and no Create, Update or Delete scopes.

From the vendor's docs. Source.

Tools

  • Runs a Carbon action that reads or changes records

    Runs a Carbon action by name. This is how the assistant lists sales orders, checks stock, drafts quotes, creates jobs or updates statuses. Lists come back as CSV, and it can only do what your Carbon permissions allow.

    Try: “Show all open sales orders due to ship this week.”

    Write · call_tool

  • Runs a Carbon action that deletes or removes records

    Runs the Carbon actions that delete or remove records. It is a separate tool so your client can ask you before each call. It works only if your Carbon role or API key allows deleting.

    Try: “Delete the draft quote I created by mistake this morning.”

    Delete · call_destructive_tool

  • Used by the assistant behind the scenes

    Finds the Carbon actions that fit your question

    Looks through Carbon's catalog of ERP actions and returns the best matches. It knows shop-floor shorthand like PO, RMA, BOM and NCR, and you can filter by module or by read, write or delete.

    Try: “Find the actions for purchase orders that are past their promised date.”

    Network · search_tools

  • Shows what one Carbon action needs and returns

    Fetches the details of up to 10 Carbon actions at a time: what each one does, which permission it needs, and what inputs and results it has. The assistant reads this before it uses an action.

    Try: “What inputs does the create-quote action need?”

    Network · describe_tool

Read from the source code

Permissions

high risk · 4 things to watch

High risk

The assistant can read, change and delete manufacturing records with whatever permissions your Carbon sign-in or API key has. Create a key limited to View access for each client, and approve write calls by hand.

What it can do

Watch out for

  • It can delete records, not just read them

    One tool exists only to run delete actions. Use a key with View access only, or approve each call by hand. github.com

  • It acts with your full Carbon permissions

    A connector inherits the role of whoever signed in, across every module they can reach. Prefer a scoped key per client. github.com

  • Record text can carry instructions

    Carbon warns that returned records are written by people and must not be obeyed as instructions. Review writes before approving them. github.com

  • Requests are rate limited

    A new key allows 20 requests a minute and all keys of a company share 60. Heavy prompts may get 429 errors. github.com

Security advisories

No published security advisories as of Nov 1, 2026.

Technical details
Turning on read-onlyGive the API key only View access with no Create, Update or Delete scopes. The server itself has no read-only switch.
Talks toapp.carbon.ms (Carbon Cloud) or your own Carbon deployment
Sign-in and keysConnector clients sign in through the browser. Key clients send an API key you create under Settings > API Keys in the Authorization header.
Scopes

  • Carbon API key scopes per module (view, create, update, delete)

Questions

Is the Carbon MCP server official?

Yes. Carbon Manufacturing Systems builds it and ships it in the Carbon repository, at the same address as the Carbon app.

Does it need a paid Carbon plan?

Yes. On Carbon Cloud, API and MCP access is a Business plan feature, and Starter keys are rejected. Self-hosted use needs a commercial license.

Do I need an API key?

Not for Claude Desktop, Claude.ai or ChatGPT, which sign in through the browser. Claude Code, Cursor, VS Code and Codex use a key from Settings > API Keys.

Can I make it read-only?

Yes, through the key. Give it View access to the modules it needs and no Create, Update or Delete. The server has no read-only flag of its own.

Can it delete things?

Yes, if your role or key allows it. Delete actions go through a separate tool, so a client can ask before each one.

What is the Carbon MCP server URL?

It is https://app.carbon.ms/api/mcp on Carbon Cloud. A self-hosted deployment serves it from its own address.

Why only four tools?

Carbon has too many actions to list at once. The four tools let the assistant search, look up and then run only the action a task needs. This list is the server's full tool set.

Information

updated Nov 2, 2026

Publisher
Official
Transport
Streamable HTTP
Auth
OAuth
License
AGPL-3.0 + Commercial (EE)
Last commit
Oct 31, 2026
Open issues
81

WebsiteGitHubIssues

Sources

Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.

Show all 3
  1. github.com · github.com
  2. github.com · github.com
  3. github.com · github.com

Facts from the official MCP registry, GitHub, npm, PyPI and the Docker catalog. Updated Nov 2, 2026.