Use Nefin from Claude Code

• Claude Code installed and signed in. See Anthropic’s setup guide.
• A Nefin account with two-step verification. If you haven’t set it up, Nefin walks you through it the first time you connect.
• AI switched on for at least one company. An owner turns it on in Settings → Company. Claude can only reach companies where AI is on.
• The Professional or Business plan in Nefin. Starter companies show up as locked, with an upgrade link.

We recommend this way for your own machine. There is no token to copy or store: you sign in to Nefin in your browser and Claude Code keeps the session.

claude mcp add --transport http --scope user nefin https://api-books.nefin.app/mcp

The session renews itself while you use it. If you don’t use it for 30 days, run /mcp → Authenticate again.

Ask in plain language:

• “List my Nefin companies.”
• “Which invoices in Acme Ltd are overdue, and who owes the most?”
• “In Acme Ltd, run the profit and loss for last quarter and compare it with the quarter before.”
• “In Acme Ltd, draft an invoice for Bardhi SHPK: 10 hours of consulting at 45.00, standard VAT.”
• “In Acme Ltd, show me every bill from Bardhi SHPK this year and the total we paid.”
• “Get Nefin's guide for bank statements, then reconcile this statement for Acme Ltd.”
• “Get Nefin's guide for payroll, then show me last month's payroll run in Acme Ltd.”

Amounts go in and come back as exact decimals, such as "1234.56", so nothing gets rounded along the way.

To set Nefin up for everyone who works in a repository, add it with --scope project. Claude Code writes an .mcp.json file that you can commit:

{
  "mcpServers": {
    "nefin": {
      "type": "http",
      "url": "https://api-books.nefin.app/mcp"
    }
  }
}

The file holds only the URL, with no credentials. Each teammate signs in with their own Nefin login and gets their own access, and the audit log shows who did what.

Where no browser can open, such as CI, a remote box or a scheduled claude -p job, use a personal token.

claude mcp add --transport http --scope user nefin https://api-books.nefin.app/mcp \
  --header "Authorization: Bearer <your-token>"

{
  "mcpServers": {
    "nefin": {
      "type": "http",
      "url": "https://api-books.nefin.app/mcp",
      "headers": {
        "Authorization": "Bearer ${NEFIN_TOKEN}"
      }
    }
  }
}

A token has the same access as you. Treat it like a password, give each machine its own, and revoke any you no longer use. The same page has ready-made setup for Cursor, VS Code and Gemini CLI.

Nefin gives Claude Code 26 tools. Each one works in one company at a time, so name the company in your request. With one company Claude uses it automatically. With several, Claude asks which one you mean.

• Your permissions, nothing more. Claude works as you in each company. If your role can’t post journals, neither can Claude.
• Everything is on the record. Changes appear in the audit log under your name.
• Claude Code asks first. Before it calls a tool you haven’t allowed, Claude Code asks your permission. To stop it asking about lookups, allow only the read tools in .claude/settings.json and keep the ones that create or post things on ask:

{
  "permissions": {
    "allow": [
      "mcp__nefin__list_companies",
      "mcp__nefin__get_guide",
      "mcp__nefin__run_report",
      "mcp__nefin__search_records",
      "mcp__nefin__list_contacts",
      "mcp__nefin__list_documents",
      "mcp__nefin__list_setup",
      "mcp__nefin__list_journals",
      "mcp__nefin__list_payments",
      "mcp__nefin__list_bank_accounts",
      "mcp__nefin__list_bank_transactions",
      "mcp__nefin__get_bank_reconciliation",
      "mcp__nefin__get_payroll"
    ]
  }
}

This list allows every read tool. That includes salaries (get_payroll) and bank account details (list_bank_accounts), which Claude Code will then read without asking. If those should still ask, delete the mcp__nefin__get_payroll and mcp__nefin__list_bank_accounts entries. Tools that create, change or post things are not on the list, so Claude Code still asks before using them.

To cut off access, go to Account → AI connectors and click Disconnect next to Claude Code, or Revoke next to a token. It takes effect immediately. To remove the server from Claude Code as well, run claude mcp remove --scope user nefin.

Every AI app has its own limits. This table shows what each one means for Nefin and what to do about it. The app on this page is first.

In Claude Code, server instructions and each tool description are cut at 2 KB. That is why Nefin keeps long workflows out of the tool descriptions and serves them through get_guide instead.

/mcp shows nefin as “needs authentication”

You haven’t signed in yet, or your session lapsed after 30 days without use. Choose nefin → Authenticate.

The sign-in page says AI features are not enabled

None of your companies has AI switched on. Ask an owner to turn it on in Settings → Company, then try again.

Claude says it can’t find a company

Claude only sees companies where AI is on and where you are an active member. Ask Claude to run list_companies to see exactly what it can reach.

Claude asked which company to use

You belong to more than one company, so Claude asks before it does anything. Name one, for example “in Acme Ltd, …”. With only one company Claude picks it for you.

Claude Code doesn’t see a tool or uses an old tool name

A session keeps the tool list it started with. Run /mcp, choose nefin and reconnect, or start a new session.

A tool I allowed keeps asking for permission

Allow entries match a tool’s exact name. If the tool was renamed (see the renamed tools), replace the old mcp__nefin__ entry with one for the new name.

A tool call is refused with a permission error

Your role in that company doesn’t allow the action. The same action would be refused in the app. An owner or admin can change your role.

Nothing works with a token

Check that the header is exactly Authorization: Bearer nef_pat_… and that the token hasn’t been revoked. claude mcp list shows whether the server connects.