Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.lazyants/lexware

NPM · @LAZYANTS/LEXWARE-MCP-SERVER

MCP server for the Lexware Office API — invoices, contacts, articles, and vouchers.

0 this week 94 Trust /100

Last scanned (1 hour ago)

Scores higher than 97% of npm servers

Category Finance and Payments

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security99
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 33 of 118 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency87
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to lazyants/lexware-mcp-server). View diagnostics → Pass
  • License check failed: the license (FSL-1.1-MIT) isn't a recognized OSI-approved license. See how to fix → Fail
  • Actively maintained (last published 9 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability85
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 5632 tokens (~84/item across 67 items; 66 tools + 1 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 67 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 29 Oct 26 0
    • Security disclosure: unverified → pass ▲ functional
  • 28 Oct 26 0
    • Security disclosure: pass → unverified ▼ functional
  • 27 Oct 26 +25
    • Malware scan: unverified → pass ▲ security
    • Known CVEs: unverified → pass ▲ security
    • Dependency health: unverified → 0.88 ▲ functional
  • 26 Oct 26 −25
    • Known CVEs: pass → unverified ▼ security
    • Malware scan: pass → unverified ▼ security
    • Dependency health: 0.88 → unverified ▼ functional
    • Package version: 5.3.2 → 5.4.0 functional
    • Package version: 5.3.2 → 5.3.3 functional
  • 24 Oct 26 +15
    • Malware scan: unverified → pass ▲ security
    • Stability: 0.97 → pass security
  • 23 Oct 26 −15
    • Malware scan: pass → unverified ▼ security
    • Stability: pass → 0.97 functional
    • Package version: 5.3.0 → 5.3.2 functional
  • 22 Oct 26 0
    • Security disclosure: unverified → pass ▲ functional
  • 21 Oct 26 0
    • Security disclosure: pass → unverified ▼ functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed npm/@lazyants/lexware-mcp-server@5.4.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo lazyants/lexware-mcp-server
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/lazyants/lexware-mcp-server/.github/workflows/publish-registry.yml@refs/tags/v5.4.0
Rekor log index 3489425472
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:4bd45733a6d3bbf146156fe9292a1048ea1607e774eea9bea48dfb5c1ca055344aa77e85f17f8d6822fce74e87ceb905103d778a475aa8b08219536d1

Background: How many MCP packages publish verified provenance →

Dependencies 118 packages
Packages resolved 118
Stale 33
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 66 exposed · ~5,603 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
lexware_create_article ~113

Create a new article. Only description supports Lexware formatting (**bold**, __italic__, and dash-prefixed list items separated by newlines); article title does not support formatting.

NameTypeReqDescription
bodyobjectyesArticle JSON with title, type ("PRODUCT"|"SERVICE"), unitName, price (leadingPrice, netPrice or grossPrice, taxRate), and description. Only description supports Lexware formatting (**bold**, __italic…

No output schema declared.

No examples provided.

lexware_create_contact ~71

Create a new contact.

NameTypeReqDescription
bodyobjectyesContact JSON. Key fields: version (0 for new), roles (object with customer/vendor), company (object with name), person (object with firstName, lastName), addresses (object with billing/shipping array…

No output schema declared.

No examples provided.

lexware_create_credit_note ~171

Create a new credit note in Lexware; finalize=true finalizes at creation, false or omitted creates a draft. In introduction, lineItems[].description, and remark, use only Lexware formatting: **bold**, __italic__, and dash-prefixed list items separated by newlines.

NameTypeReqDescription
bodyobjectyesCredit note JSON body with voucherDate, address (contactId or manual fields), lineItems (name, quantity, unitPrice), totalPrice, and taxConditions. In introduction, lineItems[].description, and remar…
finalizeboolean–When true, finalize the credit note at creation via ?finalize=true. When false or omitted, create as draft.

No output schema declared.

No examples provided.

lexware_create_delivery_note ~171

Create a new delivery note in Lexware; finalize=true finalizes at creation, false or omitted creates a draft. In introduction, lineItems[].description, and remark, use only Lexware formatting: **bold**, __italic__, and dash-prefixed list items separated by newlines.

NameTypeReqDescription
bodyobjectyesDelivery note JSON body with voucherDate, address (contactId or manual fields), lineItems (name, quantity, unitPrice), totalPrice, and taxConditions. In introduction, lineItems[].description, and rem…
finalizeboolean–When true, finalize the delivery note at creation via ?finalize=true. When false or omitted, create as draft.

No output schema declared.

No examples provided.

lexware_create_event_subscription ~195

Create a Lexware webhook subscription for an external callback handler; this MCP server manages subscriptions and verifies signatures but does not host a receiver. Acknowledge with HTTP 200/204 within 5 seconds, enqueue the payload for asynchronous processing, and throttle outgoing API calls to respect rate limits.

NameTypeReqDescription
callbackUrlstringyesWebhook URL hosted by your application. Return HTTP 200/204 within 5000 ms, enqueue the payload for asynchronous processing, and throttle outgoing API calls to respect rate limits.
eventTypestringyesEvent type. Documented values: contact.changed, contact.deleted, voucher.created, voucher.changed, voucher.deleted, invoice.created, invoice.changed, invoice.deleted, credit-note.created, credit-note…

No output schema declared.

No examples provided.

lexware_create_invoice ~186

Create a new invoice in Lexware; finalize=true creates status "open", false or omitted creates a draft, and the API cannot finalize an existing draft. In introduction, lineItems[].description, and remark, use only Lexware formatting: **bold**, __italic__, and dash-prefixed list items separated by newlines.

NameTypeReqDescription
bodyobjectyesInvoice JSON body with voucherDate, address (contactId or manual fields), lineItems (name, quantity, unitPrice), totalPrice, and taxConditions. In introduction, lineItems[].description, and remark, u…
finalizeboolean–When true, creates the invoice in finalized "open" status. When false or omitted, creates as draft. Maps to the documented ?finalize=true query parameter.

No output schema declared.

No examples provided.

lexware_create_order_confirmation ~171

Create a new order confirmation in Lexware; finalize=true finalizes at creation, false or omitted creates a draft. In introduction, lineItems[].description, and remark, use only Lexware formatting: **bold**, __italic__, and dash-prefixed list items separated by newlines.

NameTypeReqDescription
bodyobjectyesOrder confirmation JSON body with voucherDate, address (contactId or manual fields), lineItems (name, quantity, unitPrice), totalPrice, and taxConditions. In introduction, lineItems[].description, an…
finalizeboolean–When true, finalize the order confirmation at creation via ?finalize=true. When false or omitted, create as draft.

No output schema declared.

No examples provided.

lexware_create_quotation ~172

Create a new quotation in Lexware; finalize=true finalizes at creation, false or omitted creates a draft. In introduction, lineItems[].description, and remark, use only Lexware formatting: **bold**, __italic__, and dash-prefixed list items separated by newlines.

NameTypeReqDescription
bodyobjectyesQuotation JSON body with voucherDate, expirationDate, address (contactId or manual fields), lineItems (name, quantity, unitPrice), totalPrice, and taxConditions. In introduction, lineItems[].descript…
finalizeboolean–When true, finalize the quotation at creation via ?finalize=true. When false or omitted, create as draft.

No output schema declared.

No examples provided.

lexware_create_voucher ~76

Create a new bookkeeping voucher in Lexware.

NameTypeReqDescription
bodyobjectyesVoucher JSON. Key fields: type ("salesinvoice"|"salescreditnote"|"purchaseinvoice"|"purchasecreditnote"), voucherNumber, voucherDate, totalGrossAmount, totalTaxAmount, taxType, voucherItems (array),…

No output schema declared.

No examples provided.

lexware_deeplink_contact ~49

Get a direct URL to view a contact in the Lexware web app. Returns deeplink and its permanent alias url with the same value.

NameTypeReqDescription
idstringyesContact ID

No output schema declared.

No examples provided.

lexware_deeplink_credit_note ~40

Get a direct link to view/edit a credit note in the Lexware web app.

NameTypeReqDescription
idstringyesCredit note UUID

No output schema declared.

No examples provided.

lexware_deeplink_delivery_note ~40

Get a direct link to view/edit a delivery note in the Lexware web app.

NameTypeReqDescription
idstringyesDelivery note UUID

No output schema declared.

No examples provided.

lexware_deeplink_down_payment_invoice ~43

Get a direct link to view/edit a down payment invoice in the Lexware web app.

NameTypeReqDescription
idstringyesDown payment invoice UUID

No output schema declared.

No examples provided.

lexware_deeplink_dunning ~40

Get a direct link to view/edit a dunning in the Lexware web app.

NameTypeReqDescription
idstringyesDunning UUID

No output schema declared.

No examples provided.

lexware_deeplink_file ~32

Get a direct link to the bookkeeping inbox of newly-uploaded files in the Lexware web app.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

lexware_deeplink_invoice ~37

Get a direct link to view/edit an invoice in the Lexware web app.

NameTypeReqDescription
idstringyesInvoice UUID

No output schema declared.

No examples provided.

lexware_deeplink_order_confirmation ~40

Get a direct link to view/edit an order confirmation in the Lexware web app.

NameTypeReqDescription
idstringyesOrder confirmation UUID

No output schema declared.

No examples provided.

lexware_deeplink_quotation ~39

Get a direct link to view/edit a quotation in the Lexware web app.

NameTypeReqDescription
idstringyesQuotation UUID

No output schema declared.

No examples provided.

lexware_deeplink_recurring_template ~43

Get a direct link to view/edit a recurring invoice template in the Lexware web app.

NameTypeReqDescription
idstringyesRecurring template UUID

No output schema declared.

No examples provided.

lexware_deeplink_voucher ~40

Get a direct link to view/edit a bookkeeping voucher in the Lexware web app.

NameTypeReqDescription
voucherIdstringyesVoucher UUID

No output schema declared.

No examples provided.

lexware_delete_article ~25

Delete an article by ID.

NameTypeReqDescription
idstringyesArticle ID

No output schema declared.

No examples provided.

lexware_delete_event_subscription ~30

Delete a webhook event subscription from Lexware.

NameTypeReqDescription
idstringyesEvent subscription UUID

No output schema declared.

No examples provided.

lexware_download_credit_note_file ~93

Download the file for a credit note. Defaults to PDF; pass format="xml" to request the XRechnung XML e-invoice when available (the API returns whatever representation it can render).

NameTypeReqDescription
formatstring–Representation to request: "pdf" (default) or "xml" for the XRechnung XML e-invoice when available.
idstringyesCredit note UUID

No output schema declared.

No examples provided.

lexware_download_delivery_note_file ~31

Download the PDF file for a delivery note.

NameTypeReqDescription
idstringyesDelivery note UUID

No output schema declared.

No examples provided.

lexware_download_down_payment_invoice_file ~96

Download the file for a down payment invoice. Defaults to PDF; pass format="xml" to request the XRechnung XML e-invoice when available (the API returns whatever representation it can render).

NameTypeReqDescription
formatstring–Representation to request: "pdf" (default) or "xml" for the XRechnung XML e-invoice when available.
idstringyesDown payment invoice UUID

No output schema declared.

No examples provided.

lexware_download_dunning_file ~31

Download the PDF file for a dunning.

NameTypeReqDescription
idstringyesDunning UUID

No output schema declared.

No examples provided.

lexware_download_file ~87

Download a file from Lexware as base64-encoded content. Choose pdf (default) or xml for an available e-invoice XML original.

NameTypeReqDescription
formatstring–Representation to request: "pdf" (default) or "xml" for an available e-invoice XML file; XML embedded in a PDF cannot be retrieved separately.
idstringyesFile UUID

No output schema declared.

No examples provided.

lexware_download_invoice_file ~90

Download the file for an invoice. Defaults to PDF; pass format="xml" to request the XRechnung XML e-invoice when available (the API returns whatever representation it can render).

NameTypeReqDescription
formatstring–Representation to request: "pdf" (default) or "xml" for the XRechnung XML e-invoice when available.
idstringyesInvoice UUID

No output schema declared.

No examples provided.

lexware_download_order_confirmation_file ~31

Download the PDF file for an order confirmation.

NameTypeReqDescription
idstringyesOrder confirmation UUID

No output schema declared.

No examples provided.

lexware_download_quotation_file ~30

Download the PDF file for a quotation.

NameTypeReqDescription
idstringyesQuotation UUID

No output schema declared.

No examples provided.

lexware_get_article ~26

Get a single article by ID.

NameTypeReqDescription
idstringyesArticle ID

No output schema declared.

No examples provided.

lexware_get_contact ~26

Get a single contact by ID.

NameTypeReqDescription
idstringyesContact ID

No output schema declared.

No examples provided.

lexware_get_credit_note ~31

Retrieve a credit note by ID from Lexware.

NameTypeReqDescription
idstringyesCredit note UUID

No output schema declared.

No examples provided.

lexware_get_delivery_note ~31

Retrieve a delivery note by ID from Lexware.

NameTypeReqDescription
idstringyesDelivery note UUID

No output schema declared.

No examples provided.

lexware_get_down_payment_invoice ~34

Retrieve a down payment invoice by ID from Lexware.

NameTypeReqDescription
idstringyesDown payment invoice UUID

No output schema declared.

No examples provided.

lexware_get_dunning ~31

Retrieve a dunning by ID from Lexware.

NameTypeReqDescription
idstringyesDunning UUID

No output schema declared.

No examples provided.

lexware_get_event_subscription ~32

Retrieve a webhook event subscription by ID from Lexware.

NameTypeReqDescription
idstringyesEvent subscription UUID

No output schema declared.

No examples provided.

lexware_get_file_status ~55

Get the processing status of an uploaded file from Lexware. Requires an API key with the file-status scope; keys without it get an access_denied error from Lexware.

NameTypeReqDescription
idstringyesFile UUID

No output schema declared.

No examples provided.

lexware_get_invoice ~28

Retrieve an invoice by ID from Lexware.

NameTypeReqDescription
idstringyesInvoice UUID

No output schema declared.

No examples provided.

lexware_get_order_confirmation ~31

Retrieve an order confirmation by ID from Lexware.

NameTypeReqDescription
idstringyesOrder confirmation UUID

No output schema declared.

No examples provided.

lexware_get_payments ~28

Get payment details for a specific voucher.

NameTypeReqDescription
idstringyesVoucher UUID

No output schema declared.

No examples provided.

lexware_get_profile ~16

Get the organization profile information.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

lexware_get_quotation ~30

Retrieve a quotation by ID from Lexware.

NameTypeReqDescription
idstringyesQuotation UUID

No output schema declared.

No examples provided.

lexware_get_recurring_template ~34

Retrieve a recurring invoice template by ID from Lexware.

NameTypeReqDescription
idstringyesRecurring template UUID

No output schema declared.

No examples provided.

lexware_get_voucher ~129

Retrieve a bookkeeping voucher by ID from Lexware. The voucherStatus field in the response is normalized to its canonical lowercase form. Known values: unchecked, open, paid, paidoff, voided, transferred, sepadebit. Retries up to 3 times (1 s / 2 s / 4 s) on 404 to absorb the indexing delay after an upload; if the voucher is still missing, returns { voucherId, status: "processing", message } rather than an error. Other failures are reported as errors.

NameTypeReqDescription
idstringyesVoucher UUID

No output schema declared.

No examples provided.

lexware_list_articles ~81

List all articles with optional pagination.

NameTypeReqDescription
articleNumberstring–Filter by article number
gtinstring–Filter by GTIN/EAN
pageinteger–Page number (0-indexed)
sizeinteger–Results per page (max 250)
typestring–Filter by article type

No output schema declared.

No examples provided.

lexware_list_contacts ~98

List all contacts with optional pagination and filters.

NameTypeReqDescription
customerboolean–Filter for customers
emailstring–Filter by email address
namestring–Filter by name
numbernumber–Filter by contact number
pageinteger–Page number (0-indexed)
sizeinteger–Results per page (max 250)
vendorboolean–Filter for vendors

No output schema declared.

No examples provided.

lexware_list_countries ~20

List all available countries with their tax classifications.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

lexware_list_event_subscriptions ~21

List all webhook event subscriptions in Lexware.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

lexware_list_payment_conditions ~17

List all available payment conditions.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

Install

How do I install the io.github.lazyants/lexware MCP server?

io.github.lazyants/lexware runs locally as an npm package, launched with npx -y @lazyants/lexware-mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @lazyants/lexware-mcp-server

# add to Claude Code
claude mcp add lazyants-lexware -- npx -y @lazyants/lexware-mcp-server
Common questions

What is the io.github.lazyants/lexware MCP server?

io.github.lazyants/lexware is an MCP server listed in the public MCP registry as io.github.lazyants/lexware. MCP server for the Lexware Office API, invoices, contacts, articles, and vouchers. This page covers its npm package (@lazyants/lexware-mcp-server).

Is the io.github.lazyants/lexware MCP server safe to use?

io.github.lazyants/lexware scores 94 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.lazyants/lexware MCP server expose?

io.github.lazyants/lexware exposes 66 tools: lexware_create_invoice, lexware_get_invoice, lexware_download_invoice_file, lexware_pursue_invoice, lexware_deeplink_invoice, and 61 more. Their descriptions and schemas cost roughly 5,603 tokens of context every time the server is loaded.

Is the io.github.lazyants/lexware MCP server still maintained?

io.github.lazyants/lexware is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.lazyants/lexware MCP server under?

io.github.lazyants/lexware declares the FSL-1.1-MIT licence, which is not on the OSI-approved list. Read the terms before using it at work, and note this covers the source only, not the cost of any service it calls.