@alfe.ai/myob-mcp 0.3.0

package/dist/server.d.ts

@@ -0,0 +1,49 @@
+//#region src/myob-client.d.ts
+/**
+ * MYOB Business API client — wraps fetch with required headers,
+ * 401 retry logic, and token refresh.
+ *
+ * All MYOB API calls require:
+ * - Authorization: Bearer {accessToken}
+ * - x-myobapi-key: {clientId}
+ * - x-myobapi-version: v2
+ */
+interface MyobClientConfig {
+  accessToken: string;
+  clientId: string;
+  businessId: string;
+  onRefresh: () => Promise<{
+    accessToken: string;
+  }>;
+}
+declare class MyobClient {
+  private accessToken;
+  private readonly clientId;
+  private readonly businessId;
+  private readonly onRefresh;
+  constructor(config: MyobClientConfig);
+  updateToken(accessToken: string): void;
+  private get baseUrl();
+  private headers;
+  get(path: string, params?: Record<string, string>): Promise<unknown>;
+  post(path: string, body: unknown): Promise<unknown>;
+  put(path: string, body: unknown): Promise<unknown>;
+  delete(path: string): Promise<unknown>;
+  private request;
+}
+//#endregion
+//#region src/server.d.ts
+
+interface MyobAccountSummary {
+  myobBusinessId: string;
+  displayName: string | null;
+  connectedAt: string;
+}
+/**
+ * Resolve a `myobBusinessId` selector to its `MyobClient`. Throws if
+ * unknown — the LLM should call `myob_list_businesses` to discover
+ * the valid set. This is the per-call dispatch contract for Pattern A.
+ */
+declare function resolveMyobClient(myobBusinessId: string): MyobClient;
+//#endregion
+export { MyobAccountSummary, resolveMyobClient };

package/dist/server.js

@@ -0,0 +1,748 @@
+#!/usr/bin/env node
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { resolveConfig } from "@alfe.ai/config";
+import { AgentApiClient } from "@alfe.ai/agent-api-client";
+import { z } from "zod";
+//#region src/myob-client.ts
+/**
+* MYOB Business API client — wraps fetch with required headers,
+* 401 retry logic, and token refresh.
+*
+* All MYOB API calls require:
+* - Authorization: Bearer {accessToken}
+* - x-myobapi-key: {clientId}
+* - x-myobapi-version: v2
+*/
+const MYOB_API_BASE = "https://api.myob.com/accountright";
+var MyobClient = class {
+	accessToken;
+	clientId;
+	businessId;
+	onRefresh;
+	constructor(config) {
+		this.accessToken = config.accessToken;
+		this.clientId = config.clientId;
+		this.businessId = config.businessId;
+		this.onRefresh = config.onRefresh;
+	}
+	updateToken(accessToken) {
+		this.accessToken = accessToken;
+	}
+	get baseUrl() {
+		return `${MYOB_API_BASE}/${this.businessId}`;
+	}
+	headers() {
+		return {
+			"Authorization": `Bearer ${this.accessToken}`,
+			"x-myobapi-key": this.clientId,
+			"x-myobapi-version": "v2",
+			"Content-Type": "application/json",
+			"Accept": "application/json"
+		};
+	}
+	async get(path, params) {
+		let url = `${this.baseUrl}${path}`;
+		if (params) {
+			const qs = new URLSearchParams(params).toString();
+			url += `?${qs}`;
+		}
+		return this.request("GET", url);
+	}
+	async post(path, body) {
+		return this.request("POST", `${this.baseUrl}${path}`, body);
+	}
+	async put(path, body) {
+		return this.request("PUT", `${this.baseUrl}${path}`, body);
+	}
+	async delete(path) {
+		return this.request("DELETE", `${this.baseUrl}${path}`);
+	}
+	async request(method, url, body) {
+		const doFetch = async () => {
+			const init = {
+				method,
+				headers: this.headers()
+			};
+			if (body !== void 0) init.body = JSON.stringify(body);
+			return fetch(url, init);
+		};
+		let response = await doFetch();
+		if (response.status === 401) {
+			this.accessToken = (await this.onRefresh()).accessToken;
+			response = await doFetch();
+		}
+		if (!response.ok) {
+			const errorBody = await response.text();
+			throw new Error(`MYOB API ${method} ${url} failed (${String(response.status)}): ${errorBody}`);
+		}
+		const text = await response.text();
+		if (!text) return {};
+		return JSON.parse(text);
+	}
+};
+//#endregion
+//#region src/tools/shared.ts
+/**
+* Shared `myobBusinessId` selector field. Every credential-touching tool
+* requires it (Pattern A per-call dispatch). `McpServer.registerTool`
+* expects a raw Zod shape (`{ field: z.string() }`), NOT a JSON-Schema
+* object — passing JSON-Schema throws synchronously at registration time.
+*/
+const myobBusinessIdField = z.string().describe("MYOB Business ID — use the value from myob_list_businesses to pick which connected business this call should target.");
+//#endregion
+//#region src/tools/contacts.ts
+function registerContactTools(server, resolveClient) {
+	const register = server.registerTool.bind(server);
+	register("myob_list_customers", {
+		description: "List customer contacts from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			filter: z.string().optional().describe("OData $filter expression (e.g. \"IsActive eq true\")"),
+			top: z.string().optional().describe("Max records to return (default 100)"),
+			skip: z.string().optional().describe("Number of records to skip for pagination")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const params = {};
+		if (args.filter) params.$filter = args.filter;
+		if (args.top) params.$top = args.top;
+		if (args.skip) params.$skip = args.skip;
+		const result = await client.get("/Contact/Customer", Object.keys(params).length > 0 ? params : void 0);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_get_customer", {
+		description: "Get a specific customer contact by UID from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			uid: z.string().describe("The customer UID (GUID)")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).get(`/Contact/Customer/${args.uid}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_create_customer", {
+		description: "Create a new customer contact in a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			CompanyName: z.string().optional().describe("Company name"),
+			FirstName: z.string().optional().describe("First name"),
+			LastName: z.string().optional().describe("Last name"),
+			IsIndividual: z.boolean().optional().describe("true for individual, false for company"),
+			DisplayID: z.string().optional().describe("Display ID (account number)"),
+			data: z.record(z.string(), z.unknown()).optional().describe("Full customer data object — overrides individual fields if provided")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const body = args.data ?? {};
+		if (args.CompanyName && !body.CompanyName) body.CompanyName = args.CompanyName;
+		if (args.FirstName && !body.FirstName) body.FirstName = args.FirstName;
+		if (args.LastName && !body.LastName) body.LastName = args.LastName;
+		if (args.IsIndividual !== void 0 && body.IsIndividual === void 0) body.IsIndividual = args.IsIndividual;
+		if (args.DisplayID && !body.DisplayID) body.DisplayID = args.DisplayID;
+		const result = await client.post("/Contact/Customer", body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_update_customer", {
+		description: "Update an existing customer contact in a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			uid: z.string().describe("The customer UID (GUID) to update"),
+			data: z.record(z.string(), z.unknown()).describe("Customer data fields to update")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).put(`/Contact/Customer/${args.uid}`, args.data);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_list_suppliers", {
+		description: "List supplier contacts from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			filter: z.string().optional().describe("OData $filter expression"),
+			top: z.string().optional().describe("Max records to return"),
+			skip: z.string().optional().describe("Number of records to skip")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const params = {};
+		if (args.filter) params.$filter = args.filter;
+		if (args.top) params.$top = args.top;
+		if (args.skip) params.$skip = args.skip;
+		const result = await client.get("/Contact/Supplier", Object.keys(params).length > 0 ? params : void 0);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_get_supplier", {
+		description: "Get a specific supplier contact by UID from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			uid: z.string().describe("The supplier UID (GUID)")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).get(`/Contact/Supplier/${args.uid}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_create_supplier", {
+		description: "Create a new supplier contact in a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			CompanyName: z.string().optional().describe("Company name"),
+			FirstName: z.string().optional().describe("First name"),
+			LastName: z.string().optional().describe("Last name"),
+			IsIndividual: z.boolean().optional().describe("true for individual, false for company"),
+			DisplayID: z.string().optional().describe("Display ID"),
+			data: z.record(z.string(), z.unknown()).optional().describe("Full supplier data object")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const body = args.data ?? {};
+		if (args.CompanyName && !body.CompanyName) body.CompanyName = args.CompanyName;
+		if (args.FirstName && !body.FirstName) body.FirstName = args.FirstName;
+		if (args.LastName && !body.LastName) body.LastName = args.LastName;
+		if (args.IsIndividual !== void 0 && body.IsIndividual === void 0) body.IsIndividual = args.IsIndividual;
+		if (args.DisplayID && !body.DisplayID) body.DisplayID = args.DisplayID;
+		const result = await client.post("/Contact/Supplier", body);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/sales.ts
+function registerSalesTools(server, resolveClient) {
+	const register = server.registerTool.bind(server);
+	register("myob_list_invoices", {
+		description: "List sale invoices from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			filter: z.string().optional().describe("OData $filter expression (e.g. \"Status eq 'Open'\")"),
+			top: z.string().optional().describe("Max records to return"),
+			skip: z.string().optional().describe("Number of records to skip")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const params = {};
+		if (args.filter) params.$filter = args.filter;
+		if (args.top) params.$top = args.top;
+		if (args.skip) params.$skip = args.skip;
+		const result = await client.get("/Sale/Invoice", Object.keys(params).length > 0 ? params : void 0);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_get_invoice", {
+		description: "Get a specific sale invoice by UID from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			uid: z.string().describe("The invoice UID (GUID)")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).get(`/Sale/Invoice/${args.uid}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_create_invoice", {
+		description: "Create a new sale invoice in a connected MYOB Business. Provide customer, line items, and dates.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			data: z.record(z.string(), z.unknown()).describe("Full invoice data object including Customer, Date, Lines, etc.")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).post("/Sale/Invoice", args.data);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_list_quotes", {
+		description: "List sale quotes from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			filter: z.string().optional().describe("OData $filter expression"),
+			top: z.string().optional().describe("Max records to return"),
+			skip: z.string().optional().describe("Number of records to skip")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const params = {};
+		if (args.filter) params.$filter = args.filter;
+		if (args.top) params.$top = args.top;
+		if (args.skip) params.$skip = args.skip;
+		const result = await client.get("/Sale/Quote", Object.keys(params).length > 0 ? params : void 0);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_create_quote", {
+		description: "Create a new sale quote in a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			data: z.record(z.string(), z.unknown()).describe("Full quote data object including Customer, Date, Lines, etc.")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).post("/Sale/Quote", args.data);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/purchases.ts
+function registerPurchaseTools(server, resolveClient) {
+	const register = server.registerTool.bind(server);
+	register("myob_list_bills", {
+		description: "List purchase bills from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			filter: z.string().optional().describe("OData $filter expression"),
+			top: z.string().optional().describe("Max records to return"),
+			skip: z.string().optional().describe("Number of records to skip")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const params = {};
+		if (args.filter) params.$filter = args.filter;
+		if (args.top) params.$top = args.top;
+		if (args.skip) params.$skip = args.skip;
+		const result = await client.get("/Purchase/Bill", Object.keys(params).length > 0 ? params : void 0);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_get_bill", {
+		description: "Get a specific purchase bill by UID from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			uid: z.string().describe("The bill UID (GUID)")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).get(`/Purchase/Bill/${args.uid}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_create_bill", {
+		description: "Create a new purchase bill in a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			data: z.record(z.string(), z.unknown()).describe("Full bill data object including Supplier, Date, Lines, etc.")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).post("/Purchase/Bill", args.data);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/general-ledger.ts
+function registerGeneralLedgerTools(server, resolveClient) {
+	const register = server.registerTool.bind(server);
+	register("myob_list_accounts", {
+		description: "List chart of accounts (ledger accounts) from a connected MYOB Business. NOT the connected businesses themselves — for that, use myob_list_businesses.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			filter: z.string().optional().describe("OData $filter expression (e.g. \"Type eq 'Bank'\")"),
+			top: z.string().optional().describe("Max records to return"),
+			skip: z.string().optional().describe("Number of records to skip")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const params = {};
+		if (args.filter) params.$filter = args.filter;
+		if (args.top) params.$top = args.top;
+		if (args.skip) params.$skip = args.skip;
+		const result = await client.get("/GeneralLedger/Account", Object.keys(params).length > 0 ? params : void 0);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_get_account", {
+		description: "Get a specific general ledger account by UID from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			uid: z.string().describe("The account UID (GUID)")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).get(`/GeneralLedger/Account/${args.uid}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_list_journal_entries", {
+		description: "List journal transactions from a connected MYOB Business general ledger.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			filter: z.string().optional().describe("OData $filter expression"),
+			top: z.string().optional().describe("Max records to return"),
+			skip: z.string().optional().describe("Number of records to skip")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const params = {};
+		if (args.filter) params.$filter = args.filter;
+		if (args.top) params.$top = args.top;
+		if (args.skip) params.$skip = args.skip;
+		const result = await client.get("/GeneralLedger/JournalTransaction", Object.keys(params).length > 0 ? params : void 0);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_create_journal_entry", {
+		description: "Create a new journal transaction in a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			data: z.record(z.string(), z.unknown()).describe("Full journal transaction data object including Lines, DateOccurred, Memo, etc.")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).post("/GeneralLedger/JournalTransaction", args.data);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_list_tax_codes", {
+		description: "List tax codes from a connected MYOB Business (read-only for MYOB Essentials).",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			filter: z.string().optional().describe("OData $filter expression")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const params = {};
+		if (args.filter) params.$filter = args.filter;
+		const result = await client.get("/GeneralLedger/TaxCode", Object.keys(params).length > 0 ? params : void 0);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/inventory.ts
+function registerInventoryTools(server, resolveClient) {
+	const register = server.registerTool.bind(server);
+	register("myob_list_items", {
+		description: "List inventory items from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			filter: z.string().optional().describe("OData $filter expression"),
+			top: z.string().optional().describe("Max records to return"),
+			skip: z.string().optional().describe("Number of records to skip")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const params = {};
+		if (args.filter) params.$filter = args.filter;
+		if (args.top) params.$top = args.top;
+		if (args.skip) params.$skip = args.skip;
+		const result = await client.get("/Inventory/Item", Object.keys(params).length > 0 ? params : void 0);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_get_item", {
+		description: "Get a specific inventory item by UID from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			uid: z.string().describe("The item UID (GUID)")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).get(`/Inventory/Item/${args.uid}`);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_create_item", {
+		description: "Create a new inventory item in a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			data: z.record(z.string(), z.unknown()).describe("Full item data object including Name, Number, SellingDetails, BuyingDetails, etc.")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).post("/Inventory/Item", args.data);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_update_item", {
+		description: "Update an existing inventory item in a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			uid: z.string().describe("The item UID (GUID) to update"),
+			data: z.record(z.string(), z.unknown()).describe("Item data fields to update")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).put(`/Inventory/Item/${args.uid}`, args.data);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/tools/payments.ts
+function registerPaymentTools(server, resolveClient) {
+	const register = server.registerTool.bind(server);
+	register("myob_list_customer_payments", {
+		description: "List customer payments (receipts) from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			filter: z.string().optional().describe("OData $filter expression"),
+			top: z.string().optional().describe("Max records to return"),
+			skip: z.string().optional().describe("Number of records to skip")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const params = {};
+		if (args.filter) params.$filter = args.filter;
+		if (args.top) params.$top = args.top;
+		if (args.skip) params.$skip = args.skip;
+		const result = await client.get("/Sale/CustomerPayment", Object.keys(params).length > 0 ? params : void 0);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_record_customer_payment", {
+		description: "Record a customer payment against invoices in a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			data: z.record(z.string(), z.unknown()).describe("Full customer payment data including Customer, Account, Invoices, AmountReceived, etc.")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).post("/Sale/CustomerPayment", args.data);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_list_supplier_payments", {
+		description: "List supplier payments from a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			filter: z.string().optional().describe("OData $filter expression"),
+			top: z.string().optional().describe("Max records to return"),
+			skip: z.string().optional().describe("Number of records to skip")
+		}
+	}, async (args) => {
+		const client = resolveClient(args.myobBusinessId);
+		const params = {};
+		if (args.filter) params.$filter = args.filter;
+		if (args.top) params.$top = args.top;
+		if (args.skip) params.$skip = args.skip;
+		const result = await client.get("/Purchase/SupplierPayment", Object.keys(params).length > 0 ? params : void 0);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+	register("myob_record_supplier_payment", {
+		description: "Record a supplier payment against bills in a connected MYOB Business.",
+		inputSchema: {
+			myobBusinessId: myobBusinessIdField,
+			data: z.record(z.string(), z.unknown()).describe("Full supplier payment data including Supplier, Account, Bills, AmountPaid, etc.")
+		}
+	}, async (args) => {
+		const result = await resolveClient(args.myobBusinessId).post("/Purchase/SupplierPayment", args.data);
+		return { content: [{
+			type: "text",
+			text: JSON.stringify(result, null, 2)
+		}] };
+	});
+}
+//#endregion
+//#region src/server.ts
+/**
+* MYOB Business MCP Server (Pattern A multi-account)
+*
+* Custom MCP server implementing MYOB Business API tools directly
+* (unlike the Xero proxy, which wraps a child MCP). Every tool that
+* touches credentials requires the LLM to pass `myobBusinessId`
+* explicitly — the server keeps one `MyobClient` per connected MYOB
+* business and dispatches per-call.
+*
+* Pattern A locked in PR 7.1 of channels-and-credential-driven-
+* integrations. See `packages/mcp-bundler/DEVELOPING.md` for the
+* contract; `services/connect/DEVELOPING.md` for the provider table.
+*
+* Architecture:
+*   OpenClaw ←(stdio)→ this server ←(https)→ MYOB Business API
+*/
+const clients = /* @__PURE__ */ new Map();
+let refreshTimer = null;
+let inFlightRefresh = null;
+const REFRESH_INTERVAL_MS = 900 * 1e3;
+const REFRESH_RETRY_MS = 60 * 1e3;
+function log(msg) {
+	process.stderr.write(`[myob-mcp-server] ${msg}\n`);
+}
+/**
+* Resolve a `myobBusinessId` selector to its `MyobClient`. Throws if
+* unknown — the LLM should call `myob_list_businesses` to discover
+* the valid set. This is the per-call dispatch contract for Pattern A.
+*/
+function resolveMyobClient(myobBusinessId) {
+	const c = clients.get(myobBusinessId);
+	if (!c) throw new Error(`Unknown myobBusinessId: ${myobBusinessId}. Call myob_list_businesses to see the connected businesses on this agent.`);
+	return c;
+}
+/**
+* Single fan-out point for token refresh. Used by:
+*   - the scheduled timer (performRefresh)
+*   - the `myob_refresh_token` tool
+*   - every cached `MyobClient`'s `onRefresh` callback (on 401 retry)
+*
+* Concurrent callers share one in-flight `refreshMYOBToken()` request
+* via `inFlightRefresh`, and the resolved token is fanned out to every
+* cached client so siblings don't re-hit the network on their own 401s.
+*
+* v1 limitation: `apiClient.refreshMYOBToken()` refreshes the primary
+* connection's token only and we fan it across all clients. This works
+* as long as MYOB access tokens are interchangeable across businesses
+* sharing a partner appId (true today). Per-connection refresh is a v2
+* follow-up — see DEVELOPING.md.
+*/
+async function refreshAndFanOut(apiClient) {
+	if (inFlightRefresh) return inFlightRefresh;
+	inFlightRefresh = (async () => {
+		try {
+			const { accessToken } = await apiClient.refreshMYOBToken();
+			for (const client of clients.values()) client.updateToken(accessToken);
+			return accessToken;
+		} finally {
+			inFlightRefresh = null;
+		}
+	})();
+	return inFlightRefresh;
+}
+async function performRefresh(apiClient) {
+	log("Refreshing MYOB access tokens across all connected businesses...");
+	await refreshAndFanOut(apiClient);
+	log("Token refresh applied to all clients");
+}
+function scheduleRefresh(apiClient) {
+	if (refreshTimer) clearTimeout(refreshTimer);
+	refreshTimer = setTimeout(() => {
+		(async () => {
+			try {
+				await performRefresh(apiClient);
+				scheduleRefresh(apiClient);
+			} catch (err) {
+				log(`Token refresh failed: ${err instanceof Error ? err.message : String(err)}`);
+				refreshTimer = setTimeout(() => {
+					scheduleRefresh(apiClient);
+				}, REFRESH_RETRY_MS);
+			}
+		})();
+	}, REFRESH_INTERVAL_MS);
+}
+async function main() {
+	const config = resolveConfig();
+	const apiClient = new AgentApiClient({
+		apiKey: config.apiKey,
+		apiUrl: config.apiUrl
+	});
+	const { accounts } = await apiClient.getMYOBAccounts();
+	if (accounts.length === 0) log("No MYOB businesses connected — server will start with myob_list_businesses + myob_refresh_token only");
+	for (const acct of accounts) {
+		if (clients.has(acct.myobBusinessId)) {
+			log(`Duplicate myobBusinessId ${acct.myobBusinessId} returned by getMYOBAccounts() — keeping the first cached client`);
+			continue;
+		}
+		clients.set(acct.myobBusinessId, new MyobClient({
+			accessToken: acct.accessToken,
+			clientId: acct.clientId,
+			businessId: acct.myobBusinessId,
+			onRefresh: async () => {
+				return { accessToken: await refreshAndFanOut(apiClient) };
+			}
+		}));
+		log(`Cached client for business ${acct.myobBusinessId} (${acct.displayName ?? "no display name"})`);
+	}
+	const server = new McpServer({
+		name: "myob-mcp-server",
+		version: "2.0.0"
+	});
+	registerContactTools(server, resolveMyobClient);
+	registerSalesTools(server, resolveMyobClient);
+	registerPurchaseTools(server, resolveMyobClient);
+	registerGeneralLedgerTools(server, resolveMyobClient);
+	registerInventoryTools(server, resolveMyobClient);
+	registerPaymentTools(server, resolveMyobClient);
+	const registerTool = server.registerTool.bind(server);
+	registerTool("myob_list_businesses", { description: "List the MYOB Business accounts (companies) the agent has connected. Returns one entry per OAuth connection — use the returned myobBusinessId values as the `myobBusinessId` selector arg on every other myob_* tool." }, () => {
+		const summaries = accounts.map((a) => ({
+			myobBusinessId: a.myobBusinessId,
+			displayName: a.displayName,
+			connectedAt: a.connectedAt
+		}));
+		return { content: [{
+			type: "text",
+			text: JSON.stringify({ businesses: summaries }, null, 2)
+		}] };
+	});
+	registerTool("myob_refresh_token", { description: "Force-refresh the MYOB OAuth2 access token. Affects every connected MYOB business (tokens are interchangeable across businesses sharing a partner appId). Use this if API calls are failing with authentication errors." }, async () => {
+		try {
+			await performRefresh(apiClient);
+			return { content: [{
+				type: "text",
+				text: JSON.stringify({ refreshed: true })
+			}] };
+		} catch (err) {
+			return {
+				content: [{
+					type: "text",
+					text: JSON.stringify({ error: err instanceof Error ? err.message : String(err) })
+				}],
+				isError: true
+			};
+		}
+	});
+	scheduleRefresh(apiClient);
+	const transport = new StdioServerTransport();
+	await server.connect(transport);
+	log(`MYOB MCP server running with ${String(accounts.length)} connected business(es) and Pattern A selector enforcement`);
+}
+for (const signal of ["SIGTERM", "SIGINT"]) process.on(signal, () => {
+	if (refreshTimer) clearTimeout(refreshTimer);
+	process.exit(0);
+});
+main().catch((err) => {
+	log(`Fatal: ${err instanceof Error ? err.message : String(err)}`);
+	process.exit(1);
+});
+//#endregion
+export { resolveMyobClient };

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@alfe.ai/myob-mcp",
+  "version": "0.3.0",
+  "description": "MYOB Business MCP server — direct API integration with Alfe OAuth credentials and automatic token refresh",
+  "type": "module",
+  "main": "./dist/server.js",
+  "bin": {
+    "myob-mcp-server": "./dist/server.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/server.d.ts",
+      "import": "./dist/server.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "zod": "^4.0.5",
+    "@alfe.ai/config": "0.1.0",
+    "@alfe.ai/agent-api-client": "0.3.0"
+  },
+  "license": "UNLICENSED",
+  "scripts": {
+    "build": "tsdown",
+    "dev": "tsdown --watch",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint ."
+  }
+}