Jaz AI · Fastest ledger for agents

<p align="center"> <a href="https://github.com/teamtinvio/jaz-ai/releases"><img src="https://img.shields.io/github/v/release/teamtinvio/jaz-ai?style=for-the-badge&color=blue" alt="GitHub Release"></a> <img src="https://img.shields.io/badge/tools-387-blue?style=for-the-badge" alt="387 tools"> <img src="https://img.shields.io/badge/API_rules-148-green?style=for-the-badge" alt="148 API rules"> <img src="https://img.shields.io/badge/skills-7-purple?style=for-the-badge" alt="7 skills"> <img src="https://img.shields.io/badge/recipe_playbooks-16-orange?style=for-the-badge" alt="16 Recipe Playbooks"> <img src="https://img.shields.io/badge/calculators-13-red?style=for-the-badge" alt="13 Calculators"> <img src="https://img.shields.io/badge/jobs-12-teal?style=for-the-badge" alt="12 Jobs"> <a href="https://github.com/teamtinvio/jaz-ai/blob/main/LICENSE"><img src="https://img.shields.io/github/license/teamtinvio/jaz-ai?style=for-the-badge&color=green" alt="License"></a> </p>

<p align="center"> <a href="https://www.npmjs.com/package/jaz-clio"><img src="https://img.shields.io/npm/v/jaz-clio?style=flat-square&logo=npm&label=CLI" alt="npm"></a> <a href="https://www.npmjs.com/package/jaz-clio"><img src="https://img.shields.io/npm/dm/jaz-clio?style=flat-square&label=downloads" alt="npm downloads"></a> <a href="https://github.com/teamtinvio/jaz-ai/stargazers"><img src="https://img.shields.io/github/stars/teamtinvio/jaz-ai?style=flat-square&logo=github" alt="GitHub stars"></a> </p>

Jaz is built for businesses, finance teams, and accountants. IFRS-first, multi-currency, multi-user by default. Invoicing, bills, payments, quotes & orders, bank reconciliation, fixed assets, inventory, expense claims, tax, reports, and period close, all available for read and write from any agent: Claude, ChatGPT, Gemini, Codex, Copilot, Cursor. Tools load only when needed, so your agents stay lean and fast.

Also fully compatible with Juan Accounting (same API surface).

Contents

• Install · 30 seconds
• Sign in with OAuth
• How many tools is it?
• What you get
• Three layers
• Quick start
• Token economics + speed
• For AI agents
• For accountants
• Jaz Kit · run your practice
• Reference
• Troubleshooting
• Privacy & security
• Support
• License

For a guided setup, copy the Jaz agent setup prompt and paste it into your agent. It will help you choose where to connect Jaz, handle installation, and guide you through sign-in.

Install · 30 seconds

The Claude Code plugin runs the MCP server bundled inside it (needs Node.js 18 or later on PATH), so a session starts it without an npm download, and the server version changes only when the plugin updates. To stay current, turn on auto-update for the jaz-plugins marketplace (/plugin → Marketplaces), or run claude plugin update jaz-ai@jaz-plugins.

Stdio MCP config (Claude Desktop, Cursor, Windsurf, OpenAI Codex CLI / Agents SDK, any host that runs MCP servers as local processes):

{
  "mcpServers": {
    "jaz": {
      "command": "npx",
      "args": ["-y", "[email protected]", "mcp", "--org", "oauth:<resourceId>"]
    }
  }
}

VS Code MCP config (.vscode/mcp.json, workspace-scoped, read by VS Code and the GitHub Copilot Chat extension):

{
  "servers": {
    "jaz": {
      "command": "npx",
      "args": ["-y", "[email protected]", "mcp", "--org", "oauth:<resourceId>"]
    }
  }
}

Sign in first with npx -y jaz-clio@latest auth login, then replace <resourceId> with the organization to pin (auth organizations lists them). Pin [email protected] for stability, or jaz-clio@latest for auto-updates. Multi-org: drop --org and OAuth reaches every organization granted at sign-in, with explicit org_id selection per call. Optional key-based access accepts comma-separated keys, e.g. "JAZ_API_KEY": "jk-aaa,jk-bbb". Personal access tokens (pat-...) also work for multi-org.

Remote connector · no install

Bring Jaz into Claude (claude.ai, Desktop, mobile, Cowork) and ChatGPT with no install and no API key in any config. Just sign in.

1. In Claude: Settings → Connectors → Add custom connector (ChatGPT: Add a connector).
2. Enter the URL https://mcp.jaz.ai/mcp.
3. Sign in with your Jaz account (email one-time code or passkey) and Allow.

It uses OAuth 2.1 + PKCE: the agent receives a scoped, time-limited token tied to your account, never your password. One sign-in reaches every organization you belong to; name the org in your request (e.g. "in Acme Pte Ltd, list unpaid invoices"), and access to each is checked on every call. The same operations as the local server, packaged as namespace tools (one tools/list entry per accounting area, each routing to the operations inside it) with honest read-only / write / destructive hints. Ask "what can you do?" and the connector answers from its own live capability map. Bookkeeping only: it records entries and reads data. It moves no money.

Microsoft 365 Copilot · Copilot Studio

Bring Jaz into Microsoft 365 Copilot through a Copilot Studio agent. Cloud to cloud: no install, no API key in any config.

1. In Copilot Studio, open your agent and go to Tools → Add a tool → New tool → Model Context Protocol.
2. Enter the server name (Jaz), a short description, and the URL https://mcp.jaz.ai/mcp.
3. Authentication: OAuth 2.0 → Dynamic discovery → Create → Next.
4. On the Add tool dialog, select Create a new connection, sign in with your Jaz account, and Allow.
5. Select Add to agent, then publish the agent to Microsoft 365 Copilot or Teams as usual.

Same tool surface and per-call organization checks as the remote connector; the sign-in here uses OAuth 2.0 dynamic client registration. If your tenant restricts custom connectors, a Power Platform admin needs to allow this one.

If sign-in fails with "Could not discover authorization server metadata": choose Dynamic instead of Dynamic discovery in step 3, then enter https://api.getjaz.com/oauth/authorize as the Authorization URL and https://api.getjaz.com/oauth/token as the Token URL. Copilot Studio still registers itself, so you need no client ID or secret. Everything else is unchanged.

Prefer a local install on the Microsoft stack? Copilot Studio is cloud-only and cannot run local MCP servers. Use VS Code with GitHub Copilot Chat instead: the VS Code MCP config runs Jaz locally with the shared OAuth sign-in (or an optional API key), and npx jaz-clio init --platform copilot installs the skills to .github/copilot-instructions.md.

OpenAI Responses API

The Responses API only accepts HTTP MCP (no stdio). Point it at the hosted Jaz connector:

{
  "type": "mcp",
  "server_label": "jaz",
  "server_url": "https://mcp.jaz.ai/mcp",
  "headers": { "Authorization": "Bearer <your-oauth-token>" },
  "require_approval": "never"
}

The endpoint is OAuth-gated (no static API key). Obtain a token through the remote connector sign-in and pass it as a bearer token. To use a plain API key instead, take the OpenAI Codex CLI / Agents SDK stdio path above.

Just want skills (no MCP, any agent on the Agent Skills standard):

npx jaz-clio init                  # auto-detects your agent
npx jaz-clio init --platform cursor
npx jaz-clio init --no-rules       # skills only, skip the agent-rules file
npx jaz-clio init --check          # report drift between installed agent-rules version and current

Skills install to .agents/skills/ (Agent Skills standard, used by Cursor, Copilot, Codex, Antigravity, Windsurf, Goose, Roo Code, Junie, Amp, and more) or .claude/skills/ (Claude Code).

init also writes a one-page jaz-agent-rules.md block to the path your platform reads on workspace open, so any agent (Claude / GPT / Gemini / Copilot / Cursor) starts every session with the meta-tool discovery flow, the 6 API gotchas, and the calculate-then-post flow for IFRS schedules.

The block is wrapped in version-stamped markers (<!-- BEGIN jaz-agent-rules vX.Y.Z --> / <!-- END jaz-agent-rules -->), so re-running init updates only the Jaz block; your own rules above and below stay untouched. Run clio init --check to report drift between your installed version and the current package version (exit 1 = drift, exit 0 = current).

Sign in with OAuth

OAuth is the default for new setups. Hosted connectors handle sign-in inside the agent. For the CLI, local MCP, Claude Code plugin, Desktop extension, or Gemini extension, run npx -y jaz-clio@latest auth login on the computer that runs Jaz. The browser opens for Jaz sign-in and consent; local tools share the saved session and refresh it automatically. No key belongs in the MCP configuration.

If several organizations are available, choose one after sign-in. Agents can use auth login --json to obtain the choices, then auth select <resourceId> --json. Pin commands and local MCP with --org oauth:<resourceId>. Use auth organizations --json to refresh the list. Install skills independently of authentication.

For a custom application calling the API directly, use Jaz's authorization-code flow with PKCE and refresh tokens. Register the application's callback at https://api.getjaz.com/oauth/register, start consent at https://api.getjaz.com/oauth/authorize, and exchange or refresh tokens at https://api.getjaz.com/oauth/token. Registration returns the client credentials used by the token endpoint. Keep them private. Select the intended organization during consent for a single-organization integration; use explicit organization selection through CLI/MCP for agent workflows. The published OpenAPI specification's API-key examples describe the optional key-based route.

API keys and PATs remain supported. Explicit --org selects its saved credentials ahead of an inherited JAZ_API_KEY; without --org, the environment key retains precedence. Do not combine --api-key with --org. Existing key profiles remain available through --org <label>; use auth add <key> --as <label> for optional key-based access. Never paste credentials into agent chat. auth logout removes only the local OAuth session; revoke the grant in Jaz to remove server-side access.

Browser login requires a callback to the computer running Jaz. For an isolated agent sandbox, configure the user's intended machine or use a hosted connector. Do not copy refresh tokens from another application.

How many tools is it?

One catalog, three packagings. Every install reaches the same 387 operations; they are presented differently because hosts have different context budgets.

A directory listing that says "387 tools" and a client that shows 3 or 49 are describing the same server. Nothing is missing.

Ask the agent "what can you do?" on any of them; it answers from the connector's own live capability map (describe_capabilities), never from the length of its tool list.

What you get

• 387 tools covering every Jaz endpoint. Each tool description disambiguates against similar tools, lists enum values inline, and notes which operations are safe to retry. The model picks the right tool on the first call.
• 7 skills with the production-grade rules and playbooks any agent needs:

• 3 meta-tools (search_tools, describe_tools, execute_tool) for deferred discovery so the full catalog never has to load into context.
• Help center search built in: search_help_center answers from the Jaz help center.
• Structured-search DSL for natural-feeling queries (status:unpaid amount:>500 contact:Acme).

Three layers

The stack is one binary plus markdown skills, exposed through three layers that compose. The default agent setup is Skills + MCP. The CLI is the same binary as the MCP server with a different transport flag.

Skills layer on top of either. Most installs (Claude Code plugin, Claude Desktop MCPB, Cursor + MCP, Gemini extension) load Skills + MCP together. The MCP server runs locally (stdio, via the CLI binary) or hosted (the remote connector at mcp.jaz.ai, no install). The same operations either way, packaged differently. See How many tools is it?.

Quick start

Once installed, skills load automatically when an agent works with Jaz. Describe what you need:

Close the books for Acme for January. Bank-recon DBS Current first.
Then file GST for Q1.

Or call the CLI directly:

clio auth login                    # once per computer
clio invoices list --json
clio calc loan --principal 100000 --rate 6 --term 60 --json
clio jobs payment-run outstanding --due-before 2025-01-31 --json
clio approvals approve <resourceId> --entity bills --json
clio sql preview "SELECT invoice_number, balance FROM invoices WHERE balance > 0 LIMIT 10"
clio ledger-find-fix preview --level TRANSACTIONS --input recode.json
clio report-templates list --json
clio report-templates update "Board P&L" --set pdfTitleConfigs.title="Board P&L" --json
clio modules list --json
clio navigate reports.profit-and-loss

The full command-group list is in README-cli.md.

Or via MCP from any agent:

search_tools("anomalous bills")
  → download_export at rank 1
execute_tool("download_export", { exportType: "analysis-anomalous-bills" })
  → { fileName, fileUrl }

Token economics + speed

Built so any model sees the right tool fast and calls it once.

For AI agents

• Skills load automatically from .claude/skills/, .agents/skills/, the Claude Code marketplace, the Gemini CLI extension, or the Claude Desktop MCPB.
• Discovery is one-shot. Canonical-query lock-in tests guarantee the right tool at rank 1 for the queries that matter.
• Disambiguation is explicit. Tools that look similar carry "USE THIS, not X" preambles. No more guessing.
• Errors are structured. Server validation failures return field-level details so the agent can self-correct.
• Multi-org is native. Comma-separated keys (jk-aaa,jk-bbb) or PATs unlock cross-org tools (list_organizations, per-call org_id).
• CONTEXT.md captures runtime rules-of-engagement (load the organization first, search before create, mutate as draft first, never echo API keys).

For accountants

Run period work conversationally. Describe it to any agent:

Close March for Acme. Bank-recon DBS Current first. File GST for Q1.

13 calculators (clio calc loan / depreciation / lease / ecl / fx-reval / provision / fixed-deposit / asset-disposal / prepaid-expense / deferred-revenue / accrued-expense / leave-accrual / dividend), 12 job playbooks in the jaz-jobs skill (month-end / quarter-end / year-end close, bank recon, document collection, GST/VAT filing, payment run, credit control, supplier recon, audit prep, FA review, statutory filing), and five job tools (clio jobs bank-recon match, payment-run outstanding, document-collection ingest, statutory-filing sg-cs / sg-ca), all with --json for structured output. Calculators post nothing: to book a schedule, create a capsule and post each step with capsuleResourceId.

In Claude Code, ten commands walk the jobs that have real steps to follow:

Every one of them also works by just asking; the commands are a shortcut, not a requirement.

Jaz Kit · run your practice

A close is not one conversation. Month-end runs eighteen steps over one to three days, and an accountant serving eight clients runs it eight times with eight different sets of bank accounts, materiality thresholds, and recurring accruals. Jaz Kit gives each organization a folder that remembers all of it.

/jk-setup                  set up the kit, connect an organization
/jk-open acme             load its context, verify the connection
/jk-close 2026-06         run the close, resumable across sessions
/jk-review                approve the drafts waiting on you
/jk-status                every organization, what's due, what's pending
/jk-exit                  journal the session, sweep scratch

*`/jaz- runs a workflow. /jk-` runs your practice.* Also /jk-keys, /jk-policy, /jk-teach, /jk-save, /jk-help.

~/Documents/Jaz Kit/
  orgs/<slug>/
    ORG.md                  bank accounts, materiality, recurring accruals, FY end
    policies/ rules/        how this organization works
    closes/2026-06/
      CLOSE.md              exactly where the close stopped
      workpapers/           the permanent audit file

Work is created as drafts and every record carries a link into Jaz, so you review in the UI and finalize when you're ready; the agent never posts live behind you. Interrupted closes resume where they stopped, and reconciliation steps verify against the ledger before retrying, so a crash never doubles a journal.

Each company's folder records its organization ID in ORG.md, and every call pins that ID (--org oauth:<resourceId>), so the folder you open decides which books you touch. OAuth sign-in lives outside the kit (clio auth login), so a kit shared through a private git repo carries the context and policies but never a credential. Existing workspaces that keep a company jk- key in the folder's gitignored .env still work as an optional route. (On a default Mac ~/Documents syncs to iCloud, so such a key syncs too, bounded and revocable; set JAZ_KIT_HOME elsewhere to keep it off the cloud.)

One organization per session, enforced. Every call names its organization explicitly rather than relying on whichever one happens to be active. If something in your shell would silently override that choice (an exported JAZ_API_KEY, or several comma-separated keys), the command stops instead of posting to the wrong company's books.

Multi-organization work needs the CLI (npm i -g jaz-clio); a single organization works through MCP tools alone. Windows is supported by design but not yet verified; tell us if you hit something.

Start with /jk-setup, or just say "set up Jaz Kit for my company"; the skill triggers the same flows in Codex CLI, Cursor, and Copilot, which have no slash commands.

Slash commands share one global namespace across installed plugins, so /jk-* and /jaz-* could collide with another plugin using the same names. If that happens, ask for the flow in words instead ("open acme", "close the books for June"); it triggers on intent, not on the command name.

Reference

• [CONTEXT.md](CONTEXT.md) · runtime rules-of-engagement for agents using the stack
• [CHANGELOG.md](CHANGELOG.md) · release notes
• [Skills source](src/skills/) · all 7 skills (jaz-api / jaz-cli / jaz-conversion / jaz-jobs / jaz-recipes / jaz-pseudo-sql / jaz-kit)
• [OpenAPI spec](spec/openapi.yaml) · full HTTP surface, synced daily
• [README-cli.md](README-cli.md) · npm-package README, full CLI command catalog
• [help.jaz.ai](https://help.jaz.ai) · Jaz product help center
• CLI surface: 74 command groups across the clio binary

<details> <summary><strong>What's inside · skill file catalog</strong></summary>

jaz-api

jaz-recipes (16 recipe playbooks + 13 calculators)

jaz-jobs (12 close playbooks + Singapore Form C-S)

jaz-conversion

</details>

Troubleshooting

command not found: clio

Node.js is not installed, or npm's global bin directory is not on PATH.

node --version    # Need v18+. If missing, install LTS from https://nodejs.org
npm install -g jaz-clio
npm config get prefix    # e.g. /usr/local or ~/.nvm/versions/node/v22.x.x
export PATH="$(npm config get prefix)/bin:$PATH"   # Add to ~/.bashrc or ~/.zshrc

Auth error / 401 Unauthorized

Missing, expired, or revoked authentication. Reconnect OAuth with clio auth login, then restart local MCP. For optional API-key access, check whether the key was regenerated in Jaz.

clio auth whoami
clio auth add <your-api-key>       # Get from Settings > API in Jaz
clio auth list                     # Confirm the right org is active

If you use env vars, set JAZ_API_KEY in the current shell or your MCP config's env block.

Claude Desktop says "Server disconnected"

Jaz Accounting closes a moment after it starts, and turning it off and on or reinstalling it does not help.

1. Update the extension to 5.60.1 or later. Claude Desktop 2.110.0 closes any extension that starts a background copy of its Node.js runtime, and earlier versions of Jaz Accounting did that to check for updates.
2. If the update has not reached you yet, switch that check off, then fully quit and reopen Claude Desktop:

   # macOS
   mkdir -p ~/.config/configstore && printf '{"optOut":true}' > ~/.config/configstore/update-notifier-jaz-clio.json

On Windows, create the file %USERPROFILE%\.config\configstore\update-notifier-jaz-clio.json containing {"optOut":true}.

1. Still disconnecting? The extension's own log only says the server closed. The reason is in Claude Desktop's main log:

   grep -a -E "Jaz Accounting|nodeHost|UtilityProcess" ~/Library/Logs/Claude/main.log | tail -40

Send that output to [email protected].

MCP not connecting

The config path is wrong, the command is wrong, or the server crashes on startup.

npx jaz-clio mcp --org oauth:<resourceId>   # Smoke-test the server (Ctrl+C to stop)
claude mcp list                    # Confirm Claude Code sees "jaz"
claude mcp add jaz -- npx -y jaz-clio@latest mcp --org oauth:<resourceId>

For Cursor / VS Code / Windsurf, validate the JSON and pin the organization. Sign in first with clio auth login:

{
  "command": "npx",
  "args": ["-y", "[email protected]", "mcp", "--org", "oauth:<resourceId>"]
}

Pin the intended organization explicitly. Local MCP refreshes OAuth tokens automatically; restart it after a new login or a configuration change. API-key profiles and comma-separated keys remain optional alternatives.

Skills not loading

Files are in the wrong path, or your agent doesn't auto-discover from there.

ls .claude/skills/                 # Claude Code
ls .agents/skills/                 # Agent Skills standard (Cursor, Copilot, etc.)
npx jaz-clio init                  # Re-install with auto-detection

Each skill folder must contain SKILL.md plus its reference files. Manual copies often miss subdirectories.

EACCES permission denied on npm install

npm's global directory needs elevated permissions on macOS/Linux without nvm.

# Option A: nvm (recommended)
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.3/install.sh | bash
nvm install --lts && npm install -g jaz-clio

# Option B: fix npm permissions
mkdir -p ~/.npm-global && npm config set prefix ~/.npm-global
export PATH="$HOME/.npm-global/bin:$PATH"   # Add to ~/.bashrc or ~/.zshrc
npm install -g jaz-clio

Stale data after org switch

You ran clio auth switch or clio auth select but the MCP server still uses the previous org (it resolved auth at startup). Pinning --org in the MCP config avoids this.

# In Claude Code: remove and re-add
claude mcp remove jaz && claude mcp add jaz -- npx -y jaz-clio@latest mcp --org oauth:<resourceId>

# In Cursor / VS Code: restart the editor or reload MCP servers

Or use multi-org mode and skip restarts: an OAuth session without --org (or comma-separated keys, jk-aaa,jk-bbb), and name the organization in conversation.

Privacy & security

Runs entirely on your machine. API calls go directly from your machine to the Jaz API over HTTPS. No telemetry. OAuth tokens live in ~/.config/jaz-clio/oauth.json; optional API-key profiles live in ~/.config/jaz-clio/credentials.json. Both are private local credential files.

The hosted remote connector (mcp.jaz.ai) is different by design: you connect over OAuth 2.1 + PKCE (no API key stored anywhere, never your password), requests run server-side over HTTPS, and the connector reaches the organizations your Jaz account belongs to; access is checked on every call.

Full policy: jaz.ai/legal. Vulnerability disclosure: SECURITY.md.

Support

• Help center: help.jaz.ai
• Email: [email protected]

License

MIT · Copyright (c) 2026 Jaz · Clio is a registered trademark.