Connect a client
Approving the connection creates an MCP-type entry in the workspace’s
Integrations page, the same place API keys live. Revoke access at any time by
deleting it there: the next request from that client gets a
401.What the server exposes
The server exposes three tools. They are the same tools Filed’s own assistant uses, so anything the assistant can do for you in Filed, your MCP client can do too, with the same access.
Every call runs as you. You only reach the clients your firm has given you, and
admin-only actions are refused for other roles with a clear reason.
How agents should work
- Call
product_docswith what you want to do, such as “send the return to tax software” or “reply to a note on a document”. It returns the booklet pages for that job and the schema of every tool they name. - Find the client with
product_queryandclients_find. - Read with
product_query, change things withproduct_mutation. - Work that takes time, such as Data Entry or adding documents, returns a task
id. Follow it with
product_queryandtasks_get_status.
{error: {code, message, hint}}. An invalid input includes
the tool’s schema, so the agent can correct the call without searching again.
Uploading documents
MCP tool calls carry a single JSON message, so file bytes don’t travel through a tool call directly. To upload a document, the assistant:- Calls
product_mutationwithfiles_get_upload_urlto get a short-lived (10-minute) upload token and the platform’s tus upload URL. - Drives the resumable tus upload directly against that URL, exactly as described in Uploading documents.
- Passes the resulting upload id to
documents_save, which saves the document to the client.documents_process_into_binderthen adds it to the Binder.
Access and revocation
A connection is scoped to one workspace, chosen when you approve it. To connect a second workspace, add another connection and approve it separately. To revoke access, delete the connection from the workspace’s Integrations page. The next token exchange (within about two minutes, due to caching) starts failing, and the next MCP request from that client gets a401.
Troubleshooting
The client won’t complete the connection- Confirm you’re signed in to the Filed web app in the same browser that completes the OAuth redirect.
- Confirm your MCP client supports streamable HTTP (not only SSE).
401
- The connection was revoked, or the underlying session cache expired and the next exchange failed. Reconnect the client.
FORBIDDEN or NOT_FOUND
- The connection acts as you. A client your firm hasn’t given you looks like
one that doesn’t exist, and admin-only actions are refused for other roles.
The error’s
hintsays what is missing.