Embat
by Embat
Query corporate treasury — cash, debt, payments, accounting and forecasts — from an AI agent. One tool, ask_tellme, that dispatches natural language to Embat's routing agent. OAuth sign-in, no application scopes, no payment initiation today.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Embat via MCP
https://tellme.embat.io/mcpWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Embat Tools & Capabilities (1)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- One tool name is not one operation.
ask_tellmeroutes natural language to Embat's orchestrator, which dispatches to domain agents across every Embat module. The reachable operation count is unpublished, so no allowlist, verb census or scope grant can bound it. - No OAuth scope separates anything. The RFC 9728 descriptor declares
scopes_supported: []and the authorization server advertises only identity claims. There is no boundary between the routine read and any future write — the exact place a boundary would matter on a treasury connector. - Embat publishes no tool list. The single name comes from Anthropic's directory. Embat's entire 325-article help centre contains no mention of MCP, Claude or Anthropic, so no vendor enumeration exists to diff against.
- The nominated documentation URL is about a different surface. It describes in-app TellMe, whose Silent Mode does perform unreviewed background writes. The connector runs Ask mode only. We had to find the connector's real documentation on Embat's marketing blog.
- Embat's own article contradicts itself on "actions". It says Claude "can not act autonomously" and also that Ask mode covers "queries and actions you initiate". Embat's engineering blog resolves it — an action is a reviewable suggestion, not an execution — but a reader of the connector article alone gets two answers.
- Read-only is dated, not structural. Embat has published its intent to add payment initiation and transaction approval through this connector during 2026. Nothing on the wire would change when it does: same endpoint, same tool name, same empty scope list.
- We could not read tool schemas or annotations. The endpoint returned 401 to an anonymous request, so no parameter detail,
readOnlyHintordestructiveHintis published here. - Answers are as fresh as the last bank sync, not live. Embat states sync is event-driven "typically every few minutes"; a balance reflects "the state of the accounts as of the last sync, not end-of-day or opening balance". Do not treat a returned figure as an intraday settlement position.
- The connector inherits, and does not reduce, your Embat role. A user with payments Approve rights runs the agent session at that privilege level.
- No metering signal either way. Neither Embat nor Anthropic publishes a per-call cost, quota or rate limit for this server, and no tool exists that could report usage or balance. We found nothing indicating a query spends money, but nothing confirming it does not.
- The privacy policy omits the AI stack. Vertex AI's role is disclosed in a help-centre article; Embat's privacy policy names no AI sub-processor.
Frequently asked questions
Not today, on Embat's own statement. Embat writes that Claude cannot act autonomously through the connector and that it merely retrieves, synthesises and surfaces information. Embat also names payment initiation and transaction approval as roadmap items for 2026, which is an explicit statement that they are not shipped. Treat the read-only boundary as a current property, not a permanent one.
One tool name, an unknown number of operations. ask_tellme forwards natural language to Embat's Ask-mode agent, which Embat describes as an orchestrator routing to domain agents for categorisation, reconciliation and accounting, enrichment, treasury and forecasting. Each domain agent holds its own bounded action set that Embat never enumerates, so the tool count tells you nothing about reach.
Yes, and beneficiary details too. Embat's connector article shows queries returning per-entity and per-account balances, accounts below minimum thresholds, and pending payments listed with beneficiary, amount, currency and due date. Embat draws this from 15,000-plus financial institutions over PSD2, EBICS, host-to-host and SWIFT connections, synced every few minutes.
None that constrain anything. The server's RFC 9728 descriptor declares scopes_supported as an empty array, and its WorkOS AuthKit authorization server advertises only email, offline_access, openid and profile. Every one of those is an identity claim. No scope separates reading a balance from any other operation the server implements.
No, and that is the structural weakness of a one-tool natural-language server. An allowlist can permit or deny ask_tellme and nothing finer, because the operation is chosen by Embat's router from your sentence rather than by the tool name. Allowing the tool grants whatever its domain agents can reach, now and after Embat ships more.
Only as far as your own account already does. Embat states that the connector inherits your existing data-level permissions and enforces them on the server. Embat's payments module grades roles as View, Edit and Approve. A treasurer holding Approve carries that ladder into the agent session, so the boundary is your role, not the connector.
No, and this is easy to misread. The documentation URL Anthropic lists describes TellMe inside the Embat web app, including Silent Mode background writes to categorisations and forecasts. Those are product features, not connector tools. Embat's connector runs only Ask mode. The connector's real documentation is a post on embat.io, linked in Sources.
Existing Embat customers, authenticating with credentials they already hold. Embat states the integration authenticates through existing Embat credentials and that no new login or setup is required once the connector is added. Anthropic's directory records the server as a commercial, partner-tier remote connector requiring authentication, which our anonymous probe confirmed.
Sources
- Embat, "Claude for Treasury: Ask Your Live Financial Data Anything" (retrieved 2026-08-23). The connector's substantive documentation; not the URL Anthropic's directory nominates. · retrieved 2026-08-23
- Embat engineering, "How TellMe reconciles non-deterministic LLM output with deterministic financial operations" (retrieved 2026-08-23). Source for the orchestrator-and-domain-agents architecture and the suggestion-approval path. · retrieved 2026-08-23
- Embat help centre, "TellMe: what it is and how it works" (retrieved 2026-08-23). Anthropic's nominated documentation URL; describes the in-app product. Cloudflare returned 403 to a direct fetch; read via the host's public
help_centerJSON API, whichrobots.txtpermits. · retrieved 2026-08-23 - Embat help centre, "TellMe: security and privacy" (retrieved 2026-08-23) · retrieved 2026-08-23
- Embat help centre, "Skill: Data Intelligence" (retrieved 2026-08-23) · retrieved 2026-08-23
- Embat help centre, "Payments" and "How do payment role permissions work?" — · (retrieved 2026-08-23) · retrieved 2026-08-23
- Embat engineering, "How We Built an Internal AI Agent Platform at Embat" (retrieved 2026-08-23) · retrieved 2026-08-23
- Live OAuth posture check: anonymous
initializetohttps://tellme.embat.io/mcpreturned HTTP 401 with aWWW-Authenticateheader naminghttps://tellme.embat.io/.well-known/oauth-protected-resource/mcp; that descriptor declaresscopes_supported: []and the authorization serverhttps://complete-book-76.authkit.app/.well-known/oauth-authorization-serveradvertisesemail,offline_access,openidandprofile(2026-08-23). Four control paths on the same host returned a matching 404 body, so the descriptor is genuine rather than a catch-all. · retrieved 2026-08-23 - Anthropic Connectors Directory entry — , read from our directory snapshot dated 2026-08-16 · retrieved 2026-08-16
- Embat support — <mailto:support@embat.io> · Privacy
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Finance
- Developer
- Embat
- Tools
- 1
- Domain
- tellme.embat.io
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.