AI for the firm

Ask
your portfolio.

Lucía inside Cofactu, and your own AI agent through MCP, read the gestoría's portfolio (gestoría: a Spanish tax and accounting firm) with the permissions of whoever asks. They propose, explain and draft. Filing, sending and posting is still done by a person.

The same portfolio, the same permissions and the same figures you see in the application.

Neither Lucía nor the agent calculates anything on its own: they ask the portfolio table, the tax radar and the forms view for their data. If a figure does not match Cofactu, the AI did not make it up.

Lucía, in Cofactu

Prepares the work.
Does not take it as done.

Sorts the inbox

Goes through the expenses awaiting review and the documents your clients uploaded to the portal. For each one it proposes the journal entry that would be posted, or the expense that would come out of the document: supplier, amounts, category and PGC account (Spain's standard chart of accounts). It posts and converts nothing; you confirm it in the inbox.

Asks for what is missing

Drafts the pending-documents email for a client, with the bank charges without an invoice that Cofactu detected, anything you want to add and their next tax deadline. It returns the subject and the text. It does not send or save it: you review it and send it yourself.

Explains the 303

Why a client's VAT changed compared with the previous quarter: how much output VAT, deductible input VAT and the other adjustments moved, using the figures of the forms view. The explanation always matches the result you see.

Orders the quarter

The list for closing the quarter across the whole portfolio: clients with unfiled forms or certificate problems, ordered by urgency and linked to their record. It also tells you which certificates expire soon.

Your agent, through MCP

Connect your agent.
With your name, not with a key.

  1. You connect

    The portfolio only opens with one person's OAuth connection. An API key is nobody: the portfolio permission, portfolio:read, is neither offered nor accepted when you create a key.

  2. You choose the clients

    When you give consent, the clients you see today come ticked and you can untick any you do not want. A client who joins the firm later is not part of that connection: you must connect again.

  3. Your agent asks

    Clients with their health, unfiled deadlines, a client's forms summary and what is waiting in the inbox. All the portfolio tools are read-only.

  4. Always current

    If an employee loses a client, they stop seeing it on the next call. If they lose the permission to manage connections, or are removed, the grant is revoked.

Portfolio tools

What your agent can read.
And where it comes from.

They only exist in an accounting firm account and only with one person's connection. Outside a firm, the agent does not have them.

MCP portfolio tools, all read-only, with the portfolio:read permission.
Tool What it answers Where it comes from
list_portfolio The clients assigned to you, with their health (green, amber or red, and why), alerts, next deadline, the status of their invoices with the AEAT and who is responsible. The portfolio table of the firm's panel.
get_portfolio_deadlines The unfiled forms across the portfolio, overdue ones included. The firm's tax radar.
get_client_fiscal_summary Modelo 303, 130, 111 and 115 for a client's quarter. The same calculation as the forms view; no tax amount is recalculated in the MCP.
list_portfolio_pending What is waiting in the inbox and the bank charges that still have no invoice. The firm's inbox queue.
Connect my agent in Cofactu →
What it does not do

What cannot be undone
a person signs.

A “confirm: true” filled in by the model is nobody's confirmation. That is why anything that cannot be undone has no tool.

  • Never File The firm's tools do not file tax forms or send invoices to the AEAT. In the MCP, filing does not even exist as a tool.
  • Never Send The documentation request comes out as a draft, with subject and text. A person sends it.
  • Never Post Lucía proposes the journal entry; posting it is your click in the inbox.
  • Never Widen It only sees the clients assigned to you and, in the MCP, the ones you ticked when connecting. A client that is not yours answers exactly like one that does not exist.
  • Never Recalculate It does not do its own VAT sums: it asks the same services as the application, so the agent never contradicts what you see in Cofactu.
  • Never Obey Your clients' names and documents reach it marked as untrusted content: text hidden in an invoice is not an order.
Frequently asked questions

Before letting an AI
into the firm.

What it sees, what it cannot do and what it connects with.

What is the difference between Lucía and the MCP?

Lucía is the assistant you have inside Cofactu. The MCP (Model Context Protocol) is the door for the AI agent your firm already uses: it connects to mcp.cofactu.com/mcp and reads the portfolio with the permissions of the person who connects. Both ask the same services as the application for their data.

Which AI agents does it work with?

With any MCP-compatible client that connects through OAuth. The OAuth connection has been tested end to end with the protocol's official SDK, against production. We have not yet tested the connection from Claude.ai and from ChatGPT with a real account; the address and the steps are in Settings → MCP.

Can an employee see clients who are not assigned to them?

No. Lucía and the MCP apply the same assignments as the firm's panel, and each client's access limit. A client that is not assigned, belongs to another firm or has been deleted answers “not found”, exactly like one that does not exist.

Can it file a tax form or send an email for me?

No. The firm's tools read, propose and draft. Filing, sending, posting and opening a notification is done by a person in Cofactu. A “confirm: true” filled in by the model is nobody's confirmation, which is why irreversible actions have no tool in the MCP.

Can I use an API key for the portfolio?

For a single company's data, yes. For the portfolio, no: isolation is per employee and a key is not a person. The portfolio:read permission is only granted through OAuth.

Which plan includes it?

The Accounting Firm plan includes the MCP server and the portfolio tools. Manage your clients: €89 up to 50 clients, €199 unlimited and white-label.

Editorial review: Cofactu team · 7 November 2026. Describes Lucía for accounting firms and the MCP portfolio tools as they work today in Cofactu. More context: Cofactu for accounting firms · Pricing.

(Start today)

Register your firm and your first client. Each client keeps its own organisation and you work the whole portfolio from the same panel.

Your first question

  • One organisation per client
  • Certificate alerts at T-90 / T-30 / T-7
  • Files for 303 · 111 · 115