Back to directory

ERP-lite MCP Server

A demonstration Model Context Protocol server that exposes ERP-style sales, inventory and purchasing data to AI agents, with a genuinely enforced human-in-the-loop approval gate on write actions and a full audit trail.

ERP-lite MCP Server

ERP-lite MCP Server lets an AI agent query open sales orders, check inventory levels and identify low-stock items through read-only tools, then propose a purchase requisition that starts in a pending-approval state. The agent cannot approve its own requisition: a secure approval token is generated and stored but never returned to the agent.

A human administrator views pending requisitions and their tokens through a dedicated, authenticated REST endpoint that sits entirely outside the MCP tool surface, so no agent can reach it, then supplies the token back to approve the requisition through a constant-time comparison rather than a naming convention. Every tool call, successful or failed, is written to an append-only audit log with sensitive values such as the approval token redacted before persistence.

It is built with FastAPI and FastMCP on the backend, SQLAlchemy over PostgreSQL for storage, supports stdio or Streamable HTTP transport with bearer-token authentication, ships as a Docker deployment, and is covered by a pytest test suite. It is described as a portfolio project demonstrating AI and ML engineering practice.

More in MCP servers

See all 734
  • Light Cloud

    light-cloud.com

    A hosting platform that deploys a static site, a container, or a managed Postgres database straight from a GitHub, GitLab, or Bitbucket push, with a preview URL for every branch and an MCP server for deploying from Claude Code.

  • ForensicDbg

    forensicdbg.com

    A post-mortem debugger for native Windows x86 and x64 crashes, with an MCP interface so AI tools can consume crash-dump analysis directly.

  • Karada.ai

    karada.ai

    A CI/CD platform that auto-compiles existing APIs into Go MCP servers, attaches composable middleware, and exposes them through one gateway usable from Cursor, Claude Code, and Windsurf.