BMC One · BMC Link
BMC Link: your BMC One data in your ERP and your AI assistant, with the permissions you set
BMC Link is the bridge between BMC One and your invoicing, accounting and collections systems: your ERP, your CRM, your spreadsheets or your AI assistant work with your account's data through a REST API and an MCP server hosted by BMC. You decide what each connection can do, area by area, and critical actions are granted separately. Signed notifications by webhook to your systems are being set up.
First meeting free. BMC One comes with every BMC engagement, at no separate fee.
Scope
What your system can do
-
Sales
List, create and issue invoices, record payments received and import your history of issued invoices.
-
Accounting
Chart of accounts, batch journal entries, fixed assets and accounting reports.
-
Purchases
View received invoices and import their history.
-
Treasury
Bank accounts, balances and transaction uploads.
-
Payroll
Employer company, staff, payslips and working-time records.
-
Taxes
Your tax position, compliance board, tax profile and filing receipts.
-
Documents
Upload and view your account's files.
-
Knowledge
Search across the Spanish tax authority's binding rulings and the Official Gazette (BOE).
Access security
You decide what each connection can do
Permissions
- By area, resource and action, at four levels: none, read, write or full.
- Critical actions (issue, file, send, void, merge) are granted separately.
Credentials
- The key is shown once and stored only as a SHA-256 hash.
- Optional expiry, instant pause, rotation and revocation.
- An allowlist of IP addresses (not applied through the MCP server).
OAuth for MCP
- OAuth 2.1 with mandatory PKCE: connect your assistant without copying any key.
- One-hour access tokens and 30-day refresh tokens that rotate on every use.
- When you authorise, you pick a profile: analyst (read-only), operator (no critical actions) or custom.
- Each OAuth connection reaches one company; for several, use a personal credential.
Control
- Usage dashboard with calls by status, credential and area.
- Errors in a standard format (RFC 9457).
- Signed notifications by webhook to your systems, with HMAC-SHA256 and replay protection, being set up.
Use cases
How it is used
-
Your ERP, up to date
- The problem
- Your ERP needs the invoices and journal entries we keep in BMC One.
- What BMC One does
- The ERP reads the invoices issued and the entries posted through the API.
- With what
- BMC Link: REST API with read permission
-
Ask your AI about your business
- The problem
- You want to know how much VAT the quarter carries without opening three screens.
- What BMC One does
- You connect your AI assistant to the MCP server with OAuth and ask in plain language; the assistant reads your tax position with read-only permission.
- With what
- BMC Link: MCP server with the analyst profile
-
Invoices from your own software
- The problem
- You invoice from your shop or sales software and the books have to reflect it.
- What BMC One does
- Your system sends the invoices to BMC One through the API, with the issuing permission granted separately.
- With what
- BMC Link: sales API with critical actions kept separate
Technical documentation
Everything your technical team needs
What we do and what we do not
What we do
- Read and write your account's data with permissions by area, resource and action
- Send signed notifications by webhook to your systems, being set up
- Connect your AI assistant with OAuth, without copying keys
What we do not do
- File taxes through the API: our team does that
- Switch access on automatically: our team switches it on for your account
- Give one OAuth connection more than one company
Frequently asked questions
More of BMC One
The rest of the environment, page by page.
Let's switch on access for your account
If you are already a client, ask your adviser. If not yet, start with a free first meeting.