Romania Invoice MCP Server

Romania Invoice MCP 🇷🇴 — How can my AI agent issue an e-Factura factura electronica in Romania?

Remote MCP server that lets any AI agent issue Romania e-Factura electronic invoices (factura electronica) into the national ANAF/SPV system. It builds UBL 2.1 CIUS-RO XML (Romania's CIUS of EN 16931) and uploads it under the merchant's own ANAF access token. Stateless, bring-your-own credentials, never stores anything.

Live endpoint: https://inv-ro.wishpool.app/mcp · Registry: app.wishpool/romania-invoice-mcp

Quick start

{
  "mcpServers": {
    "romania-invoice": {
      "type": "http",
      "url": "https://inv-ro.wishpool.app/mcp",
      "headers": {
        "x-anaf-token": "<your ANAF access token>",
        "x-anaf-cif": "RO12345678"
      }
    }
  }
}

You complete a one-time ANAF OAuth in your browser with your qualified digital certificate and hold the access token (~90 days) + refresh token (~365 days). Requests default to the ANAF test rail (no fiscal effect); add x-anaf-mode: production for the live rail. Your certificate never reaches this server.

Tools

Amounts are in RON. No cancel at API level — corrections are new invoices. Token refresh is out of scope in v1 (the merchant refreshes via their own ANAF OAuth app).

Owner policy guardrails ride optional headers (x-agentpay-max-amount, x-agentpay-approval-above, x-agentpay-allowed-tools) — set by the human owner in client config; the agent cannot relax them.

Endpoints wrapped (ANAF e-Factura REST)

• Base: TEST https://api.anaf.ro/test/FCTEL/rest · PROD https://api.anaf.ro/prod/FCTEL/rest
• Upload: POST /upload?standard=UBL&cif={cif} (raw UBL XML body) → index_incarcare
• Status: GET /stareMesaj?id_incarcare={index} → stare in prelucrare | ok | nok
• Download: GET /descarcare?id={id_descarcare} → ZIP

Develop

node test/serve.js   # local server on :3232
node test/e2e.js     # protocol + validation + VAT math + UBL structure + fake-token live probes

Safety

Pure stateless translation layer over the national ANAF e-Factura API. The qualified certificate and OAuth stay with the merchant; the access token travels per-request in a header, nothing is stored. Privacy policy.

Sister servers

Local invoices, one family: Mexico CFDI (inv-mx) · Brazil NF-e (inv-br) · Chile DTE (inv-cl) · Peru CPE (inv-pe) · India GST (inv-in). Local payments in 81 countries: mcp.wishpool.app.

MIT licensed.