Support · Specifications
Technical specifications.
Bouw Botje is an MCP server at https://bouwbotje.nl/app/mcp that gives AI assistants access to Exact Online Construction (Exact Online Bouw, formerly Bouw7) via OAuth 2.1 with PKCE. It offers 206 tools, 126 of them read-only and 80 writing, and is read-only by default.
MCP server
| MCP endpoint URL | https://bouwbotje.nl/app/mcp |
|---|---|
| Protocol | Model Context Protocol (MCP) over JSON-RPC 2.0 |
| Protocol version | Default 2025-06-18; the server echoes the protocolVersion requested by the client in initialize |
| Transport | Streamable HTTP: HTTP POST with JSON-RPC requests (single message or batch), JSON responses |
| Supported methods | initialize, notifications/initialized, ping, tools/list, tools/call |
| Server capabilities | tools |
| Server name and version | Bouw Botje 0.1.0 |
| Server card | https://bouwbotje.nl/.well-known/mcp/server-card.json |
| CORS | Allowed for every origin (authentication via Bearer token, no cookies) |
Authentication
| AI client → Bouw Botje | OAuth 2.1, authorization code flow with mandatory PKCE (S256) |
|---|---|
| Bouw Botje → Exact Online Bouw | Exact Online Bouw API key, stored encrypted (AES-256-CBC with HMAC-SHA256) |
| Client registration | Dynamic Client Registration (RFC 7591) at https://bouwbotje.nl/app/mcp/oauth/register; max. 20 registrations per IP address per hour |
| Redirect URIs | https, or http on loopback only (localhost, 127.0.0.1, ::1) |
| Token endpoint auth methods | none (public client), client_secret_post |
| Grant types | authorization_code, refresh_token |
| Scope | bouwbotje |
| Authorization code | Single use, valid for 10 minutes |
| Access token | Bearer token in the Authorization header, valid for 60 minutes; renewable with the refresh token |
| Discovery | https://bouwbotje.nl/.well-known/oauth-protected-resource, https://bouwbotje.nl/.well-known/oauth-authorization-server, https://bouwbotje.nl/.well-known/openid-configuration |
| Issuer | https://bouwbotje.nl/app/mcp/oauth |
Tools
| Total MCP tools | 206 tools in 13 categories |
|---|---|
| Read-only tools | 126 |
| Write tools | 80 (create, update, delete and other mutations) |
| Default mode | Read-only: write tools are left out of tools/list and refused on tools/call |
| Write access | Switched on per user in Bouw Botje; requires the Advanced plan or the free trial |
| Tool descriptions | Dutch |
| Context parameter | Every tool has a required "context" argument in which the AI states the reason for the call; it is logged, not passed on |
Data and synchronisation
| Upstream system | Exact Online Construction (Exact Online Bouw, formerly Bouw7) |
|---|---|
| Upstream APIs | Heimdall REST API (CRUD) and Apollo search API of Exact Online Bouw |
| Upstream authentication | API key → Bearer token; the token lives about 15 minutes, Bouw Botje caches it for 14 minutes and re-authenticates automatically on expiry |
| Data storage | Synchronised copy per administration in its own, isolated database |
| Reads | Answered from the synchronised copy |
| Writes | Sent directly to the Exact Online Bouw API, after which the affected data is refreshed |
| Synchronisation | Incremental, per administration, via a scheduled server job |
| Refresh on use | Before a tool call the related data is refreshed if the last successful sync is older than 240 minutes (default) |
| Upstream rate limits | HTTP 429 from Exact Online Bouw is retried automatically with back-off (Retry-After is respected) |
Limits and plans
| AI requests per month (Basic) | 400 per organisation, read-only, up to 1 administration |
|---|---|
| AI requests per month (Advanced) | 800 per organisation, read and write, up to 10 administrations |
| Rate limit | 120 tool calls per minute per user |
| Free trial | 14 days |
| Price | Basic €39/month, Advanced €59/month; Enterprise on request |
Security and hosting
| Transport encryption | HTTPS/TLS with HSTS |
|---|---|
| Hosting | Scaleway, the Netherlands (EEA) |
| Tenant isolation | Own database per administration |
| Audit logging | Every MCP tool call (tool, parameters with secrets masked, result, duration, AI client) |
| Log retention | 180 days (non-critical), 365 days (critical) |
| Data processing agreement | Available (Article 28 GDPR) |
Clients and provider
| Supported AI assistants | ChatGPT, Claude, Microsoft Copilot, Google Gemini, Mistral, Perplexity, Grok, Cursor, OpenClaw, and any other client that supports remote MCP with OAuth |
|---|---|
| Installation | None: add the MCP URL to your AI assistant |
| Website languages | Dutch, English |
| Provider | Industrial IT, Molecatenlaan 57A, 7339 LJ Ugchelen, the Netherlands |
| Chamber of Commerce (KvK) | 67449727 |
How many tools are there per category?
| Category | Read | Write | Total |
|---|---|---|---|
| Projects | 11 | 8 | 19 |
| Accounts & contacts | 6 | 5 | 11 |
| Quotations | 9 | 5 | 14 |
| Invoices | 6 | 4 | 10 |
| Purchasing | 5 | 5 | 10 |
| Contracts & subcontracting | 12 | 13 | 25 |
| Hours & staff | 15 | 16 | 31 |
| Materials, equipment & waste | 27 | 15 | 42 |
| Planning & calendar | 7 | 0 | 7 |
| Approvals | 5 | 6 | 11 |
| Reference data | 16 | 0 | 16 |
| Organization & administrations | 4 | 0 | 4 |
| Other | 3 | 3 | 6 |
| Total | 126 | 80 | 206 |
The full list of tool names and descriptions is on the MCP tools page. How Bouw Botje protects your data is explained on Security & privacy.
Frequently asked technical questions
The Bouw Botje MCP server runs at
https://bouwbotje.nl/app/mcp. Add that URL as a remote MCP server in your AI assistant, then sign in via OAuth with your Bouw Botje account. Instructions per assistant are on the connect MCP page.The server defaults to protocol version 2025-06-18 and adopts the version the client requests in
initialize. The transport is Streamable HTTP: JSON-RPC 2.0 messages over HTTP POST with JSON responses. The server offers the tools capability.Via OAuth 2.1 with mandatory PKCE (S256). Clients register automatically through Dynamic Client Registration (RFC 7591); you sign in with your Bouw Botje account and give consent. The client receives an access token that is valid for 60 minutes and is renewed with a refresh token.
Read questions are answered from a synchronised copy per administration. It is updated incrementally by a scheduled server job, and refreshed again before a tool call if the last successful sync is older than 240 minutes. Write actions go straight to Exact Online Construction.
Basic includes 400 and Advanced 800 AI requests per month per organisation. On top of that there is a rate limit of 120 tool calls per minute per user. A temporary limit from the Exact Online Construction API (HTTP 429) is retried automatically.
Ready to connect?
Create an account, paste your Exact Online Construction API key and add the MCP URL to your AI assistant. Free for 14 days.