{
 "categories": [
  "finance",
  "fintech"
 ],
 "deployment": "saas",
 "evidence": [
  {
   "date": "2026-09-19",
   "fact": "homepage",
   "note": "Brex presents a commercial finance platform for corporate cards, expenses, travel, bill pay, banking, and accounting automation.",
   "source": "https://www.brex.com/",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "license",
   "note": "The opened homepage sells Brex as commercial finance software with get-started and sales paths, not a permanent free tenant.",
   "source": "https://www.brex.com/",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.exists",
   "note": "Brex documents a production Developer API at https://api.brex.com. Account or card admins create scoped user tokens after accepting the Developer API agreement.",
   "source": "https://developer.brex.com/guides/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.kinds[0]",
   "note": "The Expenses API is published as OpenAPI over HTTPS JSON at https://api.brex.com, with GET /v1/expenses and PUT /v1/expenses/card/{expense_id}.",
   "source": "https://developer.brex.com/openapi/expenses_api.md",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.auth[0]",
   "note": "Brex clients authenticate with a dashboard user token sent as Authorization Bearer. Tokens expire after 90 days of inactivity or when the user is no longer active, and can be revoked in the dashboard.",
   "source": "https://developer.brex.com/guides/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.auth[1]",
   "note": "Partners use OAuth 2.0 / OpenID Connect against https://accounts-api.brex.com/oauth2/default. Authorization-code is required for customer APIs; client-credentials is used for the onboarding API. Access tokens expire in 3,600 seconds.",
   "source": "https://developer.brex.com/guides/partner_authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.coverage",
   "note": "The developer index lists Accounting, Budgets, Expenses, Fields, Onboarding, Payments, Team, Transactions, Travel, and Webhooks APIs. Coverage is scoped by token and role, and is not a single unscoped control plane.",
   "source": "https://developer.brex.com/llms.txt",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.api.docs",
   "note": "Opened as the current client authentication guide for dashboard user tokens and the production API host.",
   "source": "https://developer.brex.com/guides/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.mcp.first_party",
   "note": "Brex documents a first-party remote MCP at https://api.brex.com/mcp. An admin must accept the Developer API agreement and enable the Brex in AI assistants beta.",
   "source": "https://developer.brex.com/docs/mcp",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.mcp.verdict",
   "note": "Auth is OAuth with Dynamic Client Registration against accounts-api.brex.com, or a Bearer API token. Named tools cover users, expenses, cards, banking, bills, vendors, accounting, and travel. Approvals and card management are not yet available via MCP.",
   "source": "https://developer.brex.com/docs/mcp",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.extensibility.webhooks",
   "note": "Brex documents HTTPS webhooks registered at POST /v1/webhooks. Receivers verify HMAC-SHA256 signatures from Webhook-Id, Webhook-Timestamp, and Webhook-Signature headers.",
   "source": "https://developer.brex.com/guides/webhooks",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.data_access.export",
   "note": "GET /v1/expenses and GET /v1/expenses/{id} return JSON expense collections and records the caller is permitted to see.",
   "source": "https://developer.brex.com/openapi/expenses_api.md",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.data_access.import",
   "note": "PUT /v1/expenses/card/{expense_id} updates a card expense. Receipt-match and receipt-upload endpoints accept file uploads through pre-signed URLs.",
   "source": "https://developer.brex.com/openapi/expenses_api.md",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "modalities.agent_docs.llms_txt",
   "note": "Opened https://developer.brex.com/llms.txt as a first-party documentation index listing authentication, MCP, webhooks, and the OpenAPI families.",
   "source": "https://developer.brex.com/llms.txt",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "verdict.scores.api",
   "note": "The production REST surface covers expenses, cards, team, transactions, payments, travel, and webhooks with scoped user tokens and partner OAuth. Admin agreement, role gates, and a narrow opened webhook event catalog keep the path in the practical-and-broad band.",
   "source": "https://developer.brex.com/guides/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "verdict.scores.mcp",
   "note": "The official remote server has useful expense, card, banking, bill, and travel tools, but Brex marks it Beta, requires an admin AI-assistants toggle, and excludes approvals and card management. That matches a limited vendor preview.",
   "source": "https://developer.brex.com/docs/mcp",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "freshness.watch[0].url",
   "note": "Opened and verified as the current Brex client authentication guide for dashboard user tokens.",
   "source": "https://developer.brex.com/guides/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "freshness.watch[1].url",
   "note": "Opened and verified as the current first-party Brex MCP page, including endpoint, auth, tool table, and beta gates.",
   "source": "https://developer.brex.com/docs/mcp",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "freshness.watch[2].url",
   "note": "Opened and verified as the current webhook guide, including event catalog and HMAC signature verification.",
   "source": "https://developer.brex.com/guides/webhooks",
   "tier": "declared"
  },
  {
   "date": "2026-09-19",
   "fact": "freshness.watch[3].url",
   "note": "Opened and verified as the current Expenses API reference, including list and update expense operations.",
   "source": "https://developer.brex.com/openapi/expenses_api.md",
   "tier": "declared"
  }
 ],
 "freshness": {
  "last_verified": "2026-09-19",
  "volatility": "high",
  "watch": [
   {
    "type": "docs",
    "url": "https://developer.brex.com/guides/authentication"
   },
   {
    "type": "mcp",
    "url": "https://developer.brex.com/docs/mcp"
   },
   {
    "type": "docs",
    "url": "https://developer.brex.com/guides/webhooks"
   },
   {
    "type": "docs",
    "url": "https://developer.brex.com/openapi/expenses_api.md"
   }
  ]
 },
 "homepage": "https://www.brex.com/",
 "id": "brex",
 "license": "commercial",
 "modalities": {
  "agent_docs": {
   "llms_txt": true
  },
  "api": {
   "auth": [
    "user-token",
    "oauth2"
   ],
   "coverage": "partial",
   "docs": "https://developer.brex.com/guides/authentication",
   "exists": true,
   "kinds": [
    "rest"
   ]
  },
  "cli": {
   "exists": "unknown"
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [
    "json"
   ],
   "import": [
    "json"
   ]
  },
  "extensibility": {
   "scripting": [],
   "webhooks": true
  },
  "integrations": {
   "make": "unknown",
   "n8n": "unknown",
   "power_automate": "unknown",
   "zapier": "unknown"
  },
  "mcp": {
   "first_party": true,
   "third_party": [],
   "verdict": "official"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. Brex's REST APIs, signed webhooks, and the first-party hosted MCP cover spend automation without browser control of the dashboard.\n",
   "ui_stack": [
    "web-dom"
   ],
   "vendor_support": []
  },
  "sdk": {
   "exists": "unknown",
   "languages": [],
   "official": "unknown"
  }
 },
 "name": "Brex",
 "platforms": [
  "web"
 ],
 "related": {
  "alternatives": [
   "pleo",
   "sap-concur",
   "ramp"
  ],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "Brex",
 "verdict": {
  "best_path": "api",
  "scores": {
   "api": 8,
   "cli": null,
   "computer_use": null,
   "integrations": null,
   "mcp": 6,
   "overall": 8,
   "rpa": null
  },
  "summary": "Brex is automatable today through its REST API. This record is Brex corporate cards, expenses, banking, bills, travel, and accounting integration, including the vendor-hosted MCP at https://api.brex.com/mcp. It is not Ramp, Pleo, or SAP Concur. The production API host is https://api.brex.com. Account or card admins who accept the Developer API agreement mint a dashboard user token and send it as Authorization Bearer. Unused tokens expire after 90 days. Partners use OAuth 2.0 / OpenID Connect against https://accounts-api.brex.com/oauth2/default, with authorization-code for customer accounts and client-credentials for the onboarding API. Partner access tokens last 3,600 seconds. Documented families include Expenses, Team, Transactions, Payments, Budgets, Accounting, Fields, Travel, Onboarding, and Webhooks. GET /v1/expenses lists expenses; PUT /v1/expenses/card/{expense_id} updates a card expense. Webhooks register at POST /v1/webhooks and verify HMAC-SHA256 signatures. Opened webhook events cover referrals, transfers, and user updates, not the full expense catalog. First-party MCP is beta. An admin must enable Brex in AI assistants after accepting the Developer API agreement. Clients use OAuth with Dynamic Client Registration, or a Bearer API token. Tools cover users, expenses, cards, banking, bills, vendors, accounting, and travel. Approvals and card management are not yet available via MCP. Official language SDKs, a general-purpose CLI, and iPaaS catalogs were not established from the opened pages. Computer-use viability is unassessed. API scores 8 and is the best path because MCP is a beta subset that excludes approvals and card management.\n"
 }
}