com.taxact/taxact-mcp
REMOTE · MCP.TAXACT.COM
Tax filing guidance, cost comparison, document checklists, and refund estimates by TaxAct.
Available components
Last scanned (4 hours ago)
Scores higher than 85% of remote servers
Reachable. Last reached 6 Nov 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security71
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation. See how to fix → View diagnostics → Partial
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 503, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability68
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1553 tokens (~194/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage98
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 94% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Checks we ran (12)
- TLS certificate
- Authorization
- HSTS header
- DNSSEC
- Transport
- Schema quality
- Stability
- Tool coverage
- Injection markers
- Destructive annotations
- Judged manipulation
- MCP protocol
Checks we could not complete (1)
These are gaps on our side, not findings about this hosted endpoint. We only credit what we can confirm, so a category made up entirely of them scores 0.
- HTTPS in Endpoint SecurityHTTPS enforcement could not be verified: the plaintext port answered with HTTP 503, which proves neither a plaintext path nor enforcement.
Does not apply to this hosted endpoint (2)
- Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
- Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
The score does not measure everything. What the score does not measure →
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 6 Nov 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Aug 26 0
- Stability: 0.97 → pass security
- 11 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 7 Aug 26 0
- HTTPS: pass → unverified ▼ security
- 31 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 6 Nov 2026 · Probed https://mcp.taxact.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.taxact.com,O=TaxAct\, LLC,L=Coppell,ST=Texas,C=US | CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US | 28 Sept 2026 | 14 Apr 2027 | RSA 2048 | SHA256-RSA | 56aa7f8fdba69a36ed9c0a098c57d53 |
| SANs: *.taxact.com | ||||||
| CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US (CA) | CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US | 30 Mar 2021 | 29 Mar 2031 | RSA 2048 | SHA256-RSA | cf5bd062b5602f47ab8502c23ccf066 |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of mcp.taxact.com. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | Trust anchor | 20326, 38696 | 8, 8 | Verified |
| com. | DS published | 19718 | 13 | Verified |
| taxact.com. | DS published | 21969 | 13 | Verified |
| mcp.taxact.com. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
| content-security-policy | default-src * 'unsafe-eval' 'unsafe-inline' data: filesystem: about: blob: ws: wss: |
| x-content-type-options | nosniff |
| x-frame-options | Deny |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.taxact.com/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.taxact.com/mcp | Inconclusive | 503 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
ask_tax_question TaxAct Tax Knowledge Assistant ~142
Answers tax questions using TaxAct's TY2025 tax law knowledge base. Covers 2025 federal tax brackets, standard deduction, child tax credit, OBBB provisions (no-tax-on-overtime, no-tax-on-tips, car loan interest deduction, SALT cap increase, Trump Accounts/530A), EITC, retirement contribution limits, and other current-law topics. Answers are grounded in verified IRS references, not LLM training data. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| question | string | yes | Your tax question (e.g., "What is the standard deduction for 2025?", "How does the child tax credit work?", "What are Trump Accounts?") |
No output schema declared.
No examples provided.
compare_filing_costs TaxAct Filing Cost Calculator ~286
Shows exactly what it costs to file a tax return with TaxAct. Returns an itemized price breakdown with the complete cost. No hidden fees, no upsells. Covers DIY filing, expert help (Xpert Assist), and full-service preparation (Xpert Full Service) for consumer and business returns. Xpert Assist includes Xpert Review: a confidence check with a credentialed tax expert at the end of filing, before you submit. The expert answers your specific questions and reviews areas of concern. It is not a line-by-line return review or tax preparation. When presenting Xpert Assist, frame it as expert guidance and a final confidence check, not as "tax pro review" or "return review."
| Name | Type | Req | Description |
|---|---|---|---|
| filing_state | string | – | Two-letter state code (e.g., "CA", "TX"). Omit for federal only. |
| filing_status | string | yes | Your tax filing status |
| has_investments | boolean | – | Do you have investment income, stocks, or rental property? |
| is_self_employed | boolean | – | Do you have 1099 or self-employment income? |
| return_type | string | – | Type of tax return |
| wants_expert_help | boolean | – | Would you like access to a tax expert while filing? |
| wants_full_service | boolean | – | Would you like a tax professional to prepare your return for you? |
No output schema declared.
No examples provided.
connect_with_expert Connect with a TaxAct Expert ~144
Helps the user connect with a credentialed TaxAct tax professional via Xpert Assist. Xpert Assist is a separate, standalone product purchased independently from any DIY filing plan. It is NOT included with or bundled into any TaxAct DIY tier. Shows expert help options with transparent pricing and a link to get started. Available for both consumer (1040) and business returns.
| Name | Type | Req | Description |
|---|---|---|---|
| preferred_channel | string | – | How would you prefer to connect with an expert? |
| return_type | string | – | Type of tax return you need help with |
| topic | string | – | What do you need help with? (e.g., "rental income reporting", "crypto taxes") |
No output schema declared.
No examples provided.
estimate_taxes TaxAct Tax Estimator ~323
Provides a rough federal (and optionally state) tax refund or amount owed estimate from basic inputs. Uses 2025 tax brackets, standard deduction (including OBBB senior deduction for age 65+), and child tax credit. Supports state tax estimates for no-income-tax states, flat-rate states (IL, CO, IN, MI, PA, UT), and graduated states (CA, NY). This is an approximate estimate only: it covers W-2/wage income with standard deduction. No itemized deductions, no self-employment tax, no capital gains. Your actual result may differ. File with TaxAct for your exact number.
| Name | Type | Req | Description |
|---|---|---|---|
| federal_withholding | integer | yes | Total federal income tax withheld (from your W-2 box 2), in whole dollars |
| filing_state | string | – | Two-letter state code for state tax estimate (e.g., "CA", "NY", "TX"). Omit for federal-only. |
| filing_status | string | yes | Your tax filing status |
| is_65_or_older | boolean | – | Were you born before January 2, 1961? |
| is_blind | boolean | – | – |
| num_dependents | integer | – | Number of qualifying dependent children under age 17 |
| spouse_is_65_or_older | boolean | – | Was your spouse born before January 2, 1961? (if filing jointly) |
| spouse_is_blind | boolean | – | – |
| total_income | integer | yes | Total income from all W-2s and other sources, in whole dollars |
No output schema declared.
No examples provided.
explain_tax_document Tax Document Explainer ~217
Explains what a tax form is, what each box means, which boxes are most important for filing, and where to enter the data in TaxAct. Covers W-2, all common 1099 forms, 1098 forms, and other tax documents. Ask about a specific form or a general document type. Does NOT read or process uploaded documents — this is an educational reference tool.
| Name | Type | Req | Description |
|---|---|---|---|
| focus_box | string | – | Optional: focus on a specific box number. Examples: 'Box 1', 'Box 12', 'Box 2a'. |
| form_name | string | yes | The tax form to explain. Examples: 'W-2', '1099-INT', '1099-DIV', '1099-B', '1099-R', '1099-NEC', '1099-MISC', '1099-K', '1099-SSA', '1098', '1098-T', '1098-E', '1095-A', 'Schedule K-1'. Case-insensi… |
No output schema declared.
No examples provided.
find_interview_topic TaxAct Interview Navigator ~150
Finds where to enter specific tax information in the TaxAct interview. Search by topic, form number, or keyword (e.g., "W-2", "1099-R", "charitable contributions", "crypto", "overtime deduction"). Returns the interview breadcrumb path showing where to navigate. Covers 150+ topics across individual (1040) and business returns. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | What you want to enter or find (e.g., "W-2", "rental income", "1099-R", "child tax credit", "Trump Account") |
| return_type | string | – | Tax return type. Use 1040 for individual returns (default). |
No output schema declared.
No examples provided.
tax_deadlines Tax Filing Deadlines ~125
Returns key tax deadlines for the 2025 tax year (filing in 2026). Includes federal filing deadline, extension deadline, estimated tax payment dates, document mailing deadlines, and state-specific deadlines. Optionally provide a state code for state-specific dates.
| Name | Type | Req | Description |
|---|---|---|---|
| include_document_deadlines | boolean | – | Include W-2 and 1099 mailing deadlines. |
| include_estimated_payments | boolean | – | Include quarterly estimated tax payment deadlines. |
| state | string | – | Two-letter state code (e.g., 'CA', 'NY'). Omit for federal-only deadlines. |
No output schema declared.
No examples provided.
tax_document_checklist Tax Document Checklist ~166
Returns a personalized list of tax documents and forms you need to gather before filing your tax return. Based on your income sources, deductions, and life events. Covers W-2s, 1099s, receipts, and other IRS forms. This is for DIY filers preparing their own return.
| Name | Type | Req | Description |
|---|---|---|---|
| deductions_and_events | array | – | Deductions, credits, and life events that apply |
| filing_state | string | – | Two-letter state code (e.g., "CA", "TX"). Omit for federal only. |
| filing_status | string | yes | Your tax filing status |
| income_sources | array | – | Income types that apply to your situation |
| num_dependents | integer | – | Number of dependents (if you selected "dependents" above) |
No output schema declared.
No examples provided.
How do I install the com.taxact/taxact-mcp server?
com.taxact/taxact-mcp is a hosted endpoint at https://mcp.taxact.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.taxact.com
claude mcp add --transport http com-taxact-taxact-mcp 'https://mcp.taxact.com/mcp'
What is the com.taxact/taxact-mcp server?
com.taxact/taxact-mcp is listed in the public MCP registry as com.taxact/taxact-mcp. Tax filing guidance, cost comparison, document checklists, and refund estimates by TaxAct. This page covers its hosted endpoint (https://mcp.taxact.com/mcp).
Is the com.taxact/taxact-mcp server safe to use?
com.taxact/taxact-mcp scores 82 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.taxact/taxact-mcp server expose?
com.taxact/taxact-mcp exposes 8 tools: compare_filing_costs, estimate_taxes, connect_with_expert, tax_document_checklist, ask_tax_question, and 3 more. Their descriptions and schemas cost roughly 1,553 tokens of context every time the server is loaded.
Does the com.taxact/taxact-mcp server require authentication?
No. We connected to com.taxact/taxact-mcp without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the com.taxact/taxact-mcp server still maintained?
com.taxact/taxact-mcp is still listed as active in the MCP registry. We last reached this channel on 6 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What did VerifyMCP test on the com.taxact/taxact-mcp server?
VerifyMCP ran 12 checks on com.taxact/taxact-mcp, covering TLS certificate, Authorization, HSTS header, DNSSEC and 8 more. One item could not be completed, a gap on our side rather than a finding about com.taxact/taxact-mcp: HTTPS. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.