Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

earnrate

REMOTE · MCP.EARNRATE.DEV · 2 COMPONENTS

Which credit card earns the most at a merchant, from your cards or every card, and why.

37 Trust /100

Last scanned (15 hours ago)

Scores higher than 26% of remote servers

Reachable. Last reached 6 Nov 2026.

Category Finance and Payments

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security92
Transport & Reachability0
Schema Quality & AI Usability0
  • Schema blocked by authentication: the endpoint requires auth we don't have to read it. See how to fix → Unverified
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
  • Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Tool Safety0
  • Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Capabilities0
  • Capabilities blocked by authentication: the endpoint requires auth we don't have to read them. See how to fix → Unverified

Unverified: 6 categories

Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm. Claim this server and supply a read-only token to verify it and lift the score.

What we tested

Checks we ran (5)

  • TLS certificate
  • Authorization
  • HTTPS
  • HSTS header
  • DNSSEC

Checks we could not complete (6)

These are gaps on our side, not findings about this hosted endpoint. We only credit what we can confirm, so a category made up entirely of them scores 0.

  • Transport in Transport & Reachability (scores 0 for this)Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http.
  • Schema quality in Schema Quality & AI Usability (scores 0 for this)Schema blocked by authentication: the endpoint requires auth we don't have to read it.
  • Stability in Stability & Change Management (scores 0 for this)Stability not yet verified: not enough scan history yet (needs a 30-day window).
  • Tool coverage in Tool Coverage (scores 0 for this)Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.
  • Tool safety in Tool Safety (scores 0 for this)Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.
  • Capabilities in Capabilities (scores 0 for this)Capabilities blocked by authentication: the endpoint requires auth we don't have to read them.

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 6 Nov 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 3 Nov 26 +5
    • HTTPS: unverified → pass ▲ security
  • 1 Nov 26 −26
    • Endpoint reachability: reachable → behind authorisation ▼ security
    • Tool safety: pass → unverified ▼ security
    • Transport: pass → unverified ▼ security
    • Authorization: fail → pass ▲ security
    • First check of Authorization: pass security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • First check of Schema quality: unverified functional
  • 31 Oct 26 58

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 6 Nov 2026 · Probed https://mcp.earnrate.dev

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=earnrate.dev CN=WE1,O=Google Trust Services,C=US 31 Oct 2026 29 Jan 2027 ECDSA 256 ECDSA-SHA256 8028e5c5e0eed3270eb547cad077e5c2
SANs: earnrate.dev, mcp.earnrate.dev, *.mcp.earnrate.dev
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of mcp.earnrate.dev. — Not signed

Zone DS Keys Algorithms Outcome
. Trust anchor 20326, 38696 8, 8 Verified
dev. DS published 60074 8 Verified
earnrate.dev. No DS Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result Enforced and verified
Enforced On connection
HTTP status 401

WWW-Authenticate challenge Bearer resource_metadata="https://mcp.earnrate.dev/.well-known/oauth-protected-resource", scope="wallet"

Bearer resource_metadata="https://mcp.earnrate.dev/.well-known/oauth-protected-resource", scope="wallet"
Header Value
www-authenticate Bearer resource_metadata="https://mcp.earnrate.dev/.well-known/oauth-protected-resource", scope="wallet"

Protected resource metadata

Document https://mcp.earnrate.dev/.well-known/oauth-protected-resource
Retrieved Yes
Resource https://mcp.earnrate.dev
Authorisation server https://mcp.earnrate.dev

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://mcp.earnrate.dev Auth required 401
http (plaintext) http://mcp.earnrate.dev HTTPS enforced 301 https://mcp.earnrate.dev/
MCP tools · 16 exposed · ~4,096 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
add_card ~281

Adds a card the user holds to their wallet by its id from search_cards, creating the wallet if there isn't one. The reply says what the card still needs (category picks, memberships, activations); ask the user about those. Stores only the card's product id and settings, never card numbers.

NameTypeReqDescription
activatedarray–Rule ids the user has activated with the issuer, such as rotating categories. Replaces the current list.
anniversarystring–The account's anniversary as MM-DD, for cards whose cap resets on it.
bonus––A welcome bonus the user is working toward, so purchases recorded on this card count toward it and answers can favor it. Ask when they opened the account; spending needed and the deadline default to…
cardIdstringyesThe card id from search_cards, e.g. chase-sapphire-preferred.
checkoutLabelstring–How the card appears at checkout or in a browser wallet, e.g. "Amex Gold". Optional.
picksobject–For cards where the cardholder picks bonus categories: choice id → option ids, from search_cards, e.g. {"five-percent": ["tv-internet-streaming", "fast-food"]}. Saved for the current period. Ask the…
NameTypeReqDescription
cardIdsarrayyes–
createdbooleanyes–
membershipsarrayyes–
messagestringyes–
notesarrayyes–

No examples provided.

best_card_for_purchase ~632

Which card earns the most rewards for a purchase, and why. With no cards given and no saved wallet, it ranks every card earnrate knows (in `allCards`): a complete answer for anyone. With cards named in the conversation (`cards`) or a saved wallet, it picks the best of the user's own: `decision.cardId` is the pick and `decision.checkoutLabel` is how the card appears at checkout, with every usable card ranked with reasons, cards the merchant won't take, assumptions, warnings, and when a different point valuation would change the pick. Never needs or returns card numbers.

NameTypeReqDescription
amountnumber–Purchase amount in US dollars. Improves cap math.
cardsarray–Cards the user named in this conversation, to answer for just those cards without saving anything. Leave out to use the user's saved wallet if they have one; with neither, the answer covers every car…
categorystring–Only for a merchant earnrate may not know, and only if you're confident what kind of business it is: its spending category, e.g. grocery.supermarket for a supermarket, dining for a restaurant, gas fo…
channelstring–How the purchase is made. Omit if unknown; the answer says what it assumed.
datestring–Purchase date, YYYY-MM-DD. Defaults to today.
membershipsarray–Memberships the user has, such as amazon-prime, when they're named in the conversation rather than saved.
merchantstringyesMerchant name or web address as the user would say it or see it, e.g. "Whole Foods" or "delta.com".
NameTypeReqDescription
allCards–yes–
assumptionsarrayyes–
bonus–yes–
decision–yes–
excludedarrayyes–
merchantobjectyes–
notesarrayyes–
rankedarrayyes–
sensitivitystring|nullyes–
warningsarrayyes–

No examples provided.

best_cards_for ~594

Ranks every card earnrate knows, not only the user's, for one purchase or category, each set up at its best (the right category pick, activated, cap unused), with its annual fee and what earning the rate takes. Use it for questions like "what's the best card for groceries?" or "which card should I get for Amazon?". It needs no wallet. For which of the user's own cards to use, call best_card_for_purchase instead. Mention the annual fee and any conditions alongside each card.

NameTypeReqDescription
amountnumber–Purchase amount in US dollars, if known.
businessboolean–Business cards instead of personal ones.
categorystring–A spending category: dining (Restaurants), dining.fast_food (Fast food), grocery (Grocery), grocery.supermarket (Supermarkets), grocery.online (Online grocery and delivery), superstore (Superstores),…
channelstring–How the purchase is made. Omit if unknown; the answer says what it assumed.
issuerstring–Only this issuer's cards.
kindstring–cash: cash back cards only. points: points and miles cards only.
membershipsarray–Memberships the user has, such as amazon-prime. Rates that need one they don't have are listed separately.
merchantstring–Merchant name or web address as the user would say it or see it, e.g. "Whole Foods" or "delta.com".
noAnnualFeeboolean–Only cards with no annual fee.
valuationstring–flat (default): points at their cash-out value, about 1¢. points-heavy: Amex MR and Chase UR at 1.7¢, for people who transfer points to airlines and hotels.
NameTypeReqDescription
assumptionsarrayyes–
excludedarrayyes–
merchantobjectyes–
rankedarrayyes–
warningsarrayyes–

No examples provided.

cheat_sheet ~215

The card to use for each everyday kind of purchase right now: groceries, dining, gas, Amazon, Costco, travel, streaming, drugstores and everything else. With no cards given and no saved wallet, it picks from every card earnrate knows (`scope: all cards`, each row noting the card's fee and conditions). With cards named in the conversation or a saved wallet, it picks from the user's own cards, with caps, picks and activations as they are. For one specific store, call best_card_for_purchase instead. Pass on the notes.

NameTypeReqDescription
cardsarray–Cards the user named in this conversation, to answer for just those cards without saving anything. Leave out to use the user's saved wallet if they have one; with neither, the answer covers every car…
datestring–Purchase date, YYYY-MM-DD. Defaults to today.
membershipsarray–Memberships the user has, such as amazon-prime, when they're named in the conversation rather than saved.
NameTypeReqDescription
datestringyes–
notesarrayyes–
quarterstringyes–
rowsarrayyes–
scopestringyes–

No examples provided.

compare_welcome_offers ~224

Ranks the public welcome (sign-up) offers on cards the user doesn't have by first-year value: the bonus at the user's point values minus the first year's annual fee. Use it when the user asks which new card to get or which has the best sign-up bonus. It covers only the cards earnrate knows, offers vary by person, and each offer's note gives the issuer's eligibility rules; pass those caveats on. It doesn't account for what a card would earn on the user's spending.

NameTypeReqDescription
businessboolean–Business cards instead of personal ones.
cardsarray–Cards the user named in this conversation, to answer for just those cards without saving anything. Leave out to use the user's saved wallet if they have one; with neither, the answer covers every car…
includeHeldboolean–Include cards already in the wallet.
kindstring–cash: cash back cards only. points: points and miles cards only.
noAnnualFeeboolean–Only cards with no annual fee.
NameTypeReqDescription
notesarrayyes–
offersarrayyes–
withoutOfferarrayyes–

No examples provided.

delete_wallet ~46

Deletes the saved wallet now and for good, and signs out every app using it. Only when the user asks to delete it; confirm first, and offer export_wallet to keep a copy.

Input schema present but exposes no named parameters.

NameTypeReqDescription
deletedbooleanyes–

No examples provided.

export_wallet ~48

The saved wallet as a wallet.yaml file the earnrate command line and earnrate.dev can import: card ids, picks, activations, memberships, cap usage and bonus progress. Never card numbers.

Input schema present but exposes no named parameters.

NameTypeReqDescription
yamlstringyes–

No examples provided.

import_wallet ~76

Replaces the saved wallet with a wallet.yaml from the earnrate command line or earnrate.dev, when the user pastes or attaches one. Wallet files only: never statements or card numbers. Confirm with the user first if they already have cards saved.

NameTypeReqDescription
yamlstringyesThe wallet.yaml text, as the user gave it.
NameTypeReqDescription
cardIdsarrayyes–
createdbooleanyes–
membershipsarrayyes–
messagestringyes–
notesarrayyes–

No examples provided.

list_wallet ~66

Lists the user's cards: checkout label, network, rewards currency and its value, spending caps with how much is left this period, chosen bonus categories (and whether they're current), welcome-bonus progress, which stores a store card works at, and when each card's data was last verified.

Input schema present but exposes no named parameters.

NameTypeReqDescription
cardsarrayyes–
membershipsarrayyes–

No examples provided.

record_purchase ~519

Records a purchase the user has already made, so spending caps and welcome-bonus progress stay accurate for future recommendations. It updates the user's saved wallet. Only call it after the purchase has happened, and only once per purchase: calling it twice counts the spend twice. Purchases with no cap and no open welcome bonus are acknowledged and nothing is written.

NameTypeReqDescription
amountnumberyesAmount spent in US dollars.
cardIdstringyesThe card used, as a cardId from list_wallet or best_card_for_purchase.
categorystring–Only for a merchant earnrate may not know, and only if you're confident what kind of business it is: its spending category, e.g. grocery.supermarket for a supermarket, dining for a restaurant, gas fo…
channelstring–How the purchase is made. Omit if unknown; the answer says what it assumed.
datestring–Purchase date, YYYY-MM-DD. Defaults to today.
merchantstringyesMerchant name or web address as the user would say it or see it, e.g. "Whole Foods" or "delta.com".
NameTypeReqDescription
bonus–yes–
booking–yes–
messagestringyes–
recordedbooleanyes–

No examples provided.

remove_card ~63

Removes a card from the wallet, with its tracked cap usage and bonus progress. Only when the user says they no longer have it or don't want it considered.

NameTypeReqDescription
cardIdstringyesThe card id from search_cards, e.g. chase-sapphire-preferred.
NameTypeReqDescription
cardIdsarrayyes–
createdbooleanyes–
membershipsarrayyes–
messagestringyes–
notesarrayyes–

No examples provided.

resolve_merchant ~443

Shows how earnrate identifies a merchant: its spend category, likely MCC, which card networks it takes, confidence, and whether that came from curated data, Claude, or nowhere. Use it to explain or double-check a recommendation.

NameTypeReqDescription
categorystring–Only for a merchant earnrate may not know, and only if you're confident what kind of business it is: its spending category, e.g. grocery.supermarket for a supermarket, dining for a restaurant, gas fo…
channelstring–How the purchase is made. Omit if unknown; the answer says what it assumed.
merchantstringyesMerchant name or web address as the user would say it or see it, e.g. "Whole Foods" or "delta.com".
NameTypeReqDescription
accepts–yes–
ambiguity–yes–
bookedViaarrayyes–
categorystringyes–
channel–yes–
confidencestringyes–
inference–yes–
inputstringyes–
likelyMccnumber|nullyes–
merchantIdstring|nullyes–
resolvedNamestringyes–
sourcestringyes–

No examples provided.

search_cards ~108

Finds credit cards in earnrate's catalog by name or issuer, e.g. "sapphire", "amex gold" or "bofa". Returns each card's id (for add_card), network, annual fee, whether it's already in the wallet, and what it needs set up: category picks and their options, memberships, activations. Leave the query out to list every card. US cards only.

NameTypeReqDescription
querystring–Card name or issuer, as the user said it.
NameTypeReqDescription
cardsarrayyes–
exactbooleanyes–

No examples provided.

set_memberships ~124

Sets the memberships that unlock some cards' rates, such as amazon-prime for Prime Visa's 5% or a Bank of America Preferred Rewards tier. Replaces the whole list, so include the ones to keep.

NameTypeReqDescription
membershipsarrayyesEvery membership the user has. Known: amazon-prime, bank-of-america-account, bank-of-america-small-business-account, bofa-rewards-member, bofa-rewards-preferred-honors, bofa-rewards-preferred-plus, b…
NameTypeReqDescription
cardIdsarrayyes–
createdbooleanyes–
membershipsarrayyes–
messagestringyes–
notesarrayyes–

No examples provided.

simulate_spending ~378

Spends monthly amounts for a year across every card earnrate knows, and ranks single cards and two-card pairs by rewards minus annual fees. Spending is optional: without it, typical U.S. household amounts are used and the answer says so. With `cards` (named in the conversation) or compareToWallet (the saved wallet), it ranks the cards that would add the most to those cards instead. Use it for "which card fits my spending?" or "is it worth adding a card?". It leaves out welcome bonuses.

NameTypeReqDescription
businessboolean–Business cards instead of personal ones.
cardsarray–Cards the user named in this conversation, to answer for just those cards without saving anything. Leave out to use the user's saved wallet if they have one; with neither, the answer covers every car…
compareToWalletboolean–Rank the cards that would add the most to the user's saved wallet.
issuerstring–Only this issuer's cards.
kindstring–cash: cash back cards only. points: points and miles cards only.
membershipsarray–Memberships the user has, such as amazon-prime. Rates that need one they don't have are listed separately.
noAnnualFeeboolean–Only cards with no annual fee.
spendingarray–Monthly spending lines, each a category (grocery.supermarket, dining, gas, other) or a merchant (Amazon, Costco). Optional: leave out to use typical amounts, and don't press the user for numbers they…
valuationstring–flat (default): points at their cash-out value, about 1¢. points-heavy: Amex MR and Chase UR at 1.7¢, for people who transfer points to airlines and hotels.
NameTypeReqDescription
additionsarrayyes–
current–yes–
notesarrayyes–
pairsarrayyes–
singlesarrayyes–

No examples provided.

update_card ~279

Changes settings on a card already in the wallet: its category picks for this period, checkout label, anniversary or activated categories. Picks for the current period are merged with the ones already saved. Use it when the user picks new categories, such as each quarter on U.S. Bank Cash+.

NameTypeReqDescription
activatedarray–Rule ids the user has activated with the issuer, such as rotating categories. Replaces the current list.
anniversarystring–The account's anniversary as MM-DD, for cards whose cap resets on it.
bonus––A welcome bonus the user is working toward, so purchases recorded on this card count toward it and answers can favor it. Ask when they opened the account; spending needed and the deadline default to…
cardIdstringyesThe card id from search_cards, e.g. chase-sapphire-preferred.
checkoutLabelstring–How the card appears at checkout or in a browser wallet, e.g. "Amex Gold". Optional.
picksobject–For cards where the cardholder picks bonus categories: choice id → option ids, from search_cards, e.g. {"five-percent": ["tv-internet-streaming", "fast-food"]}. Saved for the current period. Ask the…
NameTypeReqDescription
cardIdsarrayyes–
createdbooleanyes–
membershipsarrayyes–
messagestringyes–
notesarrayyes–

No examples provided.

Install

How do I install the earnrate MCP server?

earnrate is a hosted endpoint at https://mcp.earnrate.dev/, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · mcp.earnrate.dev

# add to Claude Code
claude mcp add --transport http cwasley-earnrate 'https://mcp.earnrate.dev/'
Common questions

What is the earnrate MCP server?

earnrate is an MCP server listed in the public MCP registry as io.github.cwasley/earnrate. Which credit card earns the most at a merchant, from your cards or every card, and why. This page covers its hosted endpoint (https://mcp.earnrate.dev).

Is the earnrate MCP server safe to use?

earnrate scores 37 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the earnrate MCP server expose?

earnrate exposes 16 tools: best_card_for_purchase, resolve_merchant, compare_welcome_offers, best_cards_for, simulate_spending, and 11 more. Their descriptions and schemas cost roughly 4,096 tokens of context every time the server is loaded.

Does the earnrate MCP server require authentication?

Yes. earnrate asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the earnrate MCP server still maintained?

earnrate is still listed as active in the MCP registry. We last reached this channel on 6 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the earnrate MCP server?

VerifyMCP ran 5 checks on earnrate, covering TLS certificate, Authorization, HTTPS, HSTS header and 1 more. 6 items could not be completed, a gap on our side rather than a finding about earnrate: Transport, Schema quality, Stability, Tool coverage and 2 more. 6 categories score 0 for that reason, because we only credit what we can confirm. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.