Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

KashFlow MCP by usefulapi

REMOTE · KASHFLOW.USEFULAPI.IO

Read KashFlow invoices, customers, suppliers, banking and reports; add customers, notes.

−46 this week 18 Trust /100

Last scanned (3 hours ago)

Scores higher than 4% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Finance and Payments

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security46
Transport & Reachability0
Schema Quality & AI Usability0
  • Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.Unverified
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
  • Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Tool Safety0
  • Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Capabilities0
  • Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified

Unverified: 5 categories

Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

What we tested

Checks we ran (4)

  • TLS certificate
  • HSTS header
  • DNSSEC
  • Transport

Checks we could not complete (7)

These are gaps on our side, not findings about this hosted endpoint. We only credit what we can confirm, so a category made up entirely of them scores 0.

  • Authorization in Endpoint SecurityAuthorisation not yet verified: we couldn't confirm whether this endpoint requires it.
  • HTTPS in Endpoint SecurityHTTPS enforcement could not be verified: the plaintext port redirected somewhere other than https, so enforcement is unproven.
  • Schema quality in Schema Quality & AI Usability (scores 0 for this)Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.
  • Stability in Stability & Change Management (scores 0 for this)Stability not yet verified: not enough scan history yet (needs a 30-day window).
  • Tool coverage in Tool Coverage (scores 0 for this)Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.
  • Tool safety in Tool Safety (scores 0 for this)Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.
  • Capabilities in Capabilities (scores 0 for this)Capabilities not yet verified: we couldn't read the endpoint's capabilities.

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Nov 26 −50
    • Endpoint reachability: reachable → not serving MCP ▼ security
    • Stability: 0.23 → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • Authorization: pass → unverified ▼ security
    • Schema quality: 100 → unverified ▼ functional
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
  • 31 Oct 26 +3
    • Authorization: partial → pass ▲ security
    • MCP protocol: fail → pass ▲ functional
    • New prompt “add_a_customer_or_a_supplier” functional
    • New prompt “check_bank_balances_and_transactions” functional
    • New prompt “find_who_owes_you_money” functional
    • New prompt “prepare_your_vat_return_figures” functional
    • New prompt “read_or_add_a_note_on_an_invoice” functional
    • New prompt “review_financial_statements_and_key_figures” functional
    • MCP protocol version: 2025-06-18 → 2025-11-25 functional
    • Server version: 1.10.0 → 1.12.0 functional
    • Server version: 1.9.0 → 1.10.0 functional
    • Server version: 1.8.2 → 1.9.0 functional
  • 30 Oct 26 +1
    • Server version: 1.8.1 → 1.8.2 functional
    • Server version: 1.8.0 → 1.8.1 functional
  • 29 Oct 26 0
    • Server version: 1.7.0 → 1.8.0 functional
    • Server version: 1.6.0 → 1.7.0 functional
  • 28 Oct 26 +1
    • Server version: 1.4.0 → 1.6.0 functional
  • 27 Oct 26 0
    • Server version: 1.3.0 → 1.4.0 functional
  • 26 Oct 26 +1
    • Stability: unverified → 0.03 ▲ functional
  • 25 Oct 26 62

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://kashflow.usefulapi.io/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=usefulapi.io CN=WE1,O=Google Trust Services,C=US 13 Sept 2026 12 Dec 2026 ECDSA 256 ECDSA-SHA256 d9be3287b0fde9630e825ba1f79bff3f
SANs: usefulapi.io, *.usefulapi.io
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of kashflow.usefulapi.io. — Not signed

Zone DS Keys Algorithms Outcome
. Trust anchor 20326, 38696 8, 8 Verified
io. DS published 38690 8 Verified
usefulapi.io. No DS Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Inconclusive

We could not reach the endpoint well enough to judge its authorisation posture.

Result Inconclusive
HTTP status 302

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://kashflow.usefulapi.io/mcp Redirected 302 https://usefulapi.io/kashflow/
http (plaintext) http://kashflow.usefulapi.io/mcp Inconclusive 302 http://kashflow.usefulapi.io/mcp
MCP tools · 38 exposed · ~3,061 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
kashflow_add_invoice_note ~101

WRITE: add a note to a sales invoice, by its InvoiceDBID (the numeric id in invoice replies). Existing notes and the invoice are not changed. SOAP InsertInvoiceNote.

NameTypeReqDescription
invoice_idintegeryesThe invoice's InvoiceDBID.
notestringyesThe note text.
note_datestring–Note date, yyyy-mm-dd or yyyy-mm-ddThh:mm:ss (default: now, UTC).

No output schema declared.

No examples provided.

kashflow_create_customer ~254

WRITE: create a new customer. The code must be unique (KashFlow refuses a code that exists) and nothing existing is changed. Returns the new CustomerID. SOAP InsertCustomer.

NameTypeReqDescription
address1string––
address2string––
address3string––
address4string––
codestringyesA unique customer code, e.g. ACME01.
contactstring–Contact person.
country_codestring–Two-letter ISO country code, e.g. GB.
country_namestring–Country name, e.g. United Kingdom.
emailstring––
mobilestring––
namestringyesThe customer / company name.
notesstring––
payment_terms_daysinteger–Payment terms in days.
postcodestring––
tax_regionstring–VAT classification of the customer: uk (default, domestic), eu (EC customer) or outside_eu. Set it for customers outside the UK.
telephonestring––
vat_numberstring––
websitestring––

No output schema declared.

No examples provided.

kashflow_create_supplier ~206

WRITE: create a new supplier. The code must be unique (KashFlow refuses a code that exists) and nothing existing is changed. Returns the new SupplierID. SOAP InsertSupplier.

NameTypeReqDescription
address1string––
address2string––
address3string––
address4string––
codestringyesA unique supplier code, e.g. OFFICE01.
contactstring–Contact person.
emailstring––
eu_supplierboolean–True for a supplier in another EU country (EC supplier). Default false (UK).
mobilestring––
namestringyesThe supplier / company name.
notesstring––
payment_terms_daysinteger–Payment terms in days.
postcodestring––
telephonestring––
vat_numberstring––
websitestring––

No output schema declared.

No examples provided.

kashflow_find_customer_by_email ~39

The customer whose e-mail address matches. SOAP GetCustomerByEmail.

NameTypeReqDescription
emailstringyesThe customer's e-mail address.

No output schema declared.

No examples provided.

kashflow_get_aged_creditors ~105

Who you owe money to at a date (default today), aged into current, three periods and older, per supplier. SOAP GetAgedCreditors.

NameTypeReqDescription
datestring–Report date, yyyy-mm-dd (default today, UTC).
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.

No output schema declared.

No examples provided.

kashflow_get_aged_debtors ~105

Who owes you money at a date (default today), aged into current, three periods and older, per customer. SOAP GetAgedDebtors.

NameTypeReqDescription
datestring–Report date, yyyy-mm-dd (default today, UTC).
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.

No output schema declared.

No examples provided.

kashflow_get_balance_sheet ~64

The balance sheet at a date (default today): fixed assets, current assets, current liabilities, capital and reserves with the lines of each. SOAP GetBalanceSheet.

NameTypeReqDescription
datestring–Balance sheet date, yyyy-mm-dd (default today, UTC).

No output schema declared.

No examples provided.

kashflow_get_bank_balance ~62

The balance of one bank account on a date (default today). SOAP GetBankBalance.

NameTypeReqDescription
account_idintegeryesThe bank account's AccountID.
datestring–Balance date, yyyy-mm-dd (default today, UTC).

No output schema declared.

No examples provided.

kashflow_get_company_details ~39

The KashFlow company: name, address, contact, VAT registration, currency, payment terms and business type. SOAP GetCompanyDetails.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

kashflow_get_customer ~58

One customer by its KashFlow customer code (the short code shown in the customer list, e.g. ACME01). SOAP GetCustomer.

NameTypeReqDescription
customer_codestringyesThe customer code, e.g. ACME01.

No output schema declared.

No examples provided.

kashflow_get_customer_balance ~50

What one customer owes: the total invoiced value and the outstanding balance. SOAP GetCustomerBalance.

NameTypeReqDescription
customer_codestringyesThe customer code, e.g. ACME01.

No output schema declared.

No examples provided.

kashflow_get_customer_by_id ~45

One customer by its numeric CustomerID (as returned in other replies). SOAP GetCustomerByID.

NameTypeReqDescription
customer_idintegeryesThe numeric CustomerID.

No output schema declared.

No examples provided.

kashflow_get_invoice ~65

One sales invoice by its invoice number: customer, dates, lines (description, quantity, rate, VAT), net, VAT, amount paid and a link. SOAP GetInvoice.

NameTypeReqDescription
invoice_numberintegeryesThe invoice number, e.g. 1042.

No output schema declared.

No examples provided.

kashflow_get_invoice_notes ~57

The notes attached to one sales invoice, by its InvoiceDBID (the numeric id in invoice replies, not the invoice number). SOAP GetInvoiceNotes.

NameTypeReqDescription
invoice_idintegeryesThe invoice's InvoiceDBID.

No output schema declared.

No examples provided.

kashflow_get_kpis ~110

Key figures for a date range (income, expenses, profit and similar, as name/value pairs). SOAP GetKPIs.

NameTypeReqDescription
end_datestringyesEnd of the period, yyyy-mm-dd.
exclude_same_day_paymentsboolean–Leave out invoices paid the day they were issued (default false).
exclude_vatboolean–Leave VAT out of the figures (default false).
start_datestringyesStart of the period, yyyy-mm-dd.

No output schema declared.

No examples provided.

kashflow_get_profit_and_loss ~82

The profit and loss report for a date range: turnover, cost of sales, gross profit, expenses and net profit, with the lines of each section. SOAP GetProfitAndLoss.

NameTypeReqDescription
end_datestringyesEnd of the period, yyyy-mm-dd.
start_datestringyesStart of the period, yyyy-mm-dd.

No output schema declared.

No examples provided.

kashflow_get_receipt ~56

One purchase (supplier invoice / receipt) by its receipt number: supplier, dates, lines, net, VAT, amount paid. SOAP GetReceipt.

NameTypeReqDescription
receipt_numberintegeryesThe purchase (receipt) number.

No output schema declared.

No examples provided.

kashflow_get_supplier ~35

One supplier by its KashFlow supplier code. SOAP GetSupplier.

NameTypeReqDescription
supplier_codestringyesThe supplier code.

No output schema declared.

No examples provided.

kashflow_get_trial_balance ~109

The trial balance for a date range: every nominal code with debit, credit and balance. SOAP GetTrialBalance.

NameTypeReqDescription
end_datestringyesEnd of the period, yyyy-mm-dd.
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.
start_datestringyesStart of the period, yyyy-mm-dd.

No output schema declared.

No examples provided.

kashflow_get_vat_report ~77

The VAT return figures (boxes 1 to 9) for a period, and whether it was submitted to HMRC. SOAP GetVATReport.

NameTypeReqDescription
end_datestringyesEnd of the VAT period, yyyy-mm-dd.
start_datestringyesStart of the VAT period, yyyy-mm-dd.

No output schema declared.

No examples provided.

kashflow_list_bank_accounts ~29

The bank accounts (AccountID, name, nominal code). SOAP GetBankAccounts.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

kashflow_list_bank_transactions ~111

The transactions of one bank account (date, money in/out, VAT, type, comment, customer/supplier), by AccountID from kashflow_list_bank_accounts, paged here. SOAP GetBankTransactions.

NameTypeReqDescription
account_idintegeryesThe bank account's AccountID.
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.

No output schema declared.

No examples provided.

kashflow_list_customer_invoices ~99

All sales invoices of one customer, by numeric CustomerID (see kashflow_get_customer for the id), paged here. SOAP GetInvoicesForCustomer.

NameTypeReqDescription
customer_idintegeryesThe numeric CustomerID.
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.

No output schema declared.

No examples provided.

kashflow_list_customers ~93

All customers (name, code, contact, email, phone, address, VAT number, payment terms, notes), paged here: the reply says total and next_offset. SOAP GetCustomers.

NameTypeReqDescription
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.

No output schema declared.

No examples provided.

kashflow_list_invoice_payments ~52

The payments recorded against one sales invoice (date, amount, method, bank account, note), by invoice number. SOAP GetInvoicePayment.

NameTypeReqDescription
invoice_numberintegeryesThe invoice number.

No output schema declared.

No examples provided.

kashflow_list_invoices ~121

Sales invoices dated within a range (inclusive; a bare end date means the end of that day), paged here. Dates are yyyy-mm-dd. SOAP GetInvoicesByDateRange.

NameTypeReqDescription
end_datestringyesLast invoice date, yyyy-mm-dd.
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.
start_datestringyesFirst invoice date, yyyy-mm-dd.

No output schema declared.

No examples provided.

kashflow_list_nominal_codes ~72

The chart of accounts: nominal codes with their names. SOAP GetNominalCodes.

NameTypeReqDescription
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.

No output schema declared.

No examples provided.

kashflow_list_overdue_invoices ~80

All sales invoices past their due date and not paid in full, paged here. SOAP GetInvoices_Overdue.

NameTypeReqDescription
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.

No output schema declared.

No examples provided.

kashflow_list_payments_by_date ~123

Customer payments received within a date range (date, amount, invoice, method, bank account). KashFlow returns them a page at a time: set page_number 1, 2, ... until a page comes back empty. Dates are yyyy-mm-dd. SOAP GetInvoicePaymentsByDateRange.

NameTypeReqDescription
end_datestringyesLast payment date, yyyy-mm-dd.
page_numberinteger–Page number, starting at 1 (default 1).
start_datestringyesFirst payment date, yyyy-mm-dd.

No output schema declared.

No examples provided.

kashflow_list_products ~76

The product catalogue (name, code, description, price, stock level), paged here. SOAP GetProducts.

NameTypeReqDescription
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.

No output schema declared.

No examples provided.

kashflow_list_projects ~26

The projects defined in the account (id, name). SOAP GetProjects.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

kashflow_list_quotes ~70

All sales quotes (same shape as invoices), paged here. SOAP GetQuotes.

NameTypeReqDescription
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.

No output schema declared.

No examples provided.

kashflow_list_recent_invoices ~44

The most recently created sales invoices. SOAP GetInvoices_Recent.

NameTypeReqDescription
countinteger–How many invoices (default 20, max 500).

No output schema declared.

No examples provided.

kashflow_list_recent_receipts ~49

The most recently created purchases (supplier invoices / receipts). SOAP GetReceipts_Recent.

NameTypeReqDescription
countinteger–How many purchases (default 20, max 500).

No output schema declared.

No examples provided.

kashflow_list_supplier_receipts ~102

All purchases (supplier invoices / receipts) of one supplier, by numeric SupplierID (see kashflow_get_supplier), paged here. SOAP GetReceiptsForSupplier.

NameTypeReqDescription
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.
supplier_idintegeryesThe numeric SupplierID.

No output schema declared.

No examples provided.

kashflow_list_suppliers ~92

All suppliers (name, code, contact, email, phone, address, VAT number, payment terms), paged here: the reply says total and next_offset. SOAP GetSuppliers.

NameTypeReqDescription
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.

No output schema declared.

No examples provided.

kashflow_list_unpaid_invoices ~75

All sales invoices not yet paid in full, paged here. SOAP GetInvoices_Unpaid.

NameTypeReqDescription
limitinteger–How many records to return (default 100, max 500).
offsetinteger–How many records to skip (default 0), to get the next page.

No output schema declared.

No examples provided.

kashflow_list_vat_rates ~28

The VAT rates set up in the account. SOAP GetVATRates.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

Install

How do I install the KashFlow MCP by usefulapi server?

KashFlow MCP by usefulapi is a hosted endpoint at https://kashflow.usefulapi.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · kashflow.usefulapi.io

# add to Claude Code
claude mcp add --transport http io-usefulapi-kashflow 'https://kashflow.usefulapi.io/mcp'
Common questions

What is the KashFlow MCP by usefulapi server?

KashFlow MCP by usefulapi is listed in the public MCP registry as io.usefulapi/kashflow. Read KashFlow invoices, customers, suppliers, banking and reports; add customers, notes. This page covers its hosted endpoint (https://kashflow.usefulapi.io/mcp).

Is the KashFlow MCP by usefulapi server safe to use?

KashFlow MCP by usefulapi scores 18 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the KashFlow MCP by usefulapi server expose?

KashFlow MCP by usefulapi exposes 38 tools: kashflow_get_company_details, kashflow_list_customers, kashflow_get_customer, kashflow_get_customer_by_id, kashflow_find_customer_by_email, and 33 more. Their descriptions and schemas cost roughly 3,061 tokens of context every time the server is loaded.

Does the KashFlow MCP by usefulapi server require authentication?

Its publisher declares no required credentials for KashFlow MCP by usefulapi. We have not been able to confirm that against the live endpoint, and a server can require authorisation without declaring it here.

Is the KashFlow MCP by usefulapi server still maintained?

KashFlow MCP by usefulapi is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the KashFlow MCP by usefulapi server?

VerifyMCP ran 4 checks on KashFlow MCP by usefulapi, covering TLS certificate, HSTS header, DNSSEC and Transport. 7 items could not be completed, a gap on our side rather than a finding about KashFlow MCP by usefulapi: Authorization, HTTPS, Schema quality, Stability and 3 more. 5 categories score 0 for that reason, because we only credit what we can confirm. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.