Számlázz.hu MCP by usefulapi
REMOTE · SZAMLAZZ-HU.USEFULAPI.IO
Read Számlázz.hu invoices, PDFs, receipts, taxpayers; issue, reverse and pay invoices and receipts.
Available components
Last scanned (22 hours ago)
Scores higher than 46% of remote servers
Reachable. Last reached 16 Oct 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security78
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS enforcement could not be verified: the plaintext port redirected somewhere other than https, so enforcement is unproven. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability0
- Transport check failed: declared streamable-http, but the endpoint redirected instead of responding directly. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability77
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2542 tokens (~231/item across 11 items; 11 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
- Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 12 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Oct 26 +3
- The server rewrote its instructions, which are the text every model session reads security
- Stability: unverified → 0.03 ▲ functional
- The server now declares the “prompts” capability functional
- First check of Schema quality: 100 functional
- New prompt “getting_started” functional
- Server version: 1.0.0 → 1.1.0 functional
- 12 Oct 26 59
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 16 Oct 2026 · Probed https://szamlazz-hu.usefulapi.io/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=usefulapi.io | CN=WE1,O=Google Trust Services,C=US | 13 Sept 2026 | 12 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | d9be3287b0fde9630e825ba1f79bff3f |
| SANs: usefulapi.io, *.usefulapi.io | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of szamlazz-hu.usefulapi.io. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| io. | present | 57355 | 8 | Verified |
| usefulapi.io. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 302 |
WWW-Authenticate challenge Bearer realm="OAuth", resource_metadata="https://szamlazz-hu.usefulapi.io/.well-known/oauth-protected-resource/mcp"
Bearer realm="OAuth", resource_metadata="https://szamlazz-hu.usefulapi.io/.well-known/oauth-protected-resource/mcp"Protected resource metadata
| Document | https://szamlazz-hu.usefulapi.io/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://szamlazz-hu.usefulapi.io/mcp |
| Authorisation server | https://szamlazz-hu.usefulapi.io |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://szamlazz-hu.usefulapi.io/mcp | Redirected | 302 | https://usefulapi.io/szamlazz-hu/ |
| http (plaintext) | http://szamlazz-hu.usefulapi.io/mcp | Inconclusive | 302 | http://szamlazz-hu.usefulapi.io/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
szamlazz_check_taxpayer Check a Hungarian taxpayer ~101
Look up a Hungarian taxpayer in the NAV register by the first 8 digits of the tax number (the törzsszám): whether the number is valid, the taxpayer's name, VAT status and addresses. Számla Agent action-szamla_agent_taxpayer (data from the NAV Online Invoice platform).
| Name | Type | Req | Description |
|---|---|---|---|
| tax_number | string | yes | The first 8 digits of the Hungarian tax number, e.g. 13421739. |
No output schema declared.
No examples provided.
szamlazz_create_invoice Issue an invoice (fiscal, cannot be undone) ~799
ISSUES a real invoice in Számlázz.hu. A final invoice is reported to NAV (Online Számla) and can only be cancelled by a reversal (szamlazz_reverse_invoice), never deleted. kind: invoice (default), proforma (díjbekérő; not fiscal, can be deleted with szamlazz_delete_proforma), prepayment (előlegszámla). The tool computes net, VAT and gross of every line from net_unit_price and vat_rate. preview true builds the PDF only and creates NO document (check the reply: a returned invoice_number means a document WAS created). This call is NEVER retried: if the result is unclear, look the invoice up (szamlazz_get_invoice by order_number or external_id) before issuing again; always send external_id or order_number so that you can. Setting send_email_to_buyer e-mails the PDF to the buyer. Számla Agent action-xmlagentxmlfile.
| Name | Type | Req | Description |
|---|---|---|---|
| buyer_address | string | yes | Buyer street address. |
| buyer_city | string | yes | Buyer city. |
| buyer_comment | string | – | Note about the buyer. |
| buyer_country | string | – | Buyer country name (default Magyarország). |
| buyer_email | string | – | Buyer e-mail address. |
| buyer_eu_tax_number | string | – | EU VAT number of the buyer. |
| buyer_name | string | yes | Buyer name. |
| buyer_phone | string | – | Buyer phone. |
| buyer_postal_code | string | yes | Buyer postal code. |
| buyer_tax_number | string | – | Hungarian tax number of a business buyer, e.g. 12345678-1-42. Not allowed on new-KATA accounts with protection on (error 491). |
| comment | string | – | Comment printed on the invoice. |
| currency | string | – | Currency code (default HUF). Not HUF: exchange_rate_bank and exchange_rate are required. |
| due_date | string | yes | Payment due date, yyyy-mm-dd. |
| e_invoice | boolean | – | Issue an e-invoice (electronically signed). Default false; needs the e-invoice feature, else error 54. |
| email_body | string | – | Text of that e-mail. |
| email_reply_to | string | – | Reply-to address of that e-mail. |
| email_subject | string | – | Subject of that e-mail. |
| exchange_rate | number | – | Exchange rate, HUF per 1 unit of the currency (foreign currency only). |
| exchange_rate_bank | string | – | Bank of the exchange rate, e.g. MNB (foreign currency only). |
| external_id | string | – | Your own id for the invoice (szamlaKulsoAzon); lets you query it later. |
| fulfillment_date | string | yes | Date of delivery / service (teljesítés), yyyy-mm-dd. |
| issue_date | string | – | Issue date, yyyy-mm-dd (default: today). |
| kind | string | – | invoice (default), proforma (non-fiscal payment request) or prepayment (down-payment invoice). |
| language | string | – | Language of the invoice (default hu). |
| lines | array | yes | Invoice lines. |
| order_number | string | – | Order number; also usable to find the invoice later. The account may forbid repeating an order number. |
| paid | boolean | – | Mark the invoice as already paid. |
| payment_method | string | yes | Payment method text, e.g. Átutalás (bank transfer), Készpénz (cash), Bankkártya (card). |
| prefix | string | – | Invoice number prefix; must be registered in the account (Beállítások → Előtagok). |
| preview | boolean | – | true = only return a preview PDF, create no document. |
| send_email_to_buyer | boolean | – | E-mail the invoice to buyer_email (default false). |
No output schema declared.
No examples provided.
szamlazz_create_receipt Issue a receipt (fiscal, cannot be undone) ~329
ISSUES a real HUF receipt (nyugta). Receipts are fiscal (NAV reporting) and can only be cancelled by szamlazz_reverse_receipt, never deleted. Give each line's whole-forint gross_total and vat_rate: the tool derives net, VAT and unit price (net + VAT equals gross exactly, as the vendor demands). The receipt prefix must be a receipt-only prefix (capital letters and digits, e.g. NYGTA), not an invoice prefix. call_id is required: the vendor refuses a second receipt with the same call_id (error 338), which protects against a duplicate. NEVER retried automatically: if the result is unclear, ask the user, then repeat the call with the SAME call_id (error 338 means the receipt already exists; find it in Számlázz.hu). Számla Agent action-szamla_agent_nyugta_create.
| Name | Type | Req | Description |
|---|---|---|---|
| call_id | string | yes | A unique id of this call (hivasAzonosito), new for every receipt: the vendor rejects a repeat, so the receipt cannot be issued twice. |
| comment | string | – | Comment printed on the receipt. |
| lines | array | yes | Receipt lines. |
| order_number | string | – | Order number printed on the receipt. |
| payment_method | string | yes | Payment method text, e.g. készpénz (cash), bankkártya (card). |
| prefix | string | yes | Receipt number prefix, capital letters and digits only, e.g. NYGTA. Must be a receipt-only prefix. |
No output schema declared.
No examples provided.
szamlazz_delete_proforma Delete a pro forma invoice ~123
DELETES one pro forma invoice (díjbekérő) by its number or by its order number (give exactly one). Only pro forma invoices can be deleted; a real invoice is never touched (use szamlazz_reverse_invoice). Cannot be undone. Számla Agent action-szamla_agent_dijbekero_torlese.
| Name | Type | Req | Description |
|---|---|---|---|
| invoice_number | string | – | Number of the pro forma invoice, e.g. D-2026-12. |
| order_number | string | – | Order number of the pro forma invoice. |
No output schema declared.
No examples provided.
szamlazz_get_invoice Get an invoice ~162
Read the data of one issued invoice (seller, buyer, lines, totals, VAT breakdown, payments) by invoice number, order number or your external id (give exactly one; for an order number with several invoices the last one is returned). Only invoices issued in this Számlázz.hu account. Also use it to check whether an invoice exists before issuing again. Számla Agent action-szamla_agent_xml.
| Name | Type | Req | Description |
|---|---|---|---|
| external_id | string | – | The external id (szamlaKulsoAzon) given when the invoice was created. |
| invoice_number | string | – | Invoice number, e.g. E-TST-2026-1. |
| order_number | string | – | The order number given when the invoice was created. |
No output schema declared.
No examples provided.
szamlazz_get_invoice_pdf Get the PDF of an invoice ~119
Download the PDF of one issued document (invoice, pro forma, ...) by invoice number, order number or your external id (give exactly one). Returns the totals and the PDF as an embedded resource. Számla Agent action-szamla_agent_pdf.
| Name | Type | Req | Description |
|---|---|---|---|
| external_id | string | – | The external id given when the document was created. |
| invoice_number | string | – | Invoice number, e.g. E-TST-2026-1. |
| order_number | string | – | The order number given when the document was created. |
No output schema declared.
No examples provided.
szamlazz_get_receipt Get a receipt ~93
Read one issued receipt (nyugta) by receipt number: lines, payments, totals, whether it was reversed. Optionally the PDF. Számla Agent action-szamla_agent_nyugta_get.
| Name | Type | Req | Description |
|---|---|---|---|
| boolean | – | Also return the receipt PDF (default false). | |
| receipt_number | string | yes | Receipt number, e.g. NYGTA-2026-1. |
No output schema declared.
No examples provided.
szamlazz_register_payment Register payments on an invoice ~184
Records 1-5 payments (kifizetés) on one of your own issued invoices or pro forma invoices, which updates its paid amount and outstanding balance. By default the payments are ADDED to the existing ones; replace_existing true REPLACES all earlier payment entries of the invoice. Not fiscal. Számla Agent action-szamla_agent_kifiz.
| Name | Type | Req | Description |
|---|---|---|---|
| currency | string | yes | REQUIRED: the invoice's currency (HUF, EUR, ...). Amounts are rounded to whole forints in HUF and to 2 decimals otherwise, so a wrong currency books a wrong amount. |
| invoice_number | string | yes | Number of your own issued invoice or pro forma invoice. |
| payments | array | yes | The payments (1 to 5). |
| replace_existing | boolean | – | true = replace all earlier payment entries instead of adding (default false). |
No output schema declared.
No examples provided.
szamlazz_reverse_invoice Reverse (storno) an invoice (fiscal, cannot be undone) ~156
ISSUES a reversal (storno) invoice that cancels one issued invoice. Fiscal: it is reported to NAV and cannot be undone; the original stays in the books. A reversal needs the invoice number of a real invoice. NEVER retried: if the result is unclear, check with szamlazz_get_invoice before trying again. Számla Agent action-szamla_agent_st.
| Name | Type | Req | Description |
|---|---|---|---|
| e_invoice | boolean | – | Issue the reversal as an e-invoice (default false). |
| invoice_number | string | yes | Number of the invoice to reverse. |
| issue_date | string | – | Issue date of the reversal, yyyy-mm-dd (default: today). |
| reason | string | – | Reason, printed on the reversal. |
No output schema declared.
No examples provided.
szamlazz_reverse_receipt Reverse (storno) a receipt (fiscal, cannot be undone) ~119
ISSUES a reversal (storno) receipt that cancels one issued receipt. Fiscal and irreversible; a receipt can be reversed once, and a reversal receipt cannot be reversed. NEVER retried: if the result is unclear, check with szamlazz_get_receipt before trying again. Számla Agent action-szamla_agent_nyugta_storno.
| Name | Type | Req | Description |
|---|---|---|---|
| call_id | string | – | A unique id of this call (hivasAzonosito). |
| receipt_number | string | yes | Number of the receipt to reverse. |
No output schema declared.
No examples provided.
szamlazz_send_receipt E-mail a receipt ~126
E-MAILS an already issued receipt (PDF) to a customer. Without the e-mail fields, the vendor re-sends the receipt with the settings of the earlier e-mail. The e-mail cannot be recalled. Számla Agent action-szamla_agent_nyugta_send.
| Name | Type | Req | Description |
|---|---|---|---|
| body | string | – | E-mail text. |
| string | – | Recipient e-mail address. | |
| receipt_number | string | yes | Number of the issued receipt. |
| reply_to | string | – | Reply-to address. |
| subject | string | – | E-mail subject. |
No output schema declared.
No examples provided.
How do I install the Számlázz.hu MCP by usefulapi server?
Számlázz.hu MCP by usefulapi is a hosted endpoint at https://szamlazz-hu.usefulapi.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · szamlazz-hu.usefulapi.io
claude mcp add --transport http io-usefulapi-szamlazz-hu 'https://szamlazz-hu.usefulapi.io/mcp'
What is the Számlázz.hu MCP by usefulapi server?
Számlázz.hu MCP by usefulapi is listed in the public MCP registry as io.usefulapi/szamlazz-hu. Read Számlázz.hu invoices, PDFs, receipts, taxpayers; issue, reverse and pay invoices and receipts. This page covers its hosted endpoint (https://szamlazz-hu.usefulapi.io/mcp).
Is the Számlázz.hu MCP by usefulapi server safe to use?
Számlázz.hu MCP by usefulapi scores 63 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Számlázz.hu MCP by usefulapi server expose?
Számlázz.hu MCP by usefulapi exposes 11 tools: szamlazz_get_invoice, szamlazz_get_invoice_pdf, szamlazz_check_taxpayer, szamlazz_get_receipt, szamlazz_create_invoice, and 6 more. Their descriptions and schemas cost roughly 2,311 tokens of context every time the server is loaded.
Does the Számlázz.hu MCP by usefulapi server require authentication?
Yes. Számlázz.hu MCP by usefulapi asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Számlázz.hu MCP by usefulapi server still maintained?
Számlázz.hu MCP by usefulapi is still listed as active in the MCP registry. We last reached this channel on 16 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.