io.github.lonniev/taxsort-mcp
REMOTE · TAXSORT-MCP.FASTMCP.APP · SCANNED SEP 20
TaxSort — Tollbooth-monetized MCP server for personal tax transaction classification
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 87 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability63
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 11047 tokens (~126/item across 87 items; 87 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage83
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 41% of tool parameters carry a description.Partial
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 13 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "taxsort_forget_credentials" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 88 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.lonniev/taxsort-mcp server?
io.github.lonniev/taxsort-mcp is a hosted endpoint at https://taxsort-mcp.fastmcp.app/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · taxsort-mcp.fastmcp.app
claude mcp add --transport http lonniev-taxsort-mcp 'https://taxsort-mcp.fastmcp.app/mcp'
{
"mcpServers": {
"lonniev-taxsort-mcp": {
"url": "https://taxsort-mcp.fastmcp.app/mcp"
}
}
} {
"servers": {
"lonniev-taxsort-mcp": {
"type": "http",
"url": "https://taxsort-mcp.fastmcp.app/mcp"
}
}
} [mcp_servers.lonniev-taxsort-mcp] url = "https://taxsort-mcp.fastmcp.app/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"lonniev-taxsort-mcp": {
"type": "remote",
"url": "https://taxsort-mcp.fastmcp.app/mcp",
"enabled": true
}
}
} openclaw mcp add lonniev-taxsort-mcp --url 'https://taxsort-mcp.fastmcp.app/mcp' --transport streamable-http
mcp_servers:
lonniev-taxsort-mcp:
url: "https://taxsort-mcp.fastmcp.app/mcp" {
"McpServers": {
"lonniev-taxsort-mcp": {
"Transport": "http",
"Url": "https://taxsort-mcp.fastmcp.app/mcp"
}
}
} assistant mcp add lonniev-taxsort-mcp -t streamable-http -u 'https://taxsort-mcp.fastmcp.app/mcp'
{
"mcpServers": {
"lonniev-taxsort-mcp": {
"type": "http",
"url": "https://taxsort-mcp.fastmcp.app/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 31 Aug 26 +1
- Tool “taxsort_account_statement” rewrote its description, which is the text the model reads security
- Tool “taxsort_account_statement_infographic” rewrote its description, which is the text the model reads security
- Tool “taxsort_check_balance” rewrote its description, which is the text the model reads security
- Tool “taxsort_check_payment” rewrote its description, which is the text the model reads security
- Tool “taxsort_check_price” rewrote its description, which is the text the model reads security
- Tool “taxsort_check_proof_status” rewrote its description, which is the text the model reads security
- Tool “taxsort_delete_operator_credential” rewrote its description, which is the text the model reads security
- Tool “taxsort_delete_patron_credential” rewrote its description, which is the text the model reads security
- Tool “taxsort_forget_credentials” rewrote its description, which is the text the model reads security
- Tool “taxsort_get_notarization_proof” rewrote its description, which is the text the model reads security
- Tool “taxsort_get_patron_credential_fields” rewrote its description, which is the text the model reads security
- Tool “taxsort_get_patron_onboarding_status” rewrote its description, which is the text the model reads security
- Tool “taxsort_list_notarizations” rewrote its description, which is the text the model reads security
- Tool “taxsort_mint_coupon” rewrote its description, which is the text the model reads security
- Tool “taxsort_publish_nostr_profile” rewrote its description, which is the text the model reads security
- Tool “taxsort_purchase_credits” rewrote its description, which is the text the model reads security
- Tool “taxsort_receive_credentials” rewrote its description, which is the text the model reads security
- Tool “taxsort_receive_npub_proof” rewrote its description, which is the text the model reads security
- Tool “taxsort_report_issue” rewrote its description, which is the text the model reads security
- Tool “taxsort_request_adoption” rewrote its description, which is the text the model reads security
- Tool “taxsort_request_credential_channel” rewrote its description, which is the text the model reads security
- Tool “taxsort_request_npub_proof” rewrote its description, which is the text the model reads security
- Tool “taxsort_restore_credits” rewrote its description, which is the text the model reads security
- Tool “taxsort_session_status” rewrote its description, which is the text the model reads security
- Tool “taxsort_update_operator_credential” rewrote its description, which is the text the model reads security
- Tool “taxsort_update_patron_credential” rewrote its description, which is the text the model reads security
- Tool coverage: 14% → 41% ▲ functional
- Server version: 3.2.3 → 3.4.7 functional
- “taxsort_account_statement” reworded the description of “days” cosmetic
- “taxsort_account_statement” reworded the description of “dpop_token” cosmetic
- “taxsort_account_statement” reworded the description of “npub” cosmetic
- “taxsort_account_statement_infographic” reworded the description of “days” cosmetic
- “taxsort_account_statement_infographic” reworded the description of “dpop_token” cosmetic
- “taxsort_account_statement_infographic” reworded the description of “npub” cosmetic
- “taxsort_check_balance” reworded the description of “dpop_token” cosmetic
- “taxsort_check_balance” reworded the description of “npub” cosmetic
- “taxsort_check_payment” reworded the description of “dpop_token” cosmetic
- “taxsort_check_payment” reworded the description of “invoice_id” cosmetic
- “taxsort_check_payment” reworded the description of “npub” cosmetic
- “taxsort_check_price” reworded the description of “tool_id” cosmetic
- “taxsort_check_price” reworded the description of “tool_kwargs” cosmetic
- “taxsort_check_proof_status” reworded the description of “dpop_token” cosmetic
- “taxsort_check_proof_status” reworded the description of “patron_npub” cosmetic
- “taxsort_delete_operator_credential” reworded the description of “dpop_token” cosmetic
- “taxsort_delete_operator_credential” reworded the description of “field” cosmetic
- “taxsort_delete_patron_credential” reworded the description of “dpop_token” cosmetic
- “taxsort_delete_patron_credential” reworded the description of “field” cosmetic
- “taxsort_delete_patron_credential” reworded the description of “npub” cosmetic
- “taxsort_forget_credentials” reworded the description of “dpop_token” cosmetic
- “taxsort_forget_credentials” reworded the description of “npub” cosmetic
- “taxsort_forget_credentials” reworded the description of “service” cosmetic
- “taxsort_get_notarization_proof” reworded the description of “notarization_id” cosmetic
- “taxsort_get_notarization_proof” reworded the description of “npub” cosmetic
- “taxsort_get_patron_credential_fields” reworded the description of “dpop_token” cosmetic
- “taxsort_get_patron_credential_fields” reworded the description of “npub” cosmetic
- “taxsort_get_patron_onboarding_status” reworded the description of “dpop_token” cosmetic
- “taxsort_get_patron_onboarding_status” reworded the description of “patron_npub” cosmetic
- “taxsort_list_notarizations” reworded the description of “limit” cosmetic
- “taxsort_list_notarizations” reworded the description of “status” cosmetic
- “taxsort_mint_coupon” reworded the description of “discount_percent” cosmetic
- “taxsort_mint_coupon” reworded the description of “name” cosmetic
- “taxsort_mint_coupon” reworded the description of “total_uses” cosmetic
- “taxsort_mint_coupon” reworded the description of “uses_per_patron” cosmetic
- “taxsort_mint_coupon” reworded the description of “valid_from” cosmetic
- “taxsort_mint_coupon” reworded the description of “valid_until” cosmetic
- “taxsort_publish_nostr_profile” reworded the description of “npub” cosmetic
- “taxsort_publish_nostr_profile” reworded the description of “signed_event” cosmetic
- “taxsort_purchase_credits” reworded the description of “amount_sats” cosmetic
- “taxsort_purchase_credits” reworded the description of “dpop_token” cosmetic
- “taxsort_purchase_credits” reworded the description of “npub” cosmetic
- “taxsort_receive_credentials” reworded the description of “credential_card” cosmetic
- “taxsort_receive_credentials” reworded the description of “dpop_token” cosmetic
- “taxsort_receive_credentials” reworded the description of “sender_npub” cosmetic
- “taxsort_receive_credentials” reworded the description of “service” cosmetic
- “taxsort_receive_npub_proof” reworded the description of “dpop_token” cosmetic
- “taxsort_receive_npub_proof” reworded the description of “patron_npub” cosmetic
- “taxsort_report_issue” reworded the description of “body” cosmetic
- “taxsort_report_issue” reworded the description of “dpop_token” cosmetic
- “taxsort_report_issue” reworded the description of “npub” cosmetic
- “taxsort_report_issue” reworded the description of “title” cosmetic
- “taxsort_report_issue” reworded the description of “tool_name” cosmetic
- “taxsort_request_adoption” reworded the description of “authority_npub” cosmetic
- “taxsort_request_adoption” reworded the description of “dpop_token” cosmetic
- “taxsort_request_adoption” reworded the description of “note” cosmetic
- “taxsort_request_adoption” reworded the description of “service_url” cosmetic
- “taxsort_request_credential_channel” reworded the description of “sender_npub” cosmetic
- “taxsort_request_credential_channel” reworded the description of “service” cosmetic
- “taxsort_request_npub_proof” reworded the description of “patron_npub” cosmetic
- “taxsort_request_npub_proof” reworded the description of “reason” cosmetic
- “taxsort_request_npub_proof” reworded the description of “verify_at” cosmetic
- “taxsort_restore_credits” reworded the description of “dpop_token” cosmetic
- “taxsort_restore_credits” reworded the description of “invoice_id” cosmetic
- “taxsort_restore_credits” reworded the description of “patron_npub” cosmetic
- “taxsort_session_status” reworded the description of “patron_npub” cosmetic
- “taxsort_update_operator_credential” reworded the description of “dpop_token” cosmetic
- “taxsort_update_operator_credential” reworded the description of “field” cosmetic
- “taxsort_update_operator_credential” reworded the description of “value” cosmetic
- “taxsort_update_patron_credential” reworded the description of “dpop_token” cosmetic
- “taxsort_update_patron_credential” reworded the description of “field” cosmetic
- “taxsort_update_patron_credential” reworded the description of “npub” cosmetic
- “taxsort_update_patron_credential” reworded the description of “value” cosmetic
- 26 Aug 26 −1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Aug 26 +1
- Stability: 0.97 → pass security
- 23 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Aug 26 0
- New tool “taxsort_delete_operator_credential” functional
- 11 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 9 Aug 26 0
- Schema quality: fair → poor functional
- New tool “taxsort_update_operator_credential” functional
- 7 Aug 26 0
- The server no longer declares the “experimental” capability functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Probed https://taxsort-mcp.fastmcp.app/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.fastmcp.app | CN=Amazon RSA 2048 M04,O=Amazon,C=US | 17 Jun 2026 | 31 Dec 2026 | RSA 2048 | SHA256-RSA | a1583bafd89c7b58780ef1a0a0d2ad7 |
| SANs: *.fastmcp.app | ||||||
| CN=Amazon RSA 2048 M04,O=Amazon,C=US (CA) | CN=Amazon Root CA 1,O=Amazon,C=US | 23 Aug 2022 | 23 Aug 2030 | RSA 2048 | SHA256-RSA | 773124f2a952e3ed18a58bdb85d1bc0ce5f27 |
| CN=Amazon Root CA 1,O=Amazon,C=US (CA) | CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US | 25 May 2015 | 31 Dec 2037 | RSA 2048 | SHA256-RSA | 67f944a2a27cdf3fac2ae2b01f908eeb9c4c6 |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of taxsort-mcp.fastmcp.app. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| app. | present | 23684 | 8 | Verified |
| fastmcp.app. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://taxsort-mcp.fastmcp.app/mcp | Verified | 200 | |
| http (plaintext) | http://taxsort-mcp.fastmcp.app/mcp | HTTPS enforced | 301 | https://taxsort-mcp.fastmcp.app/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
taxsort_account_statement ~223
Generate a patron's account statement at this operator. Returns the patron's purchase history, active credit tranches, per-tool usage breakdown, and recent daily usage logs. This is the patron's spending account — not the operator's Authority tax balance. Free — no credits consumed. Proof of npub ownership is required to prevent statement-scraping of arbitrary patrons.
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | Number of days of daily usage history to include (default 30). |
| dpop_token | string | yes | Raw JSON of a kind-27235 Nostr event signed by npub — not base64, not NIP-98 'Authorization: Nostr <b64>' framing. Its `u` tag must hold THIS tool's exact name (from tools/list), not the endpoint URL… |
| npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_account_statement_infographic ~223
Generate a visual SVG infographic of your account statement. Returns the same data as account_statement, rendered as a dark-themed SVG graphic with balance hero, metrics cards, health gauge, tranche table, and tool usage breakdown. Costs 1 api_sat per call. Proof is verified by ``debit_or_deny`` before any cost is incurred.
| Name | Type | Req | Description |
|---|---|---|---|
| days | integer | – | Number of days of daily usage history to include (default 30). |
| dpop_token | string | yes | Raw JSON of a kind-27235 Nostr event signed by npub — not base64, not NIP-98 'Authorization: Nostr <b64>' framing. Its `u` tag must hold THIS tool's exact name (from tools/list), not the endpoint URL… |
| npub | string | yes | The Nostr public key (npub1...) whose statement to render. |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_adoption_status ~70
Check this operator's adoption-request status at a chosen Authority. Free. Polls the Authority MCP-to-MCP for the status of this operator's request (pending / approved / rejected / provisioned).
| Name | Type | Req | Description |
|---|---|---|---|
| authority_npub | string | yes | – |
| dpop_token | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_apply_rules ~60
Apply rules to unclassified transactions in a session.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_ask_advisor ~75
Ask the Financial Advisor about using TaxSort.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| history | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| question | string | yes | – |
| session_id | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_ask_tax_researcher ~78
Ask the Tax Code Researcher about IRS provisions.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| history | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| question | string | yes | – |
| session_id | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_check_authority_balance ~73
Check this operator's tax balance at the Authority. Returns the sats available for certifying patron credit purchases. When this balance reaches zero, patron top-ups cannot be certified and the operator must call purchase_credits on the Authority. This is the operator's own funding — not a patron balance. Free.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_check_balance ~209
Check a patron's credit balance at this operator. This is the patron's spending balance — credits purchased via Lightning for tool calls at this operator. For the operator's own balance at the Authority (needed to certify patron purchases), use authority_check_balance instead. Free — no credits required. Proof of npub ownership is required to prevent anyone-with-the-registry from enumerating balances.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Raw JSON of a kind-27235 Nostr event signed by npub — not base64, not NIP-98 'Authorization: Nostr <b64>' framing. Its `u` tag must hold THIS tool's exact name (from tools/list), not the endpoint URL… |
| npub | string | yes | The Nostr public key (npub1...) whose balance to check. |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_check_payment ~195
Check the payment status of a Lightning invoice. Call after paying the invoice from purchase_credits. Free — no credits required. Proof of npub ownership is required to prevent credit-grant front-running by an observer of the invoice ID.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Raw JSON of a kind-27235 Nostr event signed by npub — not base64, not NIP-98 'Authorization: Nostr <b64>' framing. Its `u` tag must hold THIS tool's exact name (from tools/list), not the endpoint URL… |
| invoice_id | string | yes | The invoice ID returned by purchase_credits. |
| npub | string | yes | The Nostr public key (npub1...) that purchased the invoice. |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_check_price ~180
Preview the effective cost of a tool call. Shows the base cost and any constraint effects (discounts, free trials, surge pricing). Free — no credits required.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | – |
| tool_id | string | yes | Either the tool's UUID (from the pricing model) or a bare capability string (e.g. ``"deal_scenario"``). FE callers usually have the capability name; this resolves both so the FE doesn't need to deriv… |
| tool_kwargs | string | – | Optional JSON object with tool call parameters for ad valorem / categorical-multiplier pricing preview (e.g. '{"amount_sats": 5000}' or '{"difficulty": "sovereign", "mode": "live"}'). |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_check_proof_status ~138
Check whether a previously-cached dpop_token is still valid. Mirrors ``check_oauth_status`` for the npub-proof flow: a calling agent can ask "will my next paid call accept this dpop_token?" before burning credits on a guaranteed failure. Free, no side effects — does not evict the cache or touch relays.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | Required. The dpop_token phrase returned by ``request_npub_proof`` / ``receive_npub_proof``. |
| patron_npub | string | – | Required. The patron's npub (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_check_unlock ~57
Check if the unlock response is valid.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| response | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_clear_transactions ~68
Delete all transactions and classifications for a session, so CSVs can be re-imported.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_count_rule_matches ~85
Count how many transactions match a rule pattern (live preview).
| Name | Type | Req | Description |
|---|---|---|---|
| amount_operator | string | – | – |
| amount_value | – | – | – |
| description_pattern | string | yes | – |
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_create_feedback_issue ~86
Create a GitHub issue for bug reports, feature requests, or feedback.
| Name | Type | Req | Description |
|---|---|---|---|
| body | string | – | – |
| category | string | – | – |
| contact | string | – | – |
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| title | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_create_session ~68
Create a new TaxSort session for a tax year.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| label | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| tax_year | integer | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_create_share_token ~71
Create a share token so another user can access this session.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| expires_days | integer | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_delete_account_transactions ~69
Delete all transactions and classifications for a specific imported account.
| Name | Type | Req | Description |
|---|---|---|---|
| account | string | yes | – |
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_delete_classification ~70
Remove a classification, reverting the transaction to unclassified.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | yes | – |
| transaction_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_delete_coupon ~82
Delete a coupon. Cascades to all patron redemptions. Any chain step referencing the deleted coupon_id becomes a no-op (the constraint returns neutral on unknown ids) — the Studio surfaces orphan references as warnings. RESTRICTED to operator — requires proof.
| Name | Type | Req | Description |
|---|---|---|---|
| coupon_id | string | yes | – |
| dpop_token | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_delete_custom_category ~56
Delete a custom category.
| Name | Type | Req | Description |
|---|---|---|---|
| category_id | integer | yes | – |
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_delete_operator_credential ~227
Remove a single operator secret field. Deletes one key from the operator's encrypted credential blob without touching the others — the field-level counterpart to ``forget_credentials``, which wipes the whole row. Use it to retire a leftover after an SDK cutover (a Prefect key after Modal, or a stored but untemplated orphan like ``anthropic_api_key``) without taking the operator down for a full re-delivery. Stored-but-untemplated fields are first-class: the delete is keyed on what is vaulted, not on what the current template declares. Idempotent — already-absent fields report ``removed: false`` without rewriting the vault. RESTRICTED to the operator — requires proof (nsec-signed kind-27235 or a cached dpop_token phrase); patron proofs are rejected. A deletion is as destructive as a write.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Operator proof for this tool. |
| field | string | yes | The operator credential field to remove (templated or not). |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_delete_patron_credential ~185
Remove a single patron credential field. Deletes one field from stored credentials without affecting other fields. Free. Proof of npub ownership is required — this is a write to the patron's sensitive credential vault.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Raw JSON of a kind-27235 Nostr event signed by npub — not base64, not NIP-98 'Authorization: Nostr <b64>' framing. Its `u` tag must hold THIS tool's exact name (from tools/list), not the endpoint URL… |
| field | string | yes | The credential field name to remove. |
| npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_delete_rule ~57
Delete a classification rule by ID.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| rule_id | integer | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_forget_coupon ~88
Remove a coupon from this patron's redemption list. Cosmetic only — the coupon itself still exists at the operator, and the patron can re-redeem the same code later while the window allows. Free — requires proof of ``npub``.
| Name | Type | Req | Description |
|---|---|---|---|
| coupon_id | string | yes | – |
| dpop_token | string | – | – |
| npub | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_forget_credentials ~196
Delete vaulted credentials for a specific service and npub. For operator credentials, pass the operator's own npub. For patron credentials, pass the patron's npub. Always requires proof of npub ownership — a deletion is as destructive as a write.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Raw JSON of a kind-27235 Nostr event signed by npub — not base64, not NIP-98 'Authorization: Nostr <b64>' framing. Its `u` tag must hold THIS tool's exact name (from tools/list), not the endpoint URL… |
| npub | string | yes | The Nostr public key (npub1...) whose credentials to forget. |
| service | string | yes | The credential service to forget. |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_accounts ~63
List all accounts in this session with their types and transaction counts.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_amount_neighbors ~105
Fetch transactions with the same amount within ±days of a date. Used by the classifier to detect duplicates from overlapping CSV imports.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | yes | – |
| date | string | yes | – |
| days | integer | – | – |
| dpop_token | string | – | – |
| exclude_id | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_anthropic_key ~56
Get the Anthropic API key for FE-driven classification.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_api_usage_stats ~61
Get aggregated API usage statistics for cost analysis.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_custom_categories ~51
Get custom categories defined by this user.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_github_token ~60
Get the GitHub token for creating issues in the taxsort-mcp repo.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_import_stats ~58
Get import statistics for a session.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_nostr_profile ~88
Read an npub's public Nostr profile (NIP-01 kind-0 metadata). Free, no proof — the data is already public on relays. Returns the latest metadata fields (name, display_name, about, picture, banner, nip05, website, lud16) or an empty profile if none is published.
| Name | Type | Req | Description |
|---|---|---|---|
| npub | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_notarization_proof ~70
Generate a Merkle inclusion proof that a patron's balance was included in a Bitcoin-notarized snapshot.
| Name | Type | Req | Description |
|---|---|---|---|
| notarization_id | string | yes | The notarization record ID. |
| npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_operator_onboarding_status ~57
Report this operator's configuration readiness. Shows which operator settings are configured, which are missing, and how to deliver each missing value. For patron-level credential status, use get_patron_onboarding_status instead. Free.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_patron_credential_fields ~234
List stored patron credential field names (not values). Returns the names of fields stored for a patron, plus each field's ``delivered_at`` ISO-8601 timestamp when known (null for secrets vaulted before timestamps were recorded). Values are never exposed — use this to verify which fields are configured and how old each one is. Free. Proof of npub ownership is required: the list of configured fields is itself sensitive (reveals which integrations a patron has set up).
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | Raw JSON of a kind-27235 Nostr event signed by npub — not base64, not NIP-98 'Authorization: Nostr <b64>' framing. Its `u` tag must hold THIS tool's exact name (from tools/list), not the endpoint URL… |
| npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_patron_onboarding_status ~138
Report a patron's credential readiness for this operator. For set-once services (eXcalibur, TheBrain), shows which patron secrets are configured and which are missing. For dynamic/OAuth2 services (Schwab), reports that no patron credentials are needed. Free. Proof of npub ownership is required because credential presence is sensitive information about the patron's setup.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | yes | A kind-27235 Nostr event signed by patron_npub for this tool. |
| patron_npub | string | yes | The patron's Nostr public key (npub1...). |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_pricing_model ~51
Get the active pricing model for this operator. Free. If no model exists, self-initializes a scaffold with all registered tools at 0 sats. No economic data from code.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_rules ~59
Get all classification rules for the current patron.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_session ~57
Get session details and summary stats.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_summary ~81
Get a grouped spending summary for tax reporting.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| group_by | string | – | – |
| month | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| scope | string | – | – |
| session_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_transactions ~171
Get transactions for a session with optional filters. Returns raw transactions LEFT JOINed with their classifications. Use unclassified_only=true to fetch pages of transactions needing classification by the FE. Use date_from/date_to for date range queries.
| Name | Type | Req | Description |
|---|---|---|---|
| account | string | – | – |
| category | string | – | – |
| date_from | string | – | – |
| date_to | string | – | – |
| dpop_token | string | – | – |
| limit | integer | – | – |
| month | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| offset | integer | – | – |
| search | string | – | – |
| session_id | string | yes | – |
| subcategory | string | – | – |
| unclassified_only | boolean | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_get_transactions_paged ~204
Server-side filtered, grouped, sorted, paginated transactions. group_sort controls the order of groups (A-Z vs Z-A). sort_col + sort_dir control row order within each group. When group_by='none', only sort_col + sort_dir apply.
| Name | Type | Req | Description |
|---|---|---|---|
| account | string | – | – |
| category | string | – | – |
| classified_only | boolean | – | – |
| dpop_token | string | – | – |
| group_by | string | – | – |
| group_sort | string | – | – |
| month | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| page | integer | – | – |
| page_size | integer | – | – |
| search | string | – | – |
| session_id | string | yes | – |
| sort_col | string | – | – |
| sort_dir | string | – | – |
| subcategory | string | – | – |
| unclassified_only | boolean | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_import_csv ~96
Import a CSV file into a session. Content is the raw CSV text. Optional account_name overrides the filename-derived account.
| Name | Type | Req | Description |
|---|---|---|---|
| account_name | string | – | – |
| content | string | yes | – |
| dpop_token | string | – | – |
| filename | string | yes | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
| session_id | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_list_canonical_identities ~250
Return canonical (tool_id, mcp_name, …) for every tool the wheel exposes. The authoritative source for any client (Studio, agents, FE) that needs to know how this MCP identifies its tools. Reconcile uses this output to UUID-join against the stored pricing model — no name-based UUID derivation, no guessing. Includes both ToolIdentity-seeded tools and any UUID recorded by ``@paid_tool`` that is missing from the registry. The latter appear with ``registered: false`` (and in the top-level ``unregistered`` array) so Reconcile can flag deploy drift instead of silently reporting clean when a live tool was never seeded (#174). If the operator renames a function or rebrands a slug, the mcp_name in this output changes but tool_id stays. That's the whole point of the canonical-UUID design. Also diffs the live FastMCP wire surface against the registry. Tools exposed on the wire but absent from the registry appear in ``unregistered`` so Reconcile can flag deploy drift instead of silently under-reporting (issue #175). Free, no side effects.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_list_constraint_types ~51
List all available constraint types and their parameter schemas. Returns the type, category, description, and parameter specs for every constraint that can be used in a pricing pipeline. Free — no credits required.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_list_coupons ~71
List every coupon this operator has minted (newest first). Each row carries the current ``times_redeemed`` counter — the Studio renders a progress bar from this against ``total_uses``. RESTRICTED to operator — requires proof.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_list_feedback_issues ~52
List feedback issues submitted by this patron.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | – | Required. Your Nostr public key (npub1...) for credit billing. |
Structured output declared, but exposes no named fields.
No examples provided.
taxsort_list_my_coupons ~89
List the coupons this patron has redeemed on this operator. Returns both active and exhausted redemptions with a per-row ``status`` (``active`` / ``window_closed`` / ``patron_limit`` / ``total_limit``). Free — requires proof of ``npub``.
| Name | Type | Req | Description |
|---|---|---|---|
| dpop_token | string | – | – |
| npub | string | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
What is the io.github.lonniev/taxsort-mcp server?
io.github.lonniev/taxsort-mcp is listed in the public MCP registry as io.github.lonniev/taxsort-mcp. TaxSort, Tollbooth-monetized MCP server for personal tax transaction classification. This page covers its hosted endpoint (https://taxsort-mcp.fastmcp.app/mcp).
Is the io.github.lonniev/taxsort-mcp server safe to use?
io.github.lonniev/taxsort-mcp scores 73 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.lonniev/taxsort-mcp server expose?
io.github.lonniev/taxsort-mcp exposes 87 tools: taxsort_check_balance, taxsort_purchase_credits, taxsort_check_payment, taxsort_restore_credits, taxsort_account_statement, and 82 more. Their descriptions and schemas cost roughly 10,353 tokens of context every time the server is loaded.
Does the io.github.lonniev/taxsort-mcp server require authentication?
No. We connected to io.github.lonniev/taxsort-mcp without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the io.github.lonniev/taxsort-mcp server still maintained?
io.github.lonniev/taxsort-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.