IRS SOI (income by ZIP)
PYPI · MCPWRIGHT-SOI · SCANNED SEP 21
IRS income & tax stats by ZIP in your agent: AGI distribution, tax, credits, deductions.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security94
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs a script at install time (build_backend) that we could not recognise. It may be perfectly ordinary, but we do not read the published tarball, so we cannot say what it does. View diagnostics → Partial
- 0 of 30 dependencies flagged as unhealthy. View diagnostics → Pass
Provenance & Transparency32
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: no license is declared. See how to fix → Fail
- Actively maintained (last published 31 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability70
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1877 tokens (~187/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
- Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage71
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 0% of tool parameters carry a description.Fail
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the IRS SOI (income by ZIP) MCP server?
IRS SOI (income by ZIP) runs locally as a PyPI package, launched with uvx mcpwright-soi. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · mcpwright-soi
claude mcp add mcpwright-soi-mcp -- uvx mcpwright-soi
{
"mcpServers": {
"mcpwright-soi-mcp": {
"command": "uvx",
"args": [
"mcpwright-soi"
]
}
}
} {
"servers": {
"mcpwright-soi-mcp": {
"command": "uvx",
"args": [
"mcpwright-soi"
]
}
}
} codex mcp add mcpwright-soi-mcp -- uvx mcpwright-soi
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"mcpwright-soi-mcp": {
"type": "local",
"command": [
"uvx",
"mcpwright-soi"
],
"enabled": true
}
}
} openclaw mcp add mcpwright-soi-mcp --command uvx --arg mcpwright-soi
mcp_servers:
mcpwright-soi-mcp:
command: "uvx"
args: ["mcpwright-soi"] {
"McpServers": {
"mcpwright-soi-mcp": {
"Transport": "stdio",
"Command": "uvx",
"Arguments": [
"mcpwright-soi"
]
}
}
} assistant mcp add mcpwright-soi-mcp -t stdio -c uvx -a mcpwright-soi
{
"mcpServers": {
"mcpwright-soi-mcp": {
"command": "uvx",
"args": [
"mcpwright-soi"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 −3
- Stability: pass → 0.77 functional
- 19 Sept 26 +1
- Stability: 0.97 → pass security
- 18 Sept 26 +15
- Malware scan: unverified → pass ▲ security
- 17 Sept 26 −14
- Malware scan: pass → unverified ▼ security
- 16 Sept 26 0
- Package version: 0.1.1 → 0.1.2 functional
- 15 Sept 26 +15
- Malware scan: unverified → pass ▲ security
- 14 Sept 26 −14
- Malware scan: pass → unverified ▼ security
- 13 Sept 26 0
- Package version: 0.1.1 → 0.1.2 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 21 Sept 2026 · Analysed pypi/mcpwright-soi@0.1.2
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | unreviewed | uv_build |
Background: Why install scripts are a supply-chain risk →
Dependencies 30 packages
| Packages resolved | 30 |
|---|---|
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
compare_zips Compare ZIPs ~170
Rank several ZIPs by a single metric, highest value first. `zips`: a list of 5-digit US ZIPs to compare. `metric`: one of `total_returns`, `adjusted_gross_income`, `avg_agi_per_return`, `pct_returns_200k_plus`, `total_income`, `salaries_and_wages`, `income_tax`, `total_tax_liability`, `avg_total_tax_per_return`, `eitc_amount`. Returns each ZIP's value, sorted descending; ZIPs with no SOI data are listed last. A 0 for a sparse metric (e.g. `eitc_amount`) may be IRS-suppressed, not a true zero.
| Name | Type | Req | Description |
|---|---|---|---|
| metric | string | yes | – |
| zips | array | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| metric | string | yes | The compared metric's name |
| results | array | yes | One entry per requested ZIP, sorted by value descending; ZIPs with no data are listed last |
| tax_year | integer | yes | SOI tax year of the data |
No examples provided.
get_agi_distribution Get AGI distribution by ZIP ~163
The income distribution of a ZIP across the six IRS AGI brackets. `zip_code`: a 5-digit US ZIP. Returns, for each bracket (<$25k, $25-50k, $50-75k, $75-100k, $100-200k, $200k+), the number of returns and total AGI plus each bracket's share of the ZIP's returns and AGI. This is the income *shape* of a ZIP — what a single median can't show. Note: a bracket showing 0 may be IRS-suppressed (<20 returns in that cell) rather than truly empty, so the other brackets' shares can be slightly overstated.
| Name | Type | Req | Description |
|---|---|---|---|
| zip_code | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| brackets | array | yes | One entry per AGI bracket, ordered 1 (lowest) to 6 (highest) |
| state | – | – | 2-letter USPS state code |
| tax_year | integer | yes | SOI tax year of the data |
| total_agi | – | – | Total AGI across all brackets (USD) |
| total_returns | – | – | Total returns across all brackets |
| zipcode | string | yes | 5-digit ZIP code |
No examples provided.
get_credits Get credits by ZIP ~138
Refundable-credit take-up for a ZIP: the EITC and additional child tax credit. `zip_code`: a 5-digit US ZIP. Returns the number of returns and total amount for the Earned Income Tax Credit (overall and split by number of qualifying children: none / one / two / three or more), plus the additional (refundable) child tax credit. Amounts in USD. Note: a 0 may be IRS-suppressed (<20 returns in each AGI-bracket cell) rather than a true zero — it does not prove no one claims the credit.
| Name | Type | Req | Description |
|---|---|---|---|
| zip_code | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| additional_ctc_amount | – | – | Additional (refundable) child tax credit amount (USD) |
| additional_ctc_returns | – | – | Number of returns with the additional (refundable) child tax credit |
| eitc_amount | – | – | Total EITC amount (USD) |
| eitc_by_children | array | yes | EITC returns and amount split by number of qualifying children |
| eitc_returns | – | – | Number of returns claiming the EITC |
| state | – | – | 2-letter USPS state code |
| tax_year | integer | yes | SOI tax year of the data |
| zipcode | string | yes | 5-digit ZIP code |
No examples provided.
get_deductions Get deductions by ZIP ~125
Deduction measures for a ZIP: standard vs. itemized, plus SALT. `zip_code`: a 5-digit US ZIP. Returns the count and amount of standard deductions and itemized deductions, the taxes-paid (SALT) deduction, and the percent of returns that itemized. Amounts in USD. Note: a 0 may be IRS-suppressed (<20 returns in each AGI-bracket cell) rather than a true zero — it does not prove no one in the ZIP itemizes.
| Name | Type | Req | Description |
|---|---|---|---|
| zip_code | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| itemized_amount | – | – | Total itemized deductions amount |
| itemized_returns | – | – | Number of returns with itemized deductions |
| itemizing_pct | – | – | Percent of returns that itemized rather than took the standard deduction (0-100) |
| returns | – | – | Number of returns |
| salt_amount | – | – | Taxes-paid (SALT) deduction amount |
| salt_returns | – | – | Number of returns with the taxes-paid (SALT) deduction |
| standard_deduction_amount | – | – | Standard deduction amount |
| standard_deduction_returns | – | – | Number of returns claiming the standard deduction |
| state | – | – | 2-letter USPS state code |
| tax_year | integer | yes | SOI tax year of the data |
| zipcode | string | yes | 5-digit ZIP code |
No examples provided.
get_filing_status Get filing status by ZIP ~117
Filing-status mix for a ZIP: single / married-joint / head-of-household. `zip_code`: a 5-digit US ZIP. Returns the number of single, married-filing- jointly, and head-of-household returns, the number of elderly returns (age 65+), and the count and share of electronically filed returns. Note: a 0 count may be IRS-suppressed (<20 returns in each AGI-bracket cell) rather than truly absent.
| Name | Type | Req | Description |
|---|---|---|---|
| zip_code | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| elderly_returns | – | – | Returns with the taxpayer aged 65 or older |
| electronically_filed_pct | – | – | Percent of returns filed electronically (0-100) |
| electronically_filed_returns | – | – | Electronically filed returns |
| head_of_household_returns | – | – | Head-of-household returns |
| married_joint_returns | – | – | Married-filing-jointly returns |
| single_returns | – | – | Single returns |
| state | – | – | 2-letter USPS state code |
| tax_year | integer | yes | SOI tax year of the data |
| total_returns | – | – | Total number of returns |
| zipcode | string | yes | 5-digit ZIP code |
No examples provided.
get_income Get income by ZIP ~143
Income measures for a ZIP: AGI, average AGI per return, and components. `zip_code`: a 5-digit US ZIP. Returns total adjusted gross income (AGI), average AGI per return, and the main income components — salaries and wages, taxable interest, ordinary dividends, business net income, and net capital gain. All dollar amounts in USD. Note: figures cover filed tax returns only. Average AGI is a *mean per return*, not a median per household, and AGI omits most nontaxable income — so it is not directly comparable to Census median household income.
| Name | Type | Req | Description |
|---|---|---|---|
| zip_code | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| adjusted_gross_income | – | – | Total adjusted gross income (AGI) |
| avg_agi_per_return | – | – | AGI divided by the number of returns |
| business_net_income | – | – | Business or professional net income (less loss) amount |
| net_capital_gain | – | – | Net capital gain (less loss) amount |
| ordinary_dividends | – | – | Ordinary dividends amount |
| returns | – | – | Number of returns |
| salaries_and_wages | – | – | Salaries and wages amount |
| state | – | – | 2-letter USPS state code |
| tax_year | integer | yes | SOI tax year of the data |
| taxable_interest | – | – | Taxable interest amount |
| total_income | – | – | Total income amount |
| zipcode | string | yes | 5-digit ZIP code |
No examples provided.
get_soi_field Get a raw SOI field ~183
Raw value of a single SOI field for a ZIP — an escape hatch. `zip_code`: a 5-digit US ZIP. `field`: a SOI field code (e.g. `A00100` for AGI, `N1` for number of returns); case-insensitive. Returns that field summed across the ZIP's AGI brackets, with its label and unit (USD for amount fields, count for return counts). Limited to the fields held in the local store (the same ones the other tools draw on); an unknown field errors with the list. Note: a 0 may be IRS-suppressed (<20 returns in a cell) rather than a true zero, and a sum over suppressed cells slightly understates the real total.
| Name | Type | Req | Description |
|---|---|---|---|
| field | string | yes | – |
| zip_code | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| field | string | yes | SOI field code, e.g. 'A00100' or 'N1' |
| label | string | yes | Human-readable description of the field |
| state | – | – | 2-letter USPS state code |
| tax_year | integer | yes | SOI tax year of the data |
| unit | string | yes | 'USD' for amount fields, 'count' for return counts |
| value | – | – | The field's value for this ZIP (summed over brackets) |
| zipcode | string | yes | 5-digit ZIP code |
No examples provided.
get_state_totals Get state totals ~110
State-level SOI totals and AGI distribution from the IRS state rollup. `state`: a 2-letter USPS code (e.g. 'CA') or full state name (e.g. 'California'). Returns the state's total returns, individuals, AGI, average AGI per return, income tax, total tax liability, and the income distribution across the six AGI brackets. Drawn from the IRS 00000 state-total row.
| Name | Type | Req | Description |
|---|---|---|---|
| state | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| adjusted_gross_income | – | – | Total adjusted gross income (AGI) |
| avg_agi_per_return | – | – | AGI divided by the number of returns |
| brackets | array | yes | The state's income distribution across the six AGI brackets |
| income_tax | – | – | Total income tax amount |
| individuals | – | – | Total individuals (filers plus dependents) |
| returns | – | – | Total returns in the state |
| state | string | yes | 2-letter USPS state code |
| tax_year | integer | yes | SOI tax year of the data |
| total_tax_liability | – | – | Total tax liability amount |
No examples provided.
get_tax Get tax by ZIP ~86
Tax measures for a ZIP: income tax, total liability, and average per return. `zip_code`: a 5-digit US ZIP. Returns income tax, income tax before credits, total tax liability (broader — includes self-employment tax and other taxes), total tax payments, and the average total tax per return. Amounts in USD.
| Name | Type | Req | Description |
|---|---|---|---|
| zip_code | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| avg_total_tax_per_return | – | – | Total tax liability divided by the number of returns |
| income_tax | – | – | Income tax amount (after credits, before other taxes) |
| income_tax_before_credits | – | – | Income tax before credits amount |
| returns | – | – | Number of returns |
| state | – | – | 2-letter USPS state code |
| tax_year | integer | yes | SOI tax year of the data |
| total_tax_liability | – | – | Total tax liability (broader than income tax: includes self-employment tax, recapture, etc.) |
| total_tax_payments | – | – | Total tax payments amount |
| zipcode | string | yes | 5-digit ZIP code |
No examples provided.
lookup_zip Look up a ZIP ~87
Confirm a ZIP has SOI data and return its return and individual counts. `zip_code`: a 5-digit US ZIP. A good first call to validate a ZIP before asking for more detail. Returns the state, number of returns, number of individuals, and the SOI tax year. ZIPs with <100 returns are excluded.
| Name | Type | Req | Description |
|---|---|---|---|
| zip_code | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| individuals | – | – | Total number of individuals (filers plus dependents) |
| returns | – | – | Total number of tax returns filed from this ZIP |
| state | – | – | 2-letter USPS state code |
| tax_year | integer | yes | SOI tax year of the data |
| zipcode | string | yes | 5-digit ZIP code |
No examples provided.
What is the IRS SOI (income by ZIP) MCP server?
IRS SOI (income by ZIP) is an MCP server listed in the public MCP registry as io.github.mcpwright/soi-mcp. IRS income & tax stats by ZIP in your agent: AGI distribution, tax, credits, deductions. This page covers its PyPI package (mcpwright-soi).
Is the IRS SOI (income by ZIP) MCP server safe to use?
IRS SOI (income by ZIP) scores 74 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 21 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the IRS SOI (income by ZIP) MCP server expose?
IRS SOI (income by ZIP) exposes 10 tools: lookup_zip, get_income, get_agi_distribution, get_tax, get_credits, and 5 more. Their descriptions and schemas cost roughly 1,322 tokens of context every time the server is loaded.
Is the IRS SOI (income by ZIP) MCP server still maintained?
IRS SOI (income by ZIP) is still listed as active in the MCP registry. We last reached this channel on 21 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.