Sheet & Flow Landlord Math
MCPB · SHEET-AND-FLOW-MCP-1.0.0.MCPB
Landlord math: rental cash flow, cap rate, DSCR, Airbnb break-even, late fees, lease notices.
Available components
Last scanned (16 hours ago)
Scores higher than 80% of MCPB servers
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security13
- No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
- Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
- No install/post-install scripts declared.Pass
- Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
Provenance & Transparency39
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Maintenance history not yet determined.Unverified
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability52
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 1750 tokens (~291/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management73
- Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 98% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Checks we ran (12)
- Install scripts
- Source repository
- Provenance
- License
- Security disclosure
- Schema quality
- Stability
- Tool coverage
- Injection markers
- Destructive annotations
- Judged manipulation
- MCP protocol
Checks we could not complete (4)
These are gaps on our side, not findings about this package. We only credit what we can confirm, so a category made up entirely of them scores 0.
- Malware scan in Supply Chain SecurityNo malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.
- Known CVEs in Supply Chain SecurityKnown CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).
- Dependency health in Supply Chain SecurityDependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).
- Maintenance in Provenance & TransparencyMaintenance history not yet determined.
Does not apply to this package (2)
- Endpoint SecurityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.
- Transport & ReachabilityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.
The score does not measure everything. What the score does not measure →
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 −1
- Security disclosure: unverified → fail ▼ functional
- Maintenance: pass → unverified ▼ functional
- 4 Nov 26 0
- Security disclosure: fail → unverified ▼ functional
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Nov 26 0
- Provenance: unverified → fail ▼ security
- 1 Nov 26 +1
- Provenance: fail → unverified ▼ security
- 31 Oct 26 0
- Security disclosure: unverified → fail ▼ functional
- 30 Oct 26 +1
- Security disclosure: fail → unverified ▼ functional
- 28 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed mcpb/https://github.com/onyxaholguin-cyber/sheet-and-flow-mcp/releases/download/v1.0.0/sheet-and-flow-mcp-1.0.0.mcpb
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | mcpb |
| Reason | No attestation published |
Background: How many MCP packages publish verified provenance →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
irs_mileage_deduction_2026 IRS 2026 standard mileage deduction ~121
Deduction for miles driven on a 2026 date at the IRS standard mileage rate. Business: 72.5 cents/mile Jan 1-Jun 30 and 76 cents/mile Jul 1-Dec 31, 2026; medical/moving: 20.5 then 23.5 cents; charity: 14 cents.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | yes | Trip date in 2026. Format YYYY-MM-DD. |
| miles | number | yes | Miles driven. |
| purpose | string | yes | – |
No output schema declared.
No examples provided.
lease_renewal_notice Lease renewal notice send-by date and renewal window ~214
For one lease: days until the lease ends, the 0-30/31-60/61-90/90+ day window, the date the renewal or rent-increase notice must be sent (lease end minus notice days minus a mailing buffer), a status (On track, Send notice now within 14 days, MISSED, Notice sent), the proposed rent increase percent and the next end date after a 12-month renewal.
| Name | Type | Req | Description |
|---|---|---|---|
| asOfDate | string | yes | Today. Format YYYY-MM-DD. |
| currentRent | number | – | Current monthly rent (optional). |
| leaseEndDate | string | yes | Lease end date. Format YYYY-MM-DD. |
| mailingBufferDays | integer | – | Extra days for mailing/delivery (default 0; 5 is common). |
| noticeDays | integer | yes | Days of notice the lease or law requires. |
| noticeSent | boolean | – | True if the notice has already been sent. |
| proposedRent | number | – | Proposed monthly rent (optional). |
No output schema declared.
No examples provided.
mortgage_payment Monthly mortgage payment (principal and interest) ~69
Monthly principal-and-interest payment for a fixed-rate loan, plus total interest over the term.
| Name | Type | Req | Description |
|---|---|---|---|
| loanAmount | number | yes | Loan amount. |
| rate | number | yes | Annual interest rate. As a fraction: 0.25 means 25%. |
| years | number | yes | Loan term in years. |
No output schema declared.
No examples provided.
rent_late_fee Rent late fee with grace period, flat, percent and daily fees and a cap ~409
Days late and the late fee for one rent charge. The fee applies once rent is MORE than graceDays late: flatFee + pctOfRent x rent + dailyFee x (days late - graceDays), capped at maxFee, rounded to cents. Optionally pass state (CO, NY or TX) to use that state's grace period and fee limit as summarized in the Sheet & Flow late fee tutorial (our reading of the statute; not legal advice). Check your lease and current local law before charging a fee.
| Name | Type | Req | Description |
|---|---|---|---|
| asOfDate | string | – | Date to measure from if rent is still unpaid (usually today). Format YYYY-MM-DD. |
| dailyFee | number | – | Fee per day past the grace period (default 0). |
| dueDate | string | yes | Rent due date. Format YYYY-MM-DD. |
| flatFee | number | – | Flat fee once late (default 0). |
| graceDays | integer | – | Days late that are still free (default 0). Rent due on the 1st and paid on the 6th is 5 days late. |
| maxFee | number | – | Maximum fee; 0 or omitted = no cap. |
| paidInFullDate | string | – | Date rent was paid in full, if it was. Format YYYY-MM-DD. |
| pastDueRent | number | – | CO only: past-due rent the 5% applies to (default: full rent). |
| pctOfRent | number | – | Fee as a share of rent (default 0). As a fraction: 0.25 means 25%. |
| rent | number | yes | Monthly rent for this charge. |
| state | string | – | Optional: apply this state's grace period and fee limit (overrides graceDays; the cap is the lower of maxFee and the state limit). |
| unitsInBuilding | integer | – | TX only: units in the building (more than 4 uses the 10% limit; default 12%). |
No output schema declared.
No examples provided.
rental_property_analysis Rental property cash flow, cap rate, cash-on-cash and DSCR ~449
Year-one analysis of a long-term rental purchase: loan, monthly mortgage payment, NOI, monthly and annual cash flow, cap rate, cash-on-cash return, DSCR, gross rent multiplier, break-even occupancy and expense ratio. Repairs and CapEx reserves are a share of scheduled rent; management is a share of collected income.
| Name | Type | Req | Description |
|---|---|---|---|
| capexPct | number | – | CapEx reserve, share of scheduled rent (default 0). As a fraction: 0.25 means 25%. |
| closing | number | – | Closing costs (default 0). |
| downPct | number | yes | Down payment. As a fraction: 0.25 means 25%. |
| hoa | number | – | HOA per month (default 0). |
| insurance | number | – | Insurance per year (default 0). |
| mgmtPct | number | – | Property management, share of collected income (default 0). As a fraction: 0.25 means 25%. |
| otherExp | number | – | Other expenses per month (default 0). |
| otherIncome | number | – | Other monthly income, e.g. laundry or parking (default 0). |
| pointsPct | number | – | Loan points/fees as a share of the loan (default 0). As a fraction: 0.25 means 25%. |
| price | number | yes | Purchase price. |
| rate | number | yes | Annual mortgage interest rate. As a fraction: 0.25 means 25%. |
| rent | number | yes | Average monthly rent per unit. |
| repairs | number | – | Upfront repairs / rehab (default 0). |
| repairsPct | number | – | Repairs and maintenance reserve, share of scheduled rent (default 0). As a fraction: 0.25 means 25%. |
| taxes | number | – | Property taxes per year (default 0). |
| units | number | yes | Number of units. |
| utilities | number | – | Owner-paid utilities per month (default 0). |
| vacancyPct | number | – | Vacancy and credit loss (default 0). As a fraction: 0.25 means 25%. |
| years | number | yes | Loan term in years. |
No output schema declared.
No examples provided.
short_term_rental_analysis Short-term rental (Airbnb/VRBO) cash flow and break-even occupancy ~446
Year-one short-term rental analysis: available and booked nights, stays, gross revenue (nightly rate plus cleaning fees), NOI, cash flow, cash-on-cash, cap rate, DSCR, RevPAR, what each booked night is worth after variable costs, break-even occupancy and break-even nightly rate. breakEvenOccupancy null means never (each booked night loses money); above 1 means the deal cannot break even at this nightly rate.
| Name | Type | Req | Description |
|---|---|---|---|
| adr | number | yes | Average nightly rate. |
| avgStayNights | number | yes | Average stay length in nights. |
| blockedNights | number | – | Owner-blocked nights per year (default 0). |
| cleaningCost | number | – | Cleaning cost paid per turnover (default 0). |
| cleaningFee | number | – | Cleaning fee charged per stay (default 0). |
| closing | number | – | Closing costs (default 0). |
| downPct | number | yes | Down payment. As a fraction: 0.25 means 25%. |
| fixedMonthly | number | – | Fixed monthly costs: taxes, insurance, utilities, internet, software, HOA (default 0). |
| furnishing | number | – | Furnishing and setup (default 0). |
| hostFeePct | number | – | Platform host fee, share of gross (default 0). Airbnb split-fee hosts pay about 0.03; single-fee hosts about 0.155. As a fraction: 0.25 means 25%. |
| maintCapexPct | number | – | Maintenance and CapEx reserve, share of gross (default 0). As a fraction: 0.25 means 25%. |
| mgmtPct | number | – | Co-host or manager fee, share of gross (default 0). As a fraction: 0.25 means 25%. |
| occupancy | number | yes | Share of available nights booked. As a fraction: 0.25 means 25%. |
| price | number | yes | Purchase price. |
| rate | number | yes | Annual mortgage interest rate. As a fraction: 0.25 means 25%. |
| years | number | yes | Loan term in years. |
No output schema declared.
No examples provided.
How do I install the Sheet & Flow Landlord Math MCP server?
Sheet & Flow Landlord Math ships as an MCPB bundle, a single file you download and open in an MCP host that supports MCPB bundles, such as Claude Desktop. The host reads the launch command from the bundle's own manifest, so there is no command to copy. Before opening it, check the file's SHA-256 matches the one the MCP registry declares for it, 457e8f40143b57ae32e5a6ece7e8201d6b66b6c970600208df3a92230c11a077; the commands to do that are on this page. If it does not match, do not open it.
mcpb · sheet-and-flow-mcp-1.0.0.mcpb
Download bundleCheck the download matches the SHA-256 the MCP registry declares before you open it. If it does not match, do not open the file.
SHA-256
457e8f40143b57ae32e5a6ece7e8201d6b66b6c970600208df3a92230c11a077
macOS / Linux
echo "457e8f40143b57ae32e5a6ece7e8201d6b66b6c970600208df3a92230c11a077 sheet-and-flow-mcp-1.0.0.mcpb" | shasum -a 256 -c
Windows (PowerShell)
(Get-FileHash -Algorithm SHA256 .\sheet-and-flow-mcp-1.0.0.mcpb).Hash -eq "457e8f40143b57ae32e5a6ece7e8201d6b66b6c970600208df3a92230c11a077"
Run it in the folder you saved the bundle to, then open the file with an MCPB-capable host such as Claude Desktop.
What is the Sheet & Flow Landlord Math MCP server?
Sheet & Flow Landlord Math is an MCP server listed in the public MCP registry as io.github.onyxaholguin-cyber/sheet-and-flow-mcp. Landlord math: rental cash flow, cap rate, DSCR, Airbnb break-even, late fees, lease notices. This page covers its MCPB bundle (https://github.com/onyxaholguin-cyber/sheet-and-flow-mcp/releases/download/v1.0.0/sheet-and-flow-mcp-1.0.0.mcpb).
Is the Sheet & Flow Landlord Math MCP server safe to use?
Sheet & Flow Landlord Math scores 49 out of 100 on VerifyMCP. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Sheet & Flow Landlord Math MCP server expose?
Sheet & Flow Landlord Math exposes 6 tools: rental_property_analysis, mortgage_payment, short_term_rental_analysis, rent_late_fee, lease_renewal_notice, irs_mileage_deduction_2026. Their descriptions and schemas cost roughly 1,708 tokens of context every time the server is loaded.
What licence is the Sheet & Flow Landlord Math MCP server under?
Sheet & Flow Landlord Math declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.
What did VerifyMCP test on the Sheet & Flow Landlord Math MCP server?
VerifyMCP ran 12 checks on Sheet & Flow Landlord Math, covering Install scripts, Source repository, Provenance, License and 8 more. 4 items could not be completed, a gap on our side rather than a finding about Sheet & Flow Landlord Math: Malware scan, Known CVEs, Dependency health and Maintenance. Endpoint Security and Transport & Reachability do not apply to an MCPB bundle, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.