# Sheet & Flow Landlord Math (mcpb · sheet-and-flow-mcp-1.0.0.mcpb)

Landlord math: rental cash flow, cap rate, DSCR, Airbnb break-even, late fees, lease notices.

- Trust score: 49/100 (low)
- Change this week: +2
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- mcpb · `sheet-and-flow-mcp-1.0.0.mcpb`: 49/100 (this document), [markdown](https://verifymcp.io/servers/onyxaholguin-cyber-sheet-and-flow-mcp/sheet-and-flow-mcp.md), [page](https://verifymcp.io/servers/onyxaholguin-cyber-sheet-and-flow-mcp/sheet-and-flow-mcp)

## Channel facts

- Registry: `mcpb`
- Package: `https://github.com/onyxaholguin-cyber/sheet-and-flow-mcp/releases/download/v1.0.0/sheet-and-flow-mcp-1.0.0.mcpb`
- Transport: `stdio`
- SHA-256: `457e8f40143b57ae32e5a6ece7e8201d6b66b6c970600208df3a92230c11a077`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Supply Chain Security**: 13/100
  - No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.
  - Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).
  - No install/post-install scripts declared.
  - Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).
- **Provenance & Transparency**: 39/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Maintenance history not yet determined.
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 52/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 1750 tokens (~291/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 73/100
  - Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 99/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 98% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the Sheet & Flow Landlord Math MCP server?

Sheet & Flow Landlord Math ships as an MCPB bundle, a single file you download and open in an MCP host that supports MCPB bundles, such as Claude Desktop. The host reads the launch command from the bundle's own manifest, so there is no command to copy. Before opening it, check the file's SHA-256 matches the one the MCP registry declares for it, 457e8f40143b57ae32e5a6ece7e8201d6b66b6c970600208df3a92230c11a077; the commands to do that are on this page. If it does not match, do not open it.

- Download bundle: `https://github.com/onyxaholguin-cyber/sheet-and-flow-mcp/releases/download/v1.0.0/sheet-and-flow-mcp-1.0.0.mcpb`
- SHA-256: `457e8f40143b57ae32e5a6ece7e8201d6b66b6c970600208df3a92230c11a077`

### Verify on macOS / Linux

```bash
echo "457e8f40143b57ae32e5a6ece7e8201d6b66b6c970600208df3a92230c11a077  sheet-and-flow-mcp-1.0.0.mcpb" | shasum -a 256 -c
```

### Verify on Windows (PowerShell)

```powershell
(Get-FileHash -Algorithm SHA256 .\sheet-and-flow-mcp-1.0.0.mcpb).Hash -eq "457e8f40143b57ae32e5a6ece7e8201d6b66b6c970600208df3a92230c11a077"
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 49, −1)

- [functional regression] Security disclosure: unverified → fail
- [functional regression] Maintenance: pass → unverified

### 2026-11-04 (score 50, 0)

- [functional regression] Security disclosure: fail → unverified

### 2026-11-03 (score 50, +1)

No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-02 (score 49, 0)

- [security regression] Provenance: unverified → fail

### 2026-11-01 (score 49, +1)

- [security regression] Provenance: fail → unverified

### 2026-10-31 (score 48, 0)

- [functional regression] Security disclosure: unverified → fail

### 2026-10-30 (score 48, +1)

- [functional regression] Security disclosure: fail → unverified

### 2026-10-28 (score 47, +1)

No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

## MCP tools (6)

### `rental_property_analysis` (~449 tokens)

Rental property cash flow, cap rate, cash-on-cash and DSCR

Year-one analysis of a long-term rental purchase: loan, monthly mortgage payment, NOI, monthly and annual cash flow, cap rate, cash-on-cash return, DSCR, gross rent multiplier, break-even occupancy and expense ratio. Repairs and CapEx reserves are a share of scheduled rent; management is a share of collected income.

Input parameters:

- `capexPct` (number): CapEx reserve, share of scheduled rent (default 0). As a fraction: 0.25 means 25%.
- `closing` (number): Closing costs (default 0).
- `downPct` (number, required): Down payment. As a fraction: 0.25 means 25%.
- `hoa` (number): HOA per month (default 0).
- `insurance` (number): Insurance per year (default 0).
- `mgmtPct` (number): Property management, share of collected income (default 0). As a fraction: 0.25 means 25%.
- `otherExp` (number): Other expenses per month (default 0).
- `otherIncome` (number): Other monthly income, e.g. laundry or parking (default 0).
- `pointsPct` (number): Loan points/fees as a share of the loan (default 0). As a fraction: 0.25 means 25%.
- `price` (number, required): Purchase price.
- `rate` (number, required): Annual mortgage interest rate. As a fraction: 0.25 means 25%.
- `rent` (number, required): Average monthly rent per unit.
- `repairs` (number): Upfront repairs / rehab (default 0).
- `repairsPct` (number): Repairs and maintenance reserve, share of scheduled rent (default 0). As a fraction: 0.25 means 25%.
- `taxes` (number): Property taxes per year (default 0).
- `units` (number, required): Number of units.
- `utilities` (number): Owner-paid utilities per month (default 0).
- `vacancyPct` (number): Vacancy and credit loss (default 0). As a fraction: 0.25 means 25%.
- `years` (number, required): Loan term in years.

### `mortgage_payment` (~69 tokens)

Monthly mortgage payment (principal and interest)

Monthly principal-and-interest payment for a fixed-rate loan, plus total interest over the term.

Input parameters:

- `loanAmount` (number, required): Loan amount.
- `rate` (number, required): Annual interest rate. As a fraction: 0.25 means 25%.
- `years` (number, required): Loan term in years.

### `short_term_rental_analysis` (~446 tokens)

Short-term rental (Airbnb/VRBO) cash flow and break-even occupancy

Year-one short-term rental analysis: available and booked nights, stays, gross revenue (nightly rate plus cleaning fees), NOI, cash flow, cash-on-cash, cap rate, DSCR, RevPAR, what each booked night is worth after variable costs, break-even occupancy and break-even nightly rate. breakEvenOccupancy null means never (each booked night loses money); above 1 means the deal cannot break even at this nightly rate.

Input parameters:

- `adr` (number, required): Average nightly rate.
- `avgStayNights` (number, required): Average stay length in nights.
- `blockedNights` (number): Owner-blocked nights per year (default 0).
- `cleaningCost` (number): Cleaning cost paid per turnover (default 0).
- `cleaningFee` (number): Cleaning fee charged per stay (default 0).
- `closing` (number): Closing costs (default 0).
- `downPct` (number, required): Down payment. As a fraction: 0.25 means 25%.
- `fixedMonthly` (number): Fixed monthly costs: taxes, insurance, utilities, internet, software, HOA (default 0).
- `furnishing` (number): Furnishing and setup (default 0).
- `hostFeePct` (number): Platform host fee, share of gross (default 0). Airbnb split-fee hosts pay about 0.03; single-fee hosts about 0.155. As a fraction: 0.25 means 25%.
- `maintCapexPct` (number): Maintenance and CapEx reserve, share of gross (default 0). As a fraction: 0.25 means 25%.
- `mgmtPct` (number): Co-host or manager fee, share of gross (default 0). As a fraction: 0.25 means 25%.
- `occupancy` (number, required): Share of available nights booked. As a fraction: 0.25 means 25%.
- `price` (number, required): Purchase price.
- `rate` (number, required): Annual mortgage interest rate. As a fraction: 0.25 means 25%.
- `years` (number, required): Loan term in years.

### `rent_late_fee` (~409 tokens)

Rent late fee with grace period, flat, percent and daily fees and a cap

Days late and the late fee for one rent charge. The fee applies once rent is MORE than graceDays late: flatFee + pctOfRent x rent + dailyFee x (days late - graceDays), capped at maxFee, rounded to cents. Optionally pass state (CO, NY or TX) to use that state's grace period and fee limit as summarized in the Sheet & Flow late fee tutorial (our reading of the statute; not legal advice). Check your lease and current local law before charging a fee.

Input parameters:

- `asOfDate` (string): Date to measure from if rent is still unpaid (usually today). Format YYYY-MM-DD.
- `dailyFee` (number): Fee per day past the grace period (default 0).
- `dueDate` (string, required): Rent due date. Format YYYY-MM-DD.
- `flatFee` (number): Flat fee once late (default 0).
- `graceDays` (integer): Days late that are still free (default 0). Rent due on the 1st and paid on the 6th is 5 days late.
- `maxFee` (number): Maximum fee; 0 or omitted = no cap.
- `paidInFullDate` (string): Date rent was paid in full, if it was. Format YYYY-MM-DD.
- `pastDueRent` (number): CO only: past-due rent the 5% applies to (default: full rent).
- `pctOfRent` (number): Fee as a share of rent (default 0). As a fraction: 0.25 means 25%.
- `rent` (number, required): Monthly rent for this charge.
- `state` (string): Optional: apply this state's grace period and fee limit (overrides graceDays; the cap is the lower of maxFee and the state limit).
- `unitsInBuilding` (integer): TX only: units in the building (more than 4 uses the 10% limit; default 12%).

### `lease_renewal_notice` (~214 tokens)

Lease renewal notice send-by date and renewal window

For one lease: days until the lease ends, the 0-30/31-60/61-90/90+ day window, the date the renewal or rent-increase notice must be sent (lease end minus notice days minus a mailing buffer), a status (On track, Send notice now within 14 days, MISSED, Notice sent), the proposed rent increase percent and the next end date after a 12-month renewal.

Input parameters:

- `asOfDate` (string, required): Today. Format YYYY-MM-DD.
- `currentRent` (number): Current monthly rent (optional).
- `leaseEndDate` (string, required): Lease end date. Format YYYY-MM-DD.
- `mailingBufferDays` (integer): Extra days for mailing/delivery (default 0; 5 is common).
- `noticeDays` (integer, required): Days of notice the lease or law requires.
- `noticeSent` (boolean): True if the notice has already been sent.
- `proposedRent` (number): Proposed monthly rent (optional).

### `irs_mileage_deduction_2026` (~121 tokens)

IRS 2026 standard mileage deduction

Deduction for miles driven on a 2026 date at the IRS standard mileage rate. Business: 72.5 cents/mile Jan 1-Jun 30 and 76 cents/mile Jul 1-Dec 31, 2026; medical/moving: 20.5 then 23.5 cents; charity: 14 cents.

Input parameters:

- `date` (string, required): Trip date in 2026. Format YYYY-MM-DD.
- `miles` (number, required): Miles driven.
- `purpose` (string, required)

## Diagnostics

Captured diagnostic sections: Provenance. The full working is on the page: https://verifymcp.io/servers/onyxaholguin-cyber-sheet-and-flow-mcp/sheet-and-flow-mcp#diagnostics

## Score history

- 2026-11-05: 49
- 2026-11-04: 50
- 2026-11-03: 50
- 2026-11-02: 49
- 2026-11-01: 49
- 2026-10-31: 48
- 2026-10-30: 48
- 2026-10-29: 47
- 2026-10-28: 47
- 2026-10-27: 46
- 2026-10-26: 46
- 2026-10-25: 45
- 2026-10-24: 45
- 2026-10-23: 44
- 2026-10-22: 44
- 2026-10-21: 40
- 2026-10-20: 40
- 2026-10-19: 40
- 2026-10-18: 40
- 2026-10-17: 40
- 2026-10-16: 40
- 2026-10-15: 40
- 2026-10-14: 40
- 2026-10-13: 13
- 2026-10-12: 13

## Common questions

### What is the Sheet & Flow Landlord Math MCP server?

Sheet & Flow Landlord Math is an MCP server listed in the public MCP registry as io.github.onyxaholguin-cyber/sheet-and-flow-mcp. Landlord math: rental cash flow, cap rate, DSCR, Airbnb break-even, late fees, lease notices. This page covers its MCPB bundle (https://github.com/onyxaholguin-cyber/sheet-and-flow-mcp/releases/download/v1.0.0/sheet-and-flow-mcp-1.0.0.mcpb).

### Is the Sheet & Flow Landlord Math MCP server safe to use?

Sheet & Flow Landlord Math scores 49 out of 100 on VerifyMCP. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Sheet & Flow Landlord Math MCP server expose?

Sheet & Flow Landlord Math exposes 6 tools: rental_property_analysis, mortgage_payment, short_term_rental_analysis, rent_late_fee, lease_renewal_notice, irs_mileage_deduction_2026. Their descriptions and schemas cost roughly 1,708 tokens of context every time the server is loaded.

### What licence is the Sheet & Flow Landlord Math MCP server under?

Sheet & Flow Landlord Math declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

### What did VerifyMCP test on the Sheet & Flow Landlord Math MCP server?

VerifyMCP ran 12 checks on Sheet & Flow Landlord Math, covering Install scripts, Source repository, Provenance, License and 8 more. 4 items could not be completed, a gap on our side rather than a finding about Sheet & Flow Landlord Math: Malware scan, Known CVEs, Dependency health and Maintenance. Endpoint Security and Transport & Reachability do not apply to an MCPB bundle, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.

## Links

- Repository: https://github.com/onyxaholguin-cyber/sheet-and-flow-mcp
- Website: https://onyxaholguin-cyber.github.io/sheet-and-flow/
- Changelog RSS feed: https://verifymcp.io/servers/onyxaholguin-cyber-sheet-and-flow-mcp/sheet-and-flow-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/onyxaholguin-cyber-sheet-and-flow-mcp/sheet-and-flow-mcp/changelog.json
- Trust report (JSON): https://verifymcp.io/servers/onyxaholguin-cyber-sheet-and-flow-mcp/sheet-and-flow-mcp.json
- HTML version of this page: https://verifymcp.io/servers/onyxaholguin-cyber-sheet-and-flow-mcp/sheet-and-flow-mcp