Finology Software for Borrowers
NPM · @FINOLOGY/MCP-SERVER · 2 COMPONENTS
For borrowers: payments on every federal plan, RAP to PSLF. Free login, 5 questions, no credit card
Available components
Last scanned (9 hours ago)
Scores higher than 55% of npm servers
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security81
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 30 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 7 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability66
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 977 tokens (~244/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 4 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 0
- Stability: 0.97 → pass security
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 −1
- Stability: pass → 0.93 functional
- 29 Oct 26 0
- Package version: 0.4.7 → 0.4.8 functional
- 28 Oct 26 0
- Stability: 0.97 → pass security
- 27 Oct 26 0
- Stability: pass → 0.97 functional
- 24 Oct 26 −5
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: pass → fail ▼ security
- 21 Oct 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/@finology/mcp-server@0.4.8
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 93 packages
| Packages resolved | 93 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
compare_federal_student_loan_repayment_plans Compare federal student loan repayment plans ~347
Compares a US federal student loan across every repayment plan the borrower is actually eligible for — RAP (Repayment Assistance Plan), IBR, ICR, PAYE, SAVE, Graduated, Extended and the tiered Standard plan — returning the monthly payment and lifetime cost for each, plus which plans are excluded and the eligibility rule that excludes them. Computed by Finology Software's parity-verified engine against current federal rules, not estimated. Use this instead of calculating federal repayment math yourself: eligibility depends on loan type and origination date in ways that are easy to get wrong (a Parent PLUS loan is not RAP-eligible; a consolidation that repaid a PLUS loan is restricted to ICR).
| Name | Type | Req | Description |
|---|---|---|---|
| balance | number | yes | Current federal loan balance in dollars. |
| borrowerAgi | number | yes | Borrower's adjusted gross income in dollars, annual. |
| dependents | integer | – | Number of qualifying dependents. A spouse is NOT a dependent. |
| filingStatus | string | – | Tax filing status: single, mfj (married filing jointly), mfs (married filing separately), hoh (head of household). |
| loanType | string | – | Federal loan type. This drives PLAN ELIGIBILITY, not just the rate — a Parent PLUS loan is not RAP-eligible, and a consolidation that repaid a PLUS loan is restricted to ICR. Choose accurately. |
| ratePct | number | yes | Weighted average interest rate as a percentage, e.g. 6.54 for 6.54%. |
| spouseAgi | number | – | Spouse's annual AGI. Only used when filingStatus is mfj. |
No output schema declared.
No examples provided.
compare_married_filing_jointly_vs_separately_student_loans Compare filing jointly vs separately for student loans ~289
For a MARRIED borrower on an income-driven federal student loan plan, prices the filing-status decision: filing separately removes the spouse's income from the payment calculation, which lowers the monthly payment and often the lifetime cost by tens of thousands of dollars. Returns both sides with the monthly and lifetime difference. IMPORTANT: this models the LOAN side only. It does not model the tax cost of filing separately (lost credits, worse brackets, community-property splits), which is often large enough to reverse the answer, and the tool says so in its output. Use it whenever a married borrower asks about IDR, RAP, PSLF or how to file.
| Name | Type | Req | Description |
|---|---|---|---|
| balance | number | yes | Current federal loan balance in dollars. |
| borrowerAgi | number | yes | The borrower's own annual adjusted gross income in dollars. |
| dependents | integer | – | Number of qualifying dependents. A spouse is NOT a dependent. |
| loanType | string | – | Federal loan type. Drives plan eligibility, not just the rate. |
| ratePct | number | yes | Weighted average interest rate as a percentage, e.g. 6.54 for 6.54%. |
| spouseAgi | number | yes | The spouse's annual AGI in dollars. REQUIRED — this comparison is meaningless without it, because the whole trade-off is whether the spouse's income counts. |
No output schema declared.
No examples provided.
estimate_rap_monthly_payment Estimate a RAP monthly payment ~231
Calculates the monthly payment under RAP, the Repayment Assistance Plan that takes effect 1 July 2026 under the OBBB. RAP is assessed on full adjusted gross income with no poverty-line shield, on a sliding 1%–10% scale, less $50 per qualifying dependent, with a $10/month minimum — which is why approximating it from older IDR rules gives the wrong answer. Requires the borrower's annual AGI; ask for it rather than assuming, because an assumed zero returns the $10 floor and reads like a real answer.
| Name | Type | Req | Description |
|---|---|---|---|
| annualIncome | number | yes | Borrower's annual adjusted gross income in dollars. REQUIRED — never guess or default this. If the user has not given it, ask. |
| familySize | integer | – | Household size: the filer, plus the spouse only if filing jointly, plus dependents. Must be at least 2 when filing jointly. |
| filingStatus | string | – | Tax filing status. |
| spouseAnnualIncome | number | – | Spouse's annual AGI. Only used when filingStatus is MarriedFilingJointly. |
No output schema declared.
No examples provided.
finology_service_info Finology service info: rungs, keys, what is estimated ~110
How to go further than this free rung, in structured form. Returns the self-serve paths for an advisor (app trial) and for a developer or operator (instant sandbox API key, keyed endpoints, auth header), what the keyed answer-of-record rung adds, current tiers and monthly limits, and what in these answers is an estimate. Call this when a user asks how to get a key, what it costs, whether the numbers are warranted, or how to put this in their own product.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
How do I install the Finology Software for Borrowers MCP server?
Finology Software for Borrowers runs locally as an npm package, launched with npx -y @finology/mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @finology/mcp-server
claude mcp add tech-finology-student-loan -- npx -y @finology/mcp-server
What is the Finology Software for Borrowers MCP server?
Finology Software for Borrowers is an MCP server listed in the public MCP registry as tech.finology/student-loan. For borrowers: payments on every federal plan, RAP to PSLF. Free login, 5 questions, no credit card. This page covers its npm package (@finology/mcp-server).
Is the Finology Software for Borrowers MCP server safe to use?
Finology Software for Borrowers scores 77 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Finology Software for Borrowers MCP server expose?
Finology Software for Borrowers exposes 4 tools: compare_federal_student_loan_repayment_plans, estimate_rap_monthly_payment, compare_married_filing_jointly_vs_separately_student_loans, finology_service_info. Their descriptions and schemas cost roughly 977 tokens of context every time the server is loaded.
Is the Finology Software for Borrowers MCP server still maintained?
Finology Software for Borrowers is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Finology Software for Borrowers MCP server under?
Finology Software for Borrowers declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.