# io.github.theluckystrike/quotes-estimates-proposals-vat-win-rate (mcpb · quotes.mcpb) Quotes and estimates: VAT line items, a validity date, an A4 PDF, accept makes an invoice. - Trust score: 47/100 (low) - Registry status: active - Liveness: live - Owner verified: no - Last scored: 2026-09-20 ## Components - remote · `mcp.zovo.one`: 84/100, [markdown](https://verifymcp.io/servers/theluckystrike-quotes-estimates-proposals-vat-win-rate/mcp-quotes.md), [page](https://verifymcp.io/servers/theluckystrike-quotes-estimates-proposals-vat-win-rate/mcp-quotes) - mcpb · `quotes.mcpb`: 47/100 (this document), [markdown](https://verifymcp.io/servers/theluckystrike-quotes-estimates-proposals-vat-win-rate/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-quotes-mcp.md), [page](https://verifymcp.io/servers/theluckystrike-quotes-estimates-proposals-vat-win-rate/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-quotes-mcp) ## Channel facts - Registry: `mcpb` - Package: `https://github.com/theluckystrike/mcp-servers/releases/download/v0.22.0/quotes.mcpb` - Version: `0.22.0` - Transport: `stdio` ## Trust breakdown How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog) Scored 2026-09-20. - **Supply Chain Security**: 22/100 - Malware scan not yet available for this package. - Known CVEs were checked across the 157 of 157 dependencies we could resolve, so this covers what we could see, not the whole tree. - No install/post-install scripts declared. - 63 of 157 dependencies flagged as unhealthy (2 deprecated). - **Provenance & Transparency**: 45/100 - Source repository is publicly reachable at the declared URL. - Provenance check failed: no build-provenance attestation is published. - Clear OSI-approved license (MIT). - Actively maintained (last published 2 days ago). - Disclosure check failed: no security disclosure policy was found in the source repository. - **Schema Quality & AI Usability**: 85/100 - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name). - AI-judged instruction clarity (excellent). - Context-footprint check failed: tool/resource definitions use about 1475 tokens (~113/item across 13 items; 12 tools + 1 resources), over budget; trim descriptions and params. - Usage-examples check failed: none of the tools include examples. - **Stability & Change Management**: 0/100 - Stability not yet verified: not enough scan history yet (needs a 30-day window). - **Tool Coverage**: 96/100 - 100% of tools have a non-trivial description (not blank, and not just the tool's name). - 87% of tool parameters carry a description. - **Tool Safety**: 75/100 - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured. - 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "quote_send_text" implies "send" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. - An AI judge read all 13 captured unit(s) of tool text and found none that tries to manipulate the model reading it. - **Capabilities**: 100/100 - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28. **Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm. ## Install - Download bundle: `https://github.com/theluckystrike/mcp-servers/releases/download/v0.22.0/quotes.mcpb` ## Changelog Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims. ### 2026-09-17 (score 47) First indexed and scored. ## MCP tools (12) ### `quote_create` (~307 tokens) Create a quote Store a quote for client from items and return its Q number, VAT and totals. unit_price is in MAJOR units; currency, VAT and issuer come from the shared profile. A duplicate of an open quote is refused. Free: 5 open. Input parameters: - `client` (string, required): Client name or id. A name the invoice server already knows brings its address, email and VAT id onto the quote - `client_address` (string): Postal address for the QUOTE FOR block, newlines allowed - `client_email` (string): Only if the user gave it; otherwise the stored client's email is used - `client_vat_id` (string): Client VAT / tax registration id - `currency` (string): Defaults to your business default currency - `discount_percent` (number): Discount applied to every line, in percent - `issue_date` (string): YYYY-MM-DD, defaults to today in your business profile's timezone - `items` (array, required): The line items being quoted - `notes` (string): Free text printed under the totals, e.g. scope or exclusions. 10000 characters or fewer - `tax_rate` (number): VAT percent for lines with no rate of their own. Defaults to the business default - `valid_until` (string): YYYY-MM-DD, an explicit last valid day. Wins over validity_days - `validity_days` (integer): Days the quote stays valid, counted from the quote date and inclusive. Default 30 ### `quote_list` (~123 tokens) List quotes List quotes newest first: id, client, dates, state, days left while open, currency, total and the invoice number once accepted. State is read against today, so a lapsed quote shows as expired. Input parameters: - `client` (string): Only quotes for clients whose name contains this text - `from` (string): YYYY-MM-DD, earliest quote date - `state` (string): Default "all". "open" excludes quotes whose validity has run out; "expired" is only those - `to` (string): YYYY-MM-DD, latest quote date ### `quote_get` (~76 tokens) Show one quote Return one quote in full by Q number or exact client name: lines with unit price and VAT, totals, dates, the state today with days left, notes, and the invoice it became once accepted. Reads only. Input parameters: - `id` (string, required): Quote id such as Q-2026-0001, or an exact client name ### `quote_update` (~184 tokens) Change an open quote Revise a quote that is still open: line items, currency, discount, VAT default, validity or notes. Totals are recomputed. An accepted or declined quote is never edited. Input parameters: - `client_address` (string) - `client_email` (string) - `client_vat_id` (string) - `currency` (string) - `discount_percent` (number) - `id` (string, required): Quote id such as Q-2026-0001 - `items` (array): Replaces every line item - `notes` (string) - `tax_rate` (number): VAT percent for lines with no rate of their own - `valid_until` (string): YYYY-MM-DD. Wins over validity_days, and is how an expired quote is extended - `validity_days` (integer): Recomputes valid_until from the quote date ### `quote_send_text` (~109 tokens) Plain-text quote to paste into email Turn a quote into a plain-text summary to paste into an email: the line table, VAT lines, total and validity date, with a sign-off from the shared profile. Free; quote_pdf writes the A4 document. Input parameters: - `greeting` (string): Opening line, default "Hello" plus the client name - `id` (string, required): Quote id such as Q-2026-0001 - `sign_off` (string): Closing line, default your business name from the shared profile ### `quote_accept` (~173 tokens) Accept a quote Mark a quote accepted and turn it into an invoice: created directly in the invoice server when its store is present, otherwise returned as invoice_create-ready line items. The numbers are copied, never recomputed. Input parameters: - `allow_expired` (boolean): Accept a quote whose validity has run out. Default false: an expired quote is refused so the price is re-confirmed first - `create_invoice` (string): Default "auto": create the invoice when the invoice store exists, otherwise hand back the items. "never" only marks it accepted - `due_days` (integer): Days until the invoice is due, defaults to your payment terms - `id` (string, required): Quote id such as Q-2026-0001 - `issue_date` (string): YYYY-MM-DD for the invoice, defaults to today ### `quote_decline` (~113 tokens) Decline a quote Mark a quote lost, with a reason kept on the record, freeing a free-tier open slot and counting in the win rate. An accepted quote is refused, naming the invoice it became. Free on every tier. Input parameters: - `date` (string): YYYY-MM-DD, defaults to today - `id` (string, required): Quote id such as Q-2026-0001 - `reason` (string): Why it was lost, e.g. "price" or "went in-house". Kept on the record ### `quote_delete` (~72 tokens) Delete a draft quote Delete a draft quote that was never sent, accepted, invoiced or exported, and give its free open-quote slot back. A quote with any of those is refused with the dependent named. The id is never reissued. Input parameters: - `id` (string, required): Quote id such as Q-2026-0001 ### `quote_pdf` (~90 tokens) Render the quote as a PDF Call this tool to write one quote as an A4 PDF and return the path: the invoice layout with the validity date, an acceptance block, and an EXPIRED marking once it has lapsed. Pro. Input parameters: - `id` (string, required): Quote id such as Q-2026-0001 - `out_path` (string): Where to write the file. Defaults to the quotes data directory under pdf/ ### `quote_report` (~82 tokens) Quote pipeline and win rate Totals per currency for open, accepted, declined and expired quotes, with counts, the value still open and the win rate. Free covers the current calendar year to date; Pro reports over any date range. Input parameters: - `from` (string): YYYY-MM-DD, earliest quote date to count - `to` (string): YYYY-MM-DD, latest quote date to count ### `license_status` (~54 tokens) License status Report this server's licence state: product, tier free or pro, licence id, expiry, the key source and the upgrade URL. No arguments, no network. Explains a free-tier refusal; license_activate installs a key. ### `license_activate` (~71 tokens) Activate license Activate a Pro key (MCPL1.xxx.yyy) from checkout: verified offline against a built-in public key, saved to your config file. A wrong, malformed or expired key is refused, unsaved. license_status reads it back. Input parameters: - `key` (string, required): License key from the checkout confirmation page ## Diagnostics Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/theluckystrike-quotes-estimates-proposals-vat-win-rate/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-quotes-mcp#diagnostics ## Score history - 2026-09-20: 47 - 2026-09-19: 47 - 2026-09-18: 47 - 2026-09-17: 47 ## Common questions ### What is the io.github.theluckystrike/quotes-estimates-proposals-vat-win… MCP server? io.github.theluckystrike/quotes-estimates-proposals-vat-win… is an MCP server listed in the public MCP registry as io.github.theluckystrike/quotes-estimates-proposals-vat-win…. Quotes and estimates: VAT line items, a validity date, an A4 PDF, accept makes an invoice. This page covers its MCPB bundle (https://github.com/theluckystrike/mcp-servers/releases/download/v0.22.0/quotes.mcpb). ### Is the io.github.theluckystrike/quotes-estimates-proposals-vat-win… MCP server safe to use? io.github.theluckystrike/quotes-estimates-proposals-vat-win… scores 47 out of 100 on VerifyMCP. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm. ### What tools does the io.github.theluckystrike/quotes-estimates-proposals-vat-win… MCP server expose? io.github.theluckystrike/quotes-estimates-proposals-vat-win… exposes 12 tools: quote_create, quote_list, quote_get, quote_update, quote_send_text, and 7 more. Their descriptions and schemas cost roughly 1,454 tokens of context every time the server is loaded. ### What licence is the io.github.theluckystrike/quotes-estimates-proposals-vat-win… MCP server under? io.github.theluckystrike/quotes-estimates-proposals-vat-win… declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls. ## Links - Repository: https://github.com/theluckystrike/mcp-servers - Website: https://mcp.zovo.one/s/quotes - Changelog RSS feed: https://verifymcp.io/servers/theluckystrike-quotes-estimates-proposals-vat-win-rate/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-quotes-mcp.xml - Changelog JSON feed: https://verifymcp.io/servers/theluckystrike-quotes-estimates-proposals-vat-win-rate/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-quotes-mcp.json - HTML version of this page: https://verifymcp.io/servers/theluckystrike-quotes-estimates-proposals-vat-win-rate/https-github-com-theluckystrike-mcp-servers-releases-download-v0-22-0-quotes-mcp