Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

ExpenseBot

NPM · @EXPENSEBOT/MCP-SERVER-AUTH · 2 COMPONENTS · SCANNED SEP 21

Capture receipts, scan Gmail, analyze spending, and create reviewed reports from AI assistants.

0 this week 79 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 31 of 95 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability64
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 14361 tokens (~239/item across 60 items; 60 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management91
  • Stability check failed: the tool surface changed between 0.6.22 and 0.6.25: 0 tool removals, 3 breaking changes, 4 additions. See how to fix → Fail
Tool Coverage98
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 92% of tool parameters carry a description.Partial
  • Structured output schemas are declared (57% of tools); any adoption earns full credit.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "send_report_to_accounting" implies "send" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 61 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the ExpenseBot MCP server?

ExpenseBot runs locally as an npm package, launched with npx -y @expensebot/mcp-server-auth. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @expensebot/mcp-server-auth

# add to Claude Code
claude mcp add totesmagotes-mcp-server-auth -- npx -y @expensebot/mcp-server-auth
// .cursor/mcp.json
{
  "mcpServers": {
    "totesmagotes-mcp-server-auth": {
      "command": "npx",
      "args": [
        "-y",
        "@expensebot/mcp-server-auth"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "totesmagotes-mcp-server-auth": {
      "command": "npx",
      "args": [
        "-y",
        "@expensebot/mcp-server-auth"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add totesmagotes-mcp-server-auth -- npx -y @expensebot/mcp-server-auth
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "totesmagotes-mcp-server-auth": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@expensebot/mcp-server-auth"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add totesmagotes-mcp-server-auth --command npx --arg -y --arg @expensebot/mcp-server-auth
# ~/.hermes/config.yaml
mcp_servers:
  totesmagotes-mcp-server-auth:
    command: "npx"
    args: ["-y", "@expensebot/mcp-server-auth"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "totesmagotes-mcp-server-auth": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@expensebot/mcp-server-auth"
      ]
    }
  }
}
# add to Vellum
assistant mcp add totesmagotes-mcp-server-auth -t stdio -c npx -a -y @expensebot/mcp-server-auth
// mcp.json
{
  "mcpServers": {
    "totesmagotes-mcp-server-auth": {
      "command": "npx",
      "args": [
        "-y",
        "@expensebot/mcp-server-auth"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 87 to 91.

  • 17 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 77 to 81.

  • 16 Sept 26 −3

    No change was recorded against any check on this day. Stability & Change Management went from 97 to 77.

  • 15 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 94 to 97.

  • 13 Sept 26 −1

    No change was recorded against any check on this day. Stability & Change Management went from 97 to 91.

  • 11 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 94 to 97.

  • 10 Sept 26 +10
    • Known CVEs: unverified → pass security
    • Dependency health: unverified → 0.84 functional
  • 9 Sept 26 −11
    • Known CVEs: pass → unverified security
    • Stability: fail → unverified security
    • Tool safety: pass → unverified security
    • Stability: fail → pass security
    • Schema quality: 12464 → 14361 functional
    • Schema quality: 12464 → 14239 functional
    • Dependency health: 0.84 → unverified functional
    • Capabilities: pass → unverified functional
    • Tool coverage: 100 → unverified functional
    • First check of Tool coverage: 57 functional
    • Package version: 0.6.22 → 0.6.25 functional
    • Package version: 0.6.22 → 0.6.23 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/@expensebot/mcp-server-auth@0.6.25

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 95 packages
Packages resolved 95
Stale 31
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 60 exposed · ~13,408 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
prepare_client_invoice ~370

Prepare a client invoice from a saved ExpenseBot report without creating it. Reads canonical report rows, allocates a unique invoice number, verifies the client ledger identity and advance, and returns exact totals plus a short-lived preparationId. Call this first, show the preview to the user, then call create_client_invoice after explicit confirmation. It reserves the invoice number and preview for 30 minutes but creates no invoice, document, Income row, email, or payment.

NameTypeReqDescription
advanceAppliednumberVerified client advance to apply against this invoice.
billToEmailstringOptional client email printed on the invoice. This does not send email.
clientAddressstringOptional billing address printed in the invoice's Bill To section.
clientNamestringyesFull client or business name shown on the invoice.
customLineItemsarrayOptional fee/service lines. They are taxed but never marked up.
invoiceNumberstringOptional custom invoice number. ExpenseBot allocates one when omitted.
issueDatestringyesCalendar-valid invoice date in YYYY-MM-DD format.
markupPctnumberMarkup applied only to rebilled expense rows.
mentionSupportingReceiptsbooleanWhen true, note on the invoice that supporting receipts are available.
paymentTermsstringInvoice due terms. Defaults to the client's billing profile or net30.
receiptIdsarrayOptional exact report receipt IDs. Defaults to every current report expense.
reportIdstringyesSaved ExpenseBot report ID to invoice.
taxLabelstringTax label such as HST, GST, or VAT.
taxPctnumberTax percentage applied after markup and custom line items; use 0 for no tax.

No output schema declared.

No examples provided.

process_gmail_receipts ~95

Process specific Gmail emails as receipts. Pass Gmail message IDs and they'll be converted to PDF, extracted by AI, and added to the user's expense spreadsheet. Max 25 emails per request. Requires Gmail to be connected in ExpenseBot settings.

NameTypeReqDescription
accountEmailstringOptional: which Gmail account to use (for users with multiple linked accounts)
emailIdsarrayyesGmail message IDs to process as receipts

No output schema declared.

No examples provided.

request_accounting_integration ~144

Request support for an accounting package only after checking ExpenseBot's reviewed direct and import-file destinations and finding no matching package. Do not use this for a listed or Beta destination, a general compatibility question, or without the exact package name. This is a confirmation-gated write: after the user approves, it creates one deduplicated request bound to the authenticated ExpenseBot account and emails ExpenseBot's internal team. It does not create an integration or make the requested package immediately available. On accepted or previously recorded requests, tell the user ExpenseBot will email them within one week with an update.

NameTypeReqDescription
packageNamestringyesExact accounting package requested by the user.

No output schema declared.

No examples provided.

scan_gmail ~175

Trigger a background Gmail scan to discover and process receipt emails from the last ~60 days (default). Runs asynchronously — returns immediately, user gets an email summary when done. Like clicking "Find Receipts in Gmail" in the UI. For whole PAST YEARS (e.g. 2023, or 2020-2022) use scan_gmail_years instead; to check a scan's progress use get_scan_status.

NameTypeReqDescription
accountEmailstringOptional: which Gmail account to scan
endDatestringOptional: explicit end date (YYYY-MM-DD)
lookbackDaysintegerHow many days back to scan (default 60, max depends on subscription)
startDatestringOptional: explicit start date (YYYY-MM-DD) instead of lookbackDays

No output schema declared.

No examples provided.

scan_gmail_years ~231

Scan one or more COMPLETED PRIOR years of the user's Gmail for receipts (e.g. years:[2023] or years:[2020,2021,2022]). Long-running background job: the first eligible year starts immediately and the rest queue, running one at a time (each full year typically takes a couple of hours; the user can close the app). ALWAYS call first WITHOUT confirmStart to preview which years are eligible, then ask the user to confirm, then call again with confirmStart:true. For receipts from the last ~60 days use scan_gmail instead. To check how a scan is going, use get_scan_status. The current in-progress year cannot be year-scanned.

NameTypeReqDescription
accountEmailstringOptional: which connected Gmail inbox to scan (multi-inbox users). Defaults to the primary.
confirmStartbooleanOmit or false = preview only (no scan starts). Must be exactly true to start scanning.
yearsarrayyesCompleted prior years to scan, e.g. [2020, 2021]. Max 10.

No output schema declared.

No examples provided.

search_expenses ~472

Search and filter the user's expenses. Returns matching expense rows from their spreadsheet. Filter by category, merchant, date range, amount, or tags. Results are paginated: when hasMore is true, call again with nextCursor and the same filters. Do not split a date range into repeated overlapping searches. Use the optional query parameter for deterministic natural-language recall over merchant, city/location, Notes (including receipt items, delivery source, payer, and Business purpose), Tag, and category. Each matching result includes matchedFields and a short matchReason so you can explain why it was selected. When several rows plausibly match, a disambiguation list is returned; each option carries the exact expenseId. Structured filters (categories, merchants, dateRange, tags, minAmount, maxAmount) combine with the query using AND semantics. Each result includes expenseId, the exact durable Receipt ID required by update_expense.

NameTypeReqDescription
categoriesarrayFilter by expense categories (e.g., ['Travel', 'Meals'])
clientEmailstringClient account email. Accountants may use this only for an accepted ExpenseBot client.
cursorstringOpaque nextCursor returned by the previous search_expenses page. Reuse the same filters; never construct or edit this value.
dateRangeTime period filter. Use exactly one variant — pick the shape that matches the user's phrasing.
hasReceiptbooleanWhen true, return only expenses with a receipt link. When false, return only expenses without one.
limitintegerResults per page (default 20, maximum 50)
maxAmountnumberMaximum expense amount
merchantsarrayFilter by merchant names (e.g., ['Uber', 'Starbucks'])
minAmountnumberMinimum expense amount
querystringOptional natural-language recall over the user's existing expense fields (merchant, city/location, Notes including receipt items, delivery source, payer, and Business purpose, Tag, category). Determi…
tagsarrayFilter by tags
NameTypeReqDescription
countintegeryesRows matched by the filters.
expensesarrayyesMatching expense rows, newest first, paginated.
hasMoreboolean
messagestring
nextCursorstring|nullOpaque signed continuation; reuse with identical filters.
pageInfoobject
queryAppliedstring
totalnumberyesSum of the matched set in home currency.
totalMatchedintegerPresent for free-text searches.

No examples provided.

search_knowledge ~174

Search ExpenseBot's complete product and help knowledge base. Use this before guessing when the user asks how a feature works, what ExpenseBot supports, or needs setup, billing, Gmail, scan, report, workflow, or troubleshooting instructions. Set fullAnswer:true on the first call when the user asks for complete, detailed, or step-by-step instructions. Use the default excerpt mode for discovery and quick answers; if an excerpt is truncated, call again with fullAnswer:true before presenting complete instructions. Each result has a stable id.

NameTypeReqDescription
fullAnswerbooleanSet true on the first call for complete, detailed, or step-by-step instructions. Leave false for discovery or quick-answer excerpts.
limitintegerNumber of ranked matching articles to return (1-10).
querystringyesSearch terms
NameTypeReqDescription
resultsarrayyes
successbooleanyes

No examples provided.

send_report_to_accounting ~433

Review and then post an ExpenseBot report to the owner's accounting destination. STEP 1: call with provider, reportId, and optional mode/mappings, without confirm. The server reads the live report and destination, applies Omit/Personal/split/date/currency rules, checks Zoho bank-feed matches, and returns the complete proposal plus proposalId. NOTHING is posted in step 1. Show the complete proposal and ask for approval. STEP 2: call with only provider, proposalId, and confirm:true. The server posts only the frozen, account-bound proposal, revalidates live state, and rejects changed reports or mappings. Never add mapping fields to the confirmation call. Owner accounts only; acting for a client is not supported. Agent-driven posting is currently available only for Zoho Books (zoho_books); QuickBooks Online, Xero, Wave, and FreeAgent are intentionally not accepted by this tool yet because their previews cannot freeze/revalidate the canonical provider plan that shareReport executes. Use those providers' web flows until they satisfy the full push contract.

NameTypeReqDescription
accountMappingsobjectStep 1 only: ExpenseBot category to live destination account ID overrides.
confirmbooleanStep 2 only: true posts the exact staged proposal. No other options may change.
forceRepushbooleanStep 1 only: explicitly include disclosed uncertain prior outcomes in the frozen proposal.
modestringStep 1 only (Zoho Books): automatic document treatment, paid expenses, or bills.
proposalIdstringStep 2 only: proposalId returned by the read-only preview.
providerstringyesAccounting destination provider. Agent-driven posting is currently available only for Zoho Books.
reportIdstringStep 1 only: ExpenseBot report ID owned by the signed-in account.
reportingTagMappingsobjectStep 1 only: ExpenseBot tag to live destination reporting-tag option.
taxMappingsobjectStep 1 only: observed tax-rate string to live destination tax ID overrides.

No output schema declared.

No examples provided.

share_report ~116

Share one existing expense report after confirmation. Default to reviewer: they can open and edit that report's Google Sheet, inspect receipts, comment, approve, or request changes, but cannot act for the owner or use accounting integrations. Use accountant only when the user explicitly asks for ongoing accounting access; it creates the established accountant relationship and broader report-management workflow.

NameTypeReqDescription
recipientRolestringUse reviewer for report-only approval. Use accountant only for explicit ongoing accountant access.
recipientsarrayyes
reportIdstringyes

No output schema declared.

No examples provided.

start_trial_link ~102

Get a UTM-tagged signup URL for the 60-day free trial (no credit card required). Use this when an unauthenticated AI conversation wants to send the user to sign up. Returns a URL with attribution tags so we can track AI-assistant referrals.

NameTypeReqDescription
utmCampaignstringUTM campaign override (default: 'ai-assistant')
utmSourcestringUTM source override (default: 'mcp')

No output schema declared.

No examples provided.

submit_receipt ~639

Submit a photo or PDF of a receipt for processing. Covers requests phrased as 'log this', 'log this receipt', 'save this receipt', 'expense this', or 'add this to my expenses', including when the user simply shares a photo of a receipt or invoice. The receipt image is validated, uploaded to cloud storage, and processed by AI to extract vendor, amount, date, tax, and category. The expense appears in the user's spreadsheet in about 1-3 minutes, and longer for PDFs or large batches. Handles images and PDFs, mixed together in one batch. TO SEND FILES (preferred, and required for PDFs): call this tool with filesToUpload listing every file the user gave you. It returns one signed upload URL per file. Upload them ONE AT A TIME with an HTTP PUT, telling the user which file you just finished and how many remain, then call this tool ONCE with uploadRefs for all of them — that processes the whole set as a single batch, like the ExpenseBot web app. Do not call this tool once per file. Use the photo parameter for one image or PDF attached in ChatGPT. MCP clients that cannot supply file references may use photoBase64 for one small image; use the upload flow for large files or batches. Optional note and tag values use the same receipt metadata path as ExpenseBot's camera, file uploader, and forwarded-email intake. The note is stored in the Notes column (L); the tag is stored in the Tag column (K). Batch defaults apply to every file, and each uploadRefs item may override either value for that file.

NameTypeReqDescription
filenamestringOptional filename (e.g., 'lunch_receipt.jpg')
filesToUploadarrayRequest upload URLs for one or more files. Include EVERY file the user provided in a single call. Returns one signedUrl + uploadRef per file; upload each, then call this tool again with uploadRefs.
mimeTypestringMIME type of the file (default: image/jpeg)
notestringBatch-level context note applied to every file in the upload. Individual files may override this with their own note. Stored through the existing receipt-note pipeline in the Notes column (L).
photoobjectSingle attached receipt image or PDF supplied by ChatGPT. For multiple files or large files, use filesToUpload and uploadRefs instead.
photoBase64stringLegacy fallback for MCP clients that send one small image as complete base64 data. ChatGPT should use photo or uploadRefs instead.
tagstringBatch-level project or client tag applied to every expense row. Individual files may override it. Stored in the Tag column (K) through the same path as the web receipt uploader.
uploadRefstringSingle-file shorthand for uploadRefs. Use uploadRefs when there is more than one file.
uploadRefsarraySubmit previously uploaded files as ONE batch. Include every uploadRef from the filesToUpload step. If any file fails validation the whole batch is rejected and nothing is processed.

No output schema declared.

No examples provided.

trace_document ~208

Trace what happened to a specific receipt, invoice, forwarded email, Gmail receipt, or PDF in ExpenseBot processing. Use when the user asks where a document went, why it did not show up, whether it was skipped, routed to income, deduped, or removed as a duplicate. Returns a read-only timeline from the user's lineage audit trail.

NameTypeReqDescription
daysintegerHow many days back to search.
limitintegerMaximum lineage events to return.
messageIdstringGmail message ID if known.
outcomestringOptional processing outcome filter.
querystringMerchant, sender, subject, invoice number, or phrase to search for, e.g. 'Blue Rocket', 'Driversnote', 'Uber receipt'.
receiptIdstringExpenseBot receipt/invoice ID if known, e.g. IR-123, RO-abc, RR-456.
threadIdstringGmail thread ID if known.

No output schema declared.

No examples provided.

update_expense ~290

Update a single existing expense row's category, tag, merchant, or business purpose (e.g. 'recategorize expense X to Meals' or 'tag it Client – Acme'). Identify it only by the exact expenseId returned by search_expenses (the full Receipt ID from Column Q). Never use a date, displayed number, or sheet row number as expenseId. Two-phase operation: calls with confirm omitted or false return a preview of the current→proposed change and make no change. After user confirmation, a call with confirm:true applies the proposed change. If the expense is not found, search once for a current exact expenseId; never retry the same stale ID. If a business-purpose update exceeds the Notes capacity, stop and send the user to https://www.expensebot.ai/review-expenses?source=mcp instead of retrying. Only category/tag/merchant/businessPurpose are editable — amounts, dates, and notes are not editable via the assistant. Does not create or delete rows.

NameTypeReqDescription
confirmbooleanOmit or false = preview only (no write). Must be exactly true to apply the change.
expenseIdstringyesExact full Receipt ID from Column Q, returned as expenseId by search_expenses.
fieldsobjectyesPartial update object. Include one or more of these optional keys; omit every field that should remain unchanged.

No output schema declared.

No examples provided.

whatif_afford ~123

Can I afford $X/month? Recomputes the user's Safe Monthly Draw (how much they can safely pay themselves) with an added recurring monthly cost, and returns a yes/tight/no verdict plus the before/after numbers. Use for questions like 'can I afford a $500/mo hire' or 'what if I add a $200/mo software subscription'. Requires at least 3 months of income history — otherwise returns insufficient_data rather than a guess.

NameTypeReqDescription
deltaMonthlynumberyesThe new recurring monthly cost being considered, in the user's home currency
NameTypeReqDescription
dataobjectThe full what-if scenario: assumptions, evidence, and computed outcome.
messagestringScenario narrative; may be absent if the scenario carried no template or evidence.
successbooleanyes

No examples provided.

whatif_client ~167

What if a client pays late or leaves? mode='late30' shifts that client's OPEN invoice amounts out of the near-term expectation (they still owe it, it's just not landing this month). mode='gone' removes that client's trailing monthly income contribution and recomputes Safe Draw against the reduced baseline. Use for questions like 'what if Acme Corp pays 30 days late' or 'what happens if I lose my biggest client'. Client identity is matched against the Income tab's tag/source/description fields — best effort, not a guaranteed match.

NameTypeReqDescription
clientNamestringyesThe client's name as it appears on invoices or income rows
modestringyes'late30' = shift open invoices 30 days late; 'gone' = client stops paying entirely
NameTypeReqDescription
dataobjectThe full what-if scenario: assumptions, evidence, and computed outcome.
messagestringScenario narrative; may be absent if the scenario carried no template or evidence.
successbooleanyes

No examples provided.

whatif_tax_setaside ~73

What should I set aside for taxes? Surfaces the same monthly tax set-aside estimate already computed for Safe Monthly Draw — wiring, not new math. Flat-rate estimate (default 30%) against trailing income minus recurring + variable spend. Use for 'how much should I set aside for taxes this month'.

Input schema present but exposes no named parameters.

NameTypeReqDescription
dataobjectThe full what-if scenario: assumptions, evidence, and computed outcome.
messagestringScenario narrative; may be absent if the scenario carried no template or evidence.
successbooleanyes

No examples provided.

Common questions

What is the ExpenseBot MCP server?

ExpenseBot is an MCP server listed in the public MCP registry as io.github.TotesMagotes/mcp-server-auth. Capture receipts, scan Gmail, analyze spending, and create reviewed reports from AI assistants. This page covers its npm package (@expensebot/mcp-server-auth).

Is the ExpenseBot MCP server safe to use?

ExpenseBot scores 79 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the ExpenseBot MCP server expose?

ExpenseBot exposes 60 tools: search_expenses, get_spending_summary, get_deep_analytics, create_report, list_reports, and 55 more. Their descriptions and schemas cost roughly 13,408 tokens of context every time the server is loaded.

Is the ExpenseBot MCP server still maintained?

ExpenseBot is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the ExpenseBot MCP server under?

ExpenseBot declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.