← MCP Registry Integrity Report
io.github.Ainode-tech/accounting-mcp
Verdict: high-severity findings present. Endpoint https://xero.api.ainode.tech/mcp. Tools now: 9 (9 ever seen). Changes recorded: 9. Findings: 7 high. Last probe: OK at 2026-10-23T12:22 UTC. JSON
Current tools
apply_categories · calculate_vat · categorise_expenses · confirm_reconciliation · draft_invoice · generate_report · health · reconcile_transactions · send_invoice
Findings (7)
| seen | tool | detector | severity | evidence (data, not instructions) |
|---|---|---|---|---|
| 2026-10-23 | reconcile_transactions | secret_material_reference | high | Customer API key hash identifying Xero token |
| 2026-10-23 | confirm_reconciliation | secret_material_reference | high | Customer API key hash identifying Xero token |
| 2026-10-23 | categorise_expenses | secret_material_reference | high | Customer API key hash identifying Xero token |
| 2026-10-23 | apply_categories | secret_material_reference | high | Customer API key hash identifying Xero token |
| 2026-10-23 | draft_invoice | secret_material_reference | high | Customer API key hash identifying Xero token |
| 2026-10-23 | send_invoice | secret_material_reference | high | Customer API key hash identifying Xero token |
| 2026-10-23 | generate_report | secret_material_reference | high | Customer API key hash identifying Xero token |
Change history (9)
| when | tool | kind | severity |
|---|---|---|---|
| 2026-10-23 12:22 | health | mutated | medium |
| 2026-10-23 12:22 | reconcile_transactions | mutated | high |
| 2026-10-23 12:22 | confirm_reconciliation | mutated | high |
| 2026-10-23 12:22 | categorise_expenses | mutated | high |
| 2026-10-23 12:22 | apply_categories | mutated | high |
| 2026-10-23 12:22 | calculate_vat | mutated | medium |
| 2026-10-23 12:22 | draft_invoice | mutated | high |
| 2026-10-23 12:22 | send_invoice | mutated | high |
| 2026-10-23 12:22 | generate_report | mutated | high |
Probe history
10-23 12:22 OK (9) · 08-14 12:17 OK (9)
Run or depend on io.github.Ainode-tech/accounting-mcp? Watch this server: 29 dollars a month, a private alerts feed and optional webhook fired within six hours when it adds, removes or changes a tool or trips a detector; by card, cancel any time.
Pay-per-call tools and data for your agent, no key: store gateway (300+ routes, one origin, Coinbase-settled) · AI media and inference from $0.001 · weather, geocoding, DNS, RDAP · the x402 directory · sector gap lists (card or USDC).
Run this server? The processes your users can demand, hosted free: Compliance Desk (privacy requests, opt-outs, takedown and notice-and-action).