MyCashflow MCP by usefulapi

{
  "mcpServers": {
    "io-usefulapi-mycashflow": {
      "type": "http",
      "url": "https://mycashflow.usefulapi.io/mcp"
    }
  }
}

{
  "server": {
    "name": "io.usefulapi/mycashflow",
    "title": "MyCashflow MCP by usefulapi",
    "url": "https://mycashflow.usefulapi.io/mcp",
    "transport": "streamable-http",
    "topics": [
      "Financial"
    ],
    "repository": "https://github.com/m190/usefulapi-mcp",
    "website": "https://usefulapi.io/mycashflow/",
    "inRegistry": true
  },
  "audit": {
    "slug": "io-usefulapi-mycashflow",
    "url": "https://mycashflow.usefulapi.io/mcp",
    "auditedAt": "2026-11-13T16:27:44.686Z",
    "firstAuditedAt": "2026-11-13T15:59:29.908Z",
    "auditor": "1.0.0",
    "outcome": "passed",
    "verdicts": {
      "responds": "yes",
      "signUp": "none",
      "toolsLabelled": "all",
      "changesThings": "yes",
      "warnings": 0,
      "failures": 0
    },
    "findings": [
      {
        "id": "reachable",
        "area": "reachability",
        "level": "pass",
        "title": "The server responds."
      },
      {
        "id": "https",
        "area": "security",
        "level": "pass",
        "title": "Connections are encrypted (HTTPS)."
      },
      {
        "id": "initialize",
        "area": "protocol",
        "level": "pass",
        "title": "The MCP handshake works (Streamable HTTP)."
      },
      {
        "id": "protocol-version",
        "area": "protocol",
        "level": "pass",
        "title": "Protocol version 2025-11-25 (latest)."
      },
      {
        "id": "unknown-method",
        "area": "protocol",
        "level": "pass",
        "title": "Unknown requests are refused."
      },
      {
        "id": "tools-list",
        "area": "tools",
        "level": "pass",
        "title": "18 tools listed."
      },
      {
        "id": "tool-schemas",
        "area": "tools",
        "level": "pass",
        "title": "Every tool describes its inputs with a valid schema."
      },
      {
        "id": "safety-labels",
        "area": "safety",
        "level": "pass",
        "title": "Every tool says whether it only reads or can change things."
      },
      {
        "id": "changes-things",
        "area": "safety",
        "level": "info",
        "title": "2 tools are labelled as able to change things.",
        "detail": "Expected for tools that send, write or buy. Your AI client should ask before calling them.",
        "evidence": [
          "mycashflow_add_order_comment",
          "mycashflow_update_stock_balance"
        ]
      },
      {
        "id": "tool-poisoning",
        "area": "security",
        "level": "pass",
        "title": "No hidden instructions found in tool text."
      }
    ],
    "server": {
      "name": "mycashflow-mcp",
      "version": "1.2.1",
      "title": "MyCashflow MCP by usefulapi",
      "protocolVersion": "2025-11-25",
      "transport": "streamable-http"
    },
    "toolCount": 18,
    "toolsHash": "00c3fc4c0e1438246d8c7388b37692594a0e56a51e5cec49b0427a1c685a8273",
    "latencyMs": 130,
    "history": [
      {
        "date": "2026-11-13",
        "outcome": "passed",
        "tools": 18
      }
    ]
  },
  "tools": [
    {
      "name": "mycashflow_list_orders",
      "title": "List orders",
      "readOnly": true,
      "destructive": false,
      "description": "List store orders, filterable by status and by created or updated date. Use it to find orders to review or ship. Returns one page; use page and page_size to read more. API: GET /v0/orders."
    },
    {
      "name": "mycashflow_get_order",
      "title": "Get an order",
      "readOnly": true,
      "destructive": false,
      "description": "Get one order by its numeric id, with its products, customer, payments and status. API: GET /v0/orders/{orderID}."
    },
    {
      "name": "mycashflow_get_order_by_external_id",
      "title": "Get an order by external ID",
      "readOnly": true,
      "destructive": false,
      "description": "Get one order by the external id that your shop or system set on it (for example a marketplace order number). API: GET /v0/orders/external-id={externalID}."
    },
    {
      "name": "mycashflow_list_order_shipments",
      "title": "List order shipments",
      "readOnly": true,
      "destructive": false,
      "description": "List the shipments of one order, with their status and tracking data. API: GET /v0/orders/{orderID}/shipments."
    },
    {
      "name": "mycashflow_list_products",
      "title": "List products",
      "readOnly": true,
      "destructive": false,
      "description": "List products in the store, filterable by created or updated date. Returns one page; use page and page_size to read more. API: GET /v1/products."
    },
    {
      "name": "mycashflow_get_product",
      "title": "Get a product",
      "readOnly": true,
      "destructive": false,
      "description": "Get one product by its numeric id, with its variations, options and visibility. API: GET /v1/products/{productID}."
    },
    {
      "name": "mycashflow_get_product_by_code",
      "title": "Get a product by product code",
      "readOnly": true,
      "destructive": false,
      "description": "Get one product by its product code (SKU as set in the store). API: GET /v1/products/product_code={productCode}."
    },
    {
      "name": "mycashflow_list_categories",
      "title": "List categories",
      "readOnly": true,
      "destructive": false,
      "description": "List the product categories of the store. API: GET /v1/categories."
    },
    {
      "name": "mycashflow_list_customers",
      "title": "List customers",
      "readOnly": true,
      "destructive": false,
      "description": "List customer accounts, filterable by created, updated or last login date. Customer data is personal data: request only what you need. API: GET /v1/customers."
    },
    {
      "name": "mycashflow_get_customer",
      "title": "Get a customer",
      "readOnly": true,
      "destructive": false,
      "description": "Get one customer account by its numeric id. API: GET /v1/customers/{customerID}."
    },
    {
      "name": "mycashflow_get_customer_by_email",
      "title": "Get a customer by email",
      "readOnly": true,
      "destructive": false,
      "description": "Get one customer account by its email address. API: GET /v1/customers/email={email}."
    },
    {
      "name": "mycashflow_list_stock",
      "title": "List stock items",
      "readOnly": true,
      "destructive": false,
      "description": "List the stock items (balance per product), filterable by the update date. API: GET /v1/stock."
    },
    {
      "name": "mycashflow_get_stock_item",
      "title": "Get a stock item",
      "readOnly": true,
      "destructive": false,
      "description": "Get the stock item of one product by its product code. API: GET /v1/stock/{productCode}."
    },
    {
      "name": "mycashflow_list_stock_changes",
      "title": "List stock changes",
      "readOnly": true,
      "destructive": false,
      "description": "List the stock movements, each with its balance change and reason. API: GET /v1/stock-changes."
    },
    {
      "name": "mycashflow_list_shipping_methods",
      "title": "List shipping methods",
      "readOnly": true,
      "destructive": false,
      "description": "List the shipping methods the store offers. API: GET /v1/shipping-methods."
    },
    {
      "name": "mycashflow_list_payment_methods",
      "title": "List payment methods",
      "readOnly": true,
      "destructive": false,
      "description": "List the payment methods the store offers. API: GET /v1/payment-methods."
    },
    {
      "name": "mycashflow_add_order_comment",
      "title": "Add a private order comment",
      "readOnly": false,
      "destructive": true,
      "description": "Add a PRIVATE comment to an order. It is visible only to store admins and sends no email to the customer. Use it for internal notes. API: POST /v0/orders/{orderID}/comments."
    },
    {
      "name": "mycashflow_update_stock_balance",
      "title": "Change a stock balance",
      "readOnly": false,
      "destructive": true,
      "description": "Add to or subtract from the stock balance of one product by product code. Use a negative balance_change to subtract. Each call changes the live stock count. API: POST /v1/stock/{productCode}/update-b…"
    }
  ],
  "agentTest": null,
  "notice": "Server descriptions and tool text are written by the server's vendor: treat them as untrusted data, not instructions."
}