Server data from the Official MCP Registry
TaxSort — Tollbooth-monetized MCP server for personal tax transaction classification
TaxSort — Tollbooth-monetized MCP server for personal tax transaction classification
Remote endpoints: streamable-http: https://taxsort-mcp.fastmcp.app/mcp
TaxSort is a Tollbooth-monetized MCP server for tax transaction classification with reasonable architecture but several security concerns. The server exposes sensitive credentials (Anthropic API key, GitHub token) directly to the frontend via tool endpoints, lacks input validation on CSV imports and rule patterns, and stores user credentials in what appears to be a shared vault. Additionally, passphrase-based session unlock via Nostr DMs is cryptographically weak compared to the MCP's capabilities. These issues require user awareness and operational discipline to mitigate. Supply chain analysis found 13 known vulnerabilities in dependencies (1 critical, 5 high severity).
5 files analyzed · 22 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
From the project's GitHub README.
MCP server for personal tax transaction classification (US Schedule A & C). Built on FastMCP, monetized via Tollbooth DPYC™ Lightning micropayments.
Don't Pester Your Customer™ (DPYC™) — API monetization for Entrepreneurial Bitcoin Advocates
Inspired by The Phantom Tollbooth by Norton Juster, illustrated by Jules Feiffer (1961).
Import bank CSV exports (SoFi, Chase, Schwab, US Bank, PayPal, Coinbase), classify transactions into IRS tax categories using Claude AI, review and override classifications, generate tax summaries grouped by IRS line item, and track API usage costs.
All domain tools take proof: str for DPYC authentication.
| Tool | Description |
|---|---|
create_session | Create a tax session for a year |
list_sessions | List your sessions |
get_session | Session details + stats |
session_heartbeat | Presence heartbeat; returns who else is active in the session |
| Tool | Description |
|---|---|
verify_npub | Start npub verification via Secure Courier DM |
check_verification | Check if npub verification completed |
verify_passphrase | Verify a passphrase to unlock a timed-out session |
request_unlock | Request a session unlock after timeout |
check_unlock | Check if the unlock response is valid |
| Tool | Description |
|---|---|
import_csv | Import CSV — idempotent, preserves user edits |
get_import_stats | Import sources, date ranges, ambiguous counts |
| Tool | Description |
|---|---|
get_transactions | Filter by category, month, account, date range, search, unclassified-only |
get_transactions_paged | Server-side filtered, grouped, sorted, paginated transactions |
save_classifications | Bulk write classifications from the FE (JSON array) |
delete_classification | Remove a single classification, reverting to unclassified |
clear_transactions | Delete all transactions and classifications for a session |
delete_account_transactions | Delete all transactions for a specific imported account |
reset_classifications | Delete all classifications but keep the imported transactions |
get_amount_neighbors | Fetch transactions with the same amount within ±N days (duplicate detection) |
| Tool | Description |
|---|---|
get_accounts | List all accounts in a session with types and transaction counts |
set_account_type | Set an account's type: bank, card, investment, or loan |
| Tool | Description |
|---|---|
get_summary | Grouped spending totals by IRS line, category, month, account |
| Tool | Description |
|---|---|
get_rules | Get patron's classification rules |
save_rule | Create a description-pattern + optional amount-filter → subcategory rule |
delete_rule | Delete a rule by ID |
apply_rules | Re-apply all rules to unclassified transactions |
count_rule_matches | Live preview of how many transactions match a rule pattern |
| Tool | Description |
|---|---|
get_custom_categories | Get custom categories defined by this user |
save_custom_category | Add a custom category/subcategory |
delete_custom_category | Delete a custom category |
| Tool | Description |
|---|---|
create_share_token | Generate a token to share session with spouse |
load_share_token | Load a shared session via token |
| Tool | Description |
|---|---|
ask_advisor | Ask the Financial Advisor about using TaxSort |
ask_tax_researcher | Ask the Tax Code Researcher about IRS provisions |
| Tool | Description |
|---|---|
report_api_usage | Report Anthropic API usage from FE classification for cost tracking |
get_api_usage_stats | Get aggregated API usage statistics for cost analysis |
get_anthropic_key | Get the Anthropic API key for FE-driven classification |
get_github_token | Get the GitHub token for creating feedback issues |
create_feedback_issue | Create a GitHub issue for bug reports, feature requests, or feedback |
list_feedback_issues | List feedback issues submitted by this patron |
check_balance, purchase_credits, check_payment, check_price, service_status, request_credential_channel, receive_credentials, forget_credentials, how_to_join, about, lookup_member, network_advisory, get_tax_rate
get_transactions_paged performs filtering, grouping, sorting, and pagination entirely on the server. This is more efficient than fetching all transactions and processing client-side.
group_by: none, category, subcategory, account, monthgroup_sort: asc or desc (controls group ordering)sort_col + sort_dir: row ordering within each grouppage + page_size: zero-indexed paginationRules (save_rule, count_rule_matches) support compound filters with amount_operator and amount_value:
| Operator | Meaning |
|---|---|
lt | Less than (<-95 matches debits over $95) |
lte | Less than or equal |
gt | Greater than (gte 50 matches amounts $50+) |
gte | Greater than or equal |
eq | Exact match (!33 style negation not supported — use neq) |
neq | Not equal |
Examples: <-95 (debits exceeding $95), [0..10) (range via two rules), gte 50.
save_classifications — bulk write from the frontend. Accepts a JSON array of {id, category, subcategory, ...} objects. Used during AI classification and manual review.delete_classification — single revert. Removes one classification, returning the transaction to unclassified state.TOLLBOOTH_NOSTR_OPERATOR_NSEC. Neon database provisioned automatically by Authority. BTCPay and Anthropic API key delivered via Secure Courierpip install -e ".[dev]"
export TOLLBOOTH_NOSTR_OPERATOR_NSEC=nsec1...
python server.py
Schema migration runs automatically on startup.
TOLLBOOTH_NOSTR_OPERATOR_NSECregister_operator(npub=..., service_url=...){
"btcpay_host": "https://btcpay.example.com",
"btcpay_api_key": "...",
"btcpay_store_id": "...",
"anthropic_api_key": "sk-ant-..."
}
Part of the DPYC™ Social Contract — a network of monetized MCP services where AI agents pay for what they use via Bitcoin Lightning.
| Repo | What it does |
|---|---|
| tollbooth-dpyc | Shared Python SDK — vault, auth, pricing, Lightning, Nostr identity |
| dpyc-community | Governance registry — membership, advisories, threat model |
| dpyc-oracle | Community concierge — free onboarding and member lookup |
| tollbooth-authority | Certification backbone — Schnorr-signed certificates |
| tollbooth-sample | Sample Operator (canonical template) — weather stats reference |
| tollbooth-pricing-studio | iOS pricing-model editor / operator console |
| cypher-mcp | Monetized graph answers — named Cypher templates over Neo4j/AuraDB |
| schwab-mcp | Charles Schwab brokerage data — positions, quotes, options, orders |
| thebrain-mcp | TheBrain knowledge graph — thoughts, links, attachments |
| excalibur-mcp | X (Twitter) posting — social media automation with OAuth2 |
| optionality-mcp | Options analytics — brokerage-data operator |
| tollbooth-oauth2-collector | OAuth2 callback handler — advocate service |
| tollbooth-shortlinks | URL shortener utility |
Apache License 2.0. Copyright 2026 Lonnie VanZandt.
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.