Should my agent depend on the MCP server io.github.TotesMagotes/mcp-server-auth?

Verdict: allow — rich-solo — safe to depend on As of 2026-08-15T11:28:18Z: a dated observation with receipts, not a warranty.

ExpenseBot

io.github.TotesMagotes/mcp-server-auth

Capture receipts, scan Gmail, analyze spending, and create reviewed reports from AI assistants.

— the operator's own registry description reported

Publisher io.github.TotesMagotes · first seen 2026-08-12 · endpoint https://mcp.expensebot.ai/mcp

allow

verdict

rich-solo

cluster

ok_tools

answers

tools served

Dependency rating derived

allow — rich-solo — safe to depend on

Cluster rich-solo · distinctiveness 0.352 (moderate). Every figure is a percentile or class within the 11,094-server census — see the whole spectrum.

Reach — can an agent get to it?

answersalive_tools

latency200 ms

vs populationtypical

protocolcurrent

authopen

Use — can it use it?

tools54

vs populationhigh

capabilities1

harnessA

Trust — can it rely on it?

identitysolo

servers on its host1

verifiabilityunassessed

duplicate inventoryno

drift events0

answers trueno primary

🔏 Signed receipt rr_e6d07609f895f4b1c9637d7d · ed25519 · key rs-rcpt-2026-08 — this rating is tamper-evident; an agent gets the full signature from check_server and can verify it against the published key.

Tools last seen

add_cash_expense add_income add_income_from_csv add_income_from_file add_mileage_entry check_compliance check_feature check_tax_deductibility correct_expenses create_report export_report fetch fix_compliance get_accounting_integration_status get_accounting_push_status get_client_advance_balances get_credits_refunds get_deep_analytics get_expense_by_id get_expense_splits get_income_summary get_last_receipt_result get_mileage_summary get_monthly_books_review get_per_tag_pnl get_pnl get_recent_activity get_report_details get_scan_status get_spending_summary get_spreadsheet_url get_subscription_audit get_trip_suggestions group_expenses list_categories list_client_invoices list_income_categories list_reports list_tags parse_expense process_gmail_receipts scan_gmail scan_gmail_years search search_expenses search_knowledge send_report_to_accounting share_report submit_receipt trace_document update_expense whatif_afford whatif_client whatif_tax_setaside

Harness readiness observed

Can an agent's harness pick this tool and call it correctly? Graded on the three things an agent reads — name, description, typed parameters. Band A — an agent can pick and call these reliably.

legibility check	tools passing	ok
name is clear & specific	54/54	✓
has a description	54/54	✓
description is substantive	54/54	✓
parameters are typed	54/54	✓
parameters are described	42/54	42/54

54 of 54 tools graded · 54 with a captured input schema. RS-008, Tier-1 — no domain knowledge, applies to any tool. “Alive” is not the same as “usable”.

Truth checks observed

Not in the Tier-2 trade lane, or not yet checked. Tier-2 re-derives a server's answers against published primary sources — see truth checks.

Protocol conformance observed

2025-06-18

protocol version

—

session model

0.3.1-m3.6

server version expensebot-remote

Capabilities: tools

Drift

No confirmed drift on record. Baseline set 2026-08-14; changes appear here after human review.

History observed

Every probe we made, oldest → newest (2 shown, 2026-08-12 → 2026-08-14). Green answered · amber answered-but-walled · red no useful answer. A gap in our cadence is a gap in coverage, not evidence about the server.

changelog (2 events)

date	type	what changed
2026-08-14	inventory	tools 49 → 54
2026-08-12	outcome	first probe: ok_tools

raw probe records

probed (UTC)	outcome	http	ms	protocol
2026-08-14T19:59:17Z	ok_tools	200	200	2025-06-18
2026-08-12T05:34:30Z	ok_tools	200	134	2025-06-18

Watch or embed this verdict

Operators: put the live verdict in your README — it updates with every census, links back here, and is a dated observation, never a warranty:

[![Robin Saige verdict](https://robinsaige.com/badge/io.github.TotesMagotes/mcp-server-auth.svg)](https://robinsaige.com/s/io.github.TotesMagotes/mcp-server-auth)

Depend on it? Subscribe to its change feed — outcome changes and confirmed drift, no account needed. Building on it? The full dossier as JSON — verdict, rating, truth checks, history — stable enough to gate CI on.

← overview