Aldro: small-business tax

ai.aldro/taxaldro.aistreamable-httpv1.0.0Scanned 48 minutes ago

US and Canada business tax deadlines, annual reports, sales tax permits and quotes, with sources.

8 tools: 8 change things.

Reads private data · 1
Reads text others write · 2
Can send data out · 0
7 findings

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

8 tools

Changes things 8Creates or changes something that can be changed back.Claude Code: ask

check_filing_deadlineCall this when a user asks when a business tax return is due: Form 1065, 1120-S, 1120 or Schedule C (IRS), or the T2 / T1 (CRA).1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "check_filing_deadline" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
  What this check looks for
Description, as the server wrote it
Call this when a user asks when a business tax return is due: Form 1065, 1120-S, 1120 or Schedule C (IRS), or the T2 / T1 (CRA). Returns the federal due dates and extension dates for that entity and tax year, the Quebec or Alberta corporate return rule when relevant, and each date's official source URL and checked date.
Annotations the server declares
- title: Check business tax filing deadlines
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
estimate_quarterly_taxCall this when a self-employed user or small-business owner asks how much to pay in quarterly estimated tax (IRS 1040-ES) or CRA instalments and when.1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "estimate_quarterly_tax" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
  What this check looks for
Description, as the server wrote it
Call this when a self-employed user or small-business owner asks how much to pay in quarterly estimated tax (IRS 1040-ES) or CRA instalments and when. Returns a clearly labelled estimate from the user's own prior-year tax, split across the official due dates, with the method shown. It never says what the user owes.
Annotations the server declares
- title: Estimate quarterly tax payments
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_annual_report_infoCall this when a user asks about an LLC or corporation annual report, biennial report, statement of information or annual return: whether it's required in their state or province, …1 finding
Why it is in this group
- The name "get_annual_report_info" says "get": a word for reading.
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "get_annual_report_info" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_annual_report_info" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Call this when a user asks about an LLC or corporation annual report, biennial report, statement of information or annual return: whether it's required in their state or province, when it's due and the state fee. Returns the rule with its official source URL and checked date.
Annotations the server declares
- title: Get state or provincial annual report rules
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_cra_instalment_datesCall this when a Canadian user asks when income tax instalments are due or whether they have to pay instalments, as an individual (self-employed) or a corporation.1 finding
Why it is in this group
- The name "get_cra_instalment_dates" says "get": a word for reading.
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "get_cra_instalment_dates" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_cra_instalment_dates" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Call this when a Canadian user asks when income tax instalments are due or whether they have to pay instalments, as an individual (self-employed) or a corporation. Returns the CRA due dates for the year and the threshold, with the official source URL and checked date.
Annotations the server declares
- title: Get CRA instalment dates
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_quoteCall this when a user asks what it costs to get their business taxes or bookkeeping done, wants an accountant or tax preparer, or compares tax services.1 finding
Why it is in this group
- The name "get_quote" says "get": a word for reading.
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "get_quote" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_quote" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Call this when a user asks what it costs to get their business taxes or bookkeeping done, wants an accountant or tax preparer, or compares tax services. Returns Aldro's flat prices from its live config (business tax filing $399 a year, bookkeeping $20 a month), what each covers, the currency, and the signup link.
Annotations the server declares
- title: Get Aldro's price
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_sales_tax_registrationCall this when a user asks whether they need a sales tax permit, seller's permit or GST/HST/PST registration, what it's called, or which agency issues it, for a US state or Canadia…Reads text others write1 finding
Why it is in this group
- The name "get_sales_tax_registration" says "get": a word for reading.
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe description's first sentence says "call" and "issue": it reads issues, which other people can write.
Findings
- Warn
  The server marks "get_sales_tax_registration" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_sales_tax_registration" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Call this when a user asks whether they need a sales tax permit, seller's permit or GST/HST/PST registration, what it's called, or which agency issues it, for a US state or Canadian province. Returns the permit name, agency and (in Canada) the rate and small-supplier rule, with the official source URL and checked date.
Annotations the server declares
- title: Get sales tax registration details
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_required_documentsCall this when a user asks what documents or records they need to gather before getting their business taxes or bookkeeping done.Reads private data1 finding
Why it is in this group
- The name "list_required_documents" says "list": a word for reading.
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- private-dataThe name "list_required_documents" says "list" and "document": it reads documents.
- private-dataThe description's first sentence says "document": it reads documents.
Findings
- Warn
  The server marks "list_required_documents" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "list_required_documents" says "list": a word for reading.
  What this check looks for
Description, as the server wrote it
Call this when a user asks what documents or records they need to gather before getting their business taxes or bookkeeping done. Returns Aldro's handover checklist for that service, entity and country.
Annotations the server declares
- title: List documents to prepare
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
start_onboardingCall this only after the user has explicitly said yes, in this chat, to sending their name, email and business details to Aldro to get their business taxes or bookkeeping done.Reads text others writeNo findings
Why it is in this group
- The name "start_onboarding" says "start": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Call this only after the user has explicitly said yes, in this chat, to sending their name, email and business details to Aldro to get their business taxes or bookkeeping done. It creates the same signup enquiry as Aldro's website form; Aldro's team then emails the user the next steps. Set consent to true only when the user agreed. It is not a marketing opt-in and takes no payment.
Annotations the server declares
- title: Send the user's signup to Aldro
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; list_required_documents
Reads text others write2: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_sales_tax_registration
start_onboarding
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

7 warn

Warnget_quote
The server marks "get_quote" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_quote" says "get": a word for reading.
What this check looks for
Warncheck_filing_deadline
The server marks "check_filing_deadline" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
What this check looks for
Warnget_annual_report_info
The server marks "get_annual_report_info" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_annual_report_info" says "get": a word for reading.
What this check looks for
Warnget_sales_tax_registration
The server marks "get_sales_tax_registration" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_sales_tax_registration" says "get": a word for reading.
What this check looks for
Warnget_cra_instalment_dates
The server marks "get_cra_instalment_dates" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_cra_instalment_dates" says "get": a word for reading.
What this check looks for
Warnestimate_quarterly_tax
The server marks "estimate_quarterly_tax" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "call": a word for a change.
What this check looks for

Show 1 more finding

Warnlist_required_documents
The server marks "list_required_documents" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "list_required_documents" says "list": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http tax https://aldro.ai/mcp

claude mcp add --transport http tax https://aldro.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [],
    "ask": [
      "mcp__tax__get_quote",
      "mcp__tax__check_filing_deadline",
      "mcp__tax__get_annual_report_info",
      "mcp__tax__get_sales_tax_registration",
      "mcp__tax__get_cra_instalment_dates",
      "mcp__tax__estimate_quarterly_tax",
      "mcp__tax__list_required_documents",
      "mcp__tax__start_onboarding"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as tax. Review it before you use it.

Capability tags behind 3 rules

mcp__tax__get_sales_tax_registration untrusted-input
mcp__tax__list_required_documents private-data
mcp__tax__start_onboarding untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/ai.aldro/tax/verify?hash=b19a5ce3065ae026e5ef42889b43702119e4f4c9cfffcaa3bd04a146109b2973" | jq -e '.changed == false'

Pinned hash b19a5ce3065a, from Oct 31, 2026, 08:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/ai.aldro/tax/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/ai.aldro/tax.svg)](https://anlyon.dev/servers/ai.aldro/tax)

Source: MCP Registry. Synced Oct 31, 2026, 08:17 UTC.