com.aurgus/aurgus
com.aurgus/aurgusaurgus.comstreamable-httpv1.0.0Scanned
Governed rebate & revenue close (ASC 606/705/842): explain, ingest, compute, trace to source.
38 tools: 1 can delete or cancel things, 1 do something that can't be undone, 32 change things and 4 only read.
- Reads private data · 1
- Reads text others write · 0
- Can send data out · 1
- 6 findings
Anlyon alternative
34 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
38 tools
Deletes or cancels 1Claude Code: deny
defunct_agreementRetire a WRONG agreement that has already accrued — reverse its postings, then archive it.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Retire a WRONG agreement that has already accrued — reverse its postings, then archive it. Voiding alone only stops FUTURE accruals; this UNWINDS what already accrued by appending a Reversal for every earning event (earned → $0, strictly append-only — the originals AND the reversals both stay on the ledger for audit), then voids the agreement. Call WITHOUT confirm first to DRY-RUN — it reports how many postings and how much $ will be reversed and warns if any was already settled (a clawback). Call again with confirm:true to apply. Refuses if the agreement is posted to the ERP (supersede it instead). Needs the agreement_id. Requires a connected Aurgus account.
Annotations the server declares
- title: Reverse postings & defunct a wrong agreement
- readOnlyHint: false
- destructiveHint: true
Can't be undone 1Claude Code: ask
export_workpapersDeliver the engagement workpapers — the certified figures and the open-items register on one page, from the hash-chained engagement file.Can send data out1 finding
Why it is in this group
- The description's first verb is "deliver": a word for sending, and what is sent cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- outboundThe description's first verb is "deliver": it sends or publishes something to other people.
Findings
- Warn
The server marks "export_workpapers" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false}; The description's first verb is "deliver": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Deliver the engagement workpapers — the certified figures and the open-items register on one page, from the hash-chained engagement file. Refuses until a principal has signed the close. This is the auditor-ready deliverable: what was concluded, and what could not be proven, together.
Annotations the server declares
- title: Deliver the workpapers
- readOnlyHint: true
- destructiveHint: false
Changes things 32Claude Code: ask
aurgusTHE one way to talk to Aurgus — the client's revenue-management controller.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it THE one way to talk to Aurgus — the client's revenue-management controller. For ANYTHING the user says to Aurgus (a greeting, 'close Q3', 'where are we', 'what do you need from me'), call THIS with their message rather than picking a specific tool; Aurgus reads the engagement's real state, leads like a firm, and tells you the single next step. Pass entity/period/program when the user has named them (so Aurgus can open the engagement), and engagement_id once one is open. The specialized tools (ingest, compute_close, sign_close, …) are the controller's hands — reach for one only when Aurgus's reply tells you to (e.g. to ingest a CSV, compute with numbers, or sign). Free to greet; a real run on the user's data needs a connected account.
Annotations the server declares
- title: Talk to Aurgus
- readOnlyHint: false
- destructiveHint: false
beginCall this the moment the user greets Aurgus or wants to start — 'Aurgus, hi', 'hello', 'hey Aurgus', 'let's start', 'I want to run a close', 'where do I begin'.1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "begin" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false}; The description's first verb is "call": a word for a change.
Description, as the server wrote it Call this the moment the user greets Aurgus or wants to start — 'Aurgus, hi', 'hello', 'hey Aurgus', 'let's start', 'I want to run a close', 'where do I begin'. Aurgus introduces itself as the client's independent revenue-management controller and LEADS into the engagement, asking who the client is, the period, and what's being closed. Free, no account needed, computes nothing — the next step is open_engagement.
Annotations the server declares
- title: Say hello / begin
- readOnlyHint: true
- destructiveHint: false
close_agreementClose an agreement for good — the terminal true-up at the END of its life (its term ended, or it's being wound down).No findings
Why it is in this group
- The name "close_agreement" says "close": a word for a change.
Description, as the server wrote it Close an agreement for good — the terminal true-up at the END of its life (its term ended, or it's being wound down). Closing posts a final true-up Adjustment that matches the accrual to the settled amount (open → $0), THEN FREEZES the agreement: it moves to 'closed' and NO new transactions ever calculate against it again. This is NOT the periodic run (compute_close) or the periodic payout (settlement) — it ends the agreement. Because it MOVES MONEY (the true-up Adjustment), call WITHOUT confirm first to DRY-RUN — it reports the adjustment that would post and that the agreement will be frozen. Call again with confirm:true to post it and close. Terminal. Needs the agreement_id. Requires a connected Aurgus account.
Annotations the server declares
- title: Close an agreement (terminal)
- readOnlyHint: false
- destructiveHint: false
compose_agreementBuild a rebate/incentive agreement by talking it through — no document needed.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Build a rebate/incentive agreement by talking it through — no document needed. Describe the program in plain words and Aurgus DRAFTS the terms (who qualifies, how volume is measured and over what period, the threshold, the rate or per-unit reward, any cap, and approval routing) and asks the consultant-style questions a controller would ask before assuming. IMPORTANT: these terms are DRAFTED by the model from your words — they are PROPOSED, NOT PARSED, and nothing is created. When the terms are right, call again with finalize=true and the reviewed proposal, and Aurgus stages it for a person with approval authority to approve in the browser (you can NOT approve your own). This is how you establish an agreement (ASC 606 step 1) when you have no document — before any transaction data is asked for. When a document exists, prefer ingest_agreement (its deterministic parser touches the numbers with zero LLM).
Annotations the server declares
- title: Draft an agreement in conversation
- readOnlyHint: false
- destructiveHint: false
compute_closeThe RUN step (step 6) of an open engagement — work the governed, deterministic earned → settled → open accrual across the engagement's active agreements and certified data.No findings
Why it is in this group
- The name "compute_close" says "close": a word for a change.
Description, as the server wrote it The RUN step (step 6) of an open engagement — work the governed, deterministic earned → settled → open accrual across the engagement's active agreements and certified data. Do NOT call this as the first thing when a user says 'compute the close': a firm opens the engagement first (open_engagement), establishes the agreement, requests + certifies the data, and only then runs. If no engagement is open, this refuses and leads back to open_engagement. You get back the number, how earned / claimed / credited line up, and any flag worth raising. Nothing posts to the GL; the number is prepared for approval. Requires a connected Aurgus account.
Annotations the server declares
- title: Run a governed close
- readOnlyHint: false
- destructiveHint: false
compute_commissionCompute a sales-commission engagement under ASC 340-40 (incremental cost to obtain a contract).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Compute a sales-commission engagement under ASC 340-40 (incremental cost to obtain a contract). Give the commission amount, the benefit period it amortizes over, and how many months have elapsed; it classifies the cost, then capitalizes a recoverable commission and amortizes it straight-line — returning the capitalized asset, amortization to date, the period expense, and the net carrying amount. This is a capitalized asset and an amortization schedule, NOT revenue. It refuses (asks) if recoverability or the amount is unclear. The result is recorded on the engagement file; a principal signs before the workpapers are delivered.
Annotations the server declares
- title: Compute a commission (ASC 340-40)
- readOnlyHint: false
- destructiveHint: false
compute_leaseMeasure a lease under ASC 842 (v1: the lessee side — real estate and equipment).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Measure a lease under ASC 842 (v1: the lessee side — real estate and equipment). Give the term, the CERTIFIED discount rate (the rate implicit in the lease, or the incremental borrowing rate — it will NOT assume one), and the payment schedule; it measures the lease liability (present value of the payments), the right-of-use asset (liability + initial direct costs − incentives), and the amortization schedule — a single straight-line lease cost for an operating lease (842-20-25-6) or amortization + interest for a finance lease (842-20-25-5). Usage-based variable payments are excluded from the liability (842-10-30-6). Whatever it can't ground — a missing rate, an undetermined classification — it logs as an OPEN ITEM rather than guessing; lessor accounting is deferred. The result is recorded on the engagement file; a principal signs before the workpapers are delivered.
Annotations the server declares
- title: Measure a lease (ASC 842)
- readOnlyHint: false
- destructiveHint: false
compute_revenue_contractRun the full ASC 606 five-step recognition for a general revenue contract: identify the performance obligations (Step 2), allocate the transaction price by standalone selling price…No findings
Why it is in this group
- The description's first verb is "run": a word for a change.
Description, as the server wrote it Run the full ASC 606 five-step recognition for a general revenue contract: identify the performance obligations (Step 2), allocate the transaction price by standalone selling price (Step 4), and recognize over time or at a point in time (Step 5). Give the transaction price and the promised items (each with its standalone selling price). Whatever the engine can't determine from what you provide — distinctness, timing — it logs as an OPEN ITEM rather than guessing. The result is recorded on the engagement file; a principal signs before the workpapers are delivered.
Annotations the server declares
- title: Run the five-step recognition (ASC 606)
- readOnlyHint: false
- destructiveHint: false
compute_trade_spendSplit a trade-spend payment to a customer (co-op advertising, MDF, slotting, listing allowance) under ASC 606-10-32-26 / 705-20-25-2.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Split a trade-spend payment to a customer (co-op advertising, MDF, slotting, listing allowance) under ASC 606-10-32-26 / 705-20-25-2. If the payment buys a DISTINCT good or service the customer actually provides (e.g. advertising with proof-of-performance), it's a purchase/expense UP TO that good's fair value; any EXCESS over fair value reduces revenue. Give the payment amount, whether it buys a distinct good/service, and that good's fair value — it returns the expense leg and the revenue-reduction leg. It refuses (asks) for the fair value rather than guess; if it buys nothing distinct, the whole payment reduces revenue (no split). Nothing posts; a principal signs the close.
Annotations the server declares
- title: Split a trade-spend payment (ASC 606-10-32-26)
- readOnlyHint: true
- destructiveHint: false
confirm_groupingRecord the human's answer to a customer-grouping question Aurgus asked — a grouping compute_close PROPOSED ('GPG LLC resembles Global Procurement Group LLC', or 'these are the GPO'…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Record the human's answer to a customer-grouping question Aurgus asked — a grouping compute_close PROPOSED ('GPG LLC resembles Global Procurement Group LLC', or 'these are the GPO's members'), OR a change to a roster Aurgus already knows ('did anything change?' → a new member joined, or one left). Aurgus never changes a group on its own — this tool is the person's approval, and what makes Aurgus remember. Added names become DATE-CONTROLLED members of the agreement's customer scope so the NEXT close matches them automatically; removing a member ENDS its membership as-of a date (never deletes — its past purchases stay attributed, only later ones stop rolling up). Use ONLY after Aurgus surfaced the question and the user answered; pass the agreement_id and the name(s) exactly as they appear in the data. Set valid_from/valid_to for a real join/leave date (a GPO join, an acquisition, a rename, a member leaving); omit valid_from for open-ended. After confirming, run compute_close again to fold the change in.
Annotations the server declares
- title: Confirm a customer grouping
- readOnlyHint: false
- destructiveHint: false
connect_integrationConnect the client's ERP / POS / order system (or Zapier) to Aurgus by creating an API key for their account.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...the workspace. Because a key is a real credential, call WITHOUT confirm first to explain..."
Description, as the server wrote it Connect the client's ERP / POS / order system (or Zapier) to Aurgus by creating an API key for their account. This is how transactions flow IN automatically (no CSV uploads) and how Aurgus's journal entries flow OUT to their GL — through the Aurgus Open-API (/api/v1) that the key authenticates. The key carries DATA-INTAKE authorization ONLY: it can push transactions and read the journal/position, but it can NEVER run a close, settle, or move money — those stay human-gated in the workspace. Because a key is a real credential, call WITHOUT confirm first to explain what will be created and ask; the MOMENT the user says yes / 'create it' / 'go ahead', call again with confirm:true to actually create it — do NOT re-ask or re-confirm. NEVER ask the user for a label: it is optional, so omit it unless the user volunteered one in the same breath; they can rename the key later in Account. On creation the plaintext key is returned ONCE with the steps to finish in Zapier. The person can view or revoke keys anytime in Account → API keys. Use this when the user asks to connect their system, integrate their ERP/POS, or set up Zapier. Requires a connected Aurgus account.
Annotations the server declares
- title: Connect your ERP/POS — create an API key
- readOnlyHint: false
- destructiveHint: false
edit_agreementChange an agreement's TERMS — its name, the counterparty (customer_name), the direction (payable_sell_side = you pay a rebate / receivable_buy_side = you earn one), the validity wi…No findings
Why it is in this group
- The name "edit_agreement" says "edit": a word for a change.
Description, as the server wrote it Change an agreement's TERMS — its name, the counterparty (customer_name), the direction (payable_sell_side = you pay a rebate / receivable_buy_side = you earn one), the validity window (valid_from / valid_to, YYYY-MM-DD; pass valid_to:null for open-ended), or the accrual / settlement cadence. Send only the fields to change. This runs the SAME governed core as the workspace edit form (one implementation): activating is blocked if the config isn't ASC-606-conformant; a cadence/validity value must satisfy the agreement type's contract; direction and type are posting-locked once a document hits the ERP; and because a validity change re-evaluates already-accrued periods, it does NOT post money through you — it raises a gated Recalculate card the operator approves in the workspace (nothing is backdated without approval). To CHANGE RATES use edit_agreement_rates; to change STATUS use the audited status flow. Needs the agreement_id. Requires a connected Aurgus account.
Annotations the server declares
- title: Edit an agreement's terms
- readOnlyHint: false
- destructiveHint: false
edit_agreement_ratesChange the RATES on a rate-routed (dimension-routed) agreement — a regime's flat rate, a tiered regime's own ladder, or the shared tier ladder.No findings
Why it is in this group
- The name "edit_agreement_rates" says "edit": a word for a change.
Description, as the server wrote it Change the RATES on a rate-routed (dimension-routed) agreement — a regime's flat rate, a tiered regime's own ladder, or the shared tier ladder. Rates are given in PERCENT (1.5 = 1.5%); thresholds in dollars. Call WITHOUT confirm first to DRY-RUN: with no edits it LISTS the current regimes (their keys + rates) so you know what to change; with edits it echoes the intended change. Call again with confirm:true to apply. On apply the new rate goes live for future transactions immediately, and — because it moves money on already-accrued periods — a gated Recalculate card is raised that the operator approves in the workspace (the past-period adjustment posts only on approval; nothing is backdated through you). Structure (routing dimension, regime keys, member values) is NOT editable here — only rates. Refuses if posted to the ERP (supersede instead). Needs the agreement_id. Requires a connected Aurgus account.
Annotations the server declares
- title: Edit a rate-routed agreement's rates
- readOnlyHint: false
- destructiveHint: false
exportPut together the auditor-ready package for your tenant: the open accrual you can stand behind (earned → settled → open), where margin is leaking versus what's sitting outside any p…1 finding
Why it is in this group
- The description's first verb is "put": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "export" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false}; The description's first verb is "put": a word for a change.
Description, as the server wrote it Put together the auditor-ready package for your tenant: the open accrual you can stand behind (earned → settled → open), where margin is leaking versus what's sitting outside any program, and sample lineage tracing back to source — all computed off the canonical ledger. Requires a connected Aurgus account.
Annotations the server declares
- title: Auditor-ready deliverable
- readOnlyHint: true
- destructiveHint: false
helpCall this when the user asks for help or how to use Aurgus — 'Aurgus help', 'help', 'what can you do', 'how do I use this', 'show me the manual', 'what are the commands / trigger w…1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "help" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false}; The description's first verb is "call": a word for a change.
Description, as the server wrote it Call this when the user asks for help or how to use Aurgus — 'Aurgus help', 'help', 'what can you do', 'how do I use this', 'show me the manual', 'what are the commands / trigger words'. Returns the Aurgus manual: what it is, how an engagement runs step by step, the trigger phrases that fire each tool, and how to start. Free, no account needed.
Annotations the server declares
- title: Help / manual
- readOnlyHint: true
- destructiveHint: false
ingestHand Aurgus one of your three rebate files (CSV) to read into your tenant: 'pos' (your POS / sell-through extract — what was earned), 'claims' (the claims you submitted), or 'credi…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Hand Aurgus one of your three rebate files (CSV) to read into your tenant: 'pos' (your POS / sell-through extract — what was earned), 'claims' (the claims you submitted), or 'credits' (credit memos / vendor invoices you received). Give it the raw CSV, which kind of file it is, and a note of which of your columns maps to which Aurgus field. Rows with blank or bad amounts are held and reported back to you — never quietly booked as $0 — and nothing touches your numbers until a person certifies the mapping. Requires a connected Aurgus account.
Annotations the server declares
- title: Ingest your rebate extract
- readOnlyHint: false
- destructiveHint: false
ingest_agreementHand Aurgus your rebate agreement — PASTE its text, or DROP a PDF/scanned document (pass it as file_base64).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Hand Aurgus your rebate agreement — PASTE its text, or DROP a PDF/scanned document (pass it as file_base64). Aurgus reads the terms with its deterministic parser (and CV/OCR for a PDF/scan — a Python CPU service, ZERO LLM): customer, basis (whole-volume / incremental / cliff), rate or tier ladder, and the rebate period. A CPU parser proposes spans, deterministic rules produce every value, and anything it can't read cleanly is flagged for your eye rather than guessed. Nothing is created until a person reviews and certifies the terms in the browser — this is how the agreement (and the ASC 606 treatment it implies) gets set up, before any transaction data is asked for.
Annotations the server declares
- title: Read your rebate agreement
- readOnlyHint: false
- destructiveHint: false
open_engagementOpen a revenue-management engagement for a client.No findings
Why it is in this group
- The name "open_engagement" says "open": a word for a change.
Description, as the server wrote it Open a revenue-management engagement for a client. Capture the intake — the client entity, the period, the program(s), the sources of truth, and who will certify — and start the engagement file (a hash-chained, append-only record of everything that follows). This is how a firm begins: a named client and a scope, before any numbers. The agreement comes next; nothing is computed here.
Annotations the server declares
- title: Open an engagement
- readOnlyHint: false
- destructiveHint: false
open_itemsThe engagement's open-items register — the things the close can't yet account for (a document not received, a term not found in the agreement, an unmatched figure).No findings
Why it is in this group
- The name "open_items" says "open": a word for a change.
Description, as the server wrote it The engagement's open-items register — the things the close can't yet account for (a document not received, a term not found in the agreement, an unmatched figure). List them, open a new one, or resolve one by id. The register ships alongside the certified figures; no gap is ever filled on the client's behalf, and the close cannot be signed while any item remains open.
Annotations the server declares
- title: Open-items register
- readOnlyHint: false
- destructiveHint: false
recalculateRecalculate — re-run the deterministic engine over the POS data, dispatching every row against the agreement(s) so rows that just became eligible (e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Recalculate — re-run the deterministic engine over the POS data, dispatching every row against the agreement(s) so rows that just became eligible (e.g. after a data fix or a rule change) accrue. Posts provisional accruals (the same engine compute_close uses); rows that already have a positive accrual are skipped (idempotent). Pass agreement_id to recompute ONE agreement, or omit it to recompute ALL active agreements. Returns the events created and the accrual total. Requires a connected Aurgus account.
Annotations the server declares
- title: Recalculate — re-run the engine over the data
- readOnlyHint: false
- destructiveHint: false
receive_documentReceive a client document into an engagement BY REFERENCE — a client-granted signed https link (or an upload handle), never the file's contents.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Receive a client document into an engagement BY REFERENCE — a client-granted signed https link (or an upload handle), never the file's contents. The engine fetches it server-side, stages it inside the client's tenant for certification, and tells you only the column names and where to certify the mapping — no row of the client's data ever passes through the model. Resolves the matching PBC open item. This is how the data gets in without it ever touching the model: 'no LLM on the money path' stays literally true.
Annotations the server declares
- title: Receive a client document
- readOnlyHint: false
- destructiveHint: false
release_notesWhat's new in Aurgus and how to stress-test it — call this for 'what changed', 'release notes', 'what's new', 'changelog', or if you're reviewing/pressure-testing the product.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it What's new in Aurgus and how to stress-test it — call this for 'what changed', 'release notes', 'what's new', 'changelog', or if you're reviewing/pressure-testing the product. Returns the current release summary (reuse-first institutional knowledge, document/PDF intake, the anti-hallucination guards, ASC coverage) plus a concrete test checklist. Free, no account needed, reads nothing from any tenant.
Annotations the server declares
- title: Release notes / what's new
- readOnlyHint: true
- destructiveHint: false
reportThe portfolio report — every active agreement on the tenant (or one, by id), with its earned / settled / open accrual, basis, status, and when it last calculated.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it The portfolio report — every active agreement on the tenant (or one, by id), with its earned / settled / open accrual, basis, status, and when it last calculated. This is the book-at-a-glance a controller watches: which agreements are live, what each has earned vs paid out, and what is open. Pass agreement_id for a single agreement, or status to filter the list (active / draft / closed / superseded). Read-only — it computes nothing new, it reports the canonical ledger. Requires a connected Aurgus account.
Annotations the server declares
- title: Portfolio report
- readOnlyHint: true
- destructiveHint: false
request_documentsDraft the PBC (prepared-by-client) document list for an engagement, FROM its agreement — the program decides which files the close needs (a sell-side rebate → the POS / sell-throug…No findings
Why it is in this group
- The name "request_documents" says "request": a word for a change.
Description, as the server wrote it Draft the PBC (prepared-by-client) document list for an engagement, FROM its agreement — the program decides which files the close needs (a sell-side rebate → the POS / sell-through extract; a buy-side billback → the claims file), never a generic ask. Each requested document is logged as an open item; the close can't be signed until every one is received, mapped and certified. Needs an active agreement first (the agreement is the rulebook).
Annotations the server declares
- title: Draft the PBC document list
- readOnlyHint: false
- destructiveHint: false
request_real_runGet the link to run a real close on your OWN numbers — bring a rebate / SPA / deduction extract and get back audit-defensible accruals, full lineage, and an auditor-ready export, w…No findings
Why it is in this group
- The name "request_real_run" says "request": a word for a change.
Description, as the server wrote it Get the link to run a real close on your OWN numbers — bring a rebate / SPA / deduction extract and get back audit-defensible accruals, full lineage, and an auditor-ready export, with nothing posted to your GL. Use this when the user is ready to move from a sample to their own data. Optionally takes a work email to set up access — only what the user volunteers, and never ask for financial data inside the chat.
Annotations the server declares
- title: Run on your own numbers (get access)
- readOnlyHint: false
- destructiveHint: false
run_reportRe-run a SAVED analytics report by name on current data — returns the grouped rows + total, governed and read-only exactly like `analyze`.1 finding
Why it is in this group
- The name "run_report" says "run": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "run_report" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false}; The name "run_report" says "run": a word for a change.
Description, as the server wrote it Re-run a SAVED analytics report by name on current data — returns the grouped rows + total, governed and read-only exactly like `analyze`. Requires a connected Aurgus account.
Annotations the server declares
- title: Run a saved report
- readOnlyHint: true
- destructiveHint: false
save_reportSave an analytics report for reuse.No findings
Why it is in this group
- The name "save_report" says "save": a word for a change.
Description, as the server wrote it Save an analytics report for reuse. Give it a NAME plus the same measure / group_by (/ dimension_key / agreement_id) you'd pass to `analyze` — the governed spec is stored under that name (re-saving the same name updates it). Later, `run_report` re-runs it on current data. Requires a connected Aurgus account.
Annotations the server declares
- title: Save an analytics report
- readOnlyHint: false
- destructiveHint: false
set_cadenceSet how often an agreement ACCRUES and SETTLES.No findings
Why it is in this group
- The name "set_cadence" says "set": a word for a change.
Description, as the server wrote it Set how often an agreement ACCRUES and SETTLES. Ask the user these when setting an agreement up (or to change them later): (1) how often to accrue — 'realtime' as sales land, or batched 'daily' / 'weekly' / 'monthly' / 'per_event'; (2) how often it settles — when the money actually hits their account — 'weekly', 'semi_monthly', 'monthly', 'quarterly', 'semi_annual', 'annual', 'threshold' (when a dollar threshold is hit), or 'ad_hoc'. Pass the agreement_id and whichever cadence(s) the user chose; you can set one or both. Requires a connected Aurgus account.
Annotations the server declares
- title: Set accrual / settlement cadence
- readOnlyHint: false
- destructiveHint: false
settleSettle an agreement — post the PAYOUT.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Settle an agreement — post the PAYOUT. Creates per-bucket Settlement event(s) totalling the open accrual (earned − already settled), moving the open balance to $0. This is the money-OUT step (distinct from compute_close, which accrues, and true_up, which reconciles the accrual to a prior settlement). Call WITHOUT confirm to DRY-RUN — it reports the open accrual that would be paid and any gate that blocks it (a named settlement approver, an incomplete agreement, or an anomaly hold). Call again with confirm:true to post it. Governed by the SAME gates as the workspace Settle button (one core). Needs the agreement_id. Requires a connected Aurgus account.
Annotations the server declares
- title: Settle — pay out the open accrual
- readOnlyHint: false
- destructiveHint: false
sign_closeA principal signs the governed close for an engagement, by name, on the engagement file.No findings
Why it is in this group
- The name "sign_close" says "close": a word for a change.
Description, as the server wrote it A principal signs the governed close for an engagement, by name, on the engagement file. It refuses while any open item remains — the open-items register gates the signature — and a close must have been computed. You cannot sign on the client's behalf; the person signs. Signing is what releases the workpapers.
Annotations the server declares
- title: Sign the close (principal)
- readOnlyHint: false
- destructiveHint: false
traceWalk any accrued figure all the way back to where it came from — source row → eligibility → bucket → rate → rule → event chain — for a given transaction.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Walk any accrued figure all the way back to where it came from — source row → eligibility → bucket → rate → rule → event chain — for a given transaction. This is how you show an auditor exactly why a number is what it is. Requires a connected Aurgus account.
Annotations the server declares
- title: Trace a figure to its lineage
- readOnlyHint: true
- destructiveHint: false
true_upTrue-up an agreement — AFTER a settlement, match the accrual account to what was ACTUALLY settled.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it True-up an agreement — AFTER a settlement, match the accrual account to what was ACTUALLY settled. Posts ONE Adjustment (signed = settled − earned) in the CURRENT period so earned equals settled and the open balance nets to $0. Over-accrued → a negative Adjustment; under-accrued → a positive one. Always current-period, never backdated. Append-only and idempotent (a second run finds it already matched). Call WITHOUT confirm to DRY-RUN (shows the exact Adjustment and the before/after); call again with confirm:true to apply. This is also the first step of a close-out (close does the true-up then flags the agreement closed). Needs the agreement_id. Requires a connected Aurgus account.
Annotations the server declares
- title: True-up — match the accrual to the settled amount
- readOnlyHint: false
- destructiveHint: false
Only reads 4Show 4 read-only tools
analyzeBuild a GOVERNED analytics report over the rebate data.No findings
Why it is in this group
- The name "analyze" says "analyze": a word for reading.
Description, as the server wrote it Build a GOVERNED analytics report over the rebate data. Pick a MEASURE and GROUP it BY a dimension — the report is composed from a fixed semantic layer (no raw SQL), so it's deterministic, read-only, and ties to the ledger (accrued uses the SAME earned formula as the money path). measure: 'accrued' (earned rebate), 'settled' (paid), 'basis' (transaction amount), or 'count' (events). group_by: 'agreement', 'class' (a declared dimension — pass dimension_key, e.g. interchange_class), 'month', or 'quarter'. Optionally restrict to one agreement_id. Returns the grouped rows + total. Use this when the user asks to see/analyze/break down their rebates (e.g. 'rebate accrued by interchange class', 'settled by month'). Requires a connected Aurgus account.
Annotations the server declares
- title: Analytics — build a governed report
- readOnlyHint: true
- destructiveHint: false
engagement_statusReport where an engagement stands — derived from the engagement file's real events, not a stored status.Reads private dataNo findings
Why it is in this group
- The name "engagement_status" says "status": a word for reading.
What it can reach
- private-dataThe description's first sentence says "file": it reads files.
Description, as the server wrote it Report where an engagement stands — derived from the engagement file's real events, not a stored status. With an engagement id, it shows which steps are on the chain, what's next, and any open items (the close can't be signed while any remain). With no id, it lists the client's engagements and the firm's own status. If the file's hash chain fails re-verification it refuses to report rather than vouch for a tampered record.
Annotations the server declares
- title: Engagement status
- readOnlyHint: true
- destructiveHint: false
explainState the governed US-GAAP treatment FOR A PAYMENT TYPE — a rebate, incentive, chargeback, or trade-spend payment — under ASC 606 (customer rebate / consideration payable to a cust…No findings
Why it is in this group
- The name "explain" says "explain": a word for reading.
Description, as the server wrote it State the governed US-GAAP treatment FOR A PAYMENT TYPE — a rebate, incentive, chargeback, or trade-spend payment — under ASC 606 (customer rebate / consideration payable to a customer / variable consideration), ASC 705-20 (vendor rebate), or ASC 340-40 (sales commission). It CLASSIFIES the payment and returns the governed treatment, the exact ASC citation, and the rule applied — deterministic and grounded, it will not guess and asks which payment type applies when unclear. It is NOT a free-form accounting Q&A or advisory debate: it does not argue a position, weigh a contrary opinion, or answer open questions beyond the payment-type classification (the `scenario` text is context only). For anything past the treatment of a payment type, run the engagement (compose/ingest the agreement, then compute).
Annotations the server declares
- title: Explain a rebate / ASC treatment
- readOnlyHint: true
- destructiveHint: false
list_reportsList the saved analytics reports on this tenant (name + what each measures).No findings
Why it is in this group
- The name "list_reports" says "list": a word for reading.
Description, as the server wrote it List the saved analytics reports on this tenant (name + what each measures). Use `run_report` with a name to re-run one. Requires a connected Aurgus account.
Annotations the server declares
- title: List saved reports
- readOnlyHint: true
- destructiveHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged untrusted-input.
- Reads private data1
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write0
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out1
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
- Warnbegin
The server marks "begin" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false}; The description's first verb is "call": a word for a change.
- Warnhelp
The server marks "help" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false}; The description's first verb is "call": a word for a change.
The server marks "export_workpapers" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false}; The description's first verb is "deliver": a word for sending, and what is sent cannot be taken back.
- Warnrun_report
The server marks "run_report" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false}; The name "run_report" says "run": a word for a change.
- Warnexport
The server marks "export" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false}; The description's first verb is "put": a word for a change.
The description mentions "credential".
What this check looks forMatched text
description: "...the workspace. Because a key is a real credential, call WITHOUT confirm first to explain..."
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http aurgus https://mcp.aurgus.com/api/mcpclaude mcp add --transport http aurgus https://mcp.aurgus.com/api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__aurgus__explain",
"mcp__aurgus__engagement_status",
"mcp__aurgus__analyze",
"mcp__aurgus__list_reports"
],
"ask": [
"mcp__aurgus__begin",
"mcp__aurgus__help",
"mcp__aurgus__release_notes",
"mcp__aurgus__request_real_run",
"mcp__aurgus__aurgus",
"mcp__aurgus__open_engagement",
"mcp__aurgus__request_documents",
"mcp__aurgus__open_items",
"mcp__aurgus__receive_document",
"mcp__aurgus__compute_commission",
"mcp__aurgus__compute_revenue_contract",
"mcp__aurgus__compute_lease",
"mcp__aurgus__compute_trade_spend",
"mcp__aurgus__sign_close",
"mcp__aurgus__export_workpapers",
"mcp__aurgus__ingest_agreement",
"mcp__aurgus__compose_agreement",
"mcp__aurgus__ingest",
"mcp__aurgus__compute_close",
"mcp__aurgus__confirm_grouping",
"mcp__aurgus__report",
"mcp__aurgus__set_cadence",
"mcp__aurgus__close_agreement",
"mcp__aurgus__true_up",
"mcp__aurgus__edit_agreement_rates",
"mcp__aurgus__edit_agreement",
"mcp__aurgus__save_report",
"mcp__aurgus__run_report",
"mcp__aurgus__recalculate",
"mcp__aurgus__connect_integration",
"mcp__aurgus__settle",
"mcp__aurgus__trace",
"mcp__aurgus__export"
],
"deny": [
"mcp__aurgus__defunct_agreement"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as aurgus. Review it before you use it.
Capability tags behind 2 rules
- mcp__aurgus__engagement_status private-data
- mcp__aurgus__export_workpapers outbound
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/com.aurgus/aurgus/verify?hash=0690a09d7cf2c7e00ae376d97afabf72e10d917822a961faa2cb8b36bd084f41" | jq -e '.changed == false'Pinned hash 0690a09d7cf2, from Nov 1, 2026, 19:17 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/com.aurgus/aurgus/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/com.aurgus/aurgus)Source: MCP Registry. Synced Nov 1, 2026, 19:17 UTC.