earnrate

io.github.cwasley/earnratecwasleystreamable-httpv0.2.0Scanned 50 minutes ago

Which credit card earns the most at a merchant, from your cards or every card, and why.

16 tools: 5 can delete or cancel things, 2 do something that can't be undone, 5 change things and 4 only read.

Reads private data · 0
Reads text others write · 0
Can send data out · 3
1 finding

Anlyon alternative

12 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

16 tools

Deletes or cancels 5Removes, cancels or revokes something.Claude Code: deny

delete_walletDeletes the saved wallet now and for good, and signs out every app using it.No findings
Why it is in this group
- The name "delete_wallet" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Deletes the saved wallet now and for good, and signs out every app using it. Only when the user asks to delete it; confirm first, and offer export_wallet to keep a copy.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
import_walletReplaces the saved wallet with a wallet.yaml from the earnrate command line or earnrate.dev, when the user pastes or attaches one.No findings
Why it is in this group
- The name "import_wallet" says "import": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Replaces the saved wallet with a wallet.yaml from the earnrate command line or earnrate.dev, when the user pastes or attaches one. Wallet files only: never statements or card numbers. Confirm with the user first if they already have cards saved.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
remove_cardRemoves a card from the wallet, with its tracked cap usage and bonus progress.No findings
Why it is in this group
- The name "remove_card" says "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Removes a card from the wallet, with its tracked cap usage and bonus progress. Only when the user says they no longer have it or don't want it considered.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
set_membershipsSets the memberships that unlock some cards' rates, such as amazon-prime for Prime Visa's 5% or a Bank of America Preferred Rewards tier.No findings
Why it is in this group
- The name "set_memberships" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Sets the memberships that unlock some cards' rates, such as amazon-prime for Prime Visa's 5% or a Bank of America Preferred Rewards tier. Replaces the whole list, so include the ones to keep.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
update_cardChanges settings on a card already in the wallet: its category picks for this period, checkout label, anniversary or activated categories.No findings
Why it is in this group
- The name "update_card" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Changes settings on a card already in the wallet: its category picks for this period, checkout label, anniversary or activated categories. Picks for the current period are merged with the ones already saved. Use it when the user picks new categories, such as each quarter on U.S. Bank Cash+.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false

Can't be undone 2Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

best_card_for_purchaseWhich card earns the most rewards for a purchase, and why.Can send data out1 finding
Why it is in this group
- The name "best_card_for_purchase" says "purchase": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- outboundThe input takes a destination (input.channel): what the tool writes goes there.
Findings
- Warn
  The server marks "best_card_for_purchase" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "best_card_for_purchase" says "purchase": a word that usually means money moves, which cannot be taken back.
  What this check looks for
Description, as the server wrote it
Which card earns the most rewards for a purchase, and why. With no cards given and no saved wallet, it ranks every card earnrate knows (in `allCards`): a complete answer for anyone. With cards named in the conversation (`cards`) or a saved wallet, it picks the best of the user's own: `decision.cardId` is the pick and `decision.checkoutLabel` is how the card appears at checkout, with every usable card ranked with reasons, cards the merchant won't take, assumptions, warnings, and when a different point valuation would change the pick. Never needs or returns card numbers.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
record_purchaseRecords a purchase the user has already made, so spending caps and welcome-bonus progress stay accurate for future recommendations.Can send data outNo findings
Why it is in this group
- The name "record_purchase" says "purchase": a word that usually means money moves, which cannot be taken back.
What it can reach
- outboundThe input takes a destination (input.channel): what the tool writes goes there.
Description, as the server wrote it
Records a purchase the user has already made, so spending caps and welcome-bonus progress stay accurate for future recommendations. It updates the user's wallet file. Only call it after the purchase has happened, and only once per purchase: calling it twice counts the spend twice. Purchases with no cap and no open welcome bonus are acknowledged and nothing is written.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false

Changes things 5Creates or changes something that can be changed back.Claude Code: ask

add_cardAdds a card the user holds to their wallet by its id from search_cards, creating the wallet if there isn't one.No findings
Why it is in this group
- The name "add_card" says "add": a word for a change.
Description, as the server wrote it
Adds a card the user holds to their wallet by its id from search_cards, creating the wallet if there isn't one. The reply says what the card still needs (category picks, memberships, activations); ask the user about those. Stores only the card's product id and settings, never card numbers.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
best_cards_forRanks every card earnrate knows, not only the user's, for one purchase or category, each set up at its best (the right category pick, activated, cap unused), with its annual fee an…Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- outboundThe input takes a destination (input.channel): what the tool writes goes there.
Description, as the server wrote it
Ranks every card earnrate knows, not only the user's, for one purchase or category, each set up at its best (the right category pick, activated, cap unused), with its annual fee and what earning the rate takes. Use it for questions like "what's the best card for groceries?" or "which card should I get for Amazon?". It needs no wallet. For which of the user's own cards to use, call best_card_for_purchase instead. Mention the annual fee and any conditions alongside each card.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
cheat_sheetThe card to use for each everyday kind of purchase right now: groceries, dining, gas, Amazon, Costco, travel, streaming, drugstores and everything else.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
The card to use for each everyday kind of purchase right now: groceries, dining, gas, Amazon, Costco, travel, streaming, drugstores and everything else. With no cards given and no saved wallet, it picks from every card earnrate knows (`scope: all cards`, each row noting the card's fee and conditions). With cards named in the conversation or a saved wallet, it picks from the user's own cards, with caps, picks and activations as they are. For one specific store, call best_card_for_purchase instead. Pass on the notes.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
export_walletThe saved wallet as a wallet.yaml file the earnrate command line and earnrate.dev can import: card ids, picks, activations, memberships, cap usage and bonus progress.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
The saved wallet as a wallet.yaml file the earnrate command line and earnrate.dev can import: card ids, picks, activations, memberships, cap usage and bonus progress. Never card numbers.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
simulate_spendingSpends monthly amounts for a year across every card earnrate knows, and ranks single cards and two-card pairs by rewards minus annual fees.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Spends monthly amounts for a year across every card earnrate knows, and ranks single cards and two-card pairs by rewards minus annual fees. Spending is optional: without it, typical U.S. household amounts are used and the answer says so. With `cards` (named in the conversation) or compareToWallet (the saved wallet), it ranks the cards that would add the most to those cards instead. Use it for "which card fits my spending?" or "is it worth adding a card?". It leaves out welcome bonuses.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false

Only reads 4Looks things up and changes nothing.Show 4 read-only tools

compare_welcome_offersRanks the public welcome (sign-up) offers on cards the user doesn't have by first-year value: the bonus at the user's point values minus the first year's annual fee.No findings
Why it is in this group
- The name "compare_welcome_offers" says "compare": a word for reading.
Description, as the server wrote it
Ranks the public welcome (sign-up) offers on cards the user doesn't have by first-year value: the bonus at the user's point values minus the first year's annual fee. Use it when the user asks which new card to get or which has the best sign-up bonus. It covers only the cards earnrate knows, offers vary by person, and each offer's note gives the issuer's eligibility rules; pass those caveats on. It doesn't account for what a card would earn on the user's spending.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
list_walletLists the user's cards: checkout label, network, rewards currency and its value, spending caps with how much is left this period, chosen bonus categories (and whether they're curre…No findings
Why it is in this group
- The name "list_wallet" says "list": a word for reading.
Description, as the server wrote it
Lists the user's cards: checkout label, network, rewards currency and its value, spending caps with how much is left this period, chosen bonus categories (and whether they're current), welcome-bonus progress, which stores a store card works at, and when each card's data was last verified.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
resolve_merchantShows how earnrate identifies a merchant: its spend category, likely MCC, which card networks it takes, confidence, and whether that came from curated data, Claude, or nowhere.No findings
Why it is in this group
- The name "resolve_merchant" says "resolve": a word for reading.
Description, as the server wrote it
Shows how earnrate identifies a merchant: its spend category, likely MCC, which card networks it takes, confidence, and whether that came from curated data, Claude, or nowhere. Use it to explain or double-check a recommendation.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
search_cardsFinds credit cards in earnrate's catalog by name or issuer, e.g.No findings
Why it is in this group
- The name "search_cards" says "search": a word for reading.
Description, as the server wrote it
Finds credit cards in earnrate's catalog by name or issuer, e.g. "sapphire", "amex gold" or "bofa". Returns each card's id (for add_card), network, annual fee, whether it's already in the wallet, and what it needs set up: category picks and their options, memberships, activations. Leave the query out to list every card. US cards only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out3: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; best_card_for_purchase
best_cards_for
record_purchase

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnbest_card_for_purchase
The server marks "best_card_for_purchase" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "best_card_for_purchase" says "purchase": a word that usually means money moves, which cannot be taken back.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http earnrate https://mcp.earnrate.dev

claude mcp add --transport http earnrate https://mcp.earnrate.dev

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__earnrate__resolve_merchant",
      "mcp__earnrate__list_wallet",
      "mcp__earnrate__compare_welcome_offers",
      "mcp__earnrate__search_cards"
    ],
    "ask": [
      "mcp__earnrate__best_card_for_purchase",
      "mcp__earnrate__best_cards_for",
      "mcp__earnrate__simulate_spending",
      "mcp__earnrate__cheat_sheet",
      "mcp__earnrate__record_purchase",
      "mcp__earnrate__add_card",
      "mcp__earnrate__export_wallet"
    ],
    "deny": [
      "mcp__earnrate__update_card",
      "mcp__earnrate__remove_card",
      "mcp__earnrate__set_memberships",
      "mcp__earnrate__import_wallet",
      "mcp__earnrate__delete_wallet"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as earnrate. Review it before you use it.

Capability tags behind 3 rules

mcp__earnrate__best_card_for_purchase outbound
mcp__earnrate__best_cards_for outbound
mcp__earnrate__record_purchase outbound

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.cwasley/earnrate/verify?hash=1a1aacaebd601784434867f93e5b0f1b65a658eb679c6b4a556a99dd0d77e824" | jq -e '.changed == false'

Pinned hash 1a1aacaebd60, from Oct 31, 2026, 21:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.cwasley/earnrate/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.cwasley/earnrate.svg)](https://anlyon.dev/servers/io.github.cwasley/earnrate)

Source: MCP Registry · repository. Synced Oct 31, 2026, 21:17 UTC.