io.github.theluckystrike/billing-docs-credit-notes-purchase-orders

by theluckystrike · remote · local (mcpb) · no sign-in to list tools · v0.22.6 · published by GitHub user theluckystrike

Credit notes against your invoices and purchase orders to suppliers, with VAT and A4 PDFs.

Deletes · 2Final · 7Changes · 6

Compare Registry entry

16 tools: 2 can delete or cancel things, 7 do something that can't be undone, 6 change things and 1 only read.

Scanned Oct 21, 2026

Deletes or cancels2Claude Code: deny: see these tools
Can't be undone7Claude Code: ask: see these tools
Changes things6Claude Code: ask: see these tools
Only reads1Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http billing-docs-credit-notes-purchase-orders https://mcp.zovo.one/mcp/billing-docs --header 'Authorization: <your-authorization>'

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warncredit_note_list
The server marks "credit_note_list" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "credit_note_list" says "list": a word for reading.
What this check looks for
Warncredit_note_get
The server marks "credit_note_get" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "credit_note_get" says "get": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

16 tools

Deletes or cancels 2Removes, cancels or revokes something.Claude Code: deny

credit_note_deleteRemove one credit note never posted to its invoice and never rendered, freeing that month's slot; the invoice becomes creditable again.No findings
Why it is in this group
- The name "credit_note_delete" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Remove one credit note never posted to its invoice and never rendered, freeing that month's slot; the invoice becomes creditable again. One with a dependent is refused: issue a fresh note to reverse a sent one.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
purchase_order_deleteRemove one purchase order with nothing received and never rendered, freeing that month's slot.No findings
Why it is in this group
- The name "purchase_order_delete" says "purchase": a word that usually means money moves, which cannot be taken back.
- The description's first verb is "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Remove one purchase order with nothing received and never rendered, freeing that month's slot. One with a receipt is refused, naming it. The PO number is never reissued. purchase_order_receive logs arrivals.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false

Can't be undone 7Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

billing_docs_reportOver a date range: what was credited back per currency and against how many invoices, what is still on order per currency, and every open order past its delivery date with days lat…No findings
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
Description, as the server wrote it
Over a date range: what was credited back per currency and against how many invoices, what is still on order per currency, and every open order past its delivery date with days late. Pro; the list tools are free.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_createRaise a purchase order to a supplier from items and return its PO number and totals.No findings
Why it is in this group
- The name "purchase_order_create" says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Raise a purchase order to a supplier from items and return its PO number and totals. unit_price is in MAJOR units; currency, VAT and the buyer block come from the shared profile. Free: 5 documents a calendar month.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_getReturn one purchase order in full by id or exact supplier name: buyer and supplier blocks, every line with unit price and VAT, totals, the delivery date, status and every receipt w…No findings
Why it is in this group
- The name "purchase_order_get" says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Return one purchase order in full by id or exact supplier name: buyer and supplier blocks, every line with unit price and VAT, totals, the delivery date, status and every receipt with its date and note.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_listList purchase orders newest first: id, supplier, order and expected delivery dates, status open, partially_received or received, currency, total and received date.No findings
Why it is in this group
- The name "purchase_order_list" says "purchase": a word that usually means money moves, which cannot be taken back.
- The input addresses people (input.to): what it sends cannot be taken back.
Description, as the server wrote it
List purchase orders newest first: id, supplier, order and expected delivery dates, status open, partially_received or received, currency, total and received date. Filter by status, supplier or date range.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_pdfCall this tool to render one purchase order as an A4 print-ready document and return a download link valid for one hour: the invoice layout titled PURCHASE ORDER, with the buyer an…No findings
Why it is in this group
- The name "purchase_order_pdf" says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Call this tool to render one purchase order as an A4 print-ready document and return a download link valid for one hour: the invoice layout titled PURCHASE ORDER, with the buyer and supplier. Pro.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_receiveRecord that an order arrived.No findings
Why it is in this group
- The name "purchase_order_receive" says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Record that an order arrived. partial keeps it open and can be repeated, each receipt kept with its date and note; a full receipt closes it. An order already received, or a date before the order date, is refused.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_textTurn a purchase order into a plain-text order to paste into an email: the line table, VAT lines, total, and a line asking the supplier to deliver by the date and quote the PO numbe…No findings
Why it is in this group
- The name "purchase_order_text" says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Turn a purchase order into a plain-text order to paste into an email: the line table, VAT lines, total, and a line asking the supplier to deliver by the date and quote the PO number. Also a .txt download link valid one hour. Free on every tier.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

credit_note_createCredit one invoice: the whole invoice, a GROSS amount_minor split over its VAT rates, or named lines.No findings
Why it is in this group
- The name "credit_note_create" says "create": a word for a change.
Description, as the server wrote it
Credit one invoice: the whole invoice, a GROSS amount_minor split over its VAT rates, or named lines. Amounts store negative, reusing the invoice's own rates. Free: 5 a month. Send it with credit_note_text.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
credit_note_getReturn one credit note in full by id or exact client name: every negated line, VAT lines, totals, the reason, and the invoice number and date it reverses.1 finding
Why it is in this group
- The name "credit_note_get" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "credit_note_get" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "credit_note_get" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Return one credit note in full by id or exact client name: every negated line, VAT lines, totals, the reason, and the invoice number and date it reverses. Reads only. Use credit_note_list for the ids.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
credit_note_listList credit notes newest first: id, invoice, client, basis, reason, currency and the NEGATIVE total, with the amount credited per currency.1 finding
Why it is in this group
- The name "credit_note_list" says "list": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "credit_note_list" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "credit_note_list" says "list": a word for reading.
  What this check looks for
Description, as the server wrote it
List credit notes newest first: id, invoice, client, basis, reason, currency and the NEGATIVE total, with the amount credited per currency. Filter by invoice, client or issue date range.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
credit_note_pdfCall this tool to render one credit note as an A4 print-ready document and return a download link valid for one hour: the invoice layout titled CREDIT NOTE, with the invoice it rev…No findings
Why it is in this group
- The description's first verb is "call": a word for a change.
Description, as the server wrote it
Call this tool to render one credit note as an A4 print-ready document and return a download link valid for one hour: the invoice layout titled CREDIT NOTE, with the invoice it reverses. Pro.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
credit_note_textTurn a credit note into a plain-text summary to paste into an email: the negated line table, VAT lines, total, reason, and what now comes off the invoice.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Turn a credit note into a plain-text summary to paste into an email: the negated line table, VAT lines, total, reason, and what now comes off the invoice. Also a .txt download link valid one hour. Free; credit_note_pdf writes the A4 document.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
license_activateTurn Pro on for this connection with key, an MCPL1.<payload>.<signature> issued at checkout for this server or the bundle.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Turn Pro on for this connection with key, an MCPL1.<payload>.<signature> issued at checkout for this server or the bundle. Data under your token stays; a wrong or expired key changes nothing. license_status confirms it.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false

Only reads 1Looks things up and changes nothing.Claude Code: allow

license_statusReport this endpoint's licence state for your token as JSON: the product, the tier free or pro, why it is not Pro, and the checkout URL.No findings
Why it is in this group
- The name "license_status" says "status": a word for reading.
Description, as the server wrote it
Report this endpoint's licence state for your token as JSON: the product, the tier free or pro, why it is not Pro, and the checkout URL. Call it to explain a free-tier refusal. No arguments, nothing changes.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.22.6. Values in angle brackets are yours to fill in.

claude mcp add --transport http billing-docs-credit-notes-purchase-orders https://mcp.zovo.one/mcp/billing-docs --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__billing-docs-credit-notes-purchase-orders__license_status"
    ],
    "ask": [
      "mcp__billing-docs-credit-notes-purchase-orders__credit_note_create",
      "mcp__billing-docs-credit-notes-purchase-orders__credit_note_list",
      "mcp__billing-docs-credit-notes-purchase-orders__credit_note_get",
      "mcp__billing-docs-credit-notes-purchase-orders__credit_note_pdf",
      "mcp__billing-docs-credit-notes-purchase-orders__credit_note_text",
      "mcp__billing-docs-credit-notes-purchase-orders__purchase_order_create",
      "mcp__billing-docs-credit-notes-purchase-orders__purchase_order_list",
      "mcp__billing-docs-credit-notes-purchase-orders__purchase_order_get",
      "mcp__billing-docs-credit-notes-purchase-orders__purchase_order_pdf",
      "mcp__billing-docs-credit-notes-purchase-orders__purchase_order_text",
      "mcp__billing-docs-credit-notes-purchase-orders__purchase_order_receive",
      "mcp__billing-docs-credit-notes-purchase-orders__billing_docs_report",
      "mcp__billing-docs-credit-notes-purchase-orders__license_activate"
    ],
    "deny": [
      "mcp__billing-docs-credit-notes-purchase-orders__credit_note_delete",
      "mcp__billing-docs-credit-notes-purchase-orders__purchase_order_delete"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as billing-docs-credit-notes-purchase-orders. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.theluckystrike/billing-docs-credit-notes-purchase-orders/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

15 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:50 UTC.

For agents: Markdown · JSON · report this listing