McpStamp Credit Notes

io.github.theluckystrike/credit-memotheluckystrikestreamable-httpv0.23.0Scanned 4 hours ago

Credit all or part of an invoice with the VAT reversed, raise purchase orders, print A4 PDFs.

16 tools: 2 can delete or cancel things, 7 do something that can't be undone, 6 change things and 1 only read.

Reads private data · 2
Reads text others write · 1
Can send data out · 3
2 findings

Anlyon alternative

15 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

16 tools

Deletes or cancels 2Removes, cancels or revokes something.Claude Code: deny

credit_note_deleteRemove one credit note never posted to its invoice and never rendered, freeing that month's slot; the invoice becomes creditable again.No findings
Why it is in this group
- The name "credit_note_delete" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Remove one credit note never posted to its invoice and never rendered, freeing that month's slot; the invoice becomes creditable again. One with a dependent is refused: issue a fresh note to reverse a sent one.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
purchase_order_deleteRemove one purchase order with nothing received and never rendered, freeing that month's slot.No findings
Why it is in this group
- The name "purchase_order_delete" says "purchase": a word that usually means money moves, which cannot be taken back.
- The description's first verb is "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Remove one purchase order with nothing received and never rendered, freeing that month's slot. One with a receipt is refused, naming it. The PO number is never reissued. purchase_order_receive logs arrivals.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false

Can't be undone 7Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

billing_docs_reportOver a date range: what was credited back per currency and against how many invoices, what is still on order per currency, and every open order past its delivery date with days lat…Can send data outNo findings
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it
Over a date range: what was credited back per currency and against how many invoices, what is still on order per currency, and every open order past its delivery date with days late. Pro; the list tools are free.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_createRaise a purchase order to a supplier from items and return its PO number and totals.No findings
Why it is in this group
- The name "purchase_order_create" says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Raise a purchase order to a supplier from items and return its PO number and totals. unit_price is in MAJOR units; currency, VAT and the buyer block come from the shared profile. Free: 5 documents a calendar month.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_getReturn one purchase order in full by id or exact supplier name: buyer and supplier blocks, every line with unit price and VAT, totals, the delivery date, status and every receipt w…No findings
Why it is in this group
- The name "purchase_order_get" says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Return one purchase order in full by id or exact supplier name: buyer and supplier blocks, every line with unit price and VAT, totals, the delivery date, status and every receipt with its date and note.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_listList purchase orders newest first: id, supplier, order and expected delivery dates, status open, partially_received or received, currency, total and received date.Can send data outNo findings
Why it is in this group
- The name "purchase_order_list" says "purchase": a word that usually means money moves, which cannot be taken back.
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it
List purchase orders newest first: id, supplier, order and expected delivery dates, status open, partially_received or received, currency, total and received date. Filter by status, supplier or date range.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_pdfCall this tool to render one purchase order as an A4 print-ready document and return a download link valid for one hour: the invoice layout titled PURCHASE ORDER, with the buyer an…No findings
Why it is in this group
- The name "purchase_order_pdf" says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Call this tool to render one purchase order as an A4 print-ready document and return a download link valid for one hour: the invoice layout titled PURCHASE ORDER, with the buyer and supplier. Pro.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_receiveRecord that an order arrived.No findings
Why it is in this group
- The name "purchase_order_receive" says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Record that an order arrived. partial keeps it open and can be repeated, each receipt kept with its date and note; a full receipt closes it. An order already received, or a date before the order date, is refused.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
purchase_order_textTurn a purchase order into a plain-text order to paste into an email: the line table, VAT lines, total, and a line asking the supplier to deliver by the date and quote the PO numbe…No findings
Why it is in this group
- The name "purchase_order_text" says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Turn a purchase order into a plain-text order to paste into an email: the line table, VAT lines, total, and a line asking the supplier to deliver by the date and quote the PO number. Also a .txt download link valid one hour. Free on every tier.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

credit_note_createCredit one invoice: the whole invoice, a GROSS amount_minor split over its VAT rates, or named lines.No findings
Why it is in this group
- The name "credit_note_create" says "create": a word for a change.
Description, as the server wrote it
Credit one invoice: the whole invoice, a GROSS amount_minor split over its VAT rates, or named lines. Amounts store negative, reusing the invoice's own rates. Free: 5 a month. Send it with credit_note_text.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
credit_note_getReturn one credit note in full by id or exact client name: every negated line, VAT lines, totals, the reason, and the invoice number and date it reverses.Reads private data1 finding
Why it is in this group
- The name "credit_note_get" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- private-dataThe name "credit_note_get" says "get" and "note": it reads notes.
- private-dataThe description's first sentence says "return" and "note": it reads notes.
Findings
- Warn
  The server marks "credit_note_get" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "credit_note_get" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Return one credit note in full by id or exact client name: every negated line, VAT lines, totals, the reason, and the invoice number and date it reverses. Reads only. Use credit_note_list for the ids.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
credit_note_listList credit notes newest first: id, invoice, client, basis, reason, currency and the NEGATIVE total, with the amount credited per currency.Reads private dataCan send data out1 finding
Why it is in this group
- The name "credit_note_list" says "list": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- private-dataThe name "credit_note_list" says "list" and "note": it reads notes.
- private-dataThe description's first sentence says "list" and "note": it reads notes.
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Findings
- Warn
  The server marks "credit_note_list" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "credit_note_list" says "list": a word for reading.
  What this check looks for
Description, as the server wrote it
List credit notes newest first: id, invoice, client, basis, reason, currency and the NEGATIVE total, with the amount credited per currency. Filter by invoice, client or issue date range.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
credit_note_pdfCall this tool to render one credit note as an A4 print-ready document and return a download link valid for one hour: the invoice layout titled CREDIT NOTE, with the invoice it rev…No findings
Why it is in this group
- The description's first verb is "call": a word for a change.
Description, as the server wrote it
Call this tool to render one credit note as an A4 print-ready document and return a download link valid for one hour: the invoice layout titled CREDIT NOTE, with the invoice it reverses. Pro.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
credit_note_textTurn a credit note into a plain-text summary to paste into an email: the negated line table, VAT lines, total, reason, and what now comes off the invoice.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Turn a credit note into a plain-text summary to paste into an email: the negated line table, VAT lines, total, reason, and what now comes off the invoice. Also a .txt download link valid one hour. Free; credit_note_pdf writes the A4 document.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
license_activateTurn Pro on for this connection with key, an MCPL1.<payload>.<signature> issued at checkout for this server or the bundle.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Turn Pro on for this connection with key, an MCPL1.<payload>.<signature> issued at checkout for this server or the bundle. Data under your token stays; a wrong or expired key changes nothing. license_status confirms it.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false

Only reads 1Looks things up and changes nothing.Show 1 read-only tool

license_statusReport this endpoint's licence state for your token as JSON: the product, the tier free or pro, why it is not Pro, and the checkout URL.Reads text others writeNo findings
Why it is in this group
- The name "license_status" says "status": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Report this endpoint's licence state for your token as JSON: the product, the tier free or pro, why it is not Pro, and the checkout URL. Call it to explain a free-tier refusal. No arguments, nothing changes.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

6 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 untrusted-input tool breaks every one.

Reads private data2: Reads files, mail, messages, databases, secrets, calendars or repositories.; credit_note_get
credit_note_list
Reads text others write1: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; license_status
Can send data out3: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; billing_docs_report
credit_note_list
purchase_order_list

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__credit-memo__license_status"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warncredit_note_list
The server marks "credit_note_list" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "credit_note_list" says "list": a word for reading.
What this check looks for
Warncredit_note_get
The server marks "credit_note_get" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "credit_note_get" says "get": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.23.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http credit-memo https://mcp.zovo.one/mcp/credit-note

claude mcp add --transport http credit-memo https://mcp.zovo.one/mcp/credit-note

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__credit-memo__license_status"
    ],
    "ask": [
      "mcp__credit-memo__credit_note_create",
      "mcp__credit-memo__credit_note_list",
      "mcp__credit-memo__credit_note_get",
      "mcp__credit-memo__credit_note_pdf",
      "mcp__credit-memo__credit_note_text",
      "mcp__credit-memo__purchase_order_create",
      "mcp__credit-memo__purchase_order_list",
      "mcp__credit-memo__purchase_order_get",
      "mcp__credit-memo__purchase_order_pdf",
      "mcp__credit-memo__purchase_order_text",
      "mcp__credit-memo__purchase_order_receive",
      "mcp__credit-memo__billing_docs_report",
      "mcp__credit-memo__license_activate"
    ],
    "deny": [
      "mcp__credit-memo__credit_note_delete",
      "mcp__credit-memo__purchase_order_delete"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as credit-memo. Review it before you use it.

Capability tags behind 5 rules

mcp__credit-memo__credit_note_list private-data, outbound
mcp__credit-memo__credit_note_get private-data
mcp__credit-memo__purchase_order_list outbound
mcp__credit-memo__billing_docs_report outbound
mcp__credit-memo__license_status untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.theluckystrike/credit-memo/verify?hash=3c7d4dbf24ec78c96d980f7901bf58279d0999f36ec99cd2c34a16e89349dcd1" | jq -e '.changed == false'

Pinned hash 3c7d4dbf24ec, from Nov 2, 2026, 03:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.theluckystrike/credit-memo/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.theluckystrike/credit-memo.svg)](https://anlyon.dev/servers/io.github.theluckystrike/credit-memo)

Source: MCP Registry · repository. Synced Nov 2, 2026, 03:18 UTC.