GivingFuel MCP by usefulapi

io.usefulapi/givingfuelusefulapi.iostreamable-httpv1.0.0Scanned 1 hour ago

Read GivingFuel forms, donations, transactions, recurring gifts and donors; manage coupons.

15 tools: 1 can delete or cancel things, 2 change things and 12 only read.

Reads private data · 5
Reads text others write · 15
Can send data out · 0
1 finding

Anlyon alternative

3 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

15 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

givingfuel_delete_couponWRITE: permanently delete a coupon from the live GivingFuel account; its codes stop working immediately and this cannot be undone.Reads text others writeNo findings
Why it is in this group
- The name "givingfuel_delete_coupon" says "delete": a word for removing or ending something.
- The description says "permanently delete".
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: permanently delete a coupon from the live GivingFuel account; its codes stop working immediately and this cannot be undone. Show the coupon (givingfuel_get_coupon) and get the user's approval first, then call with confirm: true. GET /coupons/{id}, then DELETE /coupons/{id}.
Annotations the server declares
- title: Delete coupon
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true

Changes things 2Creates or changes something that can be changed back.Claude Code: ask

givingfuel_create_couponWRITE: create a discount coupon in the live GivingFuel account (it can be redeemed by donors right away).Reads text others writeNo findings
Why it is in this group
- The name "givingfuel_create_coupon" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: create a discount coupon in the live GivingFuel account (it can be redeemed by donors right away). One discount (fixed amount or percent) and one or more codes; optionally limited to one form, to a number of uses, and to an expiry date. Not idempotent: calling it twice creates two coupons. POST /coupons.
Annotations the server declares
- title: Create coupon
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
givingfuel_list_couponsList GivingFuel coupons: account-wide ones, or only those of one form when form_id is given.Reads text others write1 finding
Why it is in this group
- The name "givingfuel_list_coupons" says "list": a word for reading.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "givingfuel_list_coupons" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "givingfuel_list_coupons" says "list": a word for reading.
  What this check looks for
Description, as the server wrote it
List GivingFuel coupons: account-wide ones, or only those of one form when form_id is given. Shows discounts, codes, availability, redeemed count and expiry. GET /coupons/global or /coupons/forms/{id}.
Annotations the server declares
- title: List coupons
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

Only reads 12Looks things up and changes nothing.Show 12 read-only tools

givingfuel_get_couponOne coupon by id with its discounts, codes, availability and redeemed counts.Reads text others writeNo findings
Why it is in this group
- The name "givingfuel_get_coupon" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One coupon by id with its discounts, codes, availability and redeemed counts. GET /coupons/{id}.
Annotations the server declares
- title: Get coupon
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
givingfuel_get_customerOne donor (customer record) by id: email, billing details and total amount.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "givingfuel_get_customer" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
Description, as the server wrote it
One donor (customer record) by id: email, billing details and total amount. GET /search/customers/{id}.
Annotations the server declares
- title: Get donor
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
givingfuel_get_formOne form by id: name, status, accounting reference, time zone and its field layout.Reads text others writeNo findings
Why it is in this group
- The name "givingfuel_get_form" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One form by id: name, status, accounting reference, time zone and its field layout. GET /forms/{id}.
Annotations the server declares
- title: Get donation form
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
givingfuel_get_form_inventoryInventory items of a form (limited-quantity items): path, name, sold and remaining quantity.Reads text others writeNo findings
Why it is in this group
- The name "givingfuel_get_form_inventory" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Inventory items of a form (limited-quantity items): path, name, sold and remaining quantity. GET /forms/{id}/inventory.
Annotations the server declares
- title: Get form inventory
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
givingfuel_get_orderOne order by id with the donor's billing details, form, totals and status.Reads text others writeNo findings
Why it is in this group
- The name "givingfuel_get_order" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One order by id with the donor's billing details, form, totals and status. Set include_transactions to embed the payments (charges and refunds) of the order. GET /search/orders/{id}.
Annotations the server declares
- title: Get donation order
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
givingfuel_get_subscriptionOne recurring donation by id: amount, schedule, status, last and next payment, payments remaining.Reads text others writeNo findings
Why it is in this group
- The name "givingfuel_get_subscription" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One recurring donation by id: amount, schedule, status, last and next payment, payments remaining. GET /search/subscriptions/{id}.
Annotations the server declares
- title: Get recurring gift
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
givingfuel_get_transactionOne transaction by id: amounts, type, payment method, masked card, gateway message and status.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "givingfuel_get_transaction" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "message": it reads messages.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "message": it reads messages, which other people can write.
Description, as the server wrote it
One transaction by id: amounts, type, payment method, masked card, gateway message and status. GET /search/transactions/{id}.
Annotations the server declares
- title: Get transaction
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
givingfuel_list_customersList customer records (donors): id, email, billing name and address, lifetime amount, created and updated dates.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "givingfuel_list_customers" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List customer records (donors): id, email, billing name and address, lifetime amount, created and updated dates. Filter by email or dates. New donors can take up to 5 minutes to appear. GET /search/customers.
Annotations the server declares
- title: List donors
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
givingfuel_list_formsList the account's GivingFuel forms (donation / fundraising pages): id, name, status (open or closed), created and updated dates.Reads text others writeNo findings
Why it is in this group
- The name "givingfuel_list_forms" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the account's GivingFuel forms (donation / fundraising pages): id, name, status (open or closed), created and updated dates. Use the form ids to filter orders, transactions and subscriptions. GET /forms.
Annotations the server declares
- title: List donation forms
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
givingfuel_list_ordersList donation orders (one per checkout): order number, donor billing name and address, form, total, currency and status, newest or oldest first.Reads text others writeNo findings
Why it is in this group
- The name "givingfuel_list_orders" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List donation orders (one per checkout): order number, donor billing name and address, form, total, currency and status, newest or oldest first. Filter by form, status, donor email, customer id, order number or dates. GET /search/orders.
Annotations the server declares
- title: List donation orders
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
givingfuel_list_subscriptionsList recurring donations (subscriptions): amount, schedule, status, last and next payment date, payments remaining, form and donor email.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "givingfuel_list_subscriptions" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List recurring donations (subscriptions): amount, schedule, status, last and next payment date, payments remaining, form and donor email. Filter by form, status, donor, or next/last payment date. GET /search/subscriptions.
Annotations the server declares
- title: List recurring gifts
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
givingfuel_list_transactionsList payment transactions (money movements): amount, deductible amount, currency, type (charge, refund, voucher), payment method, masked card, status, form and donor email.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "givingfuel_list_transactions" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List payment transactions (money movements): amount, deductible amount, currency, type (charge, refund, voucher), payment method, masked card, status, form and donor email. Filter by type, method, form, order, donor or dates. GET /search/transactions.
Annotations the server declares
- title: List transactions
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data5: Reads files, mail, messages, databases, secrets, calendars or repositories.; givingfuel_get_customer
givingfuel_get_transaction
givingfuel_list_customers
givingfuel_list_subscriptions
givingfuel_list_transactions
Reads text others write15: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; givingfuel_create_coupon
givingfuel_delete_coupon
givingfuel_get_coupon
givingfuel_get_customer
givingfuel_get_form
givingfuel_get_form_inventory
givingfuel_get_order
givingfuel_get_subscription
givingfuel_get_transaction
givingfuel_list_coupons
givingfuel_list_customers
givingfuel_list_forms
and 3 more
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warngivingfuel_list_coupons
The server marks "givingfuel_list_coupons" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "givingfuel_list_coupons" says "list": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http givingfuel https://givingfuel.usefulapi.io/mcp

claude mcp add --transport http givingfuel https://givingfuel.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__givingfuel__givingfuel_list_forms",
      "mcp__givingfuel__givingfuel_get_form",
      "mcp__givingfuel__givingfuel_get_form_inventory",
      "mcp__givingfuel__givingfuel_list_orders",
      "mcp__givingfuel__givingfuel_get_order",
      "mcp__givingfuel__givingfuel_list_transactions",
      "mcp__givingfuel__givingfuel_get_transaction",
      "mcp__givingfuel__givingfuel_list_subscriptions",
      "mcp__givingfuel__givingfuel_get_subscription",
      "mcp__givingfuel__givingfuel_list_customers",
      "mcp__givingfuel__givingfuel_get_customer",
      "mcp__givingfuel__givingfuel_get_coupon"
    ],
    "ask": [
      "mcp__givingfuel__givingfuel_list_coupons",
      "mcp__givingfuel__givingfuel_create_coupon"
    ],
    "deny": [
      "mcp__givingfuel__givingfuel_delete_coupon"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as givingfuel. Review it before you use it.

Capability tags behind 15 rules

mcp__givingfuel__givingfuel_list_forms untrusted-input
mcp__givingfuel__givingfuel_get_form untrusted-input
mcp__givingfuel__givingfuel_get_form_inventory untrusted-input
mcp__givingfuel__givingfuel_list_orders untrusted-input
mcp__givingfuel__givingfuel_get_order untrusted-input
mcp__givingfuel__givingfuel_list_transactions private-data, untrusted-input
mcp__givingfuel__givingfuel_get_transaction private-data, untrusted-input
mcp__givingfuel__givingfuel_list_subscriptions private-data, untrusted-input
mcp__givingfuel__givingfuel_get_subscription untrusted-input
mcp__givingfuel__givingfuel_list_customers private-data, untrusted-input
mcp__givingfuel__givingfuel_get_customer private-data, untrusted-input
mcp__givingfuel__givingfuel_list_coupons untrusted-input
mcp__givingfuel__givingfuel_get_coupon untrusted-input
mcp__givingfuel__givingfuel_create_coupon untrusted-input
mcp__givingfuel__givingfuel_delete_coupon untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/givingfuel/verify?hash=b5d26646ec68a75361d67ae7b6513ce4a52c7d9a88be0ae36b2225ffdca6bd64" | jq -e '.changed == false'

Pinned hash b5d26646ec68, from Oct 24, 2026, 16:20 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/givingfuel/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/givingfuel.svg)](https://anlyon.dev/servers/io.usefulapi/givingfuel)

Source: MCP Registry · repository. Synced Oct 24, 2026, 17:17 UTC.