Invoiced MCP by usefulapi

by usefulapi.io · remote · no sign-in to list tools · v1.3.4 · published by io.usefulapi

Read Invoiced customers, invoices, payments, subscriptions; create customers, draft invoices, notes.

Final · 1Changes · 4

Compare Registry entry

27 tools: 1 do something that can't be undone, 4 change things and 22 only read.

Scanned Oct 22, 2026

Deletes or cancels0Claude Code: deny
Can't be undone1Claude Code: ask: see these tools
Changes things4Claude Code: ask: see these tools
Only reads22Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http invoiced https://invoiced.usefulapi.io/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warninvoiced_get_invoice_payment_plan
The server marks "invoiced_get_invoice_payment_plan" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "invoiced_get_invoice_payment_plan" says "get": a word for reading.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

27 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

invoiced_get_invoice_payment_planThe payment plan (installments with dates, amounts and balances, and approval status) attached to an invoice.Reads text others write1 finding
Why it is in this group
- The name "invoiced_get_invoice_payment_plan" says "get": a word for reading.
- The description's first verb is "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Findings
- Warn
  The server marks "invoiced_get_invoice_payment_plan" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "invoiced_get_invoice_payment_plan" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
The payment plan (installments with dates, amounts and balances, and approval status) attached to an invoice. Errors with 404 when the invoice has none. GET /invoices/{id}/payment_plan.
Annotations the server declares
- title: Get invoice payment plan
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

Changes things 4Creates or changes something that can be changed back.Claude Code: ask

invoiced_add_noteWRITE: add an internal note to a customer or an invoice (give exactly one).Reads text others writeNo findings
Why it is in this group
- The name "invoiced_add_note" says "add": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: add an internal note to a customer or an invoice (give exactly one). Notes are internal; nothing is sent. POST /notes.
Annotations the server declares
- title: Add note
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
invoiced_create_customerWRITE: create a customer in Invoiced.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "invoiced_create_customer" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it
WRITE: create a customer in Invoiced. Nothing is sent to anyone and no money moves. Name is required; Invoiced generates the customer number unless given. POST /customers.
Annotations the server declares
- title: Create customer
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
invoiced_create_draft_invoiceWRITE: create a DRAFT invoice for a customer.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_create_draft_invoice" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: create a DRAFT invoice for a customer. It is always created as a draft: it is not issued, not emailed, not charged and cannot trigger AutoPay until a person finalizes it in Invoiced. At least one line item is required. POST /invoices with draft=true.
Annotations the server declares
- title: Create draft invoice
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
invoiced_create_taskWRITE: create a collection task for a customer (a reminder to call, write, email or review).Reads text others writeNo findings
Why it is in this group
- The name "invoiced_create_task" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
WRITE: create a collection task for a customer (a reminder to call, write, email or review). Nothing is sent to the customer. POST /tasks.
Annotations the server declares
- title: Create task
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

Only reads 22Looks things up and changes nothing.Claude Code: allow

invoiced_get_credit_noteOne credit note by id with line items, totals and balance.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "invoiced_get_credit_note" says "get": a word for reading.
What it can reach
- private-dataThe name "invoiced_get_credit_note" says "get" and "note": it reads notes.
- private-dataThe description's first sentence says "note": it reads notes.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One credit note by id with line items, totals and balance. GET /credit_notes/{id}.
Annotations the server declares
- title: Get credit note
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_get_customerOne customer by id: contact details, address, terms, currency, autopay, chasing cadence, credit hold/limit, parent customer, metadata.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "invoiced_get_customer" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One customer by id: contact details, address, terms, currency, autopay, chasing cadence, credit hold/limit, parent customer, metadata. GET /customers/{id}.
Annotations the server declares
- title: Get customer
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_get_customer_balanceA customer's current balance: total outstanding, past due, and available credit, in the customer's currency (or `currency`).Reads text others writeNo findings
Why it is in this group
- The name "invoiced_get_customer_balance" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
A customer's current balance: total outstanding, past due, and available credit, in the customer's currency (or `currency`). GET /customers/{id}/balance.
Annotations the server declares
- title: Get customer balance
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_get_estimateOne estimate by id with line items, totals, deposit and approval state.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_get_estimate" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One estimate by id with line items, totals, deposit and approval state. GET /estimates/{id}.
Annotations the server declares
- title: Get estimate
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_get_invoiceOne invoice by id: status, dates, payment terms, totals, balance, line items, discounts, taxes, ship-to, payment and PDF links.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_get_invoice" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One invoice by id: status, dates, payment terms, totals, balance, line items, discounts, taxes, ship-to, payment and PDF links. `expand` replaces ids with full objects (e.g. customer). GET /invoices/{id}.
Annotations the server declares
- title: Get invoice
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_get_itemOne catalog item by its id (a string such as "delivery").Reads text others writeNo findings
Why it is in this group
- The name "invoiced_get_item" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One catalog item by its id (a string such as "delivery"). GET /items/{id}.
Annotations the server declares
- title: Get catalog item
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_get_paymentOne payment by id, including which invoices and credit notes it was applied to (`applied_to`).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "invoiced_get_payment" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "note": it reads notes.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One payment by id, including which invoices and credit notes it was applied to (`applied_to`). GET /payments/{id}?include=applied_to.
Annotations the server declares
- title: Get payment
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_get_planOne subscription plan by its id (a string).Reads text others writeNo findings
Why it is in this group
- The name "invoiced_get_plan" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One subscription plan by its id (a string). GET /plans/{id}.
Annotations the server declares
- title: Get subscription plan
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_get_subscriptionOne subscription by id with plan, add-ons, billing period, contract terms, recurring total and MRR.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_get_subscription" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One subscription by id with plan, add-ons, billing period, contract terms, recurring total and MRR. GET /subscriptions/{id}.
Annotations the server declares
- title: Get subscription
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_contactsList the contacts of one customer: name, title, email, phone, whether primary (copied on communications) and SMS-enabled.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "invoiced_list_contacts" says "list": a word for reading.
What it can reach
- private-dataThe name "invoiced_list_contacts" says "list" and "contact": it reads contacts.
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List the contacts of one customer: name, title, email, phone, whether primary (copied on communications) and SMS-enabled. GET /customers/{id}/contacts.
Annotations the server declares
- title: List customer contacts
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_credit_notesList credit notes: customer, status (draft, open, paid, closed, voided), totals, remaining balance, line items.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "invoiced_list_credit_notes" says "list": a word for reading.
What it can reach
- private-dataThe name "invoiced_list_credit_notes" says "list" and "note": it reads notes.
- private-dataThe description's first sentence says "list" and "note": it reads notes.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List credit notes: customer, status (draft, open, paid, closed, voided), totals, remaining balance, line items. GET /credit_notes.
Annotations the server declares
- title: List credit notes
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_customersList customers (accounts receivable debtors): name, number, email, payment terms, currency, autopay and chasing settings, owner.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "invoiced_list_customers" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List customers (accounts receivable debtors): name, number, email, payment terms, currency, autopay and chasing settings, owner. Filter by open balance, saved payment method, update time or any exact-match column. GET /customers.
Annotations the server declares
- title: List customers
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_estimatesList estimates (quotes): customer, status (draft, not_sent, sent, approved, invoiced, declined, voided), expiration date, deposit, totals, resulting invoice.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_list_estimates" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List estimates (quotes): customer, status (draft, not_sent, sent, approved, invoiced, declined, voided), expiration date, deposit, totals, resulting invoice. GET /estimates.
Annotations the server declares
- title: List estimates
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_eventsThe activity feed, newest first: event type (such as invoice.paid, customer.created), time, the object it concerns and who did it.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_list_events" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
The activity feed, newest first: event type (such as invoice.paid, customer.created), time, the object it concerns and who did it. Optionally only the events of one object. GET /events.
Annotations the server declares
- title: List events
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_invoicesList invoices with number, customer, status (draft, not_sent, sent, viewed, past_due, pending, paid, voided), dates, totals, balance and line items.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_list_invoices" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List invoices with number, customer, status (draft, not_sent, sent, viewed, past_due, pending, paid, voided), dates, totals, balance and line items. Filter by customer, paid flag, invoice date range, update time or any exact-match column. GET /invoices.
Annotations the server declares
- title: List invoices
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_itemsList the item catalog (products and services): id, name, currency, unit cost, type, taxable.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_list_items" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List the item catalog (products and services): id, name, currency, unit cost, type, taxable. Use item ids as `catalog_item` when creating a draft invoice. GET /items.
Annotations the server declares
- title: List catalog items
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_notesList collection notes, newest first, for one customer or one invoice (give exactly one), or all notes when neither is given.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "invoiced_list_notes" says "list": a word for reading.
What it can reach
- private-dataThe name "invoiced_list_notes" says "list" and "note": it reads notes.
- private-dataThe description's first sentence says "list" and "note": it reads notes.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List collection notes, newest first, for one customer or one invoice (give exactly one), or all notes when neither is given. GET /customers/{id}/notes, /invoices/{id}/notes or /notes.
Annotations the server declares
- title: List notes
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_paymentsList payments received: customer, date, amount, unapplied balance, method (check, wire, ACH, card, ...), reference, whether matched or voided.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_list_payments" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List payments received: customer, date, amount, unapplied balance, method (check, wire, ACH, card, ...), reference, whether matched or voided. Read only. GET /payments.
Annotations the server declares
- title: List payments
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_plansList subscription plans: id, name, currency, amount, pricing mode, billing interval, tiers.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_list_plans" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List subscription plans: id, name, currency, amount, pricing mode, billing interval, tiers. GET /plans.
Annotations the server declares
- title: List subscription plans
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_subscriptionsList recurring subscriptions: customer, plan, quantity, billing period, status (not_started, active, past_due, finished, canceled), recurring total and MRR, contract renewal.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_list_subscriptions" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List recurring subscriptions: customer, plan, quantity, billing period, status (not_started, active, past_due, finished, canceled), recurring total and MRR, contract renewal. GET /subscriptions.
Annotations the server declares
- title: List subscriptions
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_tasksList collection tasks (call, letter, email, review): name, action, customer, assignee, due date, whether complete.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "invoiced_list_tasks" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "email": it reads mail.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List collection tasks (call, letter, email, review): name, action, customer, assignee, due date, whether complete. GET /tasks.
Annotations the server declares
- title: List tasks
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
invoiced_list_tax_ratesList tax rates: id, name, value, whether a percentage, whether inclusive, currency.Reads text others writeNo findings
Why it is in this group
- The name "invoiced_list_tax_rates" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
List tax rates: id, name, value, whether a percentage, whether inclusive, currency. GET /tax_rates.
Annotations the server declares
- title: List tax rates
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

216 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data8: Reads files, mail, messages, databases, secrets, calendars or repositories.; invoiced_get_credit_note
invoiced_get_customer
invoiced_get_payment
invoiced_list_contacts
invoiced_list_credit_notes
invoiced_list_customers
invoiced_list_notes
invoiced_list_tasks
Reads text others write27: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; invoiced_add_note
invoiced_create_customer
invoiced_create_draft_invoice
invoiced_create_task
invoiced_get_credit_note
invoiced_get_customer
invoiced_get_customer_balance
invoiced_get_estimate
invoiced_get_invoice
invoiced_get_invoice_payment_plan
invoiced_get_item
invoiced_get_payment
and 15 more
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; invoiced_create_customer

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__invoiced__invoiced_create_customer"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 15:29 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 5
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: https://invoiced.usefulapi.io/.well-known/oauth-protected-resource/mcp
Authorization servers: https://invoiced.usefulapi.io
Legacy HTTP+SSE transport: no
Dynamic client registration: yes
Client ID metadata documents: no

HighThe whole server
The endpoint served tools/list without credentials, and the list has 5 tools that change things (1 irreversible, 4 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://invoiced.usefulapi.io/mcp: tools/list returned 27 tools to an anonymous client, including invoiced_get_invoice_payment_plan (irreversible), invoiced_create_customer (write), invoiced_create_draft_invoice (write), invoiced_add_note (write), invoiced_create_task (write)
What this check looks for

Install

Pinned to version 1.3.4. Values in angle brackets are yours to fill in.

claude mcp add --transport http invoiced https://invoiced.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__invoiced__invoiced_list_customers",
      "mcp__invoiced__invoiced_get_customer",
      "mcp__invoiced__invoiced_get_customer_balance",
      "mcp__invoiced__invoiced_list_contacts",
      "mcp__invoiced__invoiced_list_invoices",
      "mcp__invoiced__invoiced_get_invoice",
      "mcp__invoiced__invoiced_list_payments",
      "mcp__invoiced__invoiced_get_payment",
      "mcp__invoiced__invoiced_list_credit_notes",
      "mcp__invoiced__invoiced_get_credit_note",
      "mcp__invoiced__invoiced_list_estimates",
      "mcp__invoiced__invoiced_get_estimate",
      "mcp__invoiced__invoiced_list_items",
      "mcp__invoiced__invoiced_get_item",
      "mcp__invoiced__invoiced_list_tax_rates",
      "mcp__invoiced__invoiced_list_plans",
      "mcp__invoiced__invoiced_get_plan",
      "mcp__invoiced__invoiced_list_subscriptions",
      "mcp__invoiced__invoiced_get_subscription",
      "mcp__invoiced__invoiced_list_notes",
      "mcp__invoiced__invoiced_list_tasks",
      "mcp__invoiced__invoiced_list_events"
    ],
    "ask": [
      "mcp__invoiced__invoiced_get_invoice_payment_plan",
      "mcp__invoiced__invoiced_create_customer",
      "mcp__invoiced__invoiced_create_draft_invoice",
      "mcp__invoiced__invoiced_add_note",
      "mcp__invoiced__invoiced_create_task"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as invoiced. Review it before you use it.

Capability tags behind 27 rules

mcp__invoiced__invoiced_list_customers private-data, untrusted-input
mcp__invoiced__invoiced_get_customer private-data, untrusted-input
mcp__invoiced__invoiced_get_customer_balance untrusted-input
mcp__invoiced__invoiced_list_contacts private-data, untrusted-input
mcp__invoiced__invoiced_list_invoices untrusted-input
mcp__invoiced__invoiced_get_invoice untrusted-input
mcp__invoiced__invoiced_get_invoice_payment_plan untrusted-input
mcp__invoiced__invoiced_list_payments untrusted-input
mcp__invoiced__invoiced_get_payment private-data, untrusted-input
mcp__invoiced__invoiced_list_credit_notes private-data, untrusted-input
mcp__invoiced__invoiced_get_credit_note private-data, untrusted-input
mcp__invoiced__invoiced_list_estimates untrusted-input
mcp__invoiced__invoiced_get_estimate untrusted-input
mcp__invoiced__invoiced_list_items untrusted-input
mcp__invoiced__invoiced_get_item untrusted-input
mcp__invoiced__invoiced_list_tax_rates untrusted-input
mcp__invoiced__invoiced_list_plans untrusted-input
mcp__invoiced__invoiced_get_plan untrusted-input
mcp__invoiced__invoiced_list_subscriptions untrusted-input
mcp__invoiced__invoiced_get_subscription untrusted-input
mcp__invoiced__invoiced_list_notes private-data, untrusted-input
mcp__invoiced__invoiced_list_tasks private-data, untrusted-input
mcp__invoiced__invoiced_list_events untrusted-input
mcp__invoiced__invoiced_create_customer untrusted-input, outbound
mcp__invoiced__invoiced_create_draft_invoice untrusted-input
mcp__invoiced__invoiced_add_note untrusted-input
mcp__invoiced__invoiced_create_task untrusted-input

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/invoiced/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

5 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 22, 2026, 11:18 UTC.

For agents: Markdown · JSON · report this listing