io.github.mooshee/untax

Est-ce que io.github.mooshee/untax est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.mooshee/untax » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 20 outils

• audit_microtransaction≈ 400 tokens

  Research an explicitly selected property and identify evidence requirements for a requested property-record service. Returns source observations and service capabilities; does not establish savings, quote a payable fee, inspect payment methods, charge, generate a filing packet or submit a correction. Sandbox checkout uses separate authenticated sandbox tools.

  Paramètres, retour & exemple (4)

  Paramètres

  • address · string · optionnel
    Explicitly selected property street address or parcel ID. A nonblank address takes precedence over parcel_id.
  • parcel_id · string · optionnel
    Explicitly selected county parcel ID / PIDN, used when address is absent or blank.
  • county_key · string · optionnel
    Exact registered county adapter key, such as hamilton; restricts source lookup to that county.
  • service_type · string · requis
    Explicit research route selected from get_microtransactions_catalog. Common aliases: demolished_outbuilding, square_footage_correction, mailing_address_change, commercial_reclassification, certified_tax_ledger. No service is assumed.

  Exemple d'appel

  {"name": "audit_microtransaction", "arguments": {"service_type": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• complete_tax_sandbox_order≈ 345 tokens

  Verify fresh Stripe TEST payment for your own sandbox order and release its hash-bound draft packet and receipt. Records a simulated submission only; never submits a real appeal or changes county records. Requires owner:sandbox sign-in and a completed test checkout. Show the returned test checkout link when payment is pending. When an order_id is known, read the same order after checkout or an uncertain failure before retrying. If starting checkout fails before an order_id is returned, retry start_tax_sandbox with the original idempotency_key; do not create a new key for the same attempt. get_tax_sandbox_order and complete_tax_sandbox_order take only order_id. Report test payment, draft generation, download availability and external delivery as separate observed states. Do not claim the draft is available until the order confirms its artifact is available; a payment or download URL alone is not proof. A sandbox receipt or simulated submission is not county filing, external email delivery or permission for live payments.

  Paramètres, retour & exemple (1)

  Paramètres

  • order_id · string · requis

  Exemple d'appel

  {"name": "complete_tax_sandbox_order", "arguments": {"order_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• disconnect_va_connection≈ 136 tokens

  Disconnect only this assistant's access to this account's shared VA verification when the user requests it. Requires owner:va. The saved account verification remains until the owner removes it in Account. Does not disconnect another account or assistant, submit a claim or alter VA records.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "disconnect_va_connection", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_va_facilities≈ 198 tokens

  Find official VA facilities in an explicit state, optionally filtered by city and facility type. Public information only. If location is missing, ask the returned question; do not infer a state or treat a VA facility as a county tax office or accredited VSO. Sandbox results are sample data.

  Paramètres, retour & exemple (4)

  Paramètres

  • city · string · optionnel
  • limit · integer · optionnel
  • state · string · optionnel
  • facility_type · string · optionnel · benefits | health | cemetery | vet_center

  Exemple d'appel

  {"name": "find_va_facilities", "arguments": {"city": "texte", "limit": 1, "state": "texte", "facility_type": "benefits"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• find_va_forms≈ 142 tokens

  Find official VA forms by an explicit form number or search text. Ask what form or purpose is needed when query is missing. Show returned revision information and official PDF links; this does not complete or submit a claim.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
  • query · string · optionnel

  Exemple d'appel

  {"name": "find_va_forms", "arguments": {"limit": 1, "query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generate_veteran_packet≈ 458 tokens

  Generate a real free private Veteran REVIEW/DRAFT PDF from an explicitly selected saved review. Requires owner:read. Missing answers remain visible review questions; no VA connection is required. Supplemental answers remain reported and are not saved to the customer review. Optional connected VA facts require additional owner:va permission and explicit use for this applicant. Returns an expiring authenticated download of exact compiled bytes, not an official application, eligibility decision, savings estimate or filing.

  Paramètres, retour & exemple (4)

  Paramètres

  • answers · object · optionnel
  • review_id · string · requis
  • saved_property_id · string · requis
  • use_connected_va_records · boolean · optionnel
    Only true when the user explicitly asks to use their connected records for their own applicant review; requires additional owner:va permission and is_surviving_spouse=false.

  Exemple d'appel

  {"name": "generate_veteran_packet", "arguments": {"review_id": "texte", "saved_property_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_appeal_lifecycle≈ 117 tokens

  Read a general assessment-review checklist. Takes no property inputs and does not check a filing window, deadline, fee, eligibility or outcome. Personal procedures require official property, jurisdiction and year review.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_appeal_lifecycle", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_microtransactions_catalog≈ 136 tokens

  Inspect an evidence-gated research inventory of property-tax review routes and actual session tool availability. Each route reports held/unavailable/evidence_required and not_screened applicability; no eligibility, pricing, savings, automatic refund or filing readiness is established.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_microtransactions_catalog", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_owner_review_details≈ 236 tokens

  Read one explicitly selected saved property review using the same source-bound service as the website. Requires both identifiers from get_owner_workspace and a live owner:read grant. Honor source_context_current and reconfirmation_required; never silently reuse stale previous_owner_answers. Ask relevant unanswered questions without repeating current answered or skipped items. User reports remain separate from county facts; changes and sensitive evidence belong in the protected browser review.

  Paramètres, retour & exemple (2)

  Paramètres

  • review_id · string · requis
  • saved_property_id · string · requis

  Exemple d'appel

  {"name": "get_owner_review_details", "arguments": {"review_id": "texte", "saved_property_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_owner_workspace≈ 140 tokens

  Read the signed-in owner's actual saved property reviews with a revocable owner:read grant. Returns explicit property and review identifiers; no active property is assumed. Ask the user to select a review when the target is ambiguous. Does not establish ownership, benefit eligibility, savings or filing authority.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_owner_workspace", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_property_assessment≈ 675 tokens

  Get retained county assessment observations and source provenance for a supported address or parcel ID. Missing facts stay unavailable; commercial source area is not finished living area. Any comparison is a draft with evidence holds and does not establish personal tax savings or filing readiness. For a property audit or a request to find tax-reduction routes, review opportunity_screen before concluding. A weak or held comparable-property analysis does not rule out independent relief, record corrections or billing research. Ask the next relevant unanswered targeted_questions item one at a time; use available_questions for relevant follow-ups. Accept none, not sure or skip, and do not repeat answered or skipped questions in this conversation unless the user changes the facts. After an answer, call recheck_property_opportunities for the same selected property and county with the accumulated explicit owner_answers and skipped_question_ids. Rechecks are stateless: resend still-applicable prior answers, preserve explicit false and empty arrays, and omit unknown or skipped fields instead of sending null or inventing a negative answer. Resend stable skipped_question_ids until the user supplies an answer or asks to revisit the question. Skips suppress prompts only and leave requirements unresolved. Do not transfer property-specific answers or skips to another property. When the user is done or skips the remaining questions, summarize supported research routes and missing evidence without treating unknowns as a denial. For a fact-only lookup, answer the requested fact and offer relevant screening without requiring an unrelated intake. Owner answers do not verify eligibility, savings, authority, payment or filing readiness.

  Paramètres, retour & exemple (5)

  Paramètres

  • address · string · optionnel
    Alternative alias for property street address
  • county_key · string · optionnel
    Optional exact registered county adapter key, such as hamilton. Restricts lookup to that county and avoids unrelated county scans; conflicting explicit prefixes are rejected.
  • actual_sqft · integer · optionnel
    Optional: Actual measured living area in sq ft
  • address_or_pidn · string · requis
    Full street address or county parcel ID (e.g. '3731 Anderson Ave, Chattanooga, TN' or '157I L 001')
  • notice_appraised_value · number · optionnel
    Optional: New proposed appraised value from reassessment notice

  Exemple d'appel

  {"name": "get_property_assessment", "arguments": {"address_or_pidn": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_tax_sandbox_order≈ 318 tokens

  Read your own isolated Untax test order. Requires owner:sandbox sign-in. Payment and draft delivery statuses are separate from production eligibility or county filing. Show the returned test checkout link when payment is pending. When an order_id is known, read the same order after checkout or an uncertain failure before retrying. If starting checkout fails before an order_id is returned, retry start_tax_sandbox with the original idempotency_key; do not create a new key for the same attempt. get_tax_sandbox_order and complete_tax_sandbox_order take only order_id. Report test payment, draft generation, download availability and external delivery as separate observed states. Do not claim the draft is available until the order confirms its artifact is available; a payment or download URL alone is not proof. A sandbox receipt or simulated submission is not county filing, external email delivery or permission for live payments.

  Paramètres, retour & exemple (1)

  Paramètres

  • order_id · string · requis

  Exemple d'appel

  {"name": "get_tax_sandbox_order", "arguments": {"order_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_va_connection≈ 192 tokens

  Read the dated, minimized VA verification explicitly shared with this account and assistant. Requires owner:va and live sharing permission; browser sign-in alone does not grant access. The saved account snapshot survives provider-session expiry and server restart. Disclose verified_at and freshness; saved facts are not a live provider check and may need reverification. Expired or revoked app permission stops sharing. These facts do not establish property ownership, primary residence, tax eligibility or filing authority.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_va_connection", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_va_facility≈ 120 tokens

  Read one official VA facility selected by its returned id. Returns available address, telephone and website information with source and environment. No Veteran records or eligibility determination.

  Paramètres, retour & exemple (1)

  Paramètres

  • id · string · optionnel

  Exemple d'appel

  {"name": "get_va_facility", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_va_form≈ 190 tokens

  Look up an explicit VA form number, such as 21-0966, and return available title, revision information and official PDF link. Use form_name from search results for this lookup; the separate catalog id is not a form number. If form_name is missing, ask for the form number. A form link is not a completed application, submission or proof of eligibility.

  Paramètres, retour & exemple (1)

  Paramètres

  • id · string · optionnel
    Official form number (the form_name field in search results), such as 21-0966. Do not use the numeric catalog id.

  Exemple d'appel

  {"name": "get_va_form", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• recheck_property_opportunities≈ 1072 tokens

  Recheck possible tax-reduction routes against current retained property records and a few owner-reported categories. Returns research and next questions; answers never establish eligibility, verified evidence, savings, owner authority, payment or filing readiness. Do not send exact income, ages, identifiers, documents or a caller-supplied audit. For a property audit or a request to find tax-reduction routes, review opportunity_screen before concluding. A weak or held comparable-property analysis does not rule out independent relief, record corrections or billing research. Ask the next relevant unanswered targeted_questions item one at a time; use available_questions for relevant follow-ups. Accept none, not sure or skip, and do not repeat answered or skipped questions in this conversation unless the user changes the facts. After an answer, call recheck_property_opportunities for the same selected property and county with the accumulated explicit owner_answers and skipped_question_ids. Rechecks are stateless: resend still-applicable prior answers, preserve explicit false and empty arrays, and omit unknown or skipped fields instead of sending null or inventing a negative answer. Resend stable skipped_question_ids until the user supplies an answer or asks to revisit the question. Skips suppress prompts only and leave requirements unresolved. Do not transfer property-specific answers or skips to another property. When the user is done or skips the remaining questions, summarize supported research routes and missing evidence without treating unknowns as a denial. For a fact-only lookup, answer the requested fact and offer relevant screening without requiring an unrelated intake. Owner answers do not verify eligibility, savings, authority, payment or filing readiness.

  Paramètres, retour & exemple (4)

  Paramètres

  • county_key · string · optionnel
    Optional exact registered county adapter key, such as hamilton. Restricts lookup to that county and avoids unrelated county scans; conflicting explicit prefixes are rejected.
  • owner_answers · object · requis
  • address_or_pidn · string · requis
  • skipped_question_ids · array · optionnel
    Stable question IDs explicitly skipped in this same property conversation. Resend them with accumulated answers. Skips suppress prompts only; facts and eligibility remain unresolved.

  Exemple d'appel

  {"name": "recheck_property_opportunities", "arguments": {"owner_answers": {}, "address_or_pidn": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• review_veteran_requirements≈ 1004 tokens

  Continue a property-specific requirements conversation with accumulated explicit answers and, only when requested, the connected applicant's saved VA verification. Requires owner:va. Disclose va_source.verified_at and freshness; a saved snapshot is not a current provider check. Ask returned questions one at a time; accept unknown or skip, preserve explicit false, and never reuse property-specific answers for another property. No eligibility decision, savings, generated application or filing.

  Paramètres, retour & exemple (3)

  Paramètres

  • answers · object · optionnel
  • skipped_fields · array · optionnel
    Stable question ids explicitly skipped in this same property conversation. Unknown facts stay unresolved.
  • use_connected_va_records · boolean · optionnel
    Set true only when the user explicitly identifies the connected VA records as theirs and asks to use them for their own applicant review. A surviving-spouse review needs separate deceased-veteran and survivor evidence.

  Exemple d'appel

  {"name": "review_veteran_requirements", "arguments": {"answers": {}, "skipped_fields": [], "use_connected_va_records": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• start_tax_sandbox≈ 428 tokens

  Start an explicitly requested test-only appeal or property-record service checkout for one source-backed property. Requires owner:sandbox sign-in. Uses Stripe TEST mode and isolated orders; does not establish ownership, eligibility, savings or an open appeal window. Never charges real money or files with a county. Show the returned test checkout link when payment is pending. When an order_id is known, read the same order after checkout or an uncertain failure before retrying. If starting checkout fails before an order_id is returned, retry start_tax_sandbox with the original idempotency_key; do not create a new key for the same attempt. get_tax_sandbox_order and complete_tax_sandbox_order take only order_id. Report test payment, draft generation, download availability and external delivery as separate observed states. Do not claim the draft is available until the order confirms its artifact is available; a payment or download URL alone is not proof. A sandbox receipt or simulated submission is not county filing, external email delivery or permission for live payments.

  Paramètres, retour & exemple (4)

  Paramètres

  • service · string · requis · appeal | microtx
  • county_key · string · requis
  • address_or_pidn · string · requis
  • idempotency_key · string · requis

  Exemple d'appel

  {"name": "start_tax_sandbox", "arguments": {"service": "appeal", "county_key": "texte", "address_or_pidn": "texte", "idempotency_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• start_va_connection≈ 193 tokens

  Start an explicitly requested VA connection for this signed-in account and assistant. Requires owner:va permission. Show connection_url to confirm the account and selected fields, review an existing saved verification or complete a new official VA sign-in, and approve this app's sharing separately. Verification is saved to the account only after approval. Return to this conversation and call get_va_connection afterward. The link itself grants no access; never request passwords, tokens, SSNs or full VA documents in chat.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "start_va_connection", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• suggest_addresses≈ 238 tokens

  Search retained county-roll address candidates for partial queries and typos. If the intended property is ambiguous, show the relevant candidates and ask the user to select one before continuing with property-specific conclusions or actions. Similarity scores and is_auto_match are matching hints, not a user selection, verified owner authority or financial eligibility.

  Paramètres, retour & exemple (2)

  Paramètres

  • limit · integer · optionnel
    Maximum number of candidate suggestions to return (default: 5)
  • query · string · requis
    Address query or partial street name (e.g. '3731 Andrson Ave', 'Anderson Ave', '810 Lindsay')

  Exemple d'appel

  {"name": "suggest_addresses", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://untax.io/mcp