← Back to search

Norman MCP Server

norman-finance streamable_http Scanned 2d ago

AI-powered bookkeeping and tax filing for entrepreneurs at the heart of the European economy.

D
57.2 / 100

Versions

0.1.6latest
first seen Jun 1, 2026
0.1.7
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 118

list_tax_reports
annotations: none low

List all available tax reports.

ctx Context
get_tax_report
annotations: none low

Retrieve a specific tax report. Args: report_id: Public ID of the tax report to retrieve Returns: Tax report details

ctx Context report_id str
validate_tax_number
annotations: none low

Validate a tax number for a specific region. Args: tax_number: Tax number to validate region_code: Region code (e.g., DE for Germany) Returns: Validation result

ctx Context tax_number str region_code str
generate_finanzamt_preview
annotations: none low

Generate a test Finanzamt preview for a tax report. Returns the preview as an inline PNG image (first page) plus a downloadUrl for the full PDF. The image is rendered directly in clients that support MCP ImageContent.

ctx Context report_id str
submit_tax_report
annotations: none low

Submit a tax report to the Finanzamt. Args: report_id: Public ID of the tax report to submit Returns: Response from the submission request and a link to the tax report from reportFile to download. If response status is 403, it means a paid subscription is required to file the report.

ctx Context report_id str
list_tax_states
annotations: none low

Get list of available tax states. Returns: List of tax states

ctx Context
list_tax_settings
annotations: none low

Get list of tax settings for the current company. Returns: List of company tax settings

ctx Context
update_tax_setting
annotations: none low

Update a tax setting. Always generate a preview of the tax report @generate_finanzamt_preview before submitting it to the Finanzamt. Args: setting_id: Public ID of the tax setting to update tax_type: Type of tax (e.g. "sales"); Options: "sales", "trade", "income", "profit_loss" vat_type: VAT type (e.g. "vat_subject"), Options: "vat_subject", "kleinunternehmer", "vat_exempt" vat_percent: VAT percentage; Options: 0, 7, 19 start_tax_report_date: Start date for tax reporting (YYYY-MM-DD) reporting_frequency: Frequency of reporting (e.g. "monthly"), Options: "monthly", "quarterly", "yearly" Returns: Updated tax setting

ctx Context tax_type string vat_type string setting_id str vat_percent string reporting_frequency string start_tax_report_date string
get_company_tax_statistics
annotations: none low

Get tax statistics for the company. Returns: Company tax statistics data

ctx Context
get_vat_next_report
annotations: none low

Get the VAT amount for the next report period. Returns: VAT next report amount data

ctx Context
preview_rule
annotations: none low

Dry-run rule conditions against recent transactions BEFORE creating the rule. Show the user a few of the returned matches so they can confirm the rule catches the right things. Returns: A sample of matching transactions and the total sampled count.

ctx Context logic str conditions string
get_gewerbe_registration
annotations: none low

Get the user's Gewerbeanmeldung, if any. Call this FIRST. A "not found" response means there is none — offer to start one with create_gewerbe_registration. Otherwise resume from `sections.missing`. A non-empty `documents` list means the form was already generated.

ctx Context
mark_bill_paid
annotations: none low

Mark a bill as paid (``status="PAID"``) WITHOUT initiating a payment. Use this for bills that were already paid outside Norman (e.g. migrated bills) to clear them from the Bills view. To actually pay a bill via SEPA, use ``pay_bill`` instead. Args: bill_id: ID of the bill to mark paid Returns: Updated bill record

ctx Context bill_id str
search_transactions
annotations: none low

Search for transactions matching specified criteria. Args: description: Text to search for in transaction descriptions from_date: Start date in YYYY-MM-DD format to_date: End date in YYYY-MM-DD format min_amount: Minimum transaction amount max_amount: Maximum transaction amount category: Transaction category limit: Maximum number of results to return (default 100) no_invoice: Whether to exclude invoices no_receipt: Whether to exclude receipts status: Status of the transaction (UNVERIFIED, VERIFIED) cashflow_type: Cashflow type of the transaction (INCOME, EXPENSE) Returns: List of matching transactions with sensitive data removed

ctx Context limit string status string to_date string category string from_date string max_amount string min_amount string no_invoice string no_receipt string description string cashflow_type string
create_transaction
annotations: none low

Create a new manual transaction. For SME companies (GmbH/UG), use company_category_id instead of category_id, and optionally set payment_date and payment_type for accrual accounting.

ctx Context date string amount float vat_rate string sale_type string category_id string description str payment_date string payment_type string cashflow_type str supplier_country str company_category_id string
update_transaction
annotations: none low

Update an existing transaction. For SME companies, use company_category_id and payment fields.

ctx Context date string amount string category string vat_rate string sale_type string category_id string description string payment_date string payment_type string cashflow_type string transaction_id str supplier_country string company_category_id string
categorize_transaction
annotations: none low

Detect category for a transaction using AI. Args: transaction_amount: Amount of the transaction transaction_description: Description of the transaction transaction_type: Type of transaction ("income" or "expense") Returns: Suggested category information for the transaction

ctx Context transaction_type str transaction_amount float transaction_description str
change_transaction_verification
annotations: none low

Verify or unverify a transaction (finalize or unfinalize). Args: transaction_id: Public ID of the transaction to update verify: If True, verify (finalize) the transaction; if False, unverify (unfinalize) it Returns: Updated transaction information

ctx Context verify bool transaction_id str
list_clients
annotations: none low

Get a list of all clients for the company. Returns: List of clients with their details

ctx Context
get_client
annotations: none low

Get detailed information about a specific client. Args: client_id: ID of the client to retrieve Returns: Detailed client information

ctx Context client_id str
create_client
annotations: none low

Create a new client. Args: name: Client name or business name client_type: Type of client (defaults to "business"), Options: "business", "private" address: Client physical address zip_code: Client postal/zip code email: Client email address country: Client country code (e.g. "DE") vat_number: Client VAT number city: Client city phone: Client phone number Returns: Newly created client record

ctx Context city string name str email string phone string address string country string zip_code string vat_number string client_type str
update_client
annotations: none low

Update an existing client. Args: client_id: ID of the client to update name: Updated client name client_type: Updated client type ("business" or "private") address: Updated client physical address zip_code: Updated client postal/zip code email: Updated client email address country: Updated client country code (e.g. "DE") vat_number: Updated client VAT number city: Updated client city phone: Updated client phone number Returns: Updated client record

ctx Context city string name string email string phone string address string country string zip_code string client_id str vat_number string client_type string
delete_client
annotations: none low

Delete a client. Args: client_id: ID of the client to delete Returns: Confirmation of deletion

ctx Context client_id str
list_rules
annotations: none low

List the company's automation rules together with usage stats and the plan's automation limit. Returns: Rules ordered by priority (first match wins) and a summary with match counts and the `limits` block (activeLimit/activeUsed).

ctx Context
create_rule
annotations: none low

Create an automation rule. Preview first with preview_rule. Send exactly one of category_id / company_category_id (freelancer vs SME). After creating, offer apply_rule_to_existing to also categorize the backlog. Returns: The created rule.

ctx Context name str logic str is_active bool conditions string category_id string company_category_id string
update_rule
annotations: none low

Update an automation rule. Only the provided fields change. Re-activating a rule counts against the plan's automation limit like creating one. Returns: The updated rule.

ctx Context name string logic str rule_id str is_active string conditions string category_id string company_category_id string
delete_rule
annotations: none low

Delete an automation rule after the user confirms. Prefer disabling (update_rule with is_active=false) when the user may want it back. Returns: Deletion confirmation.

ctx Context rule_id str
apply_rule_to_existing
annotations: none low

Run an existing rule over the company's uncategorized transactions and categorize every match now. Use after create_rule when the user also wants the backlog cleaned up. Returns: The number of transactions updated.

ctx Context rule_id str
list_rule_executions
annotations: none low

Automation execution log. status=awaiting_review lists the matches a review-first rule parked for the user's approval — show each one (rule name, transaction/invoice, planned actions) and let the user decide; never approve or dismiss without an explicit go-ahead. Returns: A sample of executions and the total sampled count.

ctx Context status string rule_id string
list_pending_approvals
annotations: none low

Everything an agent prepared and is waiting on the user for, in one list: review-first automations, a prepared UStVA, an active workflow step. Use this for "what needs me?" instead of guessing across surfaces. Items with an executionId can be decided here (approve_rule_execution or dismiss_rule_execution) once the user says so; the rest carry a link to the screen that owns the decision. Returns: items and count.

ctx Context
undo_rule_execution
annotations: none low

Put back what an automation changed, newest action first, AFTER the user asked for it. Only a run that changed something can be undone, and only once. Actions that left the world outside the books - a notification, a queued reminder, a prepared payment - cannot be taken back and come back as "not reversible"; say so rather than implying the run was fully reverted. Returns: The execution, stamped revertedAt.

ctx Context execution_id str
list_agents
annotations: none low

The prebuilt agents shelf with each card's state and counters: AI categorization, auto-enrichment, document reconciliation, invoice chasing, bill payments with approval, VAT-return readiness, client document chasing, the month-end close, the document collector, plus links to Tax Autopilot and recurring invoices. Returns: cards, each with key, kind, enabled and counters.

ctx Context
toggle_agent
annotations: none low

Turn a prebuilt agent on or off after the user asked for it. What that means depends on the card: a toggle card flips a pipeline, a rule card (invoice chasing, bill payments) materializes or parks a review-first rule, and a workflow card starts or abandons its run. Turning something on can be refused on a limited plan - relay the message instead of retrying. Returns: The card in its new state.

ctx Context key str enabled bool
approve_rule_execution
annotations: none low

Approve an awaiting-review execution AFTER the user explicitly confirmed it: the rule's full action chain runs (category, VAT, reminder emails, ...). Returns: The execution with per-action results.

ctx Context execution_id str
dismiss_rule_execution
annotations: none low

Reject an awaiting-review execution after the user said no. The target goes back through normal categorization, and this rule never re-claims the same target. Returns: The dismissed execution.

ctx Context execution_id str
list_bills
annotations: none low

Get a list of bills (incoming supplier invoices / Eingangsrechnungen). Args: status: Optional status filter (e.g. "PAID", "OPEN") Returns: List of bills with their details

ctx Context status string
get_bill
annotations: none low

Get detailed information about a specific bill. Args: bill_id: ID of the bill to retrieve Returns: Detailed bill information

ctx Context bill_id str
update_bill
annotations: none low

Update an existing bill. Currently supports changing the bill status — e.g. set ``status="PAID"`` to clear a migrated/already-paid bill from the Bills view. Args: bill_id: ID of the bill to update status: New status (e.g. "PAID") Returns: Updated bill record

ctx Context status string bill_id str
pay_bill
annotations: none low

Initiate a SEPA payment for a bill. ⚠️ This starts a REAL payment flow. Returns a ``paymentOrderId`` and a ``webformUrl`` the user must open to authorise the payment with their bank. Does not move money on its own, but begins the process — only call when the user has explicitly asked to pay. Args: bill_id: ID of the bill to pay account_id: ID of the bank account to pay from (required by the backend) execution_date: Optional payment execution date in YYYY-MM-DD format purpose: Optional payment purpose / reference text Returns: Payment order details including paymentOrderId and webformUrl

ctx Context bill_id str purpose string account_id str execution_date string
delete_bill
annotations: none low

Delete a bill. Args: bill_id: ID of the bill to delete Returns: Confirmation of deletion

ctx Context bill_id str
get_incorporation
annotations: none low

Get the user's active company incorporation (GmbH/UG founding), if any. Call this FIRST. A "not found" response means there is no active incorporation — offer to start one with create_incorporation. Otherwise resume: check `sections` for what's missing and continue there.

ctx Context
get_incorporation_choices
annotations: none low

Get valid values for incorporation enum fields (label by value).

ctx Context choice_type str
create_incorporation
annotations: none low

Start a new GmbH/UG incorporation for the current user. Section 1/5 begins here. Save `publicId` from the response for all subsequent calls. Fails with a validation error if an active incorporation already exists — use get_incorporation and continue it instead.

ctx Context locale str legal_form string
update_incorporation_company
annotations: none low

Section 1/5 — company basics. Any subset of fields; provided fields are validated. After saving the company name, nudge the user to check name availability themselves (Handelsregister search: https://www.handelsregister.de, IHK guidance) — Norman does not verify the name. The address may be skipped for now but is needed before notarization. Check `sections.company.missing` in the response for what's still required.

ctx Context public_id str legal_form string company_name string business_purpose string business_address_city string registered_office_city string registered_office_street string registered_address_skipped string registered_office_additional string registered_office_postal_code string registered_office_house_number string
update_incorporation_capital
annotations: none low

Section 3/5 — share capital. Validated against the legal form. The per-shareholder split is set on each shareholder (share_nominal_amount) and must sum up to this amount — `sections.capital.missing` will contain 'shareNominalSum' until it does.

ctx Context public_id str share_capital str
add_incorporation_shareholder
annotations: none low

Section 2/5 — add a shareholder (max 3 for the statutory Musterprotokoll). Collect all founders one by one. For natural persons: name, date of birth, nationality and residential address are required. For legal entities: Firma, Sitz, register court and register number. Returns the full record — check `sections.shareholders.missing` and `musterprotokoll.reasons`.

ctx Context dob string city string email string phone string street string country string last_name string public_id str additional string first_name string entity_name string entity_seat string nationality string postal_code string house_number string shareholder_type str is_managing_director bool share_nominal_amount string entity_register_court string entity_register_number string
update_incorporation_shareholder
annotations: none low

Update a shareholder (any subset of fields). Returns the full record.

ctx Context dob string city string street string country string last_name string public_id str first_name string nationality string postal_code string house_number string is_managing_director string share_nominal_amount string shareholder_public_id str
invite_incorporation_shareholder
annotations: none low

Send (or resend) a secure fill-your-details link to a co-founder. The invited shareholder completes their own personal data (name, date of birth, address) via the link — useful when the user doesn't have the co-founder's details at hand. Natural persons only. The link is valid for 30 days.

ctx Context email string public_id str shareholder_public_id str
remove_incorporation_shareholder
annotations: none low

Remove a shareholder. Remaining shareholders are renumbered automatically.

ctx Context public_id str shareholder_public_id str
set_incorporation_agreement
annotations: none low

Section 4/5 — founding agreement type. 'musterprotokoll' (the statutory template — fastest and cheapest) is only accepted when `musterprotokoll.eligible` is true (≤3 shareholders, exactly one managing director, capital bounds, nominal split matches). Otherwise explain the `reasons` codes to the user and set 'individual' — the notary drafts an individual Satzung.

ctx Context public_id str agreement_type str
update_incorporation_notary_preferences
annotations: none low

Section 5/5 — notary preferences (city, online vs in person, timeframe).

ctx Context public_id str notary_city string notarization_type string notarization_timeframe string
generate_incorporation_documents
annotations: none low

Generate the founding document drafts (PDF): Musterprotokoll (when selected) and the Gesellschafterliste (§ 40 GmbHG). REQUIRES sections company, shareholders, capital and agreement to be complete — summarize all collected data and get the user's explicit confirmation BEFORE calling. ALWAYS tell the user the documents are auto-generated templates to prepare the notary appointment — NOT legal advice; the notary produces the binding versions. Returns download URLs. If the user later changes data, `documentsStale` becomes true — offer to regenerate.

ctx Context public_id str
get_incorporation_document_preview
annotations: none low

Show the user a first-page image of a generated founding document for review.

ctx Context public_id str document_type str
match_incorporation_notaries
annotations: none low

Get up to 3 notaries matching the collected preferences (online capability, city). Present them to the user as options; they can pick one or request a match without picking (the Norman team assigns one).

ctx Context public_id str
request_incorporation_notary
annotations: none low

Final step — request the notary hand-off. REQUIRES generated documents. Get the user's explicit confirmation before calling. The Norman team coordinates the appointment and gets back to the user; nothing is sent to a notary automatically. After this succeeds, present the remaining formation steps from the record's `roadmap` and invite the user back into the product to continue: their Norman dashboard at https://app.norman.finance/ has the formation roadmap (bank account, deposit, HRB, Finanzamt, Gewerbeamt, Transparency) where they track and complete each step.

ctx Context message str public_id str notary_public_id string
suggest_incorporation_purpose
annotations: none low

Reformulate a rough business purpose (Unternehmensgegenstand) into registry-ready wording. Returns {"suggestion": ...} — a faithful, same-language rewrite: concrete activities, no catch-all phrases ("all permitted activities"), no licensable activities unless the draft states them, nothing invented. ALWAYS show it to the user and let them accept or keep their own text; never auto-apply. To use it, pass it to update_incorporation_company as business_purpose.

ctx Context draft str public_id str
check_incorporation_name
annotations: none low

Search the German commercial register (Handelsregister) for similar company names. Returns {"status": "ok"|"unavailable", "searched", "matches": [{name, seat, register}]}. `status == "unavailable"` means the portal could not be queried — tell the user to check manually via handelsregister.de, do NOT infer the name is free. Existing matches mean a similar name may be rejected; the final say is with the registry court and the IHK.

ctx Context name string public_id str
complete_incorporation_step
annotations: none low

Tick a post-notary formation roadmap step done/undone (steps 3-9 of the journey). The record's `roadmap` lists the 7 steps with their `done`/`active` state — drive from it. These are founder self-marks: they do NOT send the ops milestone emails and never move the official `status` backwards. The 'hrb' step optionally records the register number/court. Returns the full updated record (with the refreshed `roadmap`).

ctx Context done bool step str public_id str register_court str register_number str
request_file_upload
annotations: none low

Generate a short-lived upload link that the USER opens in their browser. Call this BEFORE create_attachment when the user wants to attach a file (image, PDF, receipt) and you cannot provide a public file_url. The link opens a drag-and-drop upload page. After the user uploads, the page shows a file_ref token. Use that file_ref in create_attachment. IMPORTANT: Do NOT try to upload the file yourself (curl, base64, etc.). Just give the link to the user and wait for them to upload.

ctx Context description string
upload_bulk_attachments
annotations: none low

Upload multiple file attachments in bulk. Priority: file_urls > file_refs > files_base64. Do NOT base64-encode images or PDFs — it will exceed the context window.

ctx Context file_refs string file_urls string file_paths string files_base64 string cashflow_type string
get_gewerbe_registration_choices
annotations: none low

Get the valid values for the Gewerbeanmeldung enum fields (value → label).

ctx Context
list_attachments
annotations: none low

Get list of attachments with optional filters. Args: file_name: Filter by file name (case insensitive partial match) linked: Filter by whether attachment is linked to transactions attachment_type: Filter by attachment type (invoice, receipt, contract, other) description: Filter by description (case insensitive partial match) brand_name: Filter by brand name (case insensitive partial match) Returns: List of attachments matching the filters. Use downloadUrl for direct temporary file download links.

ctx Context linked string file_name string brand_name string description string attachment_type string
create_attachment
annotations: none low

Create a new attachment with a file. Args: transactions: List of transaction IDs to link attachment_type: Type of attachment (invoice, receipt) amount: Amount related to attachment amount_exchanged: Exchanged amount in different currency attachment_number: Unique number for attachment brand_name: Brand name associated with attachment currency: Currency of amount (default EUR) currency_exchanged: Exchanged currency (default EUR) description: Description of attachment supplier_country: Country of supplier (DE, INSIDE_EU, OUTSIDE_EU) value_date: Date of value vat_sum_amount: VAT sum amount vat_sum_amount_exchanged: Exchanged VAT sum amount vat_rate: VAT rate percentage sale_type: Type of sale additional_metadata: Additional metadata for attachment How to provide the file (pick one): 1. file_url — best if the file has a public HTTP(S) URL 2. file_ref — call request_file_upload first to get an upload link, ask the user to open it in their browser and drop the file, then pass the file_ref here 3. file_content_base64 — ONLY for tiny files under 50 KB NEVER base64-encode images, PDFs, or scans — they will blow up the context window. Use file_url or request_file_upload instead.

ctx Context amount string currency str file_ref string file_url string vat_rate string file_name string sale_type string brand_name string value_date string description string transactions string vat_sum_amount string attachment_type string amount_exchanged string supplier_country string attachment_number string currency_exchanged str additional_metadata string file_content_base64 string vat_sum_amount_exchanged string
link_attachment_transaction
annotations: none low

Link a transaction to an attachment. Args: attachment_id: ID of the attachment transaction_id: ID of the transaction to link Returns: Response from the link transaction request

ctx Context attachment_id str transaction_id str
delete_attachment
annotations: none low

Delete an attachment — e.g. an orphan receipt/invoice with no linked transaction (a stale self-statement left behind after the real invoice was attached). Retention-aware: Norman keeps documents under GoBD retention. A retained document returns a 409 whose `detail.requiresConfirmation` is true (with a `retentionUntil` date); re-call with `confirm=true` to override. Only call once the user has confirmed the attachment should be removed. Args: attachment_id: ID of the attachment to delete confirm: set true to override the legal-retention guard on a retained document Returns: Confirmation of deletion, or the 409 retention warning if confirm is not set

ctx Context confirm bool attachment_id str
get_attachment_preview
annotations: none low

Download an attachment and return it as an inline image. Works for image attachments (PNG, JPEG, GIF, WebP). For PDFs and other non-image files, returns the download URL instead.

ctx Context attachment_id str
search_skr_by_code
annotations: none low

Search the FULL SKR chart of accounts (SKR03 or SKR04) by account code. ⚠️ SME ONLY — this tool works exclusively for GmbH/UG companies with a DATEV chart of accounts. For freelance accounts use 'categorize_transaction'. Searches the complete catalog (~1000+ entries), NOT just the company's provisioned categories. Use when you know the account number or its prefix. Returns matching entries with accountNumber, nameDe, nameEn.

ctx Context code str
suggest_skr_category
annotations: none low

Use AI to find the best matching SKR categories by name or description. ⚠️ SME ONLY — this tool works exclusively for GmbH/UG companies with a DATEV chart of accounts (SKR03/SKR04). For freelance accounts use 'categorize_transaction' which has its own AI-powered category detection. Sends the query to OpenAI along with the full SKR catalog as context, so it can semantically match even vague or partial descriptions. Returns up to 5 best matching entries with accountNumber, nameDe, nameEn. NOTE: This calls OpenAI — prefer search_skr_by_code when you have a code.

ctx Context query str
create_company_category
annotations: none low

Create a new custom company category for the active SME company. ⚠️ SME ONLY — only works for GmbH/UG companies with a DATEV chart of accounts. Not applicable to freelance accounts. Use search_skr_by_code or suggest_skr_category first to find the right account number from the full SKR catalog, then create the category here.

ctx Context code str name str name_de string description string cashflow_type str
update_corporate_financials
annotations: none low

Section 5 (financials): capital, start of activity, fiscal year, expected profits.

ctx Context public_id str share_capital string fiscal_year_start string business_start_date string divergent_fiscal_year string expected_profit_founding_year string expected_profit_following_year string
set_company_categories_visibility
annotations: none low

Hide or unhide SME company categories in bulk. ⚠️ SME ONLY — GmbH/UG companies with a DATEV chart of accounts. Hidden categories disappear from the category pickers in the app and from the candidate list the AI categorizer picks from. Nothing is deleted: transactions already booked on a hidden category keep it (the result reports transactionsCount / itemsCount per row), and unhiding restores the row exactly as it was. The main use: a company whose chart was provisioned twice and now shows both SKR03 and SKR04 accounts. Hide the chart it does not use. Selectors combine with AND and at least one is required. A non-zero summary.skippedCustom means the filter passed over hand-made accounts — rerun with include_custom=true if the user meant those too. Preview with dry_run=true and tell the user what would be hidden before doing it for real — this changes what they can book on.

ctx Context codes string action str dry_run bool category_ids string cashflow_type string chart_template string include_custom bool
get_company_details
annotations: none low

Get detailed information about the user's company.

ctx Context
get_company_balance
annotations: none low

Get the current balance of the company. Returns: Company balance information

ctx Context
update_company_details
annotations: none low

Update company information. For SME companies you can also set chart_of_accounts, DATEV advisor/client numbers.

ctx Context city string name string phone string tax_id string vat_id string address string country string zip_code string tax_state string profession string activity_start string chart_of_accounts string datev_client_number string datev_advisor_number string
list_company_categories
annotations: none low

List SME company categories from the DATEV chart of accounts (SKR03/SKR04). These categories are specific to the company and are used for GmbH/UG bookkeeping. Each category has a code (e.g. '4200'), name, cashflow type, and sourceTemplate — the chart of accounts it was provisioned from ('' for hand-made ones). A company showing both SKR03 and SKR04 accounts can be cleaned up with set_company_categories_visibility. Hidden categories are omitted unless include_inactive=true.

ctx Context cashflow_type string chart_template string include_inactive bool
list_coa_templates
annotations: none low

List available Chart of Accounts templates (e.g. SKR03, SKR04) that can be assigned to an SME company.

ctx Context
trigger_datev_export
annotations: none low

Trigger a DATEV export for the company's transactions in the specified period. Generates a ZIP containing a DATEV EXTF CSV, a human-readable statement CSV, and optionally all attached documents. Only finalized transactions are included.

ctx Context date_to str date_from str include_documents bool
create_invoice
annotations: none low

Create a new invoice. Ask for additional information if needed, for example: - If the client is not found, ask for the client details and create a new client if necessary. - If pyament reminder should be sent, ask for the reminder settings. - If the invoice type is GOODS, ask for the delivery date. - If the invoice type is SERVICES, ask for the service start and end dates. - If the invoice should be sent to the client, ask for the email data. Args: client_id: ID of the client for the invoice items: List of invoice items, each containing name, quantity, rate, vatRate and total. Example: [{"name": "Software Development", "quantity": 3, "rate": 30000, "vatRate": 19, "total": 1071}] // VAT rates might be 0, 7, 19. By default it's 19. Rate and total are in cents. invoice_number: Optional invoice number (will be auto-generated if not provided) issued: Issue date in YYYY-MM-DD format due_to: Due date in YYYY-MM-DD format currency: Invoice currency (EUR, USD), by default it's EUR payment_terms: Payment terms text notes: Additional notes language: Invoice language (en, de) invoice_type: Type of invoice (SERVICES, GOODS) is_vat_included: Whether prices include VAT bank_name: Name of the bank (gets from company details if exists) iban: IBAN for payments (gets from company details if exists) bic: BIC/SWIFT code (gets from company details if exists) create_qr: Whether to create payment QR code (only if BIC and IBAN provided) color_schema: Invoice style color (hex code) font: Invoice font (e.g. "Plus Jakarta Sans", "Inter") is_to_send: Whether to send invoice automatically to client mailing_data: Email data if is_to_send is True. Example: { "emailSubject": "Invoice No.{invoice_number} for {client_name}", "emailBody": "Dear {client_name},...", "customClientEmail": "client@example.com" // email to send the invoice to, if not provided, it will be sent to the client email address } settings_on_overdue: Configuration for overdue notifications. Example: { "isToAutosendNotification": true, // whether to send notification automatically "customEmailSubject": "Reminder: Invoice {invoice_number} is overdue", // custom email subject "customEmailBody": "Dear {client_name},...", // custom email body "notifyAfterDays": [1, 3], // days to notify after the due date "notifyInParticularDays": [] // days to notify in particular dates [2025-05-23", "2025-05-24"] } service_start_date: Service period start date (YYYY-MM-DD) by default it's today, should be provided if invoice_type is SERVICES service_end_date: Service period end date (YYYY-MM-DD) by default it's one month from today, should be provided if invoice_type is SERVICES delivery_date: Delivery date for goods (YYYY-MM-DD) by default it's today, should be provided if invoice_type is GOODS Returns: Information about the created invoice. Use downloadUrl for a direct temporary PDF download link (valid for 1 hour).

bic string ctx Context font str iban string items string notes string due_to string issued string currency str language str bank_name string client_id str create_qr bool is_to_send bool color_schema str invoice_type str mailing_data string delivery_date string payment_terms string invoice_number string is_vat_included bool service_end_date string service_start_date string settings_on_overdue string
create_recurring_invoice
annotations: none low

Create a recurring invoice that will automatically generate new invoices based on specified frequency. Useful for contracts or services that bill on a regular basis. Always ask for reccurring configuration, for example: - How often to generate invoices (weekly, monthly) - Number of units for frequency (e.g. 1 for monthly = every month, 2 = every 2 months) - Start date - End date - End invoice count (optional) Ask for additional information if needed, for example: - If the client is not found, ask for the client details and create a new client if necessary. - If the invoice number is not provided, ask for it. - If the due date is not provided, ask for it. - If the payment terms are not provided, ask for it. - If the bank details are not provided, ask for it. Args: client_id: ID of the client for the invoice items: List of invoice items, each containing name, quantity, rate, vatRate and total frequency_type: How often to generate invoices ("weekly", "monthly") frequency_unit: Number of units for frequency (e.g. 1 for monthly = every month, 2 = every 2 months) starts_from_date: Date to start generating invoices from (YYYY-MM-DD) ends_on_date: Optional end date for recurring invoices (YYYY-MM-DD). Either ends_on_date or ends_on_invoice_count should be provided. ends_on_invoice_count: Optional number of invoices to generate before stopping. Either ends_on_date or ends_on_invoice_count should be provided. invoice_number: Base invoice number (will be auto-generated if not provided) issued: Issue date in YYYY-MM-DD format due_to: Due date in YYYY-MM-DD format currency: Invoice currency (EUR, USD), by default it's EUR payment_terms: Payment terms text notes: Additional notes language: Invoice language (en, de) invoice_type: Type of invoice (SERVICES, GOODS) is_vat_included: Whether prices include VAT bank_name: Name of the bank iban: IBAN for payments bic: BIC/SWIFT code create_qr: Whether to create payment QR code color_schema: Invoice style color (hex code) font: Invoice font (e.g. "Plus Jakarta Sans", "Inter") is_to_send: Whether to send invoices automatically to client settings_on_overdue: Configuration for overdue notifications service_start_date: Service period start date (for SERVICES type) service_end_date: Service period end date (for SERVICES type) delivery_date: Delivery date (for GOODS type) Returns: Information about the created recurring invoice. Use downloadUrl for a direct temporary PDF download link (valid for 1 hour).

bic string ctx Context font str iban string items string notes string due_to string issued string currency str language str bank_name string client_id str create_qr bool is_to_send bool color_schema str ends_on_date string invoice_type str delivery_date string payment_terms string frequency_type str frequency_unit int invoice_number string is_vat_included bool service_end_date string starts_from_date str service_start_date string settings_on_overdue string ends_on_invoice_count string
get_invoice
annotations: none low

Get detailed information about a specific invoice. Args: invoice_id: ID of the invoice to retrieve Returns: Detailed invoice information

ctx Context invoice_id str
send_invoice
annotations: none low

Send an invoice via email. Args: invoice_id: ID of the invoice to send subject: Email subject line body: Email body content additional_emails: List of additional email addresses to send to is_send_to_company: Whether to send the copy to the company email (Owner) custom_client_email: Custom email address for the client (By default the email address of the client is used if it is set) Returns: Response from the send invoice request

ctx Context body str subject str invoice_id str additional_emails string is_send_to_company bool custom_client_email string
get_corporate_submission_link
annotations: none low

The FINAL step: hand the user over to the Norman app to review and submit. The e-filing to the Finanzamt (via ELSTER) is a binding legal act, so it is done in the app only: the user opens the link, sees the rendered ELSTER preview of every answer and presses Submit themselves. Returns the link plus the current completeness state — if `readyToSubmit` is false, finish the `missing` fields first.

ctx Context
send_invoice_overdue_reminder
annotations: none low

Send an overdue payment reminder for an invoice via email. Args: invoice_id: ID of the invoice to send reminder for subject: Email subject line body: Email body content additional_emails: List of additional email addresses to send to is_send_to_company: Whether to send the copy to the company email (Owner) custom_client_email: Custom email address for the client (By default the email address of the client is used if it is set) Returns: Response from the send overdue reminder request

ctx Context body str subject str invoice_id str additional_emails string is_send_to_company bool custom_client_email string
link_transaction
annotations: none low

Link a transaction to an invoice. Args: invoice_id: ID of the invoice transaction_id: ID of the transaction to link Returns: Response from the link transaction request

ctx Context invoice_id str transaction_id str
get_einvoice_xml
annotations: none low

Get the e-invoice XML for a specific invoice. Args: invoice_id: ID of the invoice to get XML for Returns: E-invoice XML data

ctx Context invoice_id str
list_invoices
annotations: none low

List invoices with optional filtering. Args: status: Filter by invoice status (draft, pending, sent, paid, overdue, uncollectible) name: Filter by invoice (client) name from_date: Filter invoices created after this date (YYYY-MM-DD) to_date: Filter invoices created before this date (YYYY-MM-DD) limit: Maximum number of invoices to return (default 100) Returns: List of invoices matching the criteria

ctx Context name string limit string status string to_date string from_date string
get_invoice_preview
annotations: none low

Get a visual preview of an invoice. Returns an inline JPEG image of the first page of the invoice PDF, rendered directly in clients that support MCP ImageContent. Also includes a downloadUrl for the full PDF.

ctx Context invoice_id str
get_client_overview
annotations: none low

Get an aggregated financial health snapshot for a client company. Combines company details, balance, transaction stats, missing receipts, outstanding invoices, and tax report status into a single overview. Designed for tax advisors managing multiple client companies. Returns: A structured overview with company info, financial summary, document completeness, and tax compliance status.

ctx Context company_id str
get_missing_documents_summary
annotations: none low

List all transactions without receipts for a client company, grouped by month and category with amounts. Useful for tax advisors to know what documents to request from the client. Returns: Summary with total missing count, grouped by month, and a flat list of the top missing transactions ordered by amount.

ctx Context date_to string date_from string company_id str
get_tax_compliance_status
annotations: none low

Check the tax compliance status for a client company. Identifies which tax reports are due, overdue, or unfiled, and flags any validation issues. Returns: Compliance summary with report status breakdown and action items.

ctx Context company_id str
ping_client_for_documents
annotations: none low

Send document request reminders to a client for multiple transactions at once. Each transaction triggers an email to the company owner asking them to upload the missing receipt or invoice. Returns: Summary of which pings succeeded and which failed.

ctx Context company_id str transaction_ids string
list_tax_advisor_clients
annotations: none low

List all client companies managed by the authenticated tax advisor. Each entry includes the company ID, name, account type, transaction count, and number of transactions missing documents. Use the returned company IDs with switch_company to change the active company, or pass them to other tax advisor tools like get_client_overview.

ctx Context
switch_company
annotations: none low

Switch the active company context. All subsequent tool calls will operate on the selected company. Tax advisors can use this to switch between client companies; regular users can switch if they own multiple companies.

ctx Context company_id str
update_corporate_vat_and_bank
annotations: none low

Section 6 (VAT & bank): revenue forecast, Kleinunternehmer choice, taxation method, VAT ID and the refund bank account.

ctx Context bank_iban string public_id str request_vat_id string taxation_method string is_kleinunternehmer string bank_account_holder_name string bank_account_holder_role string kleinunternehmer_charge_vat string expected_revenue_founding_year string expected_revenue_following_year string estimated_vat_amount_founding_year string
create_offer
annotations: none low

Create a new offer/quote. Args: client_id: ID of the client for the offer items: List of offer items. Example: [{"name": "Software Development", "quantity": 3, "rate": 30000, "vatRate": 19}] VAT rates might be 0, 7, 19. Rate is in cents. offer_number: Optional offer number (will be auto-generated if not provided) issued: Issue date in YYYY-MM-DD format valid_until: Offer validity date in YYYY-MM-DD format (defaults to 30 days from today) currency: Offer currency (EUR, USD), by default it's EUR payment_terms: Payment terms text notes: Additional notes language: Offer language (en, de) invoice_type: Type of offer (SERVICES, GOODS) is_vat_included: Whether prices include VAT bank_name: Name of the bank iban: IBAN for payments bic: BIC/SWIFT code create_qr: Whether to create payment QR code (only if BIC and IBAN provided) color_schema: Offer style color (hex code) font: Offer font (e.g. "Plus Jakarta Sans", "Inter") is_to_send: Whether to send the offer automatically to client mailing_data: Email data if is_to_send is True service_start_date: Service period start date (YYYY-MM-DD) service_end_date: Service period end date (YYYY-MM-DD) delivery_date: Delivery date for goods (YYYY-MM-DD) Returns: Information about the created offer. Use downloadUrl for a direct temporary PDF download link when available.

bic string ctx Context font str iban string items string notes string issued string currency str language str bank_name string client_id str create_qr bool is_to_send bool valid_until string color_schema str invoice_type str mailing_data string offer_number string delivery_date string payment_terms string is_vat_included bool service_end_date string service_start_date string
list_offers
annotations: none low

List offers/quotes with optional filtering. Args: status: Filter by offer status (draft, pending, saved, sent, approved) name: Filter by client name from_date: Filter offers created after this date (YYYY-MM-DD) to_date: Filter offers created before this date (YYYY-MM-DD) limit: Maximum number of offers to return (default 100) Returns: List of offers matching the criteria

ctx Context name string limit string status string to_date string from_date string
get_offer
annotations: none low

Get detailed information about a specific offer/quote. Args: offer_id: ID of the offer to retrieve Returns: Detailed offer information

ctx Context offer_id str
send_offer
annotations: none low

Send an offer/quote via email. Args: offer_id: ID of the offer to send subject: Email subject line body: Email body content additional_emails: List of additional email addresses to send to is_send_to_company: Whether to send a copy to the company email custom_client_email: Custom client email address Returns: Response from the send offer request

ctx Context body str subject str offer_id str additional_emails string is_send_to_company bool custom_client_email string
convert_offer_to_invoice
annotations: none low

Convert an offer/quote into an invoice. The backend creates a new invoice from the quote data and removes the original quote. Args: offer_id: ID of the offer to convert Returns: Newly created invoice information

ctx Context offer_id str
get_corporate_tax_registration
annotations: none low

Get the user's corporate tax registration (Fragebogen), if any. Call this FIRST. A "not found" response means there is none — offer to start one with create_corporate_tax_registration. Otherwise resume from `sections.missing`. `status` == 'submitted' means it was already e-filed; `reportUrl` carries the transmission protocol PDF.

ctx Context
get_corporate_tax_registration_choices
annotations: none low

Get the valid values for the corporate Fragebogen enum fields (value → label).

ctx Context
create_corporate_tax_registration
annotations: none low

Start the corporate Fragebogen. 400 if an active one already exists (use get_corporate_tax_registration). When linked to an incorporation, the company data, notary date, capital, shareholders and managing directors are prefilled — review `sections.missing` afterwards and only ask the user for what is still open.

ctx Context incorporation_public_id string
update_corporate_company
annotations: none low

Section 1 (company): name, seat, addresses, contact, activity and tax office.

ctx Context email string phone string website string public_id str seat_city string legal_form string tax_office string company_name string business_city string business_street string management_city string management_street string business_additional string activity_description string business_postal_code string business_house_number string management_additional string management_postal_code string management_address_same string management_house_number string
update_corporate_registration_details
annotations: none low

Section 2 (registration): notary date and Handelsregister state.

ctx Context public_id str hr_registered string register_type string register_court string register_number string hr_application_date string hr_application_filed string hr_registration_date string notary_contract_date string
set_corporate_people
annotations: none low

Sections 3+4 (people): managing directors and shareholders, replace-all semantics.

ctx Context public_id str representatives string shareholder_entries string
create_gewerbe_registration
annotations: none low

Start a Gewerbeanmeldung. 400 if one already exists (use get_gewerbe_registration). If linked to an incorporation, the company, address, activity and managing directors are pre-filled. For self-employed users the answers from their tax-registration Fragebogen are carried over automatically.

ctx Context incorporation_public_id string
update_gewerbe_basic
annotations: none low

Section 1 (basics): when the trade starts and whether it's a head or branch office.

ctx Context public_id str establishment_type string activity_start_date string
update_gewerbe_business
annotations: none low

Section 2 (business): legal form, name, Betriebsstätte address, activity, licence, public-sector participation and employees. `commercialRegisterNumber` is required for legal entities (GmbH/UG/AG/…); licence/employee details only when their flag is true.

ctx Context public_id str legal_form string business_city string business_type string has_employees string business_email string business_phone string business_street string registered_name string license_required string license_authority string license_issue_date string employees_full_time string employees_part_time string activity_description string business_postal_code string business_house_number string commercial_register_number string public_sector_participation string
update_gewerbe_owner
annotations: none low

Section 3 (owner / authorized representative): personal data, address and main-vs-secondary occupation. Set `ownerAddressSameAsBusiness` true when the home is the business address; otherwise provide the residence fields.

ctx Context owner_dob string public_id str owner_email string owner_phone string owner_gender string activity_type string owner_last_name string owner_birth_name string owner_first_names string owner_nationality string owner_place_of_birth string owner_residence_city string owner_residence_type string owner_country_of_birth string owner_residence_street string owner_residence_postal_code string owner_residence_house_number string owner_address_same_as_business string
suggest_gewerbe_activity
annotations: none low

Reformulate a rough trade activity into precise, Gewerbeamt-ready wording. Returns {"suggestion": ...} — a faithful same-language rewrite (concrete activity, no catch-all phrases, nothing invented). Show it to the user; apply it via update_gewerbe_business(activity_description=...) only if they accept.

ctx Context draft str public_id str
generate_gewerbe_document
annotations: none low

Generate the pre-filled GewA 1 PDF. 400 + `missing` if a section is incomplete. Get the user's explicit confirmation first. The PDF is a template for self-submission to the Gewerbeamt (not legal advice); it carries a blank signature line for the user to sign on paper. Returns the download descriptor; follow with get_gewerbe_trade_office to tell them where to submit.

ctx Context public_id str
get_gewerbe_document_preview
annotations: none low

Return the first page of the generated GewA 1 as an image for the user to review.

ctx Context public_id str
get_gewerbe_trade_office
annotations: none low

Resolve the responsible trade office (Gewerbeamt) for the business address. Returns {"office": {...}} or {"office": null} — if null, tell the user to search for "<their city> Gewerbeamt" to find where to submit.

ctx Context public_id str
list_vendors
annotations: none low

Get a list of all vendors (suppliers) for the company. Returns: List of vendors with their details

ctx Context
get_vendor
annotations: none low

Get detailed information about a specific vendor. Args: vendor_id: ID of the vendor to retrieve Returns: Detailed vendor information

ctx Context vendor_id str
create_vendor
annotations: none low

Create a new vendor (supplier). Args: name: Vendor name or business name iban: Vendor bank account IBAN bic: Vendor bank BIC/SWIFT email: Vendor email address phone: Vendor phone number address: Vendor physical address country: Vendor country code (e.g. "DE") vat_number: Vendor VAT number Returns: Newly created vendor record

bic string ctx Context iban string name str email string phone string address string country string vat_number string
update_vendor
annotations: none low

Update an existing vendor. Only the fields you pass are changed. Args: vendor_id: ID of the vendor to update name: Updated vendor name iban: Updated IBAN bic: Updated BIC/SWIFT email: Updated email address phone: Updated phone number address: Updated physical address country: Updated country code (e.g. "DE") vat_number: Updated VAT number Returns: Updated vendor record

bic string ctx Context iban string name string email string phone string address string country string vendor_id str vat_number string
delete_vendor
annotations: none low

Delete a vendor. Args: vendor_id: ID of the vendor to delete Returns: Confirmation of deletion

ctx Context vendor_id str

Permissions 3

network medium
Server uses network capabilities via: http, httpx, requests, urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, tempfile
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 273

low
Tool 'get_vat_next_report' has no annotations annotation_checker · 100%
low
Tool 'search_transactions' has no annotations annotation_checker · 100%
low
Tool 'list_tax_reports' has no annotations annotation_checker · 100%
low
Tool 'get_tax_report' has no annotations annotation_checker · 100%
low
Tool 'validate_tax_number' has no annotations annotation_checker · 100%
low
Tool 'generate_finanzamt_preview' has no annotations annotation_checker · 100%
low
Tool 'submit_tax_report' has no annotations annotation_checker · 100%
low
Tool 'list_tax_states' has no annotations annotation_checker · 100%
low
Tool 'list_tax_settings' has no annotations annotation_checker · 100%
low
Tool 'update_tax_setting' has no annotations annotation_checker · 100%
low
Tool 'get_company_tax_statistics' has no annotations annotation_checker · 100%
low
Tool 'create_transaction' has no annotations annotation_checker · 100%
low
Tool 'update_transaction' has no annotations annotation_checker · 100%
low
Tool 'categorize_transaction' has no annotations annotation_checker · 100%
low
Tool 'change_transaction_verification' has no annotations annotation_checker · 100%
low
Tool 'list_clients' has no annotations annotation_checker · 100%
low
Tool 'get_client' has no annotations annotation_checker · 100%
low
Tool 'create_client' has no annotations annotation_checker · 100%
low
Tool 'update_client' has no annotations annotation_checker · 100%
low
Tool 'delete_client' has no annotations annotation_checker · 100%
low
Tool 'list_rules' has no annotations annotation_checker · 100%
low
Tool 'preview_rule' has no annotations annotation_checker · 100%
low
Tool 'create_rule' has no annotations annotation_checker · 100%
low
Tool 'update_rule' has no annotations annotation_checker · 100%
low
Tool 'delete_rule' has no annotations annotation_checker · 100%
low
Tool 'apply_rule_to_existing' has no annotations annotation_checker · 100%
low
Tool 'list_rule_executions' has no annotations annotation_checker · 100%
low
Tool 'list_pending_approvals' has no annotations annotation_checker · 100%
low
Tool 'undo_rule_execution' has no annotations annotation_checker · 100%
low
Tool 'list_agents' has no annotations annotation_checker · 100%
low
Tool 'toggle_agent' has no annotations annotation_checker · 100%
low
Tool 'approve_rule_execution' has no annotations annotation_checker · 100%
low
Tool 'dismiss_rule_execution' has no annotations annotation_checker · 100%
low
Tool 'list_bills' has no annotations annotation_checker · 100%
low
Tool 'get_bill' has no annotations annotation_checker · 100%
low
Tool 'update_bill' has no annotations annotation_checker · 100%
low
Tool 'mark_bill_paid' has no annotations annotation_checker · 100%
low
Tool 'pay_bill' has no annotations annotation_checker · 100%
low
Tool 'delete_bill' has no annotations annotation_checker · 100%
low
Tool 'get_incorporation' has no annotations annotation_checker · 100%
low
Tool 'get_incorporation_choices' has no annotations annotation_checker · 100%
low
Tool 'create_incorporation' has no annotations annotation_checker · 100%
low
Tool 'update_incorporation_company' has no annotations annotation_checker · 100%
low
Tool 'update_incorporation_capital' has no annotations annotation_checker · 100%
low
Tool 'add_incorporation_shareholder' has no annotations annotation_checker · 100%
low
Tool 'update_incorporation_shareholder' has no annotations annotation_checker · 100%
low
Tool 'invite_incorporation_shareholder' has no annotations annotation_checker · 100%
low
Tool 'remove_incorporation_shareholder' has no annotations annotation_checker · 100%
low
Tool 'set_incorporation_agreement' has no annotations annotation_checker · 100%
low
Tool 'update_incorporation_notary_preferences' has no annotations annotation_checker · 100%
low
Tool 'generate_incorporation_documents' has no annotations annotation_checker · 100%
low
Tool 'get_incorporation_document_preview' has no annotations annotation_checker · 100%
low
Tool 'match_incorporation_notaries' has no annotations annotation_checker · 100%
low
Tool 'request_incorporation_notary' has no annotations annotation_checker · 100%
low
Tool 'suggest_incorporation_purpose' has no annotations annotation_checker · 100%
low
Tool 'check_incorporation_name' has no annotations annotation_checker · 100%
low
Tool 'complete_incorporation_step' has no annotations annotation_checker · 100%
low
Tool 'request_file_upload' has no annotations annotation_checker · 100%
low
Tool 'upload_bulk_attachments' has no annotations annotation_checker · 100%
low
Tool 'list_attachments' has no annotations annotation_checker · 100%
low
Tool 'create_attachment' has no annotations annotation_checker · 100%
low
Tool 'link_attachment_transaction' has no annotations annotation_checker · 100%
low
Tool 'delete_attachment' has no annotations annotation_checker · 100%
low
Tool 'get_attachment_preview' has no annotations annotation_checker · 100%
low
Tool 'search_skr_by_code' has no annotations annotation_checker · 100%
low
Tool 'suggest_skr_category' has no annotations annotation_checker · 100%
low
Tool 'create_company_category' has no annotations annotation_checker · 100%
low
Tool 'set_company_categories_visibility' has no annotations annotation_checker · 100%
low
Tool 'get_company_details' has no annotations annotation_checker · 100%
low
Tool 'get_company_balance' has no annotations annotation_checker · 100%
low
Tool 'update_company_details' has no annotations annotation_checker · 100%
low
Tool 'list_company_categories' has no annotations annotation_checker · 100%
low
Tool 'list_coa_templates' has no annotations annotation_checker · 100%
low
Tool 'trigger_datev_export' has no annotations annotation_checker · 100%
low
Tool 'create_invoice' has no annotations annotation_checker · 100%
low
Tool 'create_recurring_invoice' has no annotations annotation_checker · 100%
low
Tool 'get_invoice' has no annotations annotation_checker · 100%
low
Tool 'send_invoice' has no annotations annotation_checker · 100%
low
Tool 'send_invoice_overdue_reminder' has no annotations annotation_checker · 100%
low
Tool 'link_transaction' has no annotations annotation_checker · 100%
low
Tool 'get_einvoice_xml' has no annotations annotation_checker · 100%
low
Tool 'list_invoices' has no annotations annotation_checker · 100%
low
Tool 'get_invoice_preview' has no annotations annotation_checker · 100%
low
Tool 'get_client_overview' has no annotations annotation_checker · 100%
low
Tool 'get_missing_documents_summary' has no annotations annotation_checker · 100%
low
Tool 'get_tax_compliance_status' has no annotations annotation_checker · 100%
low
Tool 'ping_client_for_documents' has no annotations annotation_checker · 100%
low
Tool 'list_tax_advisor_clients' has no annotations annotation_checker · 100%
low
Tool 'switch_company' has no annotations annotation_checker · 100%
low
Tool 'create_offer' has no annotations annotation_checker · 100%
low
Tool 'list_offers' has no annotations annotation_checker · 100%
low
Tool 'get_offer' has no annotations annotation_checker · 100%
low
Tool 'send_offer' has no annotations annotation_checker · 100%
low
Tool 'convert_offer_to_invoice' has no annotations annotation_checker · 100%
low
Tool 'get_corporate_tax_registration' has no annotations annotation_checker · 100%
low
Tool 'get_corporate_tax_registration_choices' has no annotations annotation_checker · 100%
low
Tool 'create_corporate_tax_registration' has no annotations annotation_checker · 100%
low
Tool 'update_corporate_company' has no annotations annotation_checker · 100%
low
Tool 'update_corporate_registration_details' has no annotations annotation_checker · 100%
low
Tool 'set_corporate_people' has no annotations annotation_checker · 100%
low
Tool 'update_corporate_financials' has no annotations annotation_checker · 100%
low
Tool 'update_corporate_vat_and_bank' has no annotations annotation_checker · 100%
low
Tool 'get_corporate_submission_link' has no annotations annotation_checker · 100%
low
Tool 'get_gewerbe_registration' has no annotations annotation_checker · 100%
low
Tool 'get_gewerbe_registration_choices' has no annotations annotation_checker · 100%
low
Tool 'create_gewerbe_registration' has no annotations annotation_checker · 100%
low
Tool 'update_gewerbe_basic' has no annotations annotation_checker · 100%
low
Tool 'update_gewerbe_business' has no annotations annotation_checker · 100%
low
Tool 'update_gewerbe_owner' has no annotations annotation_checker · 100%
low
Tool 'suggest_gewerbe_activity' has no annotations annotation_checker · 100%
low
Tool 'generate_gewerbe_document' has no annotations annotation_checker · 100%
low
Tool 'get_gewerbe_document_preview' has no annotations annotation_checker · 100%
low
Tool 'get_gewerbe_trade_office' has no annotations annotation_checker · 100%
low
Tool 'list_vendors' has no annotations annotation_checker · 100%
low
Tool 'get_vendor' has no annotations annotation_checker · 100%
low
Tool 'create_vendor' has no annotations annotation_checker · 100%
low
Tool 'update_vendor' has no annotations annotation_checker · 100%
low
Tool 'delete_vendor' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: requests@2.25.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (GHSA-j8r2-6x86-q33q) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (PYSEC-2023-74) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (PYSEC-2026-1872) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (PYSEC-2026-1873) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.25.0 (PYSEC-2026-2275) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@0.19.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@0.19.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0.0 (GHSA-cpwx-vrp4-4pq7) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0.0 (GHSA-gmj6-6f8f-6699) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0.0 (GHSA-h5c8-rqwp-cp95) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0.0 (GHSA-h75v-3vvj-5mfj) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0.0 (GHSA-q2x7-8rv6-6q7h) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0.0 (PYSEC-2026-1471) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0.0 (PYSEC-2026-1472) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0.0 (PYSEC-2026-1473) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0.0 (PYSEC-2026-1474) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0.0 (PYSEC-2026-1475) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: list_tax_reports manifest_parser · 90%
info
Tool: get_tax_report manifest_parser · 90%
info
Tool: validate_tax_number manifest_parser · 90%
info
Tool: generate_finanzamt_preview manifest_parser · 90%
info
Tool: submit_tax_report manifest_parser · 90%
info
Tool: list_tax_states manifest_parser · 90%
info
Tool: list_tax_settings manifest_parser · 90%
info
Tool: update_tax_setting manifest_parser · 90%
info
Tool: get_company_tax_statistics manifest_parser · 90%
info
Tool: get_vat_next_report manifest_parser · 90%
info
Tool: search_transactions manifest_parser · 90%
info
Tool: create_transaction manifest_parser · 90%
info
Tool: update_transaction manifest_parser · 90%
info
Tool: categorize_transaction manifest_parser · 90%
info
Tool: change_transaction_verification manifest_parser · 90%
info
Tool: list_clients manifest_parser · 90%
info
Tool: get_client manifest_parser · 90%
info
Tool: create_client manifest_parser · 90%
info
Tool: update_client manifest_parser · 90%
info
Tool: delete_client manifest_parser · 90%
info
Tool: list_rules manifest_parser · 90%
info
Tool: preview_rule manifest_parser · 90%
info
Tool: create_rule manifest_parser · 90%
info
Tool: update_rule manifest_parser · 90%
info
Tool: delete_rule manifest_parser · 90%
info
Tool: apply_rule_to_existing manifest_parser · 90%
info
Tool: list_rule_executions manifest_parser · 90%
info
Tool: list_pending_approvals manifest_parser · 90%
info
Tool: undo_rule_execution manifest_parser · 90%
info
Tool: list_agents manifest_parser · 90%
info
Tool: toggle_agent manifest_parser · 90%
info
Tool: approve_rule_execution manifest_parser · 90%
info
Tool: dismiss_rule_execution manifest_parser · 90%
info
Tool: list_bills manifest_parser · 90%
info
Tool: get_bill manifest_parser · 90%
info
Tool: update_bill manifest_parser · 90%
info
Tool: mark_bill_paid manifest_parser · 90%
info
Tool: pay_bill manifest_parser · 90%
info
Tool: delete_bill manifest_parser · 90%
info
Tool: get_incorporation manifest_parser · 90%
info
Tool: get_incorporation_choices manifest_parser · 90%
info
Tool: create_incorporation manifest_parser · 90%
info
Tool: update_incorporation_company manifest_parser · 90%
info
Tool: update_incorporation_capital manifest_parser · 90%
info
Tool: get_vendor manifest_parser · 90%
info
Tool: add_incorporation_shareholder manifest_parser · 90%
info
Tool: update_incorporation_shareholder manifest_parser · 90%
info
Tool: invite_incorporation_shareholder manifest_parser · 90%
info
Tool: remove_incorporation_shareholder manifest_parser · 90%
info
Tool: set_incorporation_agreement manifest_parser · 90%
info
Tool: update_incorporation_notary_preferences manifest_parser · 90%
info
Tool: generate_incorporation_documents manifest_parser · 90%
info
Tool: get_incorporation_document_preview manifest_parser · 90%
info
Tool: match_incorporation_notaries manifest_parser · 90%
info
Tool: request_incorporation_notary manifest_parser · 90%
info
Tool: suggest_incorporation_purpose manifest_parser · 90%
info
Tool: check_incorporation_name manifest_parser · 90%
info
Tool: complete_incorporation_step manifest_parser · 90%
info
Tool: request_file_upload manifest_parser · 90%
info
Tool: upload_bulk_attachments manifest_parser · 90%
info
Tool: list_attachments manifest_parser · 90%
info
Tool: get_client_overview manifest_parser · 90%
info
Tool: create_attachment manifest_parser · 90%
info
Tool: link_attachment_transaction manifest_parser · 90%
info
Tool: delete_attachment manifest_parser · 90%
info
Tool: get_attachment_preview manifest_parser · 90%
info
Tool: search_skr_by_code manifest_parser · 90%
info
Tool: suggest_skr_category manifest_parser · 90%
info
Tool: create_company_category manifest_parser · 90%
info
Tool: get_missing_documents_summary manifest_parser · 90%
info
Tool: set_company_categories_visibility manifest_parser · 90%
info
Tool: get_company_details manifest_parser · 90%
info
Tool: get_company_balance manifest_parser · 90%
info
Tool: update_company_details manifest_parser · 90%
info
Tool: list_company_categories manifest_parser · 90%
info
Tool: list_coa_templates manifest_parser · 90%
info
Tool: trigger_datev_export manifest_parser · 90%
info
Tool: create_invoice manifest_parser · 90%
info
Tool: get_tax_compliance_status manifest_parser · 90%
info
Tool: ping_client_for_documents manifest_parser · 90%
info
Tool: create_recurring_invoice manifest_parser · 90%
info
Tool: get_invoice manifest_parser · 90%
info
Tool: send_invoice manifest_parser · 90%
info
Tool: send_invoice_overdue_reminder manifest_parser · 90%
info
Tool: link_transaction manifest_parser · 90%
info
Tool: get_einvoice_xml manifest_parser · 90%
info
Tool: list_invoices manifest_parser · 90%
info
Tool: get_invoice_preview manifest_parser · 90%
info
Tool: list_tax_advisor_clients manifest_parser · 90%
info
Tool: switch_company manifest_parser · 90%
info
Tool: create_offer manifest_parser · 90%
info
Tool: list_offers manifest_parser · 90%
info
Tool: get_offer manifest_parser · 90%
info
Tool: send_offer manifest_parser · 90%
info
Tool: convert_offer_to_invoice manifest_parser · 90%
info
Tool: get_corporate_tax_registration manifest_parser · 90%
info
Tool: get_corporate_tax_registration_choices manifest_parser · 90%
info
Tool: create_corporate_tax_registration manifest_parser · 90%
info
Tool: update_corporate_company manifest_parser · 90%
info
Tool: update_corporate_registration_details manifest_parser · 90%
info
Tool: set_corporate_people manifest_parser · 90%
info
Tool: update_corporate_financials manifest_parser · 90%
info
Tool: update_corporate_vat_and_bank manifest_parser · 90%
info
Tool: get_corporate_submission_link manifest_parser · 90%
info
Tool: get_gewerbe_registration manifest_parser · 90%
info
Tool: get_gewerbe_registration_choices manifest_parser · 90%
info
Tool: create_gewerbe_registration manifest_parser · 90%
info
Tool: update_gewerbe_basic manifest_parser · 90%
info
Tool: update_gewerbe_business manifest_parser · 90%
info
Tool: update_gewerbe_owner manifest_parser · 90%
info
Tool: suggest_gewerbe_activity manifest_parser · 90%
info
Tool: generate_gewerbe_document manifest_parser · 90%
info
Tool: get_gewerbe_document_preview manifest_parser · 90%
info
Tool: get_gewerbe_trade_office manifest_parser · 90%
info
Tool: list_vendors manifest_parser · 90%
info
Tool: create_vendor manifest_parser · 90%
info
Tool: update_vendor manifest_parser · 90%
info
Tool: delete_vendor manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (18) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Invisible Unicode characters in 'pay_bill' poisoning · 92%
critical
Tool poisoning in 'request_file_upload': Cross-tool sequencing directive poisoning · 85%
critical
Tool poisoning in 'delete_attachment': Prompt override: 'override' poisoning · 88%
critical
Invisible Unicode characters in 'search_skr_by_code' poisoning · 92%
critical
Invisible Unicode characters in 'suggest_skr_category' poisoning · 92%
critical
Invisible Unicode characters in 'create_company_category' poisoning · 92%
critical
Invisible Unicode characters in 'set_company_categories_visibility' poisoning · 92%
info
SBOM generated: 49 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%