Futuresense MCP Server
futuresense-mcp
npm
v1.2.0
Published by futuresenseai — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP server with 600+ AI-agent tools for invoicing, payroll, booking, accounting, CRM, payments, tax filing (incl. T2 corporate), churn off-ramps, and firm client management. Works with Claude, ChatGPT, Gemini, Cursor, and any MCP client.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: t2_generate_pdf → autocruise_get_logs → aicaller_bulk_sms. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow t2_generate_pdf → autocruise_get_logs → aicaller_bulk_sms
Tools 200
Each tool and what it can reach — statically extracted from the published source.
aicaller_bulk_smsnetwork egressaicaller_create_sms_templatenetwork egressaicaller_get_sms_logsnetwork egressaicaller_list_sms_templatesnetwork egressaicaller_send_smsnetwork egressautocruise_get_logsreads sensitive datat2_generate_pdfingests untrusted inputaccounting_approvals_listno sensitive capabilityaccounting_audit_log_listno sensitive capabilityacct_activate_leaseno sensitive capability
Show 190 more tools ↓
acct_appeal_claimno sensitive capabilityacct_apply_late_feeno sensitive capabilityacct_apply_tenant_paymentno sensitive capabilityacct_bulk_create_from_bankno sensitive capabilityacct_cancel_encounterno sensitive capabilityacct_close_periodno sensitive capabilityacct_complete_encounterno sensitive capabilityacct_convert_fxno sensitive capabilityacct_create_budgetno sensitive capabilityacct_create_claimno sensitive capabilityacct_create_encounterno sensitive capabilityacct_create_fixed_assetno sensitive capabilityacct_create_from_bank_txno sensitive capabilityacct_create_fx_rateno sensitive capabilityacct_create_leaseno sensitive capabilityacct_create_patientno sensitive capabilityacct_create_patient_paymentno sensitive capabilityacct_create_periodno sensitive capabilityacct_create_procedureno sensitive capabilityacct_create_propertyno sensitive capabilityacct_create_tenantno sensitive capabilityacct_create_tenant_paymentno sensitive capabilityacct_create_unitno sensitive capabilityacct_delete_budgetno sensitive capabilityacct_delete_fx_rateno sensitive capabilityacct_delete_patientno sensitive capabilityacct_delete_procedureno sensitive capabilityacct_delete_propertyno sensitive capabilityacct_delete_unitno sensitive capabilityacct_deny_claimno sensitive capabilityacct_dispose_fixed_assetno sensitive capabilityacct_get_ar_agingno sensitive capabilityacct_get_budgetno sensitive capabilityacct_get_budget_vs_actualno sensitive capabilityacct_get_cash_flowno sensitive capabilityacct_get_depreciation_scheduleno sensitive capabilityacct_get_fixed_assetno sensitive capabilityacct_get_income_statementno sensitive capabilityacct_get_statementno sensitive capabilityacct_get_trial_balanceno sensitive capabilityacct_import_proceduresno sensitive capabilityacct_import_statementno sensitive capabilityacct_list_budgetsno sensitive capabilityacct_list_fixed_assetsno sensitive capabilityacct_list_fx_ratesno sensitive capabilityacct_list_periodsno sensitive capabilityacct_list_reconciliationsno sensitive capabilityacct_list_statementsno sensitive capabilityacct_lock_periodno sensitive capabilityacct_match_transactionno sensitive capabilityacct_post_claim_paymentno sensitive capabilityacct_post_expenseno sensitive capabilityacct_post_monthly_rentno sensitive capabilityacct_post_single_rentno sensitive capabilityacct_refund_patient_paymentno sensitive capabilityacct_refund_tenant_paymentno sensitive capabilityacct_renew_leaseno sensitive capabilityacct_reopen_periodno sensitive capabilityacct_run_depreciationno sensitive capabilityacct_run_fx_revaluationno sensitive capabilityacct_submit_claimno sensitive capabilityacct_terminate_leaseno sensitive capabilityacct_unmatch_transactionno sensitive capabilityacct_update_budgetno sensitive capabilityacct_update_claimno sensitive capabilityacct_update_encounterno sensitive capabilityacct_update_fee_scheduleno sensitive capabilityacct_update_fixed_assetno sensitive capabilityacct_update_fx_rateno sensitive capabilityacct_update_leaseno sensitive capabilityacct_update_patientno sensitive capabilityacct_update_procedureno sensitive capabilityacct_update_propertyno sensitive capabilityacct_update_tenantno sensitive capabilityacct_update_unitno sensitive capabilityacct_void_claimno sensitive capabilityacct_void_expenseno sensitive capabilityacct_waive_chargeno sensitive capabilityacct_year_end_closeno sensitive capabilityadmin_api_usageno sensitive capabilityadmin_cross_project_analyticsno sensitive capabilityadmin_cross_project_healthno sensitive capabilityadmin_cross_project_userno sensitive capabilityadmin_list_usersno sensitive capabilityadmin_revenue_reportno sensitive capabilityadmin_usage_reportno sensitive capabilityaicaller_create_appointmentno sensitive capabilityaicaller_delete_callno sensitive capabilityaicaller_get_analyticsno sensitive capabilityaicaller_get_callno sensitive capabilityaicaller_get_call_historyno sensitive capabilityaicaller_get_call_recordingno sensitive capabilityaicaller_get_call_transcriptno sensitive capabilityaicaller_get_phone_numbersno sensitive capabilityaicaller_get_usageno sensitive capabilityaicaller_healthno sensitive capabilityaicaller_initiate_callno sensitive capabilityaicaller_list_callsno sensitive capabilityanalyze_churnno sensitive capabilityanalyze_contractno sensitive capabilityautocruise_backfill_short_blogsno sensitive capabilityautocruise_get_configno sensitive capabilityautocruise_get_statsno sensitive capabilityautocruise_triggerno sensitive capabilityautocruise_update_configno sensitive capabilitybooking_ai_batch_insightsno sensitive capabilitybooking_ai_churn_predictno sensitive capabilitybooking_ai_client_insightsno sensitive capabilitybooking_ai_generate_textno sensitive capabilitybooking_ai_health_scoreno sensitive capabilitybooking_ai_ltvno sensitive capabilitybooking_ai_no_show_predictno sensitive capabilitybooking_ai_rank_slotsno sensitive capabilitybooking_ai_service_recommendno sensitive capabilitybooking_ai_suggest_timesno sensitive capabilitybooking_get_booking_analyticsno sensitive capabilitybooking_get_booking_statsno sensitive capabilitybooking_get_calendarno sensitive capabilitybooking_get_customer_statsno sensitive capabilitybooking_get_no_show_analyticsno sensitive capabilitybooking_get_revenue_analyticsno sensitive capabilitybooking_get_revenue_statsno sensitive capabilitybuild_faqno sensitive capabilitycca_calculateno sensitive capabilitycca_closeno sensitive capabilitycca_create_poolno sensitive capabilitycca_disposeno sensitive capabilitycca_get_poolno sensitive capabilitycca_list_classesno sensitive capabilitycca_list_poolsno sensitive capabilitycca_rolloverno sensitive capabilitycca_update_poolno sensitive capabilitycheck_invoiceno sensitive capabilityclassify_refundno sensitive capabilitycompose_welcome_emailno sensitive capabilityconvert_quoteno sensitive capabilitycreate_expenseno sensitive capabilitycreate_journal_entryno sensitive capabilitycreate_social_snippetno sensitive capabilitycreate_vendorno sensitive capabilityenrich_leadno sensitive capabilityexplain_invoiceno sensitive capabilityextract_meeting_notesno sensitive capabilityformat_ai_promptno sensitive capabilitygenerate_content_ideasno sensitive capabilitygenerate_imageno sensitive capabilitygenerate_kpi_snapshotno sensitive capabilitygenerate_payment_nudgeno sensitive capabilitygenerate_save_offerno sensitive capabilitygenerate_seono sensitive capabilitygenerate_stock_alertno sensitive capabilitygenerate_textno sensitive capabilityget_api_keyno sensitive capabilityget_api_key_usageno sensitive capabilityget_api_tier_infono sensitive capabilityget_balance_sheetno sensitive capabilityget_profit_lossno sensitive capabilityget_provider_statusno sensitive capabilitygifi_aggregateno sensitive capabilitygifi_auto_suggestno sensitive capabilitygifi_codes_by_sectionno sensitive capabilitygifi_create_mappingno sensitive capabilitygifi_delete_mappingno sensitive capabilitygifi_list_codesno sensitive capabilitygifi_list_mappingsno sensitive capabilityincident_generate_fix_planno sensitive capabilityincident_getno sensitive capabilityincident_listno sensitive capabilityincident_update_statusno sensitive capabilitylist_accountsno sensitive capabilitylist_api_keysno sensitive capabilitylist_billsno sensitive capabilitylist_expensesno sensitive capabilitylist_journal_entriesno sensitive capabilitylist_vendorsno sensitive capabilitypolish_testimonialno sensitive capabilityrevoke_api_keyno sensitive capabilitysales_tax_return_listno sensitive capabilitysales_tax_return_mark_filedno sensitive capabilitysales_tax_return_prepareno sensitive capabilityscan_receiptno sensitive capabilitysearch_audit_logsno sensitive capabilitysearch_imageno sensitive capabilitysuggest_pricingno sensitive capabilityt2_province_tax_ratesno sensitive capabilityt2_schedule_1no sensitive capabilityt2_schedule_5no sensitive capabilityt2_schedule_8no sensitive capabilityt2_tax_calcno sensitive capabilitywrite_outreachno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.2.0 latest |
A 93/100 | 1 | 1.13.0 | 2026-09-08 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan futuresense-mcp --onlineMore in Developer Tools
Hotel booking MCP server — 300K+ properties, real confirmation numbers, loyalty programs. Builders monetize every booking via Stripe Connect. The first MCP server that completes real hotel reservations inside AI conversations.
Manage AdGuard Home through AI assistants
Read-only Azure DevOps for MCP clients using only your existing browser session — no PAT, no Azure CLI. Browse work items, pull requests, comments, attachments and Artifacts feeds across every project, repo and feed you can access.
MCP server for Adobe Experience Manager Assets integration development
Servidor MCP para el tiempo oficial de España (API pública OpenData de AEMET). Predicción, observación y avisos como herramientas MCP tipadas.
A standalone MCP stdio bridge for Affinity by Canva's local MCP SSE server.