com.medianfi/compliance

Est-ce que com.medianfi/compliance est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.medianfi/compliance » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 12 outils

• explain_books_check≈ 183 tokens

  Full detail on a single books health check: what it is, exactly where to look in the ledger, every innocent explanation to rule out before concluding anything, what it costs if it is real, what fixing it involves, and whether it is inside what Median does.

  Paramètres, retour & exemple (1)

  Paramètres

  • check_id · string · requis
    Check id from list_books_checks, e.g. 'rec-processor-balance-unreconciled'.

  Exemple d'appel

  {"name": "explain_books_check", "arguments": {"check_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• explain_obligation≈ 154 tokens

  Plain-English detail on a single obligation: what it is, why it exists, the deadline, the cost, the penalty, the exact remediation steps, and the government source.

  Paramètres, retour & exemple (1)

  Paramètres

  • obligation_id · string · requis
    Obligation id, e.g. 'de-registered-agent'.

  Exemple d'appel

  {"name": "explain_obligation", "arguments": {"obligation_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_blog_post≈ 124 tokens

  Fetch the full text of one published Median blog post by its slug.

  Paramètres, retour & exemple (1)

  Paramètres

  • slug · string · requis
    Post slug, e.g. 'how-to-switch-bookkeeping-services'.

  Exemple d'appel

  {"name": "get_blog_post", "arguments": {"slug": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_company_overview≈ 98 tokens

  Who Median is, what it does, who it is for, how onboarding works, and how to get in touch or book an intro call.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_company_overview", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_confounders≈ 1353 tokens

  Refinement step, NOT the place to start: call list_compliance_obligations first, then call this to narrow what is still genuinely open. Returns the facts that flip an answer, such as whether an employer of record is the legal employer. Pass every fact you already know and it returns only what those facts leave unsettled. These are things for YOU to look up in the user's own documents. They are not a questionnaire to send the user.

  Paramètres, retour & exemple (21)

  Paramètres

  • answers · object · optionnel
    Answers to the yes/no threshold questions this tool asks, keyed by the threshold id shown in the question, e.g. { "foreign-accounts-over-10k": false, "ny-sales-over-500k": false }. Without this the same questions repeat forever and the obligations behind them can never resolve. Omit a key you genuinely do not know.
  • answered · object · optionnel
    Only for confounders with no matching fact field above (who-paid, prepaid-multi-year). For everything else pass the fact itself, e.g. payroll_model: 'eor', not answered: { 'payroll-model': 'eor' }.
  • tax_year · integer · optionnel
    Tax year under review. Defaults to last calendar year.
  • sells_saas · ? · optionnel
    Whether the product is SaaS. New York taxes SaaS as prewritten software.
  • entity_type · string · optionnel · c-corp | s-corp | llc | llc-single-member | partnership | benefit-corp | nonprofit
    Legal entity type.
  • company_name · string · optionnel
    Optional, and the only identifying thing this tool records. Median stores it to see which companies use this tool and may follow up. It changes nothing about the answer, so omit it if the user has not agreed to share it. Send the legal entity name only, never an address, EIN or anything from a document.
  • revenue_band · string · optionnel · pre-revenue | under-250k | 250k-1m | 1m-5m | over-5m
    Gross annual revenue as a band, never an exact figure: 'pre-revenue', 'under-250k', '250k-1m', '1m-5m' or 'over-5m'. Drives revenue-scaled thresholds such as state franchise tax minimums and economic nexus. Leave unset if unknown; the tool asks for it rather than guessing.
  • sales_states · array · optionnel
    States with customers.
  • foreign_owned · ? · optionnel
    Whether any non-US person owns 25% or more. Leave unset if genuinely unknown.
  • payroll_model · string · optionnel · eor | client-is-employer | peo | contractors-only | none | unknown
    Critical. An employer of record holds state registrations under its own entity, so the answer flips entirely on this.
  • presence_type · object · optionnel
    Per-state presence, e.g. { NY: 'virtual-mailbox' }.
  • registered_in · object · optionnel
    Whether the company is already registered to do business in a state, e.g. { NY: false }. Drives obligations that only begin at registration.
  • formation_date · string · optionnel
    ISO date the entity was formed.
  • employee_states · array · optionnel
    States where W-2 employees work.
  • fiscal_year_end · string · optionnel
    MM-DD, e.g. '12-31'. Defaults to 12-31.
  • formation_state · string · optionnel
    Two-letter state of formation, e.g. 'DE'.
  • extensions_filed · object · optionnel
    Whether a tax extension was filed, keyed 'US' for federal and by state code, e.g. { US: true, NY: false }. OMIT a key you are unsure about: no deadline is asserted for an unknown key, because assuming an extension tells a late filer they have months in hand.
  • operating_states · array · optionnel
    States where the company operates.
  • payroll_provider · string · optionnel
    The provider's name only, e.g. 'Deel', 'Gusto', 'Rippling'. Not account numbers, not employee details, not anything else.
  • contractor_states · array · optionnel
    States where 1099 contractors work.
  • formation_platform · string · optionnel · stripe-atlas | clerky | firstbase | attorney | self | other | unknown
    Decides whether a bundled first-year registered agent explains a missing fee.

  Exemple d'appel

  {"name": "get_confounders", "arguments": {"answers": {}, "answered": {}, "tax_year": 1, "sells_saas": "texte", "entity_type": "c-corp", "company_name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_evidence_recipe≈ 183 tokens

  For one obligation, return exactly how to prove it: which sources settle the question, which are only corroborating, what each state's public registry does and does not expose, and the innocent explanations for missing evidence. Use this before concluding anything is missing.

  Paramètres, retour & exemple (1)

  Paramètres

  • obligation_id · string · requis
    Obligation id from list_compliance_obligations.

  Exemple d'appel

  {"name": "get_evidence_recipe", "arguments": {"obligation_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_pricing≈ 126 tokens

  Median's published pricing: the flat monthly fee by revenue band under $1M in annual revenue, the per-account and per-ledger-entry meter that scoping is based on above $1M, what is included, and add-on pricing for tax, R&D credits, and sales tax.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_pricing", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_blog_posts≈ 172 tokens

  List published articles from the Median blog, newest first. Optionally filter by category or a search term matched against the title.

  Paramètres, retour & exemple (3)

  Paramètres

  • limit · integer · optionnel
    How many posts to return (default 20, max 50).
  • search · string · optionnel
    Match against the post title.
  • category · string · optionnel
    Filter to one category slug or name.

  Exemple d'appel

  {"name": "list_blog_posts", "arguments": {"limit": 1, "search": "texte", "category": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_books_checks≈ 666 tokens

  START HERE for a books health check. Given whatever you know about a business, return the bookkeeping checks that apply to it, grouped by dimension, each with where to look, the innocent explanations to rule out first, and what it costs if it is real. Call it immediately with partial facts rather than interviewing the user first: unknown facts keep checks in the list rather than dropping them, so nothing is silently skipped. Cash-basis businesses correctly get a shorter list. This never says whether books are correct, only what to look at.

  Paramètres, retour & exemple (10)

  Paramètres

  • basis · string · optionnel · cash | accrual
    Cash or accrual, printed at the top of most profit and loss reports. This matters more than anything else here: several revenue checks do not apply on a cash basis.
  • ledger · string · optionnel · qbo | xero | other
    Which ledger the books live in. Visible in the header of any export.
  • has_raised · boolean · optionnel
    Whether the business has raised on a SAFE, note or priced round, or taken a loan.
  • processors · array · optionnel
    Payment processors that hold a balance before paying out, e.g. ['stripe','paypal']. Names only. Drives the single most-missed check.
  • bills_ahead · boolean · optionnel
    Whether anything is billed ahead of delivery: subscriptions, retainers, annual plans.
  • company_name · string · optionnel
    Optional, and the only identifying thing this tool records. Median stores it to see which businesses use this tool and may follow up. It changes nothing about the answer, so omit it if the user has not agreed to share it. Send the business name only, never a balance, an account number or anything copied out of a document.
  • payroll_model · string · optionnel · own-payroll | eor | peo | contractors-only | none
    How people are paid.
  • has_contractors · boolean · optionnel
    Whether 1099 contractors are paid.
  • charges_sales_tax · boolean · optionnel
    Whether sales tax is charged anywhere.
  • needs_segment_reporting · boolean · optionnel
    Whether any part of the business needs separate reporting: locations, programs, product lines, more than one entity.

  Exemple d'appel

  {"name": "list_books_checks", "arguments": {"basis": "cash", "ledger": "qbo", "has_raised": true, "processors": [], "bills_ahead": true, "company_name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_compliance_obligations≈ 1550 tokens

  START HERE. Given whatever you know about a company, return the federal and state compliance obligations that apply, ordered by urgency with overdue items first, plus the specific questions that unblock the rest. Call it immediately with partial facts rather than interviewing the user first: it is designed for incomplete input, and every fact you are missing comes back as one precise question instead of the dozen generic ones you would otherwise ask. Then answer those and call it again. Defaults to a short actionable view; relay it roughly as written rather than expanding it into an essay, and pass detail='full' only when the user asks for evidence tiers and remediation detail. Covers US federal plus CA, CO, DE, FL, GA, IL, MA, NJ, NY, PA, TX and WA; every other state is reported honestly as not yet covered. This never tells you whether you are compliant, only what to check.

  Paramètres, retour & exemple (21)

  Paramètres

  • detail · string · optionnel · brief | summary | full
    Default 'brief': what applies, when it is due, and the questions, with no evidence or remediation detail. Around a third the length of 'summary' and it is what a founder can actually act on. 'summary' adds one check and one next step per item. 'full' adds every evidence tier, innocent explanation and remediation step and runs to several thousand words, so use it only when the user asks for that depth. Prefer staying brief and calling get_evidence_recipe or explain_obligation for the one or two items that actually matter.
  • answers · object · optionnel
    Answers to the yes/no threshold questions this tool asks, keyed by the threshold id shown in the question, e.g. { "foreign-accounts-over-10k": false, "ny-sales-over-500k": false }. Without this the same questions repeat forever and the obligations behind them can never resolve. Omit a key you genuinely do not know.
  • tax_year · integer · optionnel
    Tax year under review. Defaults to last calendar year.
  • sells_saas · ? · optionnel
    Whether the product is SaaS. New York taxes SaaS as prewritten software.
  • entity_type · string · optionnel · c-corp | s-corp | llc | llc-single-member | partnership | benefit-corp | nonprofit
    Legal entity type.
  • company_name · string · optionnel
    Optional, and the only identifying thing this tool records. Median stores it to see which companies use this tool and may follow up. It changes nothing about the answer, so omit it if the user has not agreed to share it. Send the legal entity name only, never an address, EIN or anything from a document.
  • revenue_band · string · optionnel · pre-revenue | under-250k | 250k-1m | 1m-5m | over-5m
    Gross annual revenue as a band, never an exact figure: 'pre-revenue', 'under-250k', '250k-1m', '1m-5m' or 'over-5m'. Drives revenue-scaled thresholds such as state franchise tax minimums and economic nexus. Leave unset if unknown; the tool asks for it rather than guessing.
  • sales_states · array · optionnel
    States with customers.
  • foreign_owned · ? · optionnel
    Whether any non-US person owns 25% or more. Leave unset if genuinely unknown.
  • payroll_model · string · optionnel · eor | client-is-employer | peo | contractors-only | none | unknown
    Critical. An employer of record holds state registrations under its own entity, so the answer flips entirely on this.
  • presence_type · object · optionnel
    Per-state presence, e.g. { NY: 'virtual-mailbox' }.
  • registered_in · object · optionnel
    Whether the company is already registered to do business in a state, e.g. { NY: false }. Drives obligations that only begin at registration.
  • formation_date · string · optionnel
    ISO date the entity was formed.
  • employee_states · array · optionnel
    States where W-2 employees work.
  • fiscal_year_end · string · optionnel
    MM-DD, e.g. '12-31'. Defaults to 12-31.
  • formation_state · string · optionnel
    Two-letter state of formation, e.g. 'DE'.
  • extensions_filed · object · optionnel
    Whether a tax extension was filed, keyed 'US' for federal and by state code, e.g. { US: true, NY: false }. OMIT a key you are unsure about: no deadline is asserted for an unknown key, because assuming an extension tells a late filer they have months in hand.
  • operating_states · array · optionnel
    States where the company operates.
  • payroll_provider · string · optionnel
    The provider's name only, e.g. 'Deel', 'Gusto', 'Rippling'. Not account numbers, not employee details, not anything else.
  • contractor_states · array · optionnel
    States where 1099 contractors work.
  • formation_platform · string · optionnel · stripe-atlas | clerky | firstbase | attorney | self | other | unknown
    Decides whether a bundled first-year registered agent explains a missing fee.

  Exemple d'appel

  {"name": "list_compliance_obligations", "arguments": {"detail": "brief", "answers": {}, "tax_year": 1, "sells_saas": "texte", "entity_type": "c-corp", "company_name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_services≈ 101 tokens

  List the services Median offers (daily bookkeeping, tax filing, R&D tax credits, CFO advisory) with a short summary and page link for each.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_services", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• score_books_health≈ 754 tokens

  Score a books health check from the statuses you actually evidenced. Returns the weighted score, the band, a per-dimension breakdown and the findings ranked worst first. Two rules a plain average does not give you: a confirmed critical caps the grade, and the band is WITHHELD entirely when too little was evidenced, because a flattering number off three checks is the part people quote. Report the withheld state rather than supplying a band yourself.

  Paramètres, retour & exemple (11)

  Paramètres

  • basis · string · optionnel · cash | accrual
    Cash or accrual, printed at the top of most profit and loss reports. This matters more than anything else here: several revenue checks do not apply on a cash basis.
  • ledger · string · optionnel · qbo | xero | other
    Which ledger the books live in. Visible in the header of any export.
  • results · array · requis
    One entry per check you actually worked. Send check ids and statuses only: never figures, balances, account numbers or names.
  • has_raised · boolean · optionnel
    Whether the business has raised on a SAFE, note or priced round, or taken a loan.
  • processors · array · optionnel
    Payment processors that hold a balance before paying out, e.g. ['stripe','paypal']. Names only. Drives the single most-missed check.
  • bills_ahead · boolean · optionnel
    Whether anything is billed ahead of delivery: subscriptions, retainers, annual plans.
  • company_name · string · optionnel
    Optional, and the only identifying thing this tool records. Median stores it to see which businesses use this tool and may follow up. It changes nothing about the answer, so omit it if the user has not agreed to share it. Send the business name only, never a balance, an account number or anything copied out of a document.
  • payroll_model · string · optionnel · own-payroll | eor | peo | contractors-only | none
    How people are paid.
  • has_contractors · boolean · optionnel
    Whether 1099 contractors are paid.
  • charges_sales_tax · boolean · optionnel
    Whether sales tax is charged anywhere.
  • needs_segment_reporting · boolean · optionnel
    Whether any part of the business needs separate reporting: locations, programs, product lines, more than one entity.

  Exemple d'appel

  {"name": "score_books_health", "arguments": {"results": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://medianfi.com/mcp