io.untax/untax

None of its 20 tools are described as changing anything. For 20 the reading was uncertain, so no mark is shown.

• suggest_addresseson 1 other server

  “Search retained county-roll address candidates for partial queries and typos.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  2 inputs, 1 required

  • limitinteger“Maximum number of candidate suggestions to return (default: 5)”
  • querystringrequired“Address query or partial street name (e.g.”
• get_property_assessmenton 1 other server

  “Get retained county assessment observations and source provenance for a supported address or parcel ID.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  5 inputs, 1 required

  • actual_sqftinteger“Optional: Actual measured living area in sq ft”
  • addressstring“Alternative alias for property street address”
  • address_or_pidnstringrequired“Full street address or county parcel ID (e.g.”
  • county_keystring“Optional exact registered county adapter key, such as hamilton.”
  • notice_appraised_valuenumber“Optional: New proposed appraised value from reassessment notice”
• recheck_property_opportunitieson 1 other server

  “Recheck possible tax-reduction routes against current retained property records and a few owner-reported categories.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  4 inputs, 2 required

  • address_or_pidnstringrequired
  • county_keystring“Optional exact registered county adapter key, such as hamilton.”
  • owner_answersobjectrequired
  • skipped_question_idsarray“Stable question IDs explicitly skipped in this same property conversation.”
• get_owner_workspaceon 1 other server

  “Read the signed-in owner's actual saved property reviews with a revocable owner:read grant.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  Takes no inputs.

• get_owner_review_detailson 1 other server

  “Read one explicitly selected saved property review using the same source-bound service as the website.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  2 inputs, 2 required

  • review_idstringrequired
  • saved_property_idstringrequired
• find_va_facilitieson 2 other servers

  “Find official VA facilities in an explicit state, optionally filtered by city and facility type.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  4 inputs

  • citystring
  • facility_typestring
  • limitinteger
  • statestring
• get_va_facilityon 1 other server

  “Read one official VA facility selected by its returned id.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  1 input

  • idstring
• find_va_formson 1 other server

  “Find official VA forms by an explicit form number or search text.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  2 inputs

  • limitinteger
  • querystring
• get_va_formon 1 other server

  “Look up an explicit VA form number, such as 21-0966, and return available title, revision information and official PDF link.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  1 input

  • idstring“Official form number (the form_name field in search results), such as 21-0966.”
• start_va_connectionon 1 other server

  “Start an explicitly requested VA connection for this signed-in account and assistant.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  Takes no inputs.

• get_va_connectionon 1 other server

  “Read the dated, minimized VA verification explicitly shared with this account and assistant.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  Takes no inputs.

• disconnect_va_connectionon 1 other server

  “Disconnect only this assistant's access to this account's shared VA verification when the user requests it.”

  Publisher declares: read-only no · destructive yes · idempotent yes · open-world no

  Takes no inputs.

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-26.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.