SuperBooks
Server Details
Financial OS for small businesses: transactions, invoices, customers, time tracking and reports.
- Status
- Healthy
- Uptime
- 31.7% over 44 days
- OAuth
- Works in Glama
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 2 tools
search_tools is for discovering available bookkeeping operations, while execute_typescript is for running code that orchestrates those operations. Their purposes are clearly distinct and complementary, with no overlap or confusion about when to use each.
Both tools use snake_case with a consistent verb_noun pattern: search_tools and execute_typescript. The naming is predictable and follows a clear convention throughout.
Two tools is slightly below the typical 3-15 range, but both earn their place in this gateway design. The search-and-execute pattern is sufficient for exposing many underlying bookkeeping operations without redundant tools.
The tool set provides complete discovery (search_tools to find any operation) and execution (execute_typescript to run operations in code). This covers the full lifecycle for an agent to access bookkeeping domains like transactions, invoices, and reports via the sandbox.
Available Tools
2 toolsexecute_typescriptExecute TypeScriptADestructiveInspect
Execute a TypeScript program that orchestrates the available tools in a sandbox. Prefer this over calling tools one at a time when a task needs multiple tool calls, batching, aggregation, or arithmetic.
| Name | Required | Description | Default |
|---|---|---|---|
| code | Yes | A TypeScript program that orchestrates the available external_* tools and returns a final value. Use Promise.all to batch calls; do arithmetic in JS. End with `return <value>`. |
Output Schema
| Name | Required | Description |
|---|---|---|
| logs | No | |
| error | No | |
| result | No | |
| success | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true, openWorldHint=true, and readOnlyHint=false, so the agent knows this is an arbitrary code execution surface with side effects. The description adds the useful 'sandbox' qualifier, but never warns that the executed program can invoke any external tool including destructive ones, nor mentions timeouts or execution limits. Useful context, but thin for a destructive execution tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no filler, with the core capability stated first and the usage preference second. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists so return values need no explanation, and the schema covers how to write the program. What remains unstated is the sandbox's operational envelope (available external_* APIs, limits, side-effect risk), which is a modest gap rather than a blocking one given the annotation coverage.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single 'code' parameter is well documented in the schema (Promise.all batching, JS arithmetic, `return <value>`). The description adds no syntax, format, or constraint detail beyond that, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: 'Execute a TypeScript program that orchestrates the available tools in a sandbox.' An agent immediately knows this runs code rather than calling a tool, which cleanly separates it from search_tools and from ordinary tool invocation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit selection rule: 'Prefer this over calling tools one at a time when a task needs multiple tool calls, batching, aggregation, or arithmetic.' It names both the alternative behavior and the conditions that favor this tool, leaving nothing to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_toolsSearch ToolsARead-onlyIdempotentInspect
Find the SuperBooks bookkeeping operations this connection can use (transactions, invoices, customers, reports, documents, inbox, tags, time tracking), as typed external_ TypeScript declarations for execute_typescript. Call it first for any question about the user's business finances. Optionally filter with { query }, a case-insensitive substring over the tool id and description.
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | Case-insensitive substring filter over the tool id and description. Omit to list every tool this credential can reach. |
Output Schema
| Name | Required | Description |
|---|---|---|
| tools | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description adds genuinely new context: the return shape is typed external_<id> TypeScript declarations intended for execute_typescript, and results are scoped to what the credential can reach. It does not mention pagination or result limits, a minor gap for a listing tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, front-loaded with the purpose and the call-first directive before the optional filter detail. The category parenthetical is long but earns its place by scoping the tool; the query explanation mildly duplicates the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need no elaboration, yet the description still names the return type and its intended consumer. Purpose, trigger, scope, and the optional filter are all covered for a one-parameter discovery tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single parameter is fully documented in the schema. The description restates the same substring semantics rather than adding new meaning (e.g., matching precedence or examples), so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb+resource: it finds the SuperBooks bookkeeping operations available to this connection and returns them as typed external_<id> TypeScript declarations. It explicitly ties itself to its only sibling by naming execute_typescript as the consumer, so an agent can distinguish search from execution without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
"Call it first for any question about the user's business finances" gives an explicit ordering rule and the triggering condition. The parenthetical domain list (transactions, invoices, customers, reports, documents, inbox, tags, time tracking) further clarifies the scope of use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
- First observed
execute_typescript - First observed
search_tools
Publisher details
- Operator
- Devino Solutions
- Operator website
- https://devino.ca
- Vendor relationship
- First-party
- Documentation
- https://docs.superbooks.io/mcp
- Trust center
- https://superbooks.io/security
- Restrictions
- Requires a SuperBooks account. Sign in with OAuth when your client asks.
Related MCP Connectors
Bookkeeping for owner-operated businesses. Query transactions, invoices, and reports.
Startup accounting: cash, burn, runway, financial statements, transactions, bills and invoices.
Bookkeeping and accounting: P&L, balance sheet, cash flow, transactions, accounts, payees, rules.
Create, send and track invoices for freelancers and small businesses.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceFinance OS for bootstrapped SaaS, providing MCP tools for transaction recording, projections, alerts, and more through natural language interfaces.MIT
- AlicenseAqualityAmaintenanceTalk to your GnuCash books: a one-call financial dashboard (net worth, runway, budgets, what's overdue), and whole bank statements entered and reconciled in a single call from CSV, OFX, PDF, or even a screenshot or photo of the statement. Plus transactions, invoices, reports and multi-currency; local, SQLite/PostgreSQL/MySQL.8779MIT
- FlicenseNot gradedqualityCmaintenanceFinancial data infrastructure for AI agents. Connect to a startup's books to read live P&L and bank balances, review and reclassify transactions, manage the chart of accounts, and connect banking sources.-

Ekwo OS — open sourceofficial
AlicenseNot gradedqualityAmaintenanceDouble-entry books an agent keeps as the user, on your own Postgres or Supabase: invoices, VAT returns, bank reconciliation, financial statements and 130 country packs.39AGPL 3.0
Glama MCP Gateway
Add one secure layer between your agents and this server.