ainumbers-mcp-apps

AINumbers MCP Apps Server is an MCP server implementation of the AINumbers.co fintech tool suite, aimed at agentic fintech workflows, providing read-only, deterministic, zero-PII tool calls and generating signed receipts.

Purpose

When an agent calls a fintech tool by name, it cannot confirm whether the tool actually performed the mathematical computation it claims to perform. This server fills that gap for the AINumbers.co suite: every tool call is deterministic, zero-PII, and served directly by the suite's own single-file HTML, rather than by a paraphrase of it.

This server belongs to MCP Apps (SEP-1865) and can expose the AINumbers.co fintech tool suite to any MCP host, including Claude, ChatGPT, M365 Copilot, VS Code, and Cursor.

Main capabilities

• Read-only MCP tools: The number of tools is not hardcoded here; see data/counts.json for live numbers. All tools declare readOnlyHint: true, with no account, no authentication, zero PII, and no state changes.
• Flagship widgets: Each widget renders as an actual single-file AINumbers tool, served as a text/html;profile=mcp-app resource and powered by AIN Bridge (prefill, run, Policy Mandate export).
• Catalog and discovery tools: list_ainumbers_tools, find_tool search the full catalog and return deep links; find_chain, build_workflow_links return ordered deep links for named multi-tool workflows; run_chain executes server-side; verify_execution_hash independently re-verifies the hash of returned artifacts; build_chaingraph, emit_chaingraph_artifact, build_session_receipt, and others.
• Prefilled calls: Tools that support prefill accept #in=<base64url(JSON of {element_id: value})>[&run=1] for one-click calls.
• Signed receipts and hash verification: Every call is deterministic, safefull retries return byte-identical artifacts (generated_at / opened_at differ, the hash does not change); run_chain echoes stable deduplication identifiers { input_hash, composite_execution_hash }.

How to use

• No authentication, API key, or account required. Production runs on Cloudflare Workers, /healthz reports runtime: cloudflare-workers, with no cold starts.
• Cursor and other Open Plugins directories automatically recognize this repository via the root .mcp.json, which declares the same endpoint.
• Online endpoint:https://mcp.ainumbers.co/mcp（流式 HTTP).
• Docs: ainnumbers.co/mcp.html.
• Registry: co.ainumbers/tools on the official MCP Registry.
• Self-hosting (organization-built): clone this repository and deploy to your own Cloudflare account, with no authentication to add and no build step; the Worker starts directly from the committed data/ and kernels/. Before the first deployment, two edits to wrangler.jsonc are required: point routes to mcp.ainumbers.co (a zone the fork does not own), rename name and delete routes (to use the free workers.dev subdomain) or point to a zone in your own account; queues / workflows are used for internal analytics loops, and the code has guards (if (env.EVENTS_QUEUE), if (env.RENEWAL_WATCH_WORKFLOW)), so the MCP handshake and every tool call work without them; queues require the Workers Paid plan, so delete both blocks to stay on the free tier.
• Deployment process (CI-managed): after branching, open a PR; CI runs the validate job: tool name conflicts, surface-parity, kernel coverage, chain verification, vendor freshness, and wrangler deploy --dry-run. Merging to master triggers the deploy job, which runs wrangler deploy against Cloudflare Workers, then performs a post-deployment /mcp smoke test (a real initialize call against the live endpoint). Never run wrangler deploy manually; Cloudflare Workers Builds is intentionally left disconnected.
• Transport conformance (MCP-STREAMABLE-HTTP-CONFORMANCE-1): /mcp is a complete Streamable HTTP endpoint per the MCP specification (2025-03-26 / 2025-06-18). initialize issues an Mcp-Session-Id (echoed thereafter, but not required—the server is effectively stateless); a GET /mcp with Accept: text/event-stream and a session ID opens a server-to-client SSE stream, with a 25-second keepalive, closing on disconnect (a session-less GET retains the spec's 405 + Allow); a DELETE /mcp with a session ID ends the session with 204 (a bare DELETE retains 405); an unknown MCP-Protocol-Version returns JSON-RPC 400 (never 500); tools/list honors params.cursor / returns nextCursor. Any entry point can be verified with the zero-dependency six-check script: bash scripts/transport-conformance.sh [BASE_URL].
• Idempotency and retries (RUN-1-1): every tool call is deterministic; safe retries return byte-identical artifacts. The exceptions that are not stateless (RenewalWatchWorkflow, scheduled(), queue(), MRTR_STATE_KEY requestState, input_required flows, shared cache hints, null-strip live vs. golden drift classes) are documented in docs/IDEMPOTENCY.md; the KV/Cache receipt cache (D2) remains deferred.

When to use

Suitable for scenarios that require verifiable agentic fintech tool calls, such as agentic payments (AP2, x402, Visa TAP, A2A), AML/KYC risk rating, BaaS vendor comparison, and MCP development tooling. Suited to developers and teams who want to connect the AINumbers.co tool suite to MCP hosts such as Claude, ChatGPT, M365 Copilot, VS Code, and Cursor.

Limitations

• The tools are read-only and do not change state; no accounts, authentication, or write operations are provided.
• For independent monitoring, MCP Queen is a third-party operations probe that continuously rechecks the protocol handshake and tool schema responses of the live /mcp endpoint and scores its observations; this is not a security or compliance attestation.
• The code is MIT licensed (see LICENSE); the content is CC BY 4.0, Post Oak Labs. For architecture and history, see README-SPEC.md.
• data/ and kernels/ are generated and committed artifacts,The Worker starts from the committed content, rather than reading it in real time. Any changes to chaingraph.json, the manifest, pilot.mjs, or the site repository kernel require re-running generate.mjs here and committing data/ and kernels/ in the same push, otherwise the Worker deployment will be stale. pilot.mjs is the single source of truth for the widget toolkit.
• Dependabot automatically merges all dependency updates (patch, minor, and major, all gated by CI); run git pull --rebase before pushing a local branch.
• Details not provided in the materials, such as product features, billing, pricing, platform, effects, or usage steps, are not yet available.