{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "copilot-money", "name": "Copilot Money", "vendor": "Copilot Money, Inc.", "vendorUrl": "https://www.copilot.money", "kind": "platform", "category": "personal-finance", "summary": "Copilot Money is a personal finance app for iPhone, iPad, Mac and the web that tracks spending, budgets, investments, recurring bills and net worth. It has an AI money assistant and a read-only MCP server in waitlist beta.", "url": "https://www.anchorterminal.com/tools/copilot-money", "markdownUrl": "https://www.anchorterminal.com/tools/copilot-money.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/copilot-money.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/copilot-money.json", "license": "Closed service under the Copilot Money Terms of Service (Copilot Money, Inc.).", "transports": [], "packages": [], "auth": "mixed", "authNotes": "A Copilot Money account. Accounts connect through Plaid, Mastercard Data Connect or direct OAuth with Capital One, Coinbase, Apple Card and Public (https://www.copilot.money/privacy-and-security). The MCP beta needs a place on the waitlist at agent.copilot.money, and its authentication isn't publicly documented.", "pricing": "paid", "pricingNotes": "$95 a year (about $7.92 a month) with a free trial (https://www.copilot.money/llms.txt). The App Store lists subscriptions at $95.00 a year and $13.00 a month (https://apps.apple.com/us/app/id1447330651, checked 14 October 2026). No statement on whether the trial needs a card, and no separate price for the MCP beta, was found.", "priceSummary": "Paid", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 found on copilot.money, llms.txt, Dispatch or the terms, checked 14 October 2026.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-14" }, "llmsTxt": "https://www.copilot.money/llms.txt", "capabilities": [ "finance.budgets", "finance.transactions", "finance.subscriptions", "finance.bills" ], "tags": [ "hosted", "official", "closed-source", "paid", "ios", "macos", "web", "llms-txt", "beta", "not-for-agents", "waitlist" ], "lastRelease": "2026-10-08", "graded": true, "anchor": { "graded": true, "score": 16.3, "grade": "F", "agentReady": false, "rank": 1049, "ranked": true, "rankOf": 1076, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 0, "maintenance": 60, "payments": 20, "reliability": 5, "schema": 10, "security": 8, "transparency": 52 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 5, "points": 1, "reason": "Read with the hosted lines. No status page found, and status.copilot.money has no DNS record (0). No readable incident history (5). No limits published (0). No overload or retry guidance (0). No SLA (0). The only agent surface, the MCP, is a waitlist beta, so the general-availability line scores nothing (0 of 10), though the app itself is generally available." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 10, "points": 1.63, "reason": "Graded on the interface an outside agent can use. The MCP beta has no public tool list or schema, so the contract, description, typed-input and example lines score nothing (0 of 25, 0 of 20, 0 of 15, 0 of 15). copilot.money/llms.txt describes the product and prices in Markdown (10). Dispatch is a dated changelog, but with no public agent interface there is nothing it versions for an agent (0 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 0, "points": 0, "reason": "Graded on the interface an outside agent can use. With no public interface, context cost, pagination, errors, retries and defaults have nothing to score (0 on each line). The beta is read-only by Copilot's account, which isn't a public interface." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 8, "points": 1.4, "reason": "Graded on the interface an outside agent can use. With none public, the credential, least-privilege, injection and audit lines score nothing (0 of 30, 0 of 20, 0 of 15, 0 of 15). Security programme. A published disclosure policy with targets, rules and security@copilot.money, and a security hall of fame (8). No bug bounty with payouts found. The security page says the certifications listed are Google Cloud's and Copilot isn't certified (8 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 20, "points": 2.5, "reason": "Read with the hosted rule. No x402, MPP or L402 (0). $95 a year is published in llms.txt and $13 a month on the App Store (10). A free trial, with no statement on whether it needs a card, scored as hedged (10 of 20). A person signs up, and the MCP needs a waitlist place (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 60, "points": 5.25, "reason": "Read for a closed service. iOS 8.5.0 on 8 October 2026 (30). Five iOS versions from 3 August to 8 October (20). Dispatch is a public dated changelog, with a help centre at help.copilot.money, untested (10 of 15). No SDK or registry entry (0). No package or CI to judge (0)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 52, "points": 4.55, "note": "editorial 43, provenance 61", "reason": "Closed service under terms dated 6 May 2026 naming Copilot Money, Inc. (15). The privacy policy says AI vendors don't train on user data and gives retention while the account is active, and the security page says deleted accounts' financial data isn't kept, with no periods in days (18 of 30). No deprecation policy found (2 of 20). Plaid, Mastercard Data Connect and Google Cloud are named, with no full subprocessor list (8 of 20)." } ], "assessment": { "date": "2026-10-14", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Graded on the interface an outside agent can use. With no public interface, context cost, pagination, errors, retries and defaults have nothing to score (0 on each line). The beta is read-only by Copilot's account, which isn't a public interface.", "maintenance": "Read for a closed service. iOS 8.5.0 on 8 October 2026 (30). Five iOS versions from 3 August to 8 October (20). Dispatch is a public dated changelog, with a help centre at help.copilot.money, untested (10 of 15). No SDK or registry entry (0). No package or CI to judge (0).", "payments": "Read with the hosted rule. No x402, MPP or L402 (0). $95 a year is published in llms.txt and $13 a month on the App Store (10). A free trial, with no statement on whether it needs a card, scored as hedged (10 of 20). A person signs up, and the MCP needs a waitlist place (0).", "reliability": "Read with the hosted lines. No status page found, and status.copilot.money has no DNS record (0). No readable incident history (5). No limits published (0). No overload or retry guidance (0). No SLA (0). The only agent surface, the MCP, is a waitlist beta, so the general-availability line scores nothing (0 of 10), though the app itself is generally available.", "schema": "Graded on the interface an outside agent can use. The MCP beta has no public tool list or schema, so the contract, description, typed-input and example lines score nothing (0 of 25, 0 of 20, 0 of 15, 0 of 15). copilot.money/llms.txt describes the product and prices in Markdown (10). Dispatch is a dated changelog, but with no public agent interface there is nothing it versions for an agent (0 of 15).", "security": "Graded on the interface an outside agent can use. With none public, the credential, least-privilege, injection and audit lines score nothing (0 of 30, 0 of 20, 0 of 15, 0 of 15). Security programme. A published disclosure policy with targets, rules and security@copilot.money, and a security hall of fame (8). No bug bounty with payouts found. The security page says the certifications listed are Google Cloud's and Copilot isn't certified (8 of 20).", "transparency": "Closed service under terms dated 6 May 2026 naming Copilot Money, Inc. (15). The privacy policy says AI vendors don't train on user data and gives retention while the account is active, and the security page says deleted accounts' financial data isn't kept, with no periods in days (18 of 30). No deprecation policy found (2 of 20). Plaid, Mastercard Data Connect and Google Cloud are named, with no full subprocessor list (8 of 20)." }, "sources": [ { "what": "llms.txt", "url": "https://www.copilot.money/llms.txt", "seen": "2026-10-14" }, { "what": "Dispatch changelog", "url": "https://www.copilot.money/dispatch", "seen": "2026-10-14" }, { "what": "assistant and MCP waitlist page", "url": "https://agent.copilot.money", "seen": "2026-10-14" }, { "what": "terms of service", "url": "https://www.copilot.money/terms-of-service", "seen": "2026-10-14" }, { "what": "privacy policy", "url": "https://www.copilot.money/privacy-policy", "seen": "2026-10-14" }, { "what": "privacy and security page", "url": "https://www.copilot.money/privacy-and-security", "seen": "2026-10-14" }, { "what": "security disclosure policy", "url": "https://copilot.money/security-policy/", "seen": "2026-10-14" }, { "what": "App Store listing and version history", "url": "https://apps.apple.com/us/app/id1447330651", "seen": "2026-10-14" }, { "what": "robots.txt", "url": "https://copilot.money/robots.txt", "seen": "2026-10-14" } ], "openQuestions": [ "unchecked: security.txt, because robots.txt disallows /.well-known/ for every crawler.", "The MCP server's address, authentication, tool list and rate limits, which aren't public.", "Whether the free trial needs a card." ] }, "negative": 0, "verdict": "Copilot Money is a subscription budgeting app with a dated public changelog, a published disclosure policy and iOS releases every few weeks. There is no public API, and its MCP server, read-only and in beta since 15 May 2026, is open only through a waitlist, with no public documentation of its tools or connection.", "bestFor": "Apple users who want budgets, investments and recurring bills in one app.", "strengths": [ "A dated public changelog, Dispatch, with entries from 16 April to 8 October 2026.", "A published vulnerability disclosure policy naming targets, with security@copilot.money and a hall of fame.", "Five iOS releases between 3 August and 8 October 2026.", "The privacy policy says AI vendors processing user data don't train their models on it." ], "weaknesses": [ "No public API or MCP server an outside agent can call. The read-only MCP beta is waitlist-only.", "No public documentation of the MCP server's address, authentication or tools.", "The terms forbid robots, data mining and using the service to train AI.", "Copilot itself holds no SOC 2 or ISO 27001 certification, per its security page.", "No status page found." ], "agentNotes": [ "Don't plan to call Copilot Money from another agent. The MCP beta is waitlist-only, so ask the person to join at agent.copilot.money and connect it themselves.", "Once connected, expect read-only access to categories, transactions, monthly spend and income, recurrings and tags, per the changelog.", "Don't treat unofficial Copilot clients that read the local cache or a browser session as Copilot's interface." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 16.3 } ], "editorialScores": { "ergonomics": 0, "maintenance": 60, "payments": 20, "reliability": 5, "schema": 10, "security": 8, "transparency": 43 }, "provenanceScore": 61 }, "connect": {}, "letme": { "capability": "https://letme.dev/finance.budgets", "tool": "https://letme.dev/copilot-money" }, "notable": [ "Dispatch, 15 May 2026, announced an MCP in beta, read-only to start and tested for Claude, ChatGPT and Codex CLI, behind a waitlist (https://www.copilot.money/dispatch)", "Dispatch, 12 August 2026, says the MCP can reference categories, transactions, monthly spend and income, recurrings and tags for those with beta access (https://www.copilot.money/dispatch)", "agent.copilot.money takes waitlist sign-ups for the Copilot Assistant and MCP (https://agent.copilot.money)", "The terms forbid robots, data mining and use of the service to train AI models (https://www.copilot.money/terms-of-service)", "The security page says Copilot runs on Google Cloud and that the listed certifications are Google's, not Copilot's (https://www.copilot.money/privacy-and-security)" ], "area": "domain-data", "details": [ { "label": "Surface listed", "value": "The Copilot Money app and its MCP beta waitlist, read from copilot.money, llms.txt, Dispatch, agent.copilot.money, the terms, privacy policy and security pages on 14 October 2026. No account was created and the waitlist was not joined." }, { "label": "Outside agent access", "value": "None in public. A read-only MCP server is in beta for people admitted from the waitlist, with no public documentation of its address, authentication or tools." }, { "label": "What it acts on", "value": "Linked bank, card, investment and crypto accounts, budgets, recurring bills, categories and net worth (https://www.copilot.money/llms.txt)." }, { "label": "Bank connections", "value": "Plaid, Mastercard Data Connect, and direct OAuth with Capital One, Coinbase, Apple Card (FinanceKit) and Public (https://www.copilot.money/privacy-and-security)." }, { "label": "Company", "value": "Copilot Money, Inc. Contact hello@copilot.money, security@copilot.money (https://www.copilot.money/security-policy/)." } ], "provenance": { "legalEntity": "Copilot Money, Inc.", "domain": "copilot.money", "domainRegistered": "2018-09-30", "endpointOnVendorDomain": null, "terms": "https://www.copilot.money/terms-of-service", "privacy": "https://www.copilot.money/privacy-policy", "statusPage": "", "changelog": "https://www.copilot.money/dispatch", "securityTxt": "unknown", "checked": "2026-10-14", "notes": [ "The terms and privacy policy were last updated 6 May 2026.", "copilot.money's robots.txt disallows /.well-known/, so security.txt was not fetched. A disclosure policy is published at /security-policy/.", "status.copilot.money has no DNS record, and no status page was found.", "RDAP gives a registration date of 2018-09-30 for copilot.money." ], "score": 61, "checks": [ { "check": "Legal entity named", "value": "Copilot Money, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "copilot.money, registered 2018-09-30 (8 years)", "points": 11, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "no hosted endpoint", "points": 0, "max": 0, "state": "na" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 4 clauses that cost points", "points": 1.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "could not be fetched", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://www.copilot.money/terms-of-service", "state": "read", "readAt": "2026-10-14", "statedDate": "2026-05-06", "words": 10933, "points": 1.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated: May 6, 2026", "says": "Last updated 2026-05-06" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "The laws of the State of New York, excluding its conflicts of law rules, govern these Terms and your use of the Service.", "says": "The law of the State of New York" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "(2) THE AGGREGATE LIABILITY OF THE COPILOT PARTIES FOR ANY DAMAGES, WHETHER ARISING IN CONTRACT, TORT, OR OTHERWISE, WILL BE LIMITED TO ACTUAL DAMAGES PROVED, AND NOT TO EXCEED THE GREATER OF THE AMOUNT OF FEES PAID BY YOU UNDER THIS AGREEMENT OR $100;", "says": "Capped at $100" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "You acknowledge that if you provide any information to us that is untrue, inaccurate, not current, or incomplete, Copilot may terminate these Terms and your continued access and use of the Service." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "WE WILL TAKE REASONABLE EFFORTS TO PROVIDE YOU WITH PRIOR NOTICE OF ANY MATERIAL CHANGES TO THESE TERMS.", "says": "Says it gives notice of a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "You may not use the Service for commercial purposes." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "training", "label": "Says it may use customer content to train or improve models, and no opt-out was found", "found": true, "quote": "We may use your inputs, Materials, Outputs (defined below), and related interaction data to provide, maintain, secure, improve, and develop the Service and AI features, including quality assurance and model improvement, subject to the Privacy Policy and any settings we make available.", "costsPoints": true }, { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "(8) use any robot, spider, site search/retrieval application, or other manual or automatic device or process to retrieve, index, “data mine,” or in any way reproduce or circumvent the navigational structure or presentation of the Service or its contents;", "costsPoints": true }, { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "(18) use or access the Service to build a competing service;", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "Copilot may, at any time and without notice to you: (1) restrict, deactivate, and/or terminate your access to the Service (or any portion thereof); or (2) terminate or modify the Service (or any portion thereof).", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "Copilot may, at any time and without notice to you: (1) restrict, deactivate, and/or terminate your access to the Service (or any portion thereof);" }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "AS DESCRIBED BELOW, THESE TERMS PROVIDE FOR THE USE OF ARBITRATION ON AN INDIVIDUAL BASIS TO RESOLVE DISPUTES, RATHER THAN JURY TRIALS OR CLASS ACTIONS, AND LIMIT THE REMEDIES AVAILABLE TO YOU IN THE EVENT OF A DISPUTE." } ], "notes": [ { "date": "2026-10-14", "text": "The Service may not be used for commercial purposes.", "quote": "You may not use the Service for commercial purposes." }, { "date": "2026-10-14", "text": "Users may not use the Service in any manner for training or developing artificial intelligence tools or machine learning language models.", "quote": "(20) use the Service in any manner for training or development of artificial intelligence technologies or tools or machine learning language models;" }, { "date": "2026-10-14", "text": "On termination or cancellation of a subscription, the user may lose access to content and work-product created in relation to the Service.", "quote": "Upon termination or cancellation of your subscription, you may lose access to the products, content, features, and work-product provided to you or created by you in relation to the Service." } ] }, { "kind": "privacy", "url": "https://www.copilot.money/privacy-policy", "state": "read", "readAt": "2026-10-14", "statedDate": "2026-05-06", "words": 6331, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated: May 6, 2026", "says": "Last updated 2026-05-06" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "While this Policy covers all of data practices across our different services, including the Copilot mobile and desktop apps, www.copilot.money, and other channels (e.g., customer service and other communications) that you may use to interact with Copilot (collectively, the “Services”), our privacy practices may differ…" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We will retain your information for as long as your account is active or as needed to comply with applicable legal obligations.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "We collect information about you when you connect your registered account with us to financial institutions and other third-party data sources (“Financial Data Sources”) or you otherwise provide us with access to information from those Financial Data Sources." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "As described below, these providers may offer you a way to opt-out of the collection of information that is used for our interest-based advertising to you." }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Note that you can request deletion of your information at any time by following the steps in the Your Rights and Choices section of this Privacy Policy." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "For more information on the privacy practices of Amplitude, please visit the Amplitude Privacy Policy or write to Amplitude at privacy@amplitude.com.", "says": "privacy@amplitude.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "If you are located outside of the United States and choose to use the Services or provide information to us, you acknowledge and understand that your information will be transferred, processed, and stored in the United States, as it is necessary to provide the Services and perform the Terms of Service.", "says": "Data goes to the United States" } ], "toKnow": [ { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "We may also provide certain non-Financial Information, including identifiers, like IP addresses and hashed email addresses, to third-party platforms so that those platforms can display Copilot ads to potentially interested audiences on other services and websites." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/copilot-money.json" } }