{ "data": { "a": { "slug": "financial-cents-mcp", "name": "Financial Cents MCP", "vendor": "Financial Cents LLC", "vendorUrl": "https://financial-cents.com", "kind": "mcp", "category": "project-management", "summary": "Financial Cents MCP is a hosted MCP server from Financial Cents LLC that lets AI assistants read and update an accounting firm's practice data, including clients, projects, tasks, time, invoices, proposals and client chat.", "url": "https://www.anchorterminal.com/tools/financial-cents-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/financial-cents-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/financial-cents-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/financial-cents-mcp.json", "license": "Proprietary hosted service under Financial Cents' terms of use, which are hosted on iubenda and weren't read because iubenda's robots.txt disallows them. No source is public", "transports": [ "streamable-http" ], "remoteUrl": "https://app.financial-cents.com/mcp", "packages": [], "auth": "oauth", "authNotes": "OAuth only, with no API key. The protected-resource metadata names one scope, `mcp:use`, and the authorisation server gives the authorisation code grant with PKCE S256, refresh tokens and dynamic client registration; no revocation endpoint is advertised. The person signs in on app.financial-cents.com and picks one firm on the consent screen, and the token stays bound to it. Every call runs through the user's own app permissions, so rates and billing data need the matching permissions. Connections are listed and revoked in Settings, API, FC MCP. Cloud-hosted clients need their callback approved by Financial Cents; Claude, ChatGPT, Grok, Cursor's web agents, VS Code for the Web, Perplexity, Notion, Gumloop and Viktor are approved (https://app.financial-cents.com/.well-known/oauth-protected-resource/mcp, https://app.financial-cents.com/.well-known/oauth-authorization-server, https://app.financial-cents.com/mcp-guide, checked 2026-10-27).", "pricing": "paid", "pricingNotes": "Included in the Scale plan, $69 a user a month billed annually or $89 a user a month billed monthly with at least 5 users, all on 12-month agreements. Team ($49) and Solo ($19) don't include it, and Enterprise is by sales. A 14-day trial needs no card; whether the MCP is on during the trial isn't stated, and the MCP page says support may need to enable it for a firm. The pricing page has no MCP row. Month-End Close is an add-on at $5 a client a month (https://financial-cents.com/pricing/, https://financial-cents.com/mcp/, checked 2026-10-27).", "priceSummary": "$69 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the MCP page, the setup guide, the pricing page or the release. Unauthenticated MCP calls answer 401 with an OAuth resource-metadata pointer, not a payment request (checked 2026-10-27).", "endpoints": [] }, "toolCount": 40, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-27" }, "docsUrl": "https://app.financial-cents.com/mcp-guide", "capabilities": [ "tasks.create", "tasks.update", "projects.manage", "projects.reporting", "crm.records", "accounting.invoices" ], "tags": [ "official", "hosted", "mcp", "closed-source", "oauth", "paid", "free-trial", "no-card", "no-status-page", "soc2", "new" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 39.7, "grade": "E", "agentReady": false, "rank": 1093, "ranked": true, "rankOf": 1212, "categoryRank": 15, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 48, "maintenance": 50, "payments": 25, "reliability": 23, "schema": 40, "security": 61, "transparency": 53 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-27" }, "negative": -2, "negativeNotes": [ "-2, misleading claim. The MCP page and its FAQ (last modified 15 October 2026) say the server can view invoices, payments and proposals, while the setup guide lists `manage_invoice`, `invoice_actions` (send, finalise, charge, void) and `proposal_actions` (send). That understates the server's reach over client money. Checked 27 October 2026 (https://financial-cents.com/mcp/, https://app.financial-cents.com/mcp-guide)." ], "verdict": "The server gives assistants 40 tools over an accounting firm's Financial Cents data, under the user's own permissions and bound to one firm by OAuth. Tool descriptions are detailed and client chat is marked as untrusted. It can send and charge invoices with one undivided scope, and there's no status page, numeric MCP rate limit or readable tool schema.", "bestFor": "Accounting, bookkeeping and tax firms on Financial Cents Scale who want an assistant to answer workload, billing and client questions and log time or create tasks.", "strengths": [ "OAuth 2.1 with PKCE S256 and dynamic client registration, each token bound to one firm and revocable in Settings, API", "Every one of the 40 tools is named and described on a public page, with when to use it, what it won't do and units such as cents or dollars", "List tools filter, group and total across the whole filtered set, so one call answers most firm-wide questions", "Client-written chat text and topic names come back wrapped in `\u003cuntrusted\u003e` tags, and the guide warns about prompt injection", "No delete tool, and risky writes carry guards such as `preview` on proposal sends, `confirm_notify` and `expected_amount_remaining`" ], "weaknesses": [ "One OAuth scope, `mcp:use`, covers reads and every write, including sending, charging and voiding invoices", "The MCP marketing page says invoices, payments and proposals are view-only, while the guide lists tools that send, charge and void them", "No status page, SLA or numeric rate limit for the MCP; the REST API's 250 requests a minute is a separate surface", "Input schemas and annotations aren't public, since `initialize` and `tools/list` need a signed-in Scale account", "Scale plan only, at $69 a user a month billed annually; no free plan and no MCP row on the pricing page" ], "agentNotes": [ "Call `whoami` first and work out date windows from `user.timezone`, not `company.timezone`", "Resolve clients and projects with `list_clients` or `list_projects` search, since `lookup` covers only reference data such as users, tags and service items", "Check money units per tool. Invoices, payments, proposals and credit memos use integer cents, while time entries and service-item rates use dollars", "Never retry a successful `invoice_actions`, `proposal_actions` or credit-memo create, since a second call can email or charge the client again", "Get the person's approval before any write, and use `preview: true` before sending a proposal" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 39.7 } ], "editorialScores": { "ergonomics": 48, "maintenance": 50, "payments": 25, "reliability": 23, "schema": 40, "security": 61, "transparency": 30 }, "provenanceScore": 76, "checked": { "categories": { "ergonomics": "2026-10-27", "maintenance": "2026-10-27", "payments": "2026-10-27", "reliability": "2026-10-27", "schema": "2026-10-27", "security": "2026-10-27", "transparency": "2026-10-27" }, "last": "2026-10-27", "oldest": "2026-10-27", "stale": false, "staleAfterDays": 90 } }, "connect": { "claudeCode": "claude mcp add --transport http financial-cents https://app.financial-cents.com/mcp", "config": { "mcpServers": { "financial-cents": { "url": "https://app.financial-cents.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/tasks.create", "tool": "https://letme.dev/financial-cents-mcp" }, "area": "business", "unitPrices": [ { "item": "Scale plan, billed annually", "unit": "seat-month", "usd": 69, "note": "Includes the MCP server and the REST API; 12-month agreement" }, { "item": "Scale plan, billed monthly", "unit": "seat-month", "usd": 89, "note": "At least 5 users; 12-month agreement" } ], "provenance": { "legalEntity": "Financial Cents LLC", "domain": "financial-cents.com", "domainRegistered": "2017-04-10", "endpointOnVendorDomain": true, "terms": "https://financial-cents.com/terms-of-use/", "privacy": "https://financial-cents.com/privacy-policy/", "statusPage": "", "changelog": "https://financial-cents.canny.io/changelog", "securityTxt": "none", "checked": "2026-10-27", "notes": [ "The setup guide's footer reads Copyright 2017-2026 Financial Cents LLC. The release is datelined Atlanta.", "The terms-of-use page embeds iubenda's terms (https://www.iubenda.com/terms-and-conditions/98813471), which iubenda's robots.txt disallows for every crawler, so they weren't read.", "The privacy-policy page shows a policy with an effective date of 5 October 2018 for the website, and links an iubenda privacy policy that robots.txt also disallows.", "/.well-known/security.txt answered 404 on financial-cents.com and app.financial-cents.com.", "No status page was found. status.financial-cents.com doesn't resolve, and the Statuspage and Instatus names for the company redirect to those vendors' home pages.", "The product changelog is on Canny, with a roadmap and feedback board beside it.", "RDAP gives a registration date of 10 April 2017 for financial-cents.com." ], "score": 76 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/financial-cents-mcp.json", "live": { "slug": "financial-cents-mcp", "probe": { "target": "https://app.financial-cents.com/mcp", "method": "mcp-initialize", "lastAt": "2026-10-27T07:07:45.186515308Z", "lastOk": true, "lastStatus": 401, "lastMs": 232, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 181, "p95ms24h": 259, "samples24h": 25, "samples30d": 25, "days": [ { "date": "2026-10-27", "probes": 25, "ok": 25 } ] }, "updatedAt": "2026-10-27T07:07:45.186515308Z" } }, "answer": "OpenProject scores 57.4 (C) on agent readiness against Financial Cents MCP's 39.7 (E), and leads in 6 of 7 scored categories.", "b": { "slug": "openproject", "name": "OpenProject", "vendor": "OpenProject GmbH", "vendorUrl": "https://www.openproject.org", "kind": "http-api", "category": "project-management", "summary": "OpenProject is open-source project management software for work packages, Gantt plans, boards and time tracking, sold as a cloud service and for self-hosting. Agents reach it through the APIv3 REST API, and paid plans add an MCP server.", "url": "https://www.anchorterminal.com/tools/openproject", "markdownUrl": "https://www.anchorterminal.com/tools/openproject.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openproject.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openproject.json", "repo": "https://github.com/opf/openproject", "license": "GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service", "transports": [ "http" ], "packages": [], "auth": "mixed", "authNotes": "Access is self-serve. A user creates a named personal API token in account settings and sends it as `Authorization: Bearer`, or as the Basic auth password with the user name `apikey`. The token carries that user's permissions, and no per-token scope or expiry was found. An administrator can register OAuth 2.0 applications for the authorisation code grant, PKCE or client credentials, with one scope per API (`api_v3`, `mcp`, `scim_v2`, `bcf_v2_1`). JWTs from a configured OIDC provider are also accepted. No app review or partner approval is described.", "pricing": "freemium", "pricingNotes": "The Community edition is free to self-host with the REST API included, and the cloud has a 14-day trial with no credit card, so an agent can start without a contract. Cloud plans are per user per month on a yearly term, Basic $7.25 (from 5 users, $8.50 on a monthly term), Professional $13.50 (from 25 users) and Premium $19.50 (from 100 users), with Corporate on request. Euro prices are 5.95, 10.95 and 15.95. API calls are not priced. The MCP server needs Professional or above. Community is not sold as a cloud plan (https://www.openproject.org/pricing/, checked 2026-10-08).", "priceSummary": "$7.25 / seat-mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the OpenAPI document or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 16352, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://www.openproject.org/docs/api/", "openapi": "https://www.openproject.org/docs/api/v3/spec.yml", "capabilities": [ "tasks.create", "tasks.update", "projects.manage", "tasks.comments", "projects.reporting", "events.webhooks-send" ], "tags": [ "official", "hosted", "self-hosted", "open-source", "rest", "openapi", "oauth", "mcp", "freemium", "free-trial", "webhooks", "status-page", "sla", "eu-hosting", "project-management" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 57.4, "grade": "C", "agentReady": false, "rank": 700, "ranked": true, "rankOf": 1212, "categoryRank": 11, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 75, "payments": 30, "reliability": 52, "schema": 76, "security": 59, "transparency": 87 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -5, "negativeNotes": [ "2026-06-08. 13 advisories rated critical were published against opf/openproject between January and June 2026, among them cache store poisoning leading to remote code execution (GHSA-qj96-f42f-6336, fixed in 17.3.3 and 17.4.1), SQL injection in the timestamps function (GHSA-98vw-2r87-fx2r) and a pre-authentication remote code execution in the Docker image through a default secret key (GHSA-r85r-gjq2-f83r, 13 May 2026). OpenProject published them itself, and its policy is to publish each advisory with the fixing release, so the deduction is reduced, -3 (https://github.com/opf/openproject/security/advisories).", "2026-09-30. 83 advisories in all were published in the twelve months to 8 October 2026, several of them missing permission checks in APIv3 that exposed private work package data across projects. Several credit the YesWeHack bounty sponsored by the European Commission. The advisories give self-hosted version numbers and do not say when the cloud was patched. Fixed and published, -2 (https://github.com/opf/openproject/security/advisories)." ], "verdict": "OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.", "bestFor": "Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.", "strengths": [ "OpenAPI 3.1 document with 234 paths and 320 operations, public on the docs site and served by every instance at `/api/v3/spec.json`", "Errors carry a stable `errorIdentifier` URN, and validation failures list one entry per property", "The Community edition is GPL-3.0 and free to self-host with the REST API included, and the cloud trial needs no credit card", "Seven releases between 5 August and 1 October 2026, with security fixes published as GitHub advisories and CVEs", "The service description commits to 99.9 per cent yearly availability with service credits, and an EU shard keeps all sub-processors in the EU" ], "weaknesses": [ "83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection", "No request limit, 429 behaviour or Retry-After guidance is published for the cloud API", "Personal API tokens act with their user's full permissions, and OAuth has one scope per API with no read-only form", "No official SDK. The client libraries the docs list are community projects the vendor says it does not vet", "The MCP server is an Enterprise add-on for the Professional plan and above, which starts at 25 users" ], "agentNotes": [ "Send the API token as `Authorization: Bearer \u003ctoken\u003e`, or as the Basic auth password with the user name `apikey`", "Read the resource first and send its current `lockVersion` with every PATCH. A stale value returns 409 `UpdateConflict`", "POST to the `/form` endpoint of a work package to learn writable fields and allowed values before creating or updating", "URL-encode `filters` as a JSON array, and add `pageSize`, `offset` and `select` to keep work package lists small", "Run the agent as a dedicated user with a narrow project role, and treat work package text and comments as untrusted input" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 57.4 } ], "editorialScores": { "ergonomics": 70, "maintenance": 75, "payments": 30, "reliability": 52, "schema": 76, "security": 59, "transparency": 79 }, "provenanceScore": 95, "checked": { "categories": { "ergonomics": "2026-10-08", "maintenance": "2026-10-08", "payments": "2026-10-08", "reliability": "2026-10-08", "schema": "2026-10-08", "security": "2026-10-08", "transparency": "2026-10-08" }, "last": "2026-10-08", "oldest": "2026-10-08", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl -H \"Authorization: Bearer $API_KEY\" https://community.openproject.org/api/v3/users/42" }, "letme": { "capability": "https://letme.dev/tasks.create", "tool": "https://letme.dev/openproject" }, "area": "business", "unitPrices": [ { "item": "Community (self-hosted)", "unit": "seat-month", "usd": 0, "note": "free, REST API included; not sold as a cloud plan" }, { "item": "Basic (cloud)", "unit": "seat-month", "usd": 7.25, "note": "yearly term, from 5 users; $8.50 on a monthly term" }, { "item": "Professional (cloud)", "unit": "seat-month", "usd": 13.5, "note": "yearly term, from 25 users; includes the MCP server" }, { "item": "Premium (cloud)", "unit": "seat-month", "usd": 19.5, "note": "yearly term, from 100 users" } ], "provenance": { "legalEntity": "OpenProject GmbH", "domain": "openproject.org", "domainRegistered": "2003-10-24", "endpointOnVendorDomain": true, "terms": "https://www.openproject.org/legal/terms-of-service/", "privacy": "https://www.openproject.org/legal/privacy/", "statusPage": "https://status.openproject.com", "changelog": "https://www.openproject.org/docs/release-notes/", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Terms of Service (last updated 6 August 2026) name OpenProject GmbH, Krausenstrasse 9, 10117 Berlin, Germany, and cover both the cloud and the on-premises Enterprise edition. The German version takes precedence.", "The privacy policy (version 30 July 2026) has a section on OpenProject Enterprise Cloud, where OpenProject GmbH is processor and the customer controller. The data processing agreement at https://www.openproject.org/legal/data-processing-agreement/ is part of the terms.", "Cloud instances answer at \u003cname\u003e.openproject.com or, on the EU shard, an openproject.eu host. Both are the vendor's domains, apart from the openproject.org site that carries the docs and legal pages. Self-hosted instances answer on the owner's domain.", "www.openproject.org/.well-known/security.txt is PGP-signed, names security@openproject.com and expires on 31 December 2026.", "RDAP for openproject.org gives a registration date of 2003-10-24 and InterNetX GmbH as registrar." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openproject.json", "live": { "slug": "openproject", "vendorStatus": { "page": "https://status.openproject.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-27T05:18:53.830803657Z" }, "versions": [ { "registry": "github", "name": "opf/openproject", "version": "v17.9.4", "released": "2026-10-26", "seenAt": "2026-10-26T10:16:09.851732438Z" } ], "githubStars": 16686, "securityTxt": { "url": "https://openproject.org/.well-known/security.txt", "state": "valid", "expires": "2026-12-31T22:59:00.000Z", "checkedAt": "2026-10-26T15:30:45.930190615Z" }, "domain": { "domain": "openproject.org", "registered": "2003-10-24", "source": "https://rdap.publicinterestregistry.org/rdap/domain/openproject.org", "checkedAt": "2026-10-25T13:59:43.236280735Z" }, "pages": [ { "url": "https://www.openproject.org/docs/release-notes/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-27T04:03:47.104978134Z", "changedAt": "2026-10-27T04:03:47.104978134Z", "fingerprint": "4f4671e854b1" }, { "url": "https://www.openproject.org/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-27T04:03:53.143565249Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b7ab69f9338c" }, { "url": "https://www.openproject.org/legal/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-27T04:03:49.173199981Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "bbdaadfc07cd" }, { "url": "https://www.openproject.org/legal/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-10-27T04:03:51.144893169Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0443c7288991" } ], "github": { "repo": "opf/openproject", "checkedAt": "2026-10-26T07:53:15.035552551Z", "stars": 16683, "archived": false, "issuesEnabled": false, "pushedAt": "2026-10-26T07:44:35Z", "openIssues": 0, "openPRs": 326, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 1348, "ci": { "branch": "dev", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-26T07:06:06Z" }, "advisories": [ { "ghsa": "GHSA-998q-c58p-qf78", "severity": "medium", "published": "2026-10-22T11:04:48Z" }, { "ghsa": "GHSA-r374-cr8p-hmp9", "severity": "medium", "published": "2026-09-30T05:37:41Z" }, { "ghsa": "GHSA-c5j2-2mfg-49h7", "severity": "medium", "published": "2026-09-30T05:37:40Z" }, { "ghsa": "GHSA-4p83-c4wg-59q4", "severity": "medium", "published": "2026-09-30T05:37:39Z" }, { "ghsa": "GHSA-wr3w-qchj-p4cm", "cve": "CVE-2026-67528", "severity": "medium", "published": "2026-07-08T07:22:14Z" }, { "ghsa": "GHSA-v3j7-vqwv-5w5q", "cve": "CVE-2026-67529", "severity": "medium", "published": "2026-07-08T07:22:13Z" }, { "ghsa": "GHSA-c6rc-4288-8p4f", "cve": "CVE-2026-67527", "severity": "high", "published": "2026-07-08T07:22:12Z" }, { "ghsa": "GHSA-63fg-pgqj-3qf8", "cve": "CVE-2026-55095", "severity": "medium", "published": "2026-07-08T07:22:12Z" }, { "ghsa": "GHSA-3j89-3273-84f5", "severity": "medium", "published": "2026-07-01T06:30:56Z" }, { "ghsa": "GHSA-vhfq-8mwf-g79w", "severity": "medium", "published": "2026-07-01T06:30:29Z" }, { "ghsa": "GHSA-fv8m-h8hc-57gq", "severity": "high", "published": "2026-07-01T06:22:52Z" }, { "ghsa": "GHSA-x2wp-9w6m-f39m", "severity": "medium", "published": "2026-07-01T06:18:42Z" }, { "ghsa": "GHSA-p692-v488-c3hq", "severity": "medium", "published": "2026-07-01T06:17:57Z" }, { "ghsa": "GHSA-m5p8-h274-f7w8", "severity": "low", "published": "2026-06-10T08:09:36Z" }, { "ghsa": "GHSA-jrx5-px3f-vfq4", "cve": "CVE-2026-52779", "severity": "medium", "published": "2026-06-10T05:53:43Z" }, { "ghsa": "GHSA-mq29-cmv3-rcmr", "severity": "medium", "published": "2026-06-10T04:26:15Z" }, { "ghsa": "GHSA-g387-6rm2-xw88", "cve": "CVE-2026-49355", "severity": "medium", "published": "2026-06-08T08:06:46Z" }, { "ghsa": "GHSA-q33w-f822-hg8x", "cve": "CVE-2026-52781", "severity": "medium", "published": "2026-06-08T08:00:32Z" }, { "ghsa": "GHSA-qj96-f42f-6336", "cve": "CVE-2026-52780", "severity": "critical", "published": "2026-06-08T08:00:32Z" }, { "ghsa": "GHSA-h83w-5q5x-pq27", "cve": "CVE-2026-52783", "severity": "high", "published": "2026-06-08T08:00:31Z" }, { "ghsa": "GHSA-98vw-2r87-fx2r", "cve": "CVE-2026-52785", "severity": "critical", "published": "2026-06-08T08:00:30Z" }, { "ghsa": "GHSA-6crw-7f5r-4qj9", "cve": "CVE-2026-52784", "severity": "high", "published": "2026-06-08T08:00:30Z" }, { "ghsa": "GHSA-3vpx-94qx-xpw6", "cve": "CVE-2026-52782", "severity": "critical", "published": "2026-06-08T08:00:29Z" }, { "ghsa": "GHSA-f2rx-x2qj-2hgj", "cve": "CVE-2026-47193", "severity": "high", "published": "2026-06-08T08:00:28Z" }, { "ghsa": "GHSA-p9gq-hrgh-2645", "cve": "CVE-2026-44736", "severity": "medium", "published": "2026-05-13T09:25:52Z" }, { "ghsa": "GHSA-j9q2-49mp-hmq5", "cve": "CVE-2026-44696", "severity": "medium", "published": "2026-05-13T09:24:37Z" }, { "ghsa": "GHSA-c767-34gh-gh2h", "cve": "CVE-2026-44734", "severity": "medium", "published": "2026-05-13T05:09:24Z" }, { "ghsa": "GHSA-cfg3-f34w-9xx5", "cve": "CVE-2026-44735", "severity": "medium", "published": "2026-05-13T05:09:24Z" }, { "ghsa": "GHSA-px7f-cj9f-7m4m", "cve": "CVE-2026-44733", "severity": "medium", "published": "2026-05-13T05:09:23Z" }, { "ghsa": "GHSA-x7j3-cfgf-7mc4", "cve": "CVE-2026-44731", "severity": "medium", "published": "2026-05-13T05:09:22Z" }, { "ghsa": "GHSA-mqvv-5mvc-7pg7", "cve": "CVE-2026-44732", "severity": "medium", "published": "2026-05-13T05:09:22Z" }, { "ghsa": "GHSA-r85r-gjq2-f83r", "cve": "CVE-2026-46386", "severity": "critical", "published": "2026-05-13T05:09:21Z" }, { "ghsa": "GHSA-qr54-686p-j34x", "severity": "medium", "published": "2026-04-15T05:47:53Z" }, { "ghsa": "GHSA-hh5p-gwf8-h245", "cve": "CVE-2026-40896", "severity": "medium", "published": "2026-04-15T05:47:52Z" }, { "ghsa": "GHSA-234r-45m2-w6cv", "cve": "CVE-2026-33667", "severity": "high", "published": "2026-04-15T05:47:51Z" }, { "ghsa": "GHSA-5rrm-6qmq-2364", "cve": "CVE-2026-34717", "severity": "critical", "published": "2026-03-31T06:46:24Z" }, { "ghsa": "GHSA-p423-72h4-fjvp", "cve": "CVE-2026-32703", "severity": "critical", "published": "2026-03-16T10:06:56Z" }, { "ghsa": "GHSA-jqhf-rf9x-9rhx", "cve": "CVE-2026-32698", "severity": "critical", "published": "2026-03-16T10:06:56Z" }, { "ghsa": "GHSA-9wr7-j98g-2jh3", "cve": "CVE-2026-31974", "severity": "low", "published": "2026-03-11T10:20:36Z" }, { "ghsa": "GHSA-gpvh-g967-g4h8", "cve": "CVE-2026-30239", "severity": "medium", "published": "2026-03-11T10:20:36Z" }, { "ghsa": "GHSA-p747-569x-3v3f", "cve": "CVE-2026-30236", "severity": "medium", "published": "2026-03-11T10:20:35Z" }, { "ghsa": "GHSA-q8c5-vpmm-xrxv", "cve": "CVE-2026-30234", "severity": "medium", "published": "2026-03-11T10:20:34Z" }, { "ghsa": "GHSA-9rv2-9xv5-gpq8", "cve": "CVE-2026-30235", "severity": "medium", "published": "2026-03-11T10:20:34Z" }, { "ghsa": "GHSA-9gc6-3xjq-pwc9", "cve": "CVE-2026-27723", "severity": "medium", "published": "2026-03-05T09:40:59Z" }, { "ghsa": "GHSA-v8cr-7x8f-78mq", "cve": "CVE-2026-27827", "severity": "critical", "published": "2026-02-26T13:31:13Z" }, { "ghsa": "GHSA-c76v-8735-35hq", "cve": "CVE-2026-27817", "severity": "medium", "published": "2026-02-26T13:31:13Z" }, { "ghsa": "GHSA-w9w6-f59w-89vj", "cve": "CVE-2026-27733", "severity": "medium", "published": "2026-02-26T13:31:12Z" }, { "ghsa": "GHSA-3qgp-q2x5-c4jw", "cve": "CVE-2026-27731", "severity": "medium", "published": "2026-02-26T13:31:12Z" }, { "ghsa": "GHSA-xw8w-4qxm-g9gv", "cve": "CVE-2026-27722", "severity": "medium", "published": "2026-02-26T13:31:11Z" }, { "ghsa": "GHSA-w92f-h4wh-g4w4", "cve": "CVE-2026-27721", "severity": "high", "published": "2026-02-26T13:31:10Z" }, { "ghsa": "GHSA-xfmm-g339-3x85", "cve": "CVE-2026-27720", "severity": "medium", "published": "2026-02-26T13:31:10Z" }, { "ghsa": "GHSA-7xv7-73x4-qqvp", "cve": "CVE-2026-27719", "severity": "medium", "published": "2026-02-26T13:31:09Z" }, { "ghsa": "GHSA-p3hw-5g6p-69f2", "cve": "CVE-2026-27717", "severity": "medium", "published": "2026-02-26T13:31:08Z" }, { "ghsa": "GHSA-cxm3-9m5g-9cq4", "cve": "CVE-2026-27718", "severity": "low", "published": "2026-02-26T13:31:08Z" }, { "ghsa": "GHSA-qpg6-635j-wjc2", "cve": "CVE-2026-27716", "severity": "medium", "published": "2026-02-26T13:31:07Z" }, { "ghsa": "GHSA-j4m9-7hff-8qgr", "cve": "CVE-2026-27715", "severity": "medium", "published": "2026-02-26T13:31:06Z" }, { "ghsa": "GHSA-4fvm-rrc8-mgch", "cve": "CVE-2026-27006", "severity": "critical", "published": "2026-02-18T12:39:23Z" }, { "ghsa": "GHSA-6m5j-mp2j-cgmm", "cve": "CVE-2026-26976", "severity": "medium", "published": "2026-02-18T12:39:23Z" }, { "ghsa": "GHSA-jrhg-mx22-57rm", "cve": "CVE-2026-26970", "severity": "low", "published": "2026-02-18T12:39:22Z" }, { "ghsa": "GHSA-xh2h-jfr6-3qhc", "cve": "CVE-2026-26971", "severity": "medium", "published": "2026-02-18T12:39:22Z" }, { "ghsa": "GHSA-r4v5-h2fp-fhxf", "cve": "CVE-2026-26969", "severity": "low", "published": "2026-02-18T12:39:21Z" }, { "ghsa": "GHSA-5m66-2gm7-6jcc", "cve": "CVE-2026-26966", "severity": "medium", "published": "2026-02-18T12:39:20Z" }, { "ghsa": "GHSA-g62r-9rgf-h53q", "cve": "CVE-2026-26968", "severity": "medium", "published": "2026-02-18T12:39:20Z" }, { "ghsa": "GHSA-r85w-rv9m-q784", "cve": "CVE-2026-27019", "severity": "critical", "published": "2026-02-18T12:37:06Z" }, { "ghsa": "GHSA-frrc-prg7-xq7h", "severity": "medium", "published": "2026-02-16T09:37:45Z" }, { "ghsa": "GHSA-2mv7-3f2v-2fg9", "severity": "medium", "published": "2026-02-16T09:37:42Z" }, { "ghsa": "GHSA-727f-w7gp-pw84", "cve": "CVE-2026-25995", "severity": "high", "published": "2026-02-11T09:33:47Z" }, { "ghsa": "GHSA-8fq7-cmmf-2793", "cve": "CVE-2026-25948", "severity": "medium", "published": "2026-02-11T09:33:46Z" }, { "ghsa": "GHSA-fq66-cwg6-qq69", "cve": "CVE-2026-24777", "severity": "medium", "published": "2026-02-09T11:49:56Z" }, { "ghsa": "GHSA-x37c-hcg5-r5m7", "cve": "CVE-2026-25763", "severity": "critical", "published": "2026-02-06T08:26:17Z" }, { "ghsa": "GHSA-q523-c695-h3hp", "cve": "CVE-2026-25764", "severity": "low", "published": "2026-02-06T08:24:49Z" }, { "ghsa": "GHSA-p9v8-w9ph-hqmf", "cve": "CVE-2026-24776", "severity": "medium", "published": "2026-02-05T13:45:19Z" }, { "ghsa": "GHSA-35c6-x276-2pvc", "cve": "CVE-2026-24775", "severity": "medium", "published": "2026-01-28T14:19:52Z" }, { "ghsa": "GHSA-r854-p5qj-x974", "cve": "CVE-2026-24772", "severity": "high", "published": "2026-01-28T14:19:48Z" }, { "ghsa": "GHSA-74p5-9pr3-r6pw", "cve": "CVE-2026-24685", "severity": "critical", "published": "2026-01-28T14:15:12Z" }, { "ghsa": "GHSA-cvpq-cc56-gwxx", "cve": "CVE-2026-23625", "severity": "high", "published": "2026-01-19T09:25:36Z" }, { "ghsa": "GHSA-vj77-wrc2-5h5h", "cve": "CVE-2026-23721", "severity": "medium", "published": "2026-01-19T09:25:21Z" }, { "ghsa": "GHSA-w422-xf8f-v4vp", "cve": "CVE-2026-23646", "severity": "medium", "published": "2026-01-19T09:25:06Z" }, { "ghsa": "GHSA-m8f2-cwpq-vvhh", "cve": "CVE-2026-22600", "severity": "critical", "published": "2026-01-09T08:42:10Z" }, { "ghsa": "GHSA-fq4m-pxvm-8x2j", "cve": "CVE-2026-22605", "severity": "medium", "published": "2026-01-09T08:42:03Z" }, { "ghsa": "GHSA-93x5-prx9-x239", "cve": "CVE-2026-22603", "severity": "medium", "published": "2026-01-09T08:41:54Z" }, { "ghsa": "GHSA-q7qp-p3vw-j2fh", "cve": "CVE-2026-22604", "severity": "medium", "published": "2026-01-09T08:41:44Z" }, { "ghsa": "GHSA-7fvx-9h6h-g82j", "cve": "CVE-2026-22602", "severity": "low", "published": "2026-01-09T08:41:36Z" }, { "ghsa": "GHSA-9vrv-7h26-c7jc", "cve": "CVE-2026-22601", "severity": "high", "published": "2026-01-09T08:41:31Z" }, { "ghsa": "GHSA-mg4q-ghvh-cm2j", "cve": "CVE-2025-24892", "severity": "low", "published": "2025-02-10T07:47:15Z" }, { "ghsa": "GHSA-g92v-vrq6-4fpw", "cve": "CVE-2024-41801", "severity": "medium", "published": "2024-07-25T14:40:03Z" }, { "ghsa": "GHSA-h26c-j8wg-frjc", "cve": "CVE-2024-35224", "severity": "high", "published": "2024-05-22T14:31:00Z" }, { "ghsa": "GHSA-xjfc-fqm3-95q8", "cve": "CVE-2023-33960", "severity": "high", "published": "2023-06-01T05:34:14Z" }, { "ghsa": "GHSA-xfp9-qqfj-x28q", "cve": "CVE-2023-31140", "severity": "medium", "published": "2023-05-02T09:25:45Z" }, { "ghsa": "GHSA-f565-3whr-6m96", "cve": "CVE-2021-43830", "severity": "high", "published": "2021-12-14T18:54:42Z" }, { "ghsa": "GHSA-r8f8-pgg2-2c26", "cve": "CVE-2021-36390", "severity": "medium", "published": "2021-07-20T10:04:20Z" }, { "ghsa": "GHSA-qqvp-j6gm-q56f", "cve": "CVE-2021-32763", "severity": "medium", "published": "2021-07-20T10:04:16Z" } ] }, "updatedAt": "2026-10-27T05:18:53.830803657Z" } }, "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "Financial Cents LLC", "b": "OpenProject GmbH", "name": "Vendor" }, { "a": "https://app.financial-cents.com/mcp", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "Streamable HTTP", "b": "HTTP", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Paid", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary hosted service under Financial Cents' terms of use, which are hosted on iubenda and weren't read because iubenda's robots.txt disallows them. No source is public", "b": "GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service", "name": "Licence" }, { "a": "40", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2026-10-05", "b": "2026-10-01", "name": "Last release" }, { "a": "", "b": "2026-08-06", "name": "Terms last updated" }, { "a": "", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "16k stars", "name": "Popularity" } ], "faq": [ { "answer": "OpenProject scores 57.4 (C) on agent readiness against Financial Cents MCP's 39.7 (E), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Financial Cents MCP or OpenProject?" }, { "answer": "Financial Cents MCP uses an OAuth sign-in. OpenProject takes an API key or an OAuth sign-in.", "question": "Do Financial Cents MCP and OpenProject need an API key?" }, { "answer": "Financial Cents MCP has a hosted endpoint at https://app.financial-cents.com/mcp. No hosted endpoint is listed for OpenProject.", "question": "Can an agent call Financial Cents MCP and OpenProject without installing anything?" }, { "answer": "No open-source release is listed for Financial Cents MCP. OpenProject is open source (GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service).", "question": "Are Financial Cents MCP and OpenProject open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "A hosted endpoint, with nothing to install", "Free to start without a card" ], "goodFor": "Accounting, bookkeeping and tax firms on Financial Cents Scale who want an assistant to answer workload, billing and client questions and log time or create tasks.", "slug": "financial-cents-mcp", "watchFor": "One OAuth scope, `mcp:use`, covers reads and every write, including sending, charging and voiding invoices" }, { "aheadOn": [ "Reliability, 52 against 23", "Schema \u0026 documentation, 76 against 40", "Agent ergonomics, 70 against 48", "Payments \u0026 pricing, 30 against 25", "Maintenance \u0026 community, 75 against 50", "Transparency \u0026 trust, 87 against 53" ], "also": [ "Open source" ], "goodFor": "Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.", "slug": "openproject", "watchFor": "83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection" } ], "job": { "capability": "tasks.create", "name": "Issues and tasks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/asana-vs-financial-cents-mcp.json", "title": "Asana vs Financial Cents MCP", "url": "https://www.anchorterminal.com/compare/asana-vs-financial-cents-mcp" }, { "json": "https://www.anchorterminal.com/compare/asana-vs-openproject.json", "title": "Asana vs OpenProject", "url": "https://www.anchorterminal.com/compare/asana-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-financial-cents-mcp.json", "title": "Atlassian Rovo MCP Server vs Financial Cents MCP", "url": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-financial-cents-mcp" }, { "json": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-openproject.json", "title": "Atlassian Rovo MCP Server vs OpenProject", "url": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/basecamp-vs-financial-cents-mcp.json", "title": "Basecamp vs Financial Cents MCP", "url": "https://www.anchorterminal.com/compare/basecamp-vs-financial-cents-mcp" }, { "json": "https://www.anchorterminal.com/compare/basecamp-vs-openproject.json", "title": "Basecamp vs OpenProject", "url": "https://www.anchorterminal.com/compare/basecamp-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-financial-cents-mcp.json", "title": "ClickUp vs Financial Cents MCP", "url": "https://www.anchorterminal.com/compare/clickup-vs-financial-cents-mcp" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-openproject.json", "title": "ClickUp vs OpenProject", "url": "https://www.anchorterminal.com/compare/clickup-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-linear-mcp.json", "title": "Financial Cents MCP vs Linear MCP", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-linear-mcp" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-monday.json", "title": "Financial Cents MCP vs monday.com", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-monday" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-plane.json", "title": "Financial Cents MCP vs Plane", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-plane" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-redmine.json", "title": "Financial Cents MCP vs Redmine", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-redmine" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-roma.json", "title": "Financial Cents MCP vs Roma", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-roma" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-shortcut.json", "title": "Financial Cents MCP vs Shortcut", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-shortcut" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-taiga.json", "title": "Financial Cents MCP vs Taiga", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-teamwork.json", "title": "Financial Cents MCP vs Teamwork.com", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-teamwork" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-todoist.json", "title": "Financial Cents MCP vs Todoist", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-todoist" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-trello.json", "title": "Financial Cents MCP vs Trello", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-trello" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-wrike.json", "title": "Financial Cents MCP vs Wrike", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-wrike" }, { "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-youtrack.json", "title": "Financial Cents MCP vs YouTrack", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/linear-mcp-vs-openproject.json", "title": "Linear MCP vs OpenProject", "url": "https://www.anchorterminal.com/compare/linear-mcp-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/monday-vs-openproject.json", "title": "monday.com vs OpenProject", "url": "https://www.anchorterminal.com/compare/monday-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-plane.json", "title": "OpenProject vs Plane", "url": "https://www.anchorterminal.com/compare/openproject-vs-plane" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-redmine.json", "title": "OpenProject vs Redmine", "url": "https://www.anchorterminal.com/compare/openproject-vs-redmine" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-roma.json", "title": "OpenProject vs Roma", "url": "https://www.anchorterminal.com/compare/openproject-vs-roma" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-shortcut.json", "title": "OpenProject vs Shortcut", "url": "https://www.anchorterminal.com/compare/openproject-vs-shortcut" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-taiga.json", "title": "OpenProject vs Taiga", "url": "https://www.anchorterminal.com/compare/openproject-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-teamwork.json", "title": "OpenProject vs Teamwork.com", "url": "https://www.anchorterminal.com/compare/openproject-vs-teamwork" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-todoist.json", "title": "OpenProject vs Todoist", "url": "https://www.anchorterminal.com/compare/openproject-vs-todoist" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-trello.json", "title": "OpenProject vs Trello", "url": "https://www.anchorterminal.com/compare/openproject-vs-trello" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-wrike.json", "title": "OpenProject vs Wrike", "url": "https://www.anchorterminal.com/compare/openproject-vs-wrike" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-youtrack.json", "title": "OpenProject vs YouTrack", "url": "https://www.anchorterminal.com/compare/openproject-vs-youtrack" } ], "scores": [ { "by": 29, "edge": "openproject", "financial-cents-mcp": 23, "key": "reliability", "name": "Reliability", "openproject": 52, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 36, "edge": "openproject", "financial-cents-mcp": 40, "key": "schema", "name": "Schema \u0026 documentation", "openproject": 76, "weight": 13 }, { "by": 22, "edge": "openproject", "financial-cents-mcp": 48, "key": "ergonomics", "name": "Agent ergonomics", "openproject": 70, "weight": 13 }, { "by": 2, "edge": "financial-cents-mcp", "financial-cents-mcp": 61, "key": "security", "name": "Security \u0026 auth", "openproject": 59, "weight": 14 }, { "by": 5, "edge": "openproject", "financial-cents-mcp": 25, "key": "payments", "name": "Payments \u0026 pricing", "openproject": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 25, "edge": "openproject", "financial-cents-mcp": 50, "key": "maintenance", "name": "Maintenance \u0026 community", "openproject": 75, "weight": 7 }, { "by": 34, "edge": "openproject", "financial-cents-mcp": 53, "key": "transparency", "name": "Transparency \u0026 trust", "openproject": 87, "weight": 7 } ], "summary": "OpenProject scores 57.4 (C) on agent readiness against Financial Cents MCP's 39.7 (E), and leads in 6 of 7 scored categories. Both do issues and tasks.", "tutorials": [], "verdicts": { "financial-cents-mcp": "The server gives assistants 40 tools over an accounting firm's Financial Cents data, under the user's own permissions and bound to one firm by OAuth. Tool descriptions are detailed and client chat is marked as untrusted. It can send and charge invoices with one undivided scope, and there's no status page, numeric MCP rate limit or readable tool schema.", "openproject": "OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-openproject", "json": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-openproject.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-openproject.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-openproject.min.md" }, "markdown": "OpenProject scores 57.4 (C) on agent readiness against Financial Cents MCP's 39.7 (E), and leads in 6 of 7 scored categories. Both do issues and tasks.\n\n- Financial Cents MCP: grade E, 39.7/100, rank #1093 of 1212. Markdown https://www.anchorterminal.com/tools/financial-cents-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/financial-cents-mcp.json\n- OpenProject: grade C, 57.4/100, rank #700 of 1212. Markdown https://www.anchorterminal.com/tools/openproject.md · JSON https://www.anchorterminal.com/api/v1/tools/openproject.json\n- Best project and task management tools for AI agents: https://www.anchorterminal.com/best/project-management/index.md\n- All 152 projects comparisons: https://www.anchorterminal.com/compare/project-management/index.md\n\n## Which one, for what\n\n### Financial Cents MCP (E)\n\nGood for: Accounting, bookkeeping and tax firms on Financial Cents Scale who want an assistant to answer workload, billing and client questions and log time or create tasks.\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Free to start without a card\n\nWatch for: One OAuth scope, `mcp:use`, covers reads and every write, including sending, charging and voiding invoices\n\n### OpenProject (C)\n\nGood for: Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.\n\nAhead on:\n- Reliability, 52 against 23\n- Schema \u0026 documentation, 76 against 40\n- Agent ergonomics, 70 against 48\n- Payments \u0026 pricing, 30 against 25\n- Maintenance \u0026 community, 75 against 50\n- Transparency \u0026 trust, 87 against 53\n\nAlso in its favour:\n- Open source\n\nWatch for: 83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection\n\n\n## Score by category\n\n| Category | Weight | Financial Cents MCP | OpenProject | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 23 | 52 | OpenProject +29 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 40 | 76 | OpenProject +36 |\n| Agent ergonomics | 13% (16.2 this run) | 48 | 70 | OpenProject +22 |\n| Security \u0026 auth | 14% (17.5 this run) | 61 | 59 | Financial Cents MCP +2 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 25 | 30 | OpenProject +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 50 | 75 | OpenProject +25 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 53 | 87 | OpenProject +34 |\n| Negative events | ≤15 | -2 | -5 | |\n| **Total** | | **39.7 · E** | **57.4 · C** | |\n\n## Facts side by side\n\n| Fact | Financial Cents MCP | OpenProject |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | Financial Cents LLC | OpenProject GmbH |\n| Hosted endpoint | `https://app.financial-cents.com/mcp` | no (local only) |\n| Transports | Streamable HTTP | HTTP |\n| Auth | OAuth | OAuth or key |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | Proprietary hosted service under Financial Cents' terms of use, which are hosted on iubenda and weren't read because iubenda's robots.txt disallows them. No source is public | GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service |\n| Tools exposed | 40 | none |\n| Read-only variant documented | no | no |\n| llms.txt | no | no |\n| Last release | 2026-10-05 | 2026-10-01 |\n| Terms last updated | | 2026-08-06 |\n| Privacy policy last updated | | no date given |\n| Customer content may train models | | not found in the text |\n| Terms restrict automated access | | not found in the text |\n| Terms restrict benchmarking | | not found in the text |\n| Terms or service can change without notice | | not found in the text |\n| Arbitration or class-action waiver | | not found in the text |\n| Popularity | none | 16k stars |\n\n## Verdicts\n\n**Financial Cents MCP.** The server gives assistants 40 tools over an accounting firm's Financial Cents data, under the user's own permissions and bound to one firm by OAuth. Tool descriptions are detailed and client chat is marked as untrusted. It can send and charge invoices with one undivided scope, and there's no status page, numeric MCP rate limit or readable tool schema.\n\n**OpenProject.** OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.\n\n## Before you call either\n\n### Financial Cents MCP\n\n1. Call `whoami` first and work out date windows from `user.timezone`, not `company.timezone`\n2. Resolve clients and projects with `list_clients` or `list_projects` search, since `lookup` covers only reference data such as users, tags and service items\n3. Check money units per tool. Invoices, payments, proposals and credit memos use integer cents, while time entries and service-item rates use dollars\n4. Never retry a successful `invoice_actions`, `proposal_actions` or credit-memo create, since a second call can email or charge the client again\n5. Get the person's approval before any write, and use `preview: true` before sending a proposal\n\n### OpenProject\n\n1. Send the API token as `Authorization: Bearer \u003ctoken\u003e`, or as the Basic auth password with the user name `apikey`\n2. Read the resource first and send its current `lockVersion` with every PATCH. A stale value returns 409 `UpdateConflict`\n3. POST to the `/form` endpoint of a work package to learn writable fields and allowed values before creating or updating\n4. URL-encode `filters` as a JSON array, and add `pageSize`, `offset` and `select` to keep work package lists small\n5. Run the agent as a dedicated user with a narrow project role, and treat work package text and comments as untrusted input\n\n## Questions\n\n### Which is better for AI agents, Financial Cents MCP or OpenProject?\n\nOpenProject scores 57.4 (C) on agent readiness against Financial Cents MCP's 39.7 (E), and leads in 6 of 7 scored categories.\n\n### Do Financial Cents MCP and OpenProject need an API key?\n\nFinancial Cents MCP uses an OAuth sign-in. OpenProject takes an API key or an OAuth sign-in.\n\n### Can an agent call Financial Cents MCP and OpenProject without installing anything?\n\nFinancial Cents MCP has a hosted endpoint at https://app.financial-cents.com/mcp. No hosted endpoint is listed for OpenProject.\n\n### Are Financial Cents MCP and OpenProject open source?\n\nNo open-source release is listed for Financial Cents MCP. OpenProject is open source (GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/financial-cents-mcp-vs-openproject.json, and with the fewest tokens: https://www.anchorterminal.com/compare/financial-cents-mcp-vs-openproject.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"financial-cents-mcp\", \"b\": \"openproject\"}`. From a terminal: `anchor compare financial-cents-mcp openproject`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/financial-cents-mcp.json and https://www.anchorterminal.com/api/v1/tools/openproject.json\n\n## Other comparisons with Financial Cents MCP or OpenProject\n\n- [Asana vs Financial Cents MCP](https://www.anchorterminal.com/compare/asana-vs-financial-cents-mcp.md)\n- [Asana vs OpenProject](https://www.anchorterminal.com/compare/asana-vs-openproject.md)\n- [Atlassian Rovo MCP Server vs Financial Cents MCP](https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-financial-cents-mcp.md)\n- [Atlassian Rovo MCP Server vs OpenProject](https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-openproject.md)\n- [Basecamp vs Financial Cents MCP](https://www.anchorterminal.com/compare/basecamp-vs-financial-cents-mcp.md)\n- [Basecamp vs OpenProject](https://www.anchorterminal.com/compare/basecamp-vs-openproject.md)\n- [ClickUp vs Financial Cents MCP](https://www.anchorterminal.com/compare/clickup-vs-financial-cents-mcp.md)\n- [ClickUp vs OpenProject](https://www.anchorterminal.com/compare/clickup-vs-openproject.md)\n- [Financial Cents MCP vs Linear MCP](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-linear-mcp.md)\n- [Financial Cents MCP vs monday.com](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-monday.md)\n- [Financial Cents MCP vs Plane](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-plane.md)\n- [Financial Cents MCP vs Redmine](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-redmine.md)\n- [Financial Cents MCP vs Roma](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-roma.md)\n- [Financial Cents MCP vs Shortcut](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-shortcut.md)\n- [Financial Cents MCP vs Taiga](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-taiga.md)\n- [Financial Cents MCP vs Teamwork.com](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-teamwork.md)\n- [Financial Cents MCP vs Todoist](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-todoist.md)\n- [Financial Cents MCP vs Trello](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-trello.md)\n- [Financial Cents MCP vs Wrike](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-wrike.md)\n- [Financial Cents MCP vs YouTrack](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-youtrack.md)\n- [Linear MCP vs OpenProject](https://www.anchorterminal.com/compare/linear-mcp-vs-openproject.md)\n- [monday.com vs OpenProject](https://www.anchorterminal.com/compare/monday-vs-openproject.md)\n- [OpenProject vs Plane](https://www.anchorterminal.com/compare/openproject-vs-plane.md)\n- [OpenProject vs Redmine](https://www.anchorterminal.com/compare/openproject-vs-redmine.md)\n- [OpenProject vs Roma](https://www.anchorterminal.com/compare/openproject-vs-roma.md)\n- [OpenProject vs Shortcut](https://www.anchorterminal.com/compare/openproject-vs-shortcut.md)\n- [OpenProject vs Taiga](https://www.anchorterminal.com/compare/openproject-vs-taiga.md)\n- [OpenProject vs Teamwork.com](https://www.anchorterminal.com/compare/openproject-vs-teamwork.md)\n- [OpenProject vs Todoist](https://www.anchorterminal.com/compare/openproject-vs-todoist.md)\n- [OpenProject vs Trello](https://www.anchorterminal.com/compare/openproject-vs-trello.md)\n- [OpenProject vs Wrike](https://www.anchorterminal.com/compare/openproject-vs-wrike.md)\n- [OpenProject vs YouTrack](https://www.anchorterminal.com/compare/openproject-vs-youtrack.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-27", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Financial Cents MCP vs OpenProject", "url": "" } ], "description": "OpenProject scores 57.4 (C) to Financial Cents MCP's 39.7 (E) for issues and tasks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Financial Cents MCP E 39.7", "OpenProject C 57.4", "scores" ], "h1": "Financial Cents MCP vs OpenProject", "image": "https://www.anchorterminal.com/assets/og/compare-financial-cents-mcp-vs-openproject.png", "path": "/compare/financial-cents-mcp-vs-openproject", "published": "2026-10-01", "section": "tools", "title": "Financial Cents MCP vs OpenProject for AI agents (2026)", "toc": null, "updated": "2026-10-27", "url": "https://www.anchorterminal.com/compare/financial-cents-mcp-vs-openproject" }, "tokens": { "markdown": 2900, "slim": 780 }, "version": 1 }