Financial Cents MCP vs Taskade

Financial Cents MCP 40

No machine-readable contract could be read. tools/list answers 401 without a signed-in Scale account and no public manifest or schema exists (0 of 25). No llms.txt on either host and no Markdown docs for the MCP; the gitbook llms.txt covers the REST API only (0 of 10). Every tool's full description is public on the setup guide, and they say what each tool is for, which tool to use instead, what it won't do and the units of money fields (18 of 20). The descriptions name enums such as resource, board, group_by and log_type and the required fields on create, but the typed schemas weren't read (6 of 15). Example prompts mapped to tools, a troubleshooting section, and descriptions that say which inputs are rejected and why; no error shape (8 of 15). A public changelog with a dated entry for the initial release, but no server version (8 of 15). Total 40.

Taskade 91

OpenAPI 3.0.3 specs for REST v1 and Action v2 are linked from llms.txt and committed in the public taskade/mcp repository, which is where we read them because the site's /api/ path is disallowed in robots.txt (25). llms.txt, a developer docs index and a Markdown copy of each page (10). The hosted MCP docs say what each tool does, which role it needs and what the server cannot do; the v2 spec's operations carry no descriptions of their own (14 of 20). The v1 spec has 96 enums and 254 required lists (13 of 15). Error tables with causes and fixes on the MCP and API pages, and a documented error envelope (14 of 15). Versioned APIs (1.0.0, 2.0.0-beta), deprecations marked in the spec and a changelog updated almost daily (15). 25 + 10 + 14 + 13 + 14 + 15 = 91.

Financial Cents MCP 50

Closed hosted service. The changelog dates the initial release to 5 October 2026, 22 days ago (30 of 30). One dated MCP entry in 90 days; the tool count grew from 33 in the recap of 19 October to 40 now, without dated notes (10 of 20). A public changelog, roadmap and feedback board on Canny, an Intercom help centre with an MCP article updated 23 October, and a Facebook community (10 of 15). Not in the official MCP registry (searches for financial-cents and financialcents returned nothing on 27 October 2026) and no SDK (0 of 15). No package (0 of 10). The server is about three weeks old. Total 50.

Taskade 85

Changelog v6.306.0 on 5 November 2026, and v6.304.0 on 4 November updated the MCP setup page (30). Fifteen entries between 29 October and 5 November alone, and @taskade/mcp-server 0.1.3 (19 October) and 0.1.4 (22 October) (20). The taskade/mcp repository merged pull requests #114 to #122 between 26 October and 4 November; GitHub's API did not answer, so open issues and reply times were not counted (15 of 25). Verified io.github.taskade/mcp-server namespace in the official MCP registry, with the hosted remote (15). CI, release and registry-publish workflows, and the Docker image moved off end-of-life Node 20 on 28 October (5 of 10, with dependency health not checked). 30 + 20 + 15 + 15 + 5 = 85.

Financial Cents MCP 48

Graded on the MCP server. 40 tools, more than 30, with about 30,000 characters of descriptions on the guide, the longest about 2,100, before schemas. No toolsets or read-only subset (5 of 25). List tools take filters, limit, pagination, include for nested data and group_by, with totals over the whole filtered set (18 of 20). Descriptions say what gets rejected and that the reason is returned, such as a locked time entry or a proposal reminder sent too soon with the next allowed time; no error codes documented (10 of 20). No idempotency keys, but preview on proposal sends, expected_amount_remaining on credit memos and single-use upload IDs. The guide labels tools Read or Write, but readOnlyHint and destructiveHint couldn't be checked (8 of 20). Omitted fields are left unchanged on updates and whoami grounds dates; no official SDK (7 of 15). Total 48.

Taskade 68

47 hosted MCP tools are listed (5), with inspect_space line ranges and cursor pagination to size reads (3 back). Cursor pagination on list tools and a paginated, plan-filtered list_spaces, with few filters (15 of 20). MCP tool errors return class, code, retry and retryAfterSec, and invalid arguments come back as a tool result the model can correct (20). Every tool states readOnlyHint, destructiveHint and openWorldHint, and _meta flags mark writes and billed calls; no idempotency keys for creates were found (18 of 20). Setup is one URL with OAuth; the TypeScript SDK is in preview and not on npm, and no second official SDK exists (7 of 15). 8 + 15 + 20 + 18 + 7 = 68.

Financial Cents MCP 51

The editorial half. A closed service whose terms sit on iubenda behind a robots.txt disallow, so they weren't read (10 of 30). The privacy page shows a 2018 website policy and links an iubenda policy that wasn't readable. The security page says deleted records are removed within six months and vault records at once. Nothing was found on how MCP call logs or assistant data are kept (10 of 30). No deprecation policy or dated notices; the REST API docs warn breaking changes could happen (0 of 20). The security page names DigitalOcean and AWS with servers in New York City and Virginia, and the privacy page names Google Analytics; no full subprocessor list (10 of 20). Total 30.

Taskade 69

Closed service under terms naming Taskcade Inc. and Delaware law, with the MCP server, plugin and OpenAPI specs under MIT (20 of 30). The privacy policy gives practices for retention (AI processing logs normally 30 days, account deletion within 30 days) but calls them targets, not contractual periods, and no DPA or SCCs are offered (15 of 30). Deprecated endpoints are marked in the docs and spec with their replacement, with no deprecation policy or dates (8 of 20). Hosting is AWS US East, and AI providers are named as examples, some in China, with the full list on request; analytics tools (Google Analytics, PostHog, Plausible, Sentry) are named (12 of 20). 20 + 15 + 8 + 12 = 55.

Financial Cents MCP 23

Graded with the hosted lines, on the remote MCP server. No status page was found (status.financial-cents.com doesn't resolve) (0 of 20), so there's no readable incident history (5 of 30). Financial Cents says MCP requests are rate limited but gives no number; the REST API's 250 requests a minute is for a separate surface (0 of 15). No 429 or Retry-After guidance, but the tool descriptions give safe-retry rules for writes. Don't retry a successful send or charge, send expected_amount_remaining so a credit-memo retry can't apply twice, and upload IDs are single use (8 of 15). No SLA found in the pages we could read; the terms weren't readable (0 of 10). The changelog calls it an initial release and nothing labels it beta (10 of 10). Total 23.

Taskade 40

Graded as a hosted service on the hosted MCP server and REST API v1. status.taskade.com is Taskade's own status portal, but it draws its data by script and no components could be read (10 of 20). No readable incident history (5). Rate limits have numbers only for prompt_agent (60 calls in 10 minutes) and publish_kit_version (5 an hour); the API docs say 429 marks a rate limit without stating it (5 of 15). The API returns 429 with Retry-After, MCP tools use x-rate-limit-reset, and tool errors say whether a retry is safe and after how many seconds (15). The terms commit to no uptime level without a separate written agreement, and only Enterprise mentions SLAs (0). REST API v1 is GA, while Action API v2, which most hosted MCP tools mirror, is beta (5 of 10). 10 + 5 + 5 + 15 + 0 + 5 = 40.

Financial Cents MCP 61

OAuth 2.1 with PKCE S256 and dynamic client registration, tokens bound to one firm and revocable in the app, with no API key. One scope, mcp:use, covers every read and write, so 22 rather than 30 (22 of 30). No read-only mode. The user's app permissions apply and no tool deletes, but the server can send, charge and void invoices and email clients. Server-side flags exist only for uploads that email portal contacts (confirm_notify) and recurring back-charges (confirm_back_charges); other confirmations are left to the AI client, guided by the descriptions (10 of 20). Client-written chat and topic names come back inside <untrusted> tags, with injection guidance on both pages (13 of 15). Financial Cents says every call is logged with who, what and how long, and connected clients are listed in Settings; no customer view of the call log is described (8 of 15). No security.txt (404 on both hosts) and no bug bounty found. The security page claims SOC II Type I and twice-yearly third-party assessments, with an attestation letter on request (8 of 20). Total 61.

Taskade 45

OAuth 2.0 with PKCE, dynamic client registration, 1-hour access tokens and rotating refresh tokens, but the only scope is mcp. Personal access tokens are revocable, limited to five, carry no scopes and grant the whole account. Tokens go in headers (20 of 30). No read-only credential; workspace roles limit what tools can do, and the write and billed _meta flags let a client ask first, with no server-side confirmation (10 of 20). Tools return task, project, conversation and app text written by others, and no prompt-injection guidance was found (0). The security page says account and workspace activity is logged and exportable on request, with no immutable logs (7 of 15). security.txt valid to September 2027 and a 90-day coordinated disclosure policy, but SOC 2 and ISO 27001 are in progress with no report and there is no bug bounty (8 of 20). 20 + 10 + 0 + 7 + 8 = 45.