Atlas entry
mcp.spendctl.dev
8 capabilities over MCP. First atlas observation.
8 tools. 4 only read. 1 changes records. 1 moves money. 2 have no reading.◇
AI reading, beta. side-effects v1 on claude-haiku-5.5, calibrated on MCP (golden-3). Only readings above a measured precision count. Counts are tools, not calls: no tool was called.
AI summary · beta
This service exposes 8 capabilities, and 6 of them have readings describing what they do.
await_approval, check_budget, list_receipts and get_policy are each read as reading only.
sandbox_create is read as creating records, and sandbox_pay is read as moving money.
withdraw_approval and approve have no readings.
Written by claude-haiku-5.5 from the tool names and the readings on this page, then checked against them. It can still be wrong; it never lowers or hides a fact.
What an agent can do here
AI readings, beta · Readings on 6 of 8 MCP tools. 1 reads as moving money.
Moves money
1 tool
sandbox_pay0.80
The signed label counts 0. Labels count MCP readings only and can lag behind newer ones. The readings on this page are shown, not dropped.
Deletes or cancels records
0
No tool read this way.
Sends messages to people
0
No tool read this way.
Changes permissions
0
No tool read this way.
Runs code
0
No tool read this way.
Should ask a person first
0
No tool read this way.
No counted reading 2 tools No reading was counted, so any effect above is possible for them: approve, withdraw_approval.
What changed
First atlas observation. Atlas history
Look first
AI reading, beta: AI adds items here; it never removes one.
sandbox_payMoves money · 0.80
Surfaces
5 protocols checked
| ARD | Not found | No document retrieved |
|---|---|---|
| A2A | Not found | 0 skills |
| MCP | Valid | 2026-07-28 · 8 tools · resources not advertised · prompts not advertised |
| OpenAPI | Not detected | 0 operations |
| WebMCP | Not detected | 0 declarative form tools · experimental |
Exact states and meaning
- ARDabsent
Exact state: not found · No document retrieved
The supported discovery location returned no matching document.
Not found does not prove the service exposes no such interface elsewhere.
Not observed / not fetched
- A2Aabsent
Exact state: not found · 0 skills
The supported discovery location returned no matching document.
Not found does not prove the service exposes no such interface elsewhere.
Not observed / not fetched
- MCPobserved
Exact state: valid · Revision 2026-07-28 · 8 tools · resources not advertised · prompts not advertised
A usable protocol document was retrieved and validated.
Directly observed
- OpenAPIabsent
Exact state: not detected · 0 operations
No endpoint was established from the evidence and scope that InterfaceDelta inspected.
Not detected does not prove that no endpoint exists.
Not observed / not fetched
- WebMCPabsent
Exact state: not detected · 0 declarative form tools · experimental
No named declarative WebMCP form tools were observed in the origin root HTML.
Script-registered tools and other pages are not observed, so this does not mean the site has no WebMCP tools.
Not observed / not fetched
Capabilities
Showing 8 of 8.
| Tool and inputs | ◇ AI reading, beta · confidence | ||||||
|---|---|---|---|---|---|---|---|
| Read as one of the six effects 1 AI only raises attention: these rows come first. | |||||||
| approvalId, dryRun, idempotencyKey, sandbox_id* and 1 more | Moves money 0.80 | Moves money0.80 | |||||
| |||||||
| Read as none of the six 5 Not a clearance. | |||||||
| approvalId*, sandbox_id*, timeoutSeconds | Reads only0.85 | ||||||
| |||||||
| sandbox_id* | Reads only0.86 | ||||||
| |||||||
| sandbox_id* | Reads only0.82 | ||||||
| |||||||
| limit, sandbox_id* | Reads only0.92 | ||||||
| |||||||
| preset | Creates records0.85 | ||||||
| |||||||
| No counted reading 2 No reading was counted, so any effect is possible. | |||||||
| approvalId*, decision, note, sandbox_id* | unknown | unknown | unknown | unknown | unknown | unknown | No reading |
| |||||||
| approvalId*, note, sandbox_id* | unknown | unknown | unknown | unknown | unknown | unknown | No reading |
| |||||||
Read as this effect No reading: unknown Not read as this effect◇ AI readings, beta. A zero is a count, not a clearance.
Not observed in this Passport: A2A skills, MCP resources, MCP prompts, OpenAPI operations.
The atlas shows each capability by its plain identifier, inputs and declared sign-in. Publisher descriptions, paths, links and source evidence are not published here.
The comparison with the previous observation is shown only to the account that recorded it.
Atlas history
1 observation
- 8 capabilities · MCP 2026-07-28 · MCP endpoint validFirst observation
Fingerprint and versions
- Fingerprint
5054be34afc5fd5b024e785b9d1b34a593324fbed59829b85e47cade4caf4ab9- Passport schema
- 0.5.0, passport-semantic-v4
- Consistency
- MCP_PROMPTS_ADVERTISEMENT_LIST: not applicable · MCP_RESOURCES_ADVERTISEMENT_LIST: not applicable · MCP_TOOLS_ADVERTISEMENT_LIST: match · OPENAPI_MCP_EXPLICIT_MAPPING: not applicable
Each class compares an observation with the previous atlas observation. Runs of unchanged observations are grouped. Struck values are what the previous observation recorded; inserted values are what this one recorded.
Declared and observed
8 tools declare hints; the AI readings agree with all 6 that have a reading.
A disagreement is not a finding about the service: either side can be wrong. How we compare declarations and readings.
About this entry
dev.spendctl/spendctlListedOfficial MCP Registry · first listed 3 Nov 2026 · last listed 3 Nov 2026
Passive observations of a public interface listed in the Official MCP Registry. An observation does not verify security, ownership or compliance, and InterfaceDelta assigns no scores or rankings. Methodology · Report an inaccuracy · Ask for removal
Identity and snapshot
- Target key
sha256:97b9ccd29dbaec269afa77236c9a1bb539cc61d99e0632e049f602fb2cf97e4c- Locator SHA-256
beaffe03462b6ff68c37c8bb204829030b5423dff5a65d8873a5404f7abcf97a- Snapshot generated
- 4 Nov 2026, 22:00 UTC
The entry is one exact observed target, not a real-world service identity, and implies no ownership. Endpoint paths are not published; the locator hash lets an operator confirm their own URL.