{"name":"il.co.finly/report-analysis","slug":"finly-report-analysis","title":"FINLY Balance Report Analysis","description":"Israeli mortgage reports with Hebrew results, 15-minute recovery and authorized external OCR.","url":"https://mcp.market/server/finly-report-analysis","rating":null,"grade":"D","score":53,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":5,"stars":null,"forks":null,"downloads_week":null,"last_push_at":null,"license":null},"uptime":{"percent":100,"checks":7,"ok":7,"last_checked_at":"2026-09-21T03:05:46.103Z","last_ok_at":"2026-09-21T03:05:46.103Z","latency_ms":258},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":null,"website":null,"version":"0.1.0","remotes":[{"type":"streamable-http","url":"https://finly.co.il/mcp/reports"}],"packages":[],"tools":[{"name":"analyze_balance_report","description":"Analyze a PDF, JPEG or PNG balance report. Include the pre-issued operation for encrypted result recovery and safe same-payload replay for up to 15 minutes from issuance; restarting the service ends recovery. Omit operation only for legacy immediate-only delivery. Raw reports are not persisted. Returns structured facts and readable Hebrew text/HTML. External OCR sends personal/financial mortgage data to Google Document AI outside Israel only with an agent attestation that the existing task permits this transfer, or legacy separate approval. The supplier notice hash is not evidence a human saw it. Local-only is the default. A terminal failure never restarts the same operation.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"content_base64":{"type":"string","minLength":4,"maxLength":25165824},"security_challenge":{"type":"string","minLength":1,"maxLength":2048},"security_proof":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[A-Za-z0-9_-]+$"},"authorization":{"type":"object","properties":{"policy_version":{"type":"string","minLength":1,"maxLength":100},"text_sha256":{"type":"string","pattern":"^[a-f0-9]{64}$"},"user_approved_processing":{"type":"boolean","const":true},"user_approved_result_sharing":{"type":"boolean","const":true}},"required":["policy_version","text_sha256","user_approved_processing","user_approved_result_sharing"],"additionalProperties":false,"description":"Deprecated compatibility field; omit it. FINLY does not use or record it as consent evidence."},"external_ocr":{"anyOf":[{"type":"object","properties":{"approved":{"type":"boolean","const":true},"policy_version":{"type":"string","minLength":1,"maxLength":100},"text_sha256":{"type":"string","pattern":"^[a-f0-9]{64}$"}},"required":["approved","policy_version","text_sha256"],"additionalProperties":false},{"type":"object","properties":{"authorization_basis":{"type":"string","const":"existing_task"},"task_authorizes_external_processing":{"type":"boolean","const":true},"policy_version":{"type":"string","minLength":1,"maxLength":100},"text_sha256":{"type":"string","pattern":"^[a-f0-9]{64}$"}},"required":["authorization_basis","task_authorizes_external_processing","policy_version","text_sha256"],"additionalProperties":false}],"description":"Optional external OCR selection. Existing-task authority is an agent attestation covering mortgage data sent to Google Document AI outside Israel; its policy hash binds the supplier notice, not proof of human viewing. Legacy separate approval remains accepted. Omission means local-only processing."},"operation":{"type":"object","properties":{"result_handle":{"type":"string","format":"uuid"},"result_token":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$"}},"required":["result_handle","result_token"],"additionalProperties":false,"description":"Opt into encrypted result recovery for this pre-issued operation. Omit only for legacy immediate-only delivery."}},"required":["content_base64","security_challenge","security_proof"],"additionalProperties":false,"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"delete_report_analysis_result","description":"Cancel this operation and delete its encrypted result using its exact capability. A deleted operation cannot be restarted. No raw report, identity or result is placed in the URL.","write_action":true,"price_micros":0,"input_schema":{"type":"object","properties":{"operation":{"type":"object","properties":{"result_handle":{"type":"string","format":"uuid"},"result_token":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$"}},"required":["result_handle","result_token"],"additionalProperties":false}},"required":["operation"],"additionalProperties":false,"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"get_report_analysis_requirements","description":"Get the processing notice, external OCR supplier notices for existing-task authority or legacy approval, and a single-use proof-of-work challenge. Normal report analysis requires no additional FINLY approval. Solve SHA-256(challenge_token + \":\" + proof) so its first two bytes are zero.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{},"additionalProperties":false,"$schema":"http://json-schema.org/draft-07/schema#"}},{"name":"get_report_analysis_result","description":"Retrieve the result or pending status using the exact operation capability received before upload. Does not upload, analyze, call OCR, renew expiry or prove Customer identity. An expired or restarted service cannot recover the result.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"operation":{"type":"object","properties":{"result_handle":{"type":"string","format":"uuid"},"result_token":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$"}},"required":["result_handle","result_token"],"additionalProperties":false}},"required":["operation"],"additionalProperties":false,"$schema":"http://json-schema.org/draft-07/schema#"}}],"scan":{"score":53,"grade":"D","scanned_at":"2026-09-19T20:28:11.168Z","report":{"scannerVersion":"0.1.5","scannedAt":"2026-09-19T20:28:11.259Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":17,"max":20,"notes":["remote reachable in 2494ms"]},"poisoning":{"score":15,"max":15,"notes":["4 tool descriptions checked"]},"auth":{"score":3,"max":15,"notes":["open endpoint exposes 1 write-action tools with no auth"]},"maintenance":{"score":3,"max":15,"notes":["no repository listed"]},"identity":{"score":2,"max":10,"notes":["no repository or website to verify"]}},"findings":[{"id":"auth.open-write","severity":"high","component":"auth","title":"Write-action tools reachable without authentication"},{"id":"maint.no-repo","severity":"low","component":"maintenance","title":"No source repository listed"}],"inputs":{"probes":[{"url":"https://finly.co.il/mcp/reports","reachable":true,"authRequired":false,"latencyMs":2494,"serverInfo":{"name":"finly-reports","version":"finly-agent-access-1"}}],"packages":[],"repo":{"found":false},"icon":{"url":"https://finly.co.il/brand/finly/finly-favicon-gradient.svg?v=20260916b","source":"registry"},"presence":{"stars":null,"forks":null,"downloadsWeek":null,"license":null,"lastPushAt":null,"score":5}}}},"grade_history":[{"kind":"downgrade","fromGrade":"C","toGrade":"D","reason":"score 53: Write-action tools reachable without authentication; No source repository listed","createdAt":"2026-09-19T20:28:12.598Z"}],"reviews":[]}