Name: FieldEdge MCP by usefulapi
Author: usefulapi

FieldEdge MCP by usefulapi

Read work orders, customers and invoices; create customers, notes and work orders in FieldEdge.

Tool-list grade A Remote · Streamable HTTP No auth needed 45 tools v1.1.2 MIT

No reviews yet by usefulapiGitHub The publisher’s own endpoint — this marketplace is not in the path

93/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Read work orders, customers and invoices; create customers, notes and work orders in FieldEdge.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http fieldedge-mcp-by-usefulapi https://fieldedge.usefulapi.io/mcp

# 2 — ask your agent for something these tools do
#   fieldedge_list_work_orders, fieldedge_get_work_order, fieldedge_search_work_orders_by_address and 42 more

FieldEdge MCP by usefulapi costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

usefulapi598 servers

25 categories

All 598 servers

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

List work orders (jobs) of the company with status, service address, customer, primary technician and linked invoice. Filters combine with AND; assigned=false cannot be combined with primary_tech_id. Needs scope workorders:read. GET /open-api/v1/work-orders.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
completed	boolean	no	Only completed (true) or open (false) work orders.
customer_id	string	no	Only work orders of this service-location customer id.
invoice_added	boolean	no	Only work orders that have (true) or lack (false) an invoice.
primary_tech_id	string	no	Only work orders whose primary technician is this employee id.
assigned	boolean	no	Only work orders that have (true) or lack (false) a primary technician.
sort	string	no	Sort field, '-' prefix = descending: workOrderNumber, scheduledStart, priority.

One work order: status, assignments, service address, task, tags and linked invoice. Needs scope workorders:read. GET /open-api/v1/work-orders/{work_order_id}.

Parameter	Type	Required	Notes
work_order_id	string	yes	Work order id (GUID, from fieldedge_list_work_orders).

Work orders at a service address, most recent first, each with its customer's name. All of address_line_1, city, state and postal_code are required. Needs scope workorders:read. GET /open-api/v1/work-orders/search/by-address.

Parameter	Type	Required	Notes
address_line_1	string	yes	Primary address line.
address_line_2	string	no	Secondary address line.
city	string	yes	City.
state	string	yes	State or region.
postal_code	string	yes	Postal or ZIP code.
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.

Technician assignments (schedule, status) on one work order. Needs scope workorders:read. GET /open-api/v1/work-orders/{workOrderId}/assignments.

Parameter	Type	Required	Notes
work_order_id	string	yes	Work order id (GUID).
technician_id	string	no	Only this technician's assignments (employee id).
status	string	no	Only assignments in this status.
schedule_from	string	no	Only assignments scheduled on/after this ISO 8601 date-time.
schedule_to	string	no	Only assignments scheduled on/before this ISO 8601 date-time.
sort	string	no	scheduleDateTime or technicianName, '-' prefix = descending.
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.

Search customers (personal data). With no filter all customers are listed. Needs scope customers:read. GET /open-api/v1/customers/search.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
phone	string	no	Phone number.
email	string	no	E-mail address.
first_name	string	no	First name.
updated_after	string	no	Only customers updated on/after this ISO 8601 UTC date-time.
updated_before	string	no	Only customers updated on/before this ISO 8601 UTC date-time.
has_service_agreement	boolean	no	Only customers with (true) or without (false) an active service agreement.
sort	string	no	displayName, address1, city, state, primaryEmail or updatedAt; '-' prefix = descending.

One customer (or job location) by id, with contact details and address (personal data). The reply says whether the record is a job or a billing customer. Needs scope customers:read. GET /open-api/v1/customers/id/{customer_id}.

Parameter	Type	Required	Notes
customer_id	string	yes	Customer id (GUID).

The customer with this phone number (personal data). Needs scope customers:read. GET /open-api/v1/customer/{phone}.

Parameter	Type	Required	Notes
phone	string	yes	Phone number, 10-15 digits, optionally prefixed with +.

Customers at a street address (personal data). address_line_1, city, state and postal_code are required. Needs scope customers:read. GET /open-api/v1/customers/by-address.

Parameter	Type	Required	Notes
address_line_1	string	yes	Primary address line.
address_line_2	string	no	Secondary address line.
city	string	yes	City.
state	string	yes	State or region.
postal_code	string	yes	Postal or ZIP code.
sort	string	no	firstName or lastName, '-' prefix = descending.
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.

Notes on a customer record, newest first by default. Needs scope customers:read. GET /open-api/v1/customers/{customerId}/notes.

Parameter	Type	Required	Notes
customer_id	string	yes	Customer id (GUID).
sort	string	no	createdAt or updatedAt, '-' prefix = descending (default -createdAt).
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.

File attachments on a customer record, each with the blob URL to view or download it. Needs scope customers:read. GET /open-api/v1/customers/{customerId}/attachments.

Parameter	Type	Required	Notes
customer_id	string	yes	Customer id (GUID).
sort	string	no	createdAt or fileName, '-' prefix = descending (default -createdAt).
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.

Reusable customer tags of the account. Needs scope customers:read. GET /open-api/v1/tags.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
name	string	no	Only tags matching this name.
sort	string	no	name, '-' prefix = descending.

Invoices by invoice date, without line items (use fieldedge_get_invoice for those). Needs scope invoices:read. GET /open-api/v1/invoices.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
sort	string	no	dateAdded or customerName, '-' prefix = descending.

One invoice with its line items; the invoice id equals its work order id. Needs scope invoices:read. GET /open-api/v1/invoices/{invoice_id}.

Parameter	Type	Required	Notes
invoice_id	string	yes	Invoice id (= work order id).

Quotes, without line items (use fieldedge_get_quote for those). Prefer class_id over class_name. Needs scope workorders:read. GET /open-api/v1/quotes.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
id	string	no	Only the quote with this id (= work order id).
customer_id	string	no	Only quotes whose work order belongs to this customer/location id.
class_name	string	no	Exact display name of the quote class (e.g. Install, Repair).
class_id	string	no	Stable id of the quote class.

One quote with its line items; the quote id equals its work order id. Needs scope workorders:read. GET /open-api/v1/quotes/{quote_id}.

Parameter	Type	Required	Notes
quote_id	string	yes	Quote id (= work order id).

Service agreements (recurring maintenance contracts) with plan, dates and customer. Needs scope workorders:read. GET /open-api/v1/agreements.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
agreement_number	string	no	Agreement number.
customer_id	string	no	Only this customer's agreements.
plan_name	string	no	Agreement plan name.
active	boolean	no	Only active (true) or inactive (false) agreements.
next_service_before	string	no	Only agreements whose next service date is before this UTC date-time.
next_service_after	string	no	Only agreements whose next service date is after this UTC date-time.
next_invoice_before	string	no	Only agreements whose next invoice date is before this UTC date-time.
sort	string	no	agreementNumber, originalContractDate, nextServiceDate or nextInvoiceDate; '-' prefix = descending.

One service agreement by id. Needs scope workorders:read. GET /open-api/v1/agreements/{agreement_id}.

Parameter	Type	Required	Notes
agreement_id	string	yes	Agreement id (GUID).

Employees (technicians, dispatchers, CSRs, admins). Needs scope employees:read. GET /open-api/v1/employees.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
active	boolean	no	Only active (true) or inactive (false) employees.
role	string	no	Only employees with this role.
sort	string	no	name, '-' prefix = descending.

One employee record. Needs scope employees:read. GET /open-api/v1/employees/{employee_id}.

Parameter	Type	Required	Notes
employee_id	string	yes	Employee id (GUID).

Business units (needed to create a work order). Needs scope business-units:read. GET /open-api/v1/business-units.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
active	boolean	no	Only active (true) or inactive (false) units.
name	string	no	Only units whose name contains this text.
sort	string	no	name, '-' prefix = descending.

One business unit by id. Needs scope business-units:read. GET /open-api/v1/business-units/{business_unit_id}.

Parameter	Type	Required	Notes
business_unit_id	string	yes	Business unit id (GUID).

Lead sources (needed to create a work order). Needs scope lead-sources:read. GET /open-api/v1/lead-sources.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
active	boolean	no	Only active (true) or inactive (false) sources.
business_unit_id	string	no	Only sources of this business unit.
name	string	no	Only sources whose name contains this text.
sort	string	no	name, '-' prefix = descending.

One lead source by id. Needs scope lead-sources:read. GET /open-api/v1/lead-sources/{lead_source_id}.

Parameter	Type	Required	Notes
lead_source_id	string	yes	Lead source id (GUID).

Tasks (service types, needed to create a work order). Needs scope tasks:read. GET /open-api/v1/tasks.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
class	string	no	Only tasks of this class.
active	boolean	no	Only active (true) or inactive (false) tasks.
sort	string	no	name, '-' prefix = descending.

One task together with its resolved department and skill. Needs scope tasks:read. GET /open-api/v1/tasks/{task_id}/bundle.

Parameter	Type	Required	Notes
task_id	string	yes	Task id (GUID).

Inventory items (parts, services) with cost and rate. Needs scope items:read. GET /open-api/v1/items.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
category	string	no	Only items of this category.
active	boolean	no	Only active (true) or inactive (false) items.
updated_after	string	no	Only items updated on/after this ISO 8601 UTC date-time.
updated_before	string	no	Only items updated on/before this ISO 8601 UTC date-time.
sort	string	no	name, createdAt or updatedAt; '-' prefix = descending.

One inventory item by id. Needs scope items:read. GET /open-api/v1/items/{item_id}.

Parameter	Type	Required	Notes
item_id	string	yes	Item id (GUID).

Inventory item categories (tree: childTreeLevel, parent). Needs scope item-categories:read. GET /open-api/v1/item-categories.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.

One item category by id. Needs scope item-categories:read. GET /open-api/v1/item-categories/{item_category_id}.

Parameter	Type	Required	Notes
item_category_id	string	yes	Item category id (GUID).

Sales tax codes. Needs scope items:read. GET /open-api/v1/sales-tax-codes.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
active	boolean	no	Only active (true) or inactive (false) codes.
is_taxable	boolean	no	Only taxable (true) or non-taxable (false) codes.
sort	string	no	name, '-' prefix = descending.

Inventory warehouses. Needs scope warehouses:read. GET /open-api/v1/warehouses.

Parameter	Type	Required	Notes
limit	integer	no	Records per page (1-200, default 20).
offset	integer	no	Records to skip (default 0). Use the previous reply's next_offset.
name	string	no	Only warehouses with this name.
active	boolean	no	Only active (true) or inactive (false) warehouses.
sort	string	no	name, '-' prefix = descending.

One warehouse by id. Needs scope warehouses:read. GET /open-api/v1/warehouses/{warehouse_id}.

Parameter	Type	Required	Notes
warehouse_id	string	yes	Warehouse id (GUID).

One lead by id (lead-provider integrations). Needs scope leads:read. GET /open-api/v1/leads/{lead_id}.

Parameter	Type	Required	Notes
lead_id	string	yes	Lead id (GUID).

The company name for a company id (the tenant id). Needs scope company:read. GET /open-api/v1/companies/{company_id}.

Parameter	Type	Required	Notes
company_id	string	yes	Company id.

WRITE: create a customer record in FieldEdge, visible to the office staff at once. Needs an e-mail or a phone number (international format, e.g. +14155552671); marketing_email_opt_in needs an e-mail and marketing_sms_opt_in a phone number. Names are 2-50 characters without digits. Check fieldedge_search_customers first so you do not create a duplicate. Needs scope customers:write. POST /open-api/v

Parameter	Type	Required	Notes
first_name	string	yes	First name (2-50 characters, no digits).
last_name	string	yes	Last name (2-50 characters, no digits).
email	string	no	Primary e-mail address.
phone_number	string	no	Primary phone number, international format.
company_name	string	no	Company or business name.
address_1	string	no	Street address line 1.
address_2	string	no	Street address line 2.
city	string	no	City.
state	string	no	State or province.
zip	string	no	Postal or ZIP code.
preferred_contact_methods	array	no	Email, Phone and/or SMS.
marketing_email_opt_in	boolean	no	The customer agreed to marketing e-mail. Only true if they really did.
marketing_sms_opt_in	boolean	no	The customer agreed to marketing SMS. Only true if they really did.

WRITE: add a free-text note to a customer record; office staff see it in FieldEdge at once. Needs scope customers:write. POST /open-api/v1/customers/{customerId}/notes.

Parameter	Type	Required	Notes
customer_id	string	yes	Customer id (GUID).
note	string	yes	The note text.

WRITE: replace the text of an existing customer note (the old text is lost). Get the note id from fieldedge_list_customer_notes. Needs scope customers:write. PATCH /open-api/v1/customers/{customerId}/notes/{noteId}.

Parameter	Type	Required	Notes
customer_id	string	yes	Customer id (GUID).
note_id	string	yes	Note id (from fieldedge_list_customer_notes).
note	string	yes	The new note text.

WRITE: create a reusable customer tag (e.g. "VIP Customer"). Check fieldedge_list_tags first. Needs scope customers:write. POST /open-api/v1/tags.

Parameter	Type	Required	Notes
name	string	yes	Tag name.

WRITE: attach an existing tag to a customer; it shows on the customer record in FieldEdge. Needs scope customers:write. POST /open-api/v1/customers/{customerId}/tags.

Parameter	Type	Required	Notes
customer_id	string	yes	Customer id (GUID).
tag_id	string	yes	Tag id (from fieldedge_list_tags).

WRITE: detach a tag from a customer (the tag itself stays). Needs scope customers:write. DELETE /open-api/v1/customers/{customerId}/tags/{tagId}.

Parameter	Type	Required	Notes
customer_id	string	yes	Customer id (GUID).
tag_id	string	yes	Tag id to remove.

WRITE: create a work order for a customer location. business_unit_id, lead_source_id and task_id are required: get them from fieldedge_list_business_units, fieldedge_list_lead_sources and fieldedge_list_tasks. Scheduling, invoice lines and equipment are separate steps (fieldedge_assign_technician for scheduling). Needs scope workorders:write. POST /open-api/v1/work-orders.

Parameter	Type	Required	Notes
customer_id	string	yes	Customer location id the work order is for.
business_unit_id	string	yes	Business unit id.
lead_source_id	string	yes	Lead source id.
task_id	string	yes	Task (service type) id.
work_order_number	string	no	Work order name/number; FieldEdge generates one when omitted.
primary_tech_id	string	no	Employee id of the primary technician to pre-assign.
document_type	string	no	Document the work order generates (default Normal).
work_description	string	no	Description of the work to be performed.
notes	string	no	Internal notes (the Work Summary in FieldEdge).
require_equipment	boolean	no	Equipment must be assigned before completion (default false).

WRITE: partially update a work order; only the fields you pass change. Can reassign the primary technician, change description/notes, and mark it completed (with a resolution) or cancel it (cancel_note). Look at fieldedge_get_work_order first. Needs scope workorders:write. PATCH /open-api/v1/work-orders/{workOrderId}.

Parameter	Type	Required	Notes
work_order_id	string	yes	Work order id (GUID).
primary_tech_id	string	no	New primary technician (employee id).
business_unit_id	string	no	New business unit id.
lead_source_id	string	no	New lead source id.
work_description	string	no	New description of the work.
notes	string	no	New internal notes.
priority_id	string	no	Priority id.
completed	boolean	no	Mark the work order completed.
resolution	string	no	Resolution text (when completing).
cancel_note	string	no	Reason, when cancelling the work order.

WRITE: schedule a technician on a work order. The assignment appears on the Dispatch Board at once and FieldEdge returns no assignment id: list the assignments afterwards to find it. Needs scope workorders:write. POST /open-api/v1/work-orders/{workOrderId}/assignments.

Parameter	Type	Required	Notes
work_order_id	string	yes	Work order id (GUID).
technician_id	string	yes	Employee id of the technician (fieldedge_list_employees with role Technician).
schedule_date_time	string	yes	Scheduled start, ISO 8601 with offset, e.g. 2026-08-17T12:58:00Z.
est_complete_date_time	string	no	Estimated completion, ISO 8601 with offset.

WRITE: move an assignment to pending, traveling, working, paused, completed or canceled. It triggers the same customer notifications and dispatch-board updates as a change on the dispatch board and is timestamped now. Canceling needs cancel_note; it fails once the assignment is completed, canceled or finalized. Get the assignment id from fieldedge_list_work_order_assignments. Needs scope workorder

Parameter	Type	Required	Notes
work_order_id	string	yes	Work order id (GUID).
assignment_id	string	yes	Assignment id.
status	string	yes	New status.
cancel_note	string	no	Required when status is canceled; not allowed otherwise.

WRITE: unassign one technician (by assignment id) from a work order; other technicians on it stay. Get the assignment id from fieldedge_list_work_order_assignments. Needs scope workorders:write. DELETE /open-api/v1/work-orders/{workOrderId}/assignments/{assignmentId}.

Parameter	Type	Required	Notes
work_order_id	string	yes	Work order id (GUID).
assignment_id	string	yes	Assignment id to remove.

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install FieldEdge MCP by usefulapi or to call it, at any volume.

ATool-list grade · score 93 / 100

Release 1.1.2 · scanned 7 Nov 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 1 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digest083e76d368cecc14d709a93b370f0544b1a4760f71e41ba1eb61c9ef7f95aed2

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
fieldedge_list_work_orders	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_work_order	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_search_work_orders_by_address	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_work_order_assignments	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_search_customers	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_customer	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_customer_by_phone	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_search_customers_by_address	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_customer_notes	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_customer_attachments	untrusted-input	untrusted-input: keyword "download", declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_tags	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_invoices	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_invoice	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_quotes	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_quote	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_agreements	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_agreement	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_employees	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_employee	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_business_units	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_business_unit	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_lead_sources	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_lead_source	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_tasks	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_task_bundle	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_items	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_item	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_item_categories	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_item_category	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_sales_tax_codes	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_list_warehouses	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_warehouse	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_lead	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_get_company	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fieldedge_create_customer	external-sink	external-sink: keyword "sms", declares readOnlyHint: false, openWorldHint: true
fieldedge_create_customer_note	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
fieldedge_update_customer_note	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
fieldedge_create_tag	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
fieldedge_add_customer_tag	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
fieldedge_remove_customer_tag	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
fieldedge_create_work_order	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
fieldedge_update_work_order	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
fieldedge_assign_technician	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
fieldedge_update_assignment_status	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true
fieldedge_remove_assignment	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

flow-1

Untrusted input can drive an external action even though no sensitive source is exposed.

Supply chain and provenance

Integrityfirst-seen

Surface digest083e76d368cecc14

Scanned2026-11-07

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

Where are you running it?

Tool surface

Release history

FieldEdge MCP by usefulapi

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also