splitwise-mcp-server
Model Context Protocol server for Splitwise API
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
svarun115
Source: Glama · also listed on github_repo_search
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
splitwise_get_current_userGet information about the currently authenticated Splitwise user, including their ID, name, email, notification settings, and default currency.
splitwise_get_userGet information about another Splitwise user by their user ID.
splitwise_update_userUpdate information for a Splitwise user. Can update first name, last name, email, password, locale, and default currency.
splitwise_get_groupsList all groups for the current user. Groups represent collections of users who share expenses together (e.g., household, trip, etc.).
splitwise_get_groupGet detailed information about a specific group, including members, balances, and settings.
splitwise_create_groupCreate a new group. Can add users by providing their email/name or user_id. User fields should be in the format users__0__email, users__0__first_name, etc.
splitwise_delete_groupDelete a group. This destroys all associated records including expenses.
splitwise_restore_groupRestore a deleted group.
splitwise_add_user_to_groupAdd a user to an existing group. Provide either user_id or email/first_name/last_name.
splitwise_remove_user_from_groupRemove a user from a group. Note: This only succeeds if the user has a zero balance in the group.
splitwise_get_friendsList all friends of the current user, including balance information.
splitwise_get_friendGet detailed information about a specific friend, including shared groups and balances.
splitwise_add_friendAdd a new friend. If the user exists, first_name and last_name are ignored. If creating a new user, first_name is required.
splitwise_add_friendsAdd multiple friends at once. Provide users array with email/first_name/last_name for each.
splitwise_remove_friendRemove a friend connection. This breaks off the friendship between the current user and the specified user.
splitwise_get_expensesList expenses with optional filters. Can filter by group, friend, date range, or update time.
splitwise_get_expenseGet detailed information about a specific expense, including all users involved and their shares.
splitwise_create_expenseCreate a new expense. Can split equally among group members or specify custom shares for each user. For custom shares, provide users array with paid_share and owed_share for each user.
splitwise_update_expenseUpdate an existing expense. Only include fields that are changing. If users array is provided, all shares will be overwritten.
splitwise_delete_expenseDelete an expense permanently.
splitwise_restore_expenseRestore a deleted expense.
splitwise_get_commentsGet all comments for a specific expense.
splitwise_add_commentAdd a comment to an expense.
splitwise_delete_commentDelete a comment from an expense.
splitwise_get_notificationsGet recent notifications/activity for the user account. Returns expenses added/updated/deleted, comments, group changes, friend changes, etc.
splitwise_get_currenciesGet a list of all currencies supported by Splitwise. Returns ISO 4217 currency codes.
splitwise_get_categoriesGet a list of all expense categories supported by Splitwise. Use subcategory IDs when creating expenses.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
SPLITWISE_ACCESS_TOKENSPLITWISE_API_BASE_URLSPLITWISE_CONSUMER_KEYSPLITWISE_CONSUMER_SECRETSPLITWISE_TOKENS_DIRWS_BACKEND_URLPORTTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
27/27 tools missing one or more hints — splitwise_get_current_user (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); splitwise_get_user (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); splitwise_update_user (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +24 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Tool test coverage
Only 0/27 tools referenced in tests (0%)
Write tests that reference each tool by name so every tool has at least one test.
Shell command execution
1 call in production code run through a shell (src/get-token.ts:180)
Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.
Secrets not logged
1 secret value sent to log
Redact or omit secret values from log output.
Production dependencies are patched
0 critical, 15 high severity in production deps — @modelcontextprotocol/sdk@1.21.0 (high), @modelcontextprotocol/sdk@1.21.0 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Dev dependencies
1 critical/high in dev-only deps (does not ship to users)
Upgrade dev dependencies when convenient.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/svarun115/splitwise-mcp-server)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check