Cashpilot Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Cashpilot Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="docs/images/banner.svg" alt="CashPilot MCP banner" width="900"/> </p>
<h1 align="center">CashPilot-MCP</h1>
<p align="center"> <a href="https://codecov.io/gh/GeiserX/cashpilot-mcp"><img src="https://codecov.io/gh/GeiserX/cashpilot-mcp/graph/badge.svg" alt="codecov"/></a> <a href="https://www.npmjs.com/package/cashpilot-mcp"><img src="https://img.shields.io/npm/v/cashpilot-mcp?style=flat-square&logo=npm" alt="npm"/></a> <img src="https://img.shields.io/badge/Go-1.24-blue?style=flat-square&logo=go&logoColor=white" alt="Go"/> <a href="https://hub.docker.com/r/drumsergio/cashpilot-mcp"><img src="https://img.shields.io/docker/pulls/drumsergio/cashpilot-mcp?style=flat-square&logo=docker" alt="Docker Pulls"/></a> <a href="https://github.com/GeiserX/cashpilot-mcp/stargazers"><img src="https://img.shields.io/github/stars/GeiserX/cashpilot-mcp?style=flat-square&logo=github" alt="GitHub Stars"/></a> <a href="https://github.com/GeiserX/cashpilot-mcp/blob/main/LICENSE"><img src="https://img.shields.io/github/license/GeiserX/cashpilot-mcp?style=flat-square" alt="License"/></a> </p> <p align="center"> <a href="https://registry.modelcontextprotocol.io"><img src="https://img.shields.io/badge/MCP-Official%20Registry-E6522C?style=flat-square" alt="Official MCP Registry"/></a> <a href="https://glama.ai/mcp/servers/GeiserX/cashpilot-mcp"><img src="https://glama.ai/mcp/servers/GeiserX/cashpilot-mcp/badges/score.svg" alt="Glama MCP Server" /></a> <a href="https://mcpservers.org/servers/geiserx/cashpilot-mcp"><img src="https://img.shields.io/badge/MCPServers.org-listed-green?style=flat-square" alt="MCPServers.org"/></a> <a href="https://mcp.so/server/cashpilot-mcp"><img src="https://img.shields.io/badge/mcp.so-listed-blue?style=flat-square" alt="mcp.so"/></a> <a href="https://github.com/toolsdk-ai/toolsdk-mcp-registry"><img src="https://img.shields.io/badge/ToolSDK-Registry-orange?style=flat-square" alt="ToolSDK Registry"/></a> <a href="https://github.com/punkpeye/awesome-mcp-servers#readme"><img src="https://img.shields.io/badge/listed%20on-awesome--mcp--servers-E6522C?style=flat-square" alt="listed on awesome-mcp-servers"/></a> </p>
<p align="center"><strong>A tiny bridge that exposes any CashPilot instance as an MCP server, enabling LLMs to monitor passive income earnings, manage services, and control fleet workers.</strong></p>
| Type | What for | MCP URI / Tool id |
|---|---|---|
| Resources | Browse earnings, services, fleet status, and health scores read-only | cashpilot://earnings/summary<br>cashpilot://earnings/breakdown<br>cashpilot://services/deployed<br>cashpilot://services/catalog<br>cashpilot://fleet/summary<br>cashpilot://workers<br>cashpilot://health/scores<br>cashpilot://collector-alerts |
| Tools | Query earnings, manage services, and trigger collection | get_earnings_daily<br>get_earnings_history<br>get_service_logs<br>restart_service<br>stop_service<br>start_service<br>deploy_service<br>remove_service<br>trigger_collection<br>get_compose |
Everything is exposed over a single JSON-RPC endpoint (/mcp). LLMs / Agents can: initialize -> readResource -> listTools -> callTool ... and so on.
services:
cashpilot-mcp:
image: drumsergio/cashpilot-mcp:latest
ports:
- "127.0.0.1:8081:8081"
environment:
- CASHPILOT_URL=http://cashpilot:8080
- CASHPILOT_API_KEY=<your-CASHPILOT_ADMIN_API_KEY>Security note: The HTTP transport listens on 127.0.0.1:8081 by default. If you need to expose it on a network, place it behind a reverse proxy with authentication.npx cashpilot-mcpOr install globally:
npm install -g cashpilot-mcp
cashpilot-mcpThis downloads the pre-built Go binary from GitHub Releases for your platform and runs it with stdio transport. Requires at least one published release.
git clone https://github.com/GeiserX/cashpilot-mcp
cd cashpilot-mcp
# (optional) create .env from the sample
cp .env.example .env && $EDITOR .env
go run ./cmd/server| Variable | Default | Description |
|---|---|---|
CASHPILOT_URL | http://localhost:8080 | CashPilot instance URL (without trailing /) |
CASHPILOT_API_KEY | _(required)_ | Admin API key (CASHPILOT_ADMIN_API_KEY from your CashPilot instance — NOT the fleet key) |
LISTEN_ADDR | 127.0.0.1:8081 | HTTP listen address (Docker sets 127.0.0.1:8081) |
MCP_AUTH_TOKEN | _(empty)_ | Bearer token for HTTP transport auth. Required when LISTEN_ADDR is not loopback |
TRANSPORT | _(empty = HTTP)_ | Set to stdio for stdio transport |
Put them in a .env file (from .env.example) or set them in the environment.
Tested with Inspector and it is currently fully working. Before making a PR, make sure this MCP server behaves well via this medium.
{
"schema_version": "v1",
"name_for_human": "CashPilot-MCP",
"name_for_model": "cashpilot_mcp",
"description_for_human": "Monitor passive income earnings, manage bandwidth-sharing services, and control fleet workers via CashPilot.",
"description_for_model": "Interact with a CashPilot instance that manages passive income services. First call initialize, then reuse the returned session id in header \"Mcp-Session-Id\" for every other call. Use readResource to fetch URIs that begin with cashpilot://. Use listTools to discover available actions and callTool to execute them.",
"auth": {
"type": "bearer",
"token": "<your-MCP_AUTH_TOKEN>"
},
"api": {
"type": "jsonrpc-mcp",
"url": "http://localhost:8081/mcp",
"init_method": "initialize",
"session_header": "Mcp-Session-Id"
},
"contact_email": "[email protected]",
"legal_info_url": "https://github.com/GeiserX/cashpilot-mcp/blob/main/LICENSE"
}CashPilot -- passive income fleet management dashboard
MCP-GO -- modern MCP implementation
GoReleaser -- painless multi-arch releases
Feel free to dive in! Open an issue or submit PRs.
CashPilot-MCP follows the Contributor Covenant Code of Conduct.
| Project | Description |
|---|---|
| CashPilot | Self-hosted passive income platform with web UI for setup and earnings tracking |
| CashPilot-android | Android monitoring agent for CashPilot passive income apps |
| cashpilot-ha | Home Assistant custom integration for CashPilot passive income monitoring |
| n8n-nodes-cashpilot | n8n community node for CashPilot passive income monitoring |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.