Home / MCP registry index / uk.co.taptax/taptax
TapTax
uk.co.taptax/taptax in the official MCP registry.
Endpoint https://api.taptax.co.uk/mcp. Source: github.com/udohsolomon/taptax-mcp.
The registry describes it as: UK tax: take-home pay, self-employed and company tax, VAT, stamp duty, invoices and MTD.
We read its 49 tools on 2026-10-21. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
estimate_self_employed_tax check_tax_code check_mtd_status get_mtd_deadlines calculate_take_home_pay calculate_gross_salary_for_take_home calculate_salary_sacrifice calculate_pro_rata_salary convert_hourly_rate_to_salary convert_salary_to_hourly_rate calculate_student_loan_repayment calculate_child_benefit_charge calculate_tax_on_multiple_incomes calculate_pension_tax_relief calculate_dividend_tax compare_salary_and_dividends compare_limited_company_and_sole_trader calculate_corporation_tax calculate_contractor_day_rate compare_inside_and_outside_ir35 calculate_cis_deduction plan_quarterly_tax_set_aside calculate_mileage_allowance estimate_self_assessment_penalties calculate_vat check_vat_registration check_vat_reverse_charge calculate_markup calculate_profit_margin calculate_invoice_due_date calculate_late_payment_interest calculate_capital_gains_tax calculate_rental_income_tax calculate_savings_interest_tax calculate_stamp_duty prepare_business_document generate_invoice_numbers get_tax_position list_transactions get_mileage_summary add_transaction update_transaction log_mileage_trip list_invoices create_invoice send_invoice send_invoice_from_card mark_invoice_paid prepare_quarterly_update
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/uk-co-taptax-taptax)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.