TradeCheck Local Invoice Review

io.github.f-tigerv0.2.0Updated Oct 10, 2026

Review orders and supplier invoices locally with exact arithmetic and source-linked findings.

VerifiedSTDIODesktop onlyData & AnalyticsFinanceBusiness & Commerce

Overview

AI-generated overview

Locally reviews purchase orders against supplier invoices with exact decimal arithmetic and source-linked findings, and drafts an unsent supplier clarification.

What it does
TradeCheck is a deterministic, local review engine exposed over MCP. Its tools import PO and invoice tables from pasted CSV or TSV with explicit zero-based column mappings, return a stable fictional example, reconcile the data into a paginated list of findings, and draft an unsent supplier clarification in English or Chinese. Checks cover identifiers, currency consistency, PO line mapping, SKU and unit, unit-price changes, cumulative quantities, repeated supplied IDs, and line, subtotal and header arithmetic.
When to use it
Useful for importers and purchasing teams that want an assistant to compare one purchase order, one supplier invoice and supplied prior invoice history, and to prepare a clarification message for a supplier. It suits two-way matching of supplied data only; it cannot verify delivery, receipt, quality, customs, sanctions, bank details or payment eligibility.
Requirements
Runs as a local stdio process on a desktop machine; the manifest declares no authentication, environment variables or headers. Node.js 22 or newer is required, plus installing pinned dependencies and registering the built server path with an MCP-compatible desktop assistant. No network requests are made by the server itself.
Before you install
The server reads no document paths and stores no documents, but the assistant host may send attachments and tool data to its model provider under that provider's fees and data terms. Source references and completeness are caller assertions, not cryptographic evidence. Price variance is a signed total across matched lines, not an overpayment or recovered amount; payment_authorized is always false. The supplier draft is unsent. No paid service is enabled.

Installation

In SourceWeft

  1. Open TradeCheck Local Invoice Review in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

TradeCheck MCP · 0.2.0 beta

A local tool for importer and purchasing-team invoice review. It compares one purchase order, one supplier invoice and supplied prior invoice history, then prepares an unsent supplier clarification. It is a deterministic review engine exposed through MCP plus a guided agent prompt. It is not a hosted model, OCR service, ERP integration or autonomous payment agent.

Try the browser workbench: https://rfqdesk.agiscorecard.com/agent

Start here

  1. Install Node.js 22 or newer. Download and extract the beta archive from the site.
  2. Open a terminal in the extracted tradecheck-mcp directory. Install the pinned dependencies and test the bundled build:
sh
npm ci --ignore-scripts --no-audit --no-fundnpm testnpm run demo

The demo connects a real MCP client over stdio, loads a fictional order and finds a signed price difference of EUR 44.00 and a cumulative quantity of 320 against 300 ordered. These are fictional discrepancies, not recovered money.

  1. Register the server with your MCP-compatible desktop assistant. For Claude Code, substitute your actual absolute path:
sh
claude mcp add tradecheck -- node /absolute/path/tradecheck-mcp/dist/server.js

Run /mcp in Claude Code and check that four TradeCheck tools appear. For Cursor, add this entry to its MCP configuration:

json
{"mcpServers":{"tradecheck":{"command":"node","args":["/absolute/path/tradecheck-mcp/dist/server.js"]}}}

On Windows use an absolute path such as C:/Users/you/tradecheck-mcp/dist/server.js. If node is not found by your desktop app, use its absolute executable path. The server is local stdio, not a remote URL.

  1. Ask the assistant: “Use TradeCheck's review_supplier_invoice prompt. First show the fictional example. Then help me prepare my PO and invoice, confirm the extracted fields with me, and produce a two-way review plus an unsent supplier clarification.”

If your host does not surface prompts, paste AGENT-WORKFLOW.md. Its ability to read PDF or image attachments depends on that host; this package does not perform OCR. No model evaluation of extraction quality has been completed. A real SDK client round trip is tested; the listed desktop hosts have not each been tested in this release.

Available tools

ToolInputOutput
tradecheck_import_tablesPO/invoice header metadata, CSV/TSV text and explicit zero-based column mappingsUnreviewed structured data, unknown prior history
tradecheck_example{}Stable fictional input and contract
tradecheck_reconcile{data, offset?:0, limit?:20}Summary, a page of findings, total finding count, next offset
tradecheck_supplier_draft{data, language?:"en"}Unsent subject/body with up to 20 exception/gap items

Read tradecheck://contract for scope. Use the example JSON instead of inventing fields. Decimal numbers must be strings. Unknown required amounts must be resolved; blank is not zero. Keep history_status:"unknown" when earlier invoices may be missing. Set extraction_reviewed:true only after a person reviews the fields against the original documents.

What is checked

Exact PO/supplier identifiers, currency consistency, explicit PO line mapping, SKU and unit, unit-price changes, cumulative supplied quantities, repeated supplied IDs, line/subtotal/header arithmetic. Legitimate partial billing is informational. All calculations use integer decimal scales and half-up rounding per line. Monetary totals use two decimals, or whole yen for JPY. Quantity supports three decimals and unit price four.

Supported currencies: USD, EUR, GBP, CAD, AUD, CNY, SGD, CHF, JPY. No FX or unit conversion. A matching SKU is not enough to infer a PO line. The input supports at most 100 PO/current lines, 20 earlier invoices and 1,000 earlier lines. Reports paginate at 25 findings maximum; each finding includes up to six source locators and an explicit refs_omitted count. The browser/full JSON report retains all supplied references.

Limits that affect the result

  • Two-way matching cannot verify delivery, receipt, quality, contract acceptance, customs, sanctions, bank details or payment eligibility.
  • Source references and completeness are caller assertions. They are not cryptographic evidence or independent document verification.
  • No negative values, credit notes, deposits, discounts, tax validation or alternate rounding conventions. Such documents require a different workflow.
  • Price variance is a signed total across comparable matched lines, not an overpayment, saving or recovered amount.
  • An empty exception list means only no exceptions in the supported supplied data. payment_authorized is always false.
  • Chinese drafts use a Chinese introduction and preserve English diagnostic lines; the assistant may translate them while preserving values and references.

Privacy and operation

The MCP makes no network requests, reads no document paths, stores no documents and has no telemetry. It only processes values the caller supplies. Your AI assistant may send attachments and tool data to its model provider; its fees and data terms still apply. The public browser demo runs locally. Optional site events contain no document data.

No paid service is enabled. The proposed €29/month team workspace is research only; saved histories, supplier mapping and batch management are not available. Beta use is governed by LICENSE.txt; dependency licenses are in THIRD-PARTY-NOTICES.txt.

Development and verification

sh
npm run buildnpm testnpm run demonpm run package

The package command stages an explicit allowlist, including the tested build, fixtures, documentation, sources and pinned dependencies manifest. It excludes repository contents, credentials, node_modules and buyer documents. Verify the download against SHA256SUMS.

The protocol and decimal contract tests are not a measurement of LLM, OCR or commercial accuracy. See EVALUATION.md for independent read-only protocol scenarios when included.

Spreadsheet input in v0.2

Paste CSV or tab-separated cells including headers. The browser previews five rows and all mappings; up to 100 data rows are imported. Columns must be explicitly mapped with no reuse. Filenames and physical row locators are preserved. Every header amount, currency, supplier and order ID is required. Localized decimals and numeric formulas are rejected; unknown charges are never zero-filled. Prior history begins unknown and extraction_reviewed begins false. Confirm against original documents before reconciliation. The MCP accepts the same text and zero-based mappings through tradecheck_import_tables.

Release archives use a fixed timestamp and explicit source allowlist. Bump the package/download version when release contents change. The audit report schema remains version 0.1.0; package version 0.2.0 adds input preparation without changing report semantics.

Source: agents/tradecheck-mcp/README.md at commit 2e748c7

Tools

0
Tool metadata has not been indexed yet.

Version history

1
  1. v0.2.0LatestOct 10, 2026