What isn't a tool

Names every $5,000 contributor with an address, fully-anonymous donors included — their identity read from Stripe because Schedule B reports it to the IRS. Those donors chose to be unknown to everyone else; the Finance Tax tab hands the report to the preparer without a model context.

backend/src/routes/exports.ts throws 501 NOT_IMPLEMENTED for every caller — nothing to wrap yet. Add a tool once exports.ts gets a real DAL-backed implementation.

Mints, spends or ends a credential. The MCP caller is already signed in through OAuth; signing in, signing up, resetting a password or changing the sign-in address from inside that session is a different account flow with its own emailed codes, and ending the session from a tool would cut off the connection making the call.

Donor realm only (requireDonor). /mcp authenticates platform accounts and refuses donor tokens, so this tool could never be called.

Authenticated by a provider signature or a shared secret, not a person. A person has no reason to call it and no credential it would accept.

Takes a multipart file upload (the invoice PDF). A tool call carries JSON arguments and has no way to attach a file.

Wipes and reseeds the whole graph, behind its own emailed one-time token. Not something to start from a conversation, and the confirmation this needs is the emailed token, not a dialog.

Submits an organization's legal identity and bank details — tax id, a representative's date of birth and SSN digits, account and routing numbers. Those must not pass through a model context; the portal's Payout tab is where they are entered.

Impersonation is adopted by the portal client, which then acts as the target. An MCP client cannot adopt it, so opening one here would leave a live impersonation session nobody is using.