bridgeBLOCK
ComplyEaze Bridge is an open-source (Apache-2.0) TallyPrime MCP server for Claude Desktop, for CA firms and accountants. Reads the books on your own computer; prepares vouchers from bank statements as an import file. Posting is off by default; when on, you approve each voucher.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://glama.ai/mcp/servers/ComplyEaze/bridge)
ComplyEaze Bridge is an open-source (Apache-2.0) TallyPrime (also written Tally Prime) MCP server for Claude Desktop. It connects Claude Desktop to the TallyPrime running on your own computer, and it is built for chartered accountants, CA firms and accountants. What Claude reads from your books goes to your AI provider as part of the chat. You can ask about the trial balance, outstanding receivables and payables with ageing, ledger movement and vouchers, the purchase and sales registers, the stock summary, and the Profit and Loss and Balance Sheet (a book with stock items is expected to be refused for these two). It checks ledger names before you post. For bank statement to TallyPrime vouchers, it proposes Payment, Receipt and Contra vouchers from a password-protected SBI, HDFC or Union Bank of India statement PDF, and it prepares Journal, Payment, Receipt and Contra vouchers as an import file that you review and import into TallyPrime yourself. Posting is off by default, so as installed it never posts to TallyPrime: it reads from it and prepares files on your computer. If you turn posting on in the extension, it posts vouchers one at a time, after you approve each one.
Tally Solutions also offers its own TallyPrime MCP plug-in for Claude Desktop; its help pages (last updated 18 September 2026) list tools in six groups: company, master, accounting, inventory, outstanding and transaction. ComplyEaze Bridge is not made by, or affiliated with, Tally Solutions, and we have not run the two side by side. TallyPrime also has its own Bank Statement import, which takes statement files in the formats Tally lists for each bank.
Current release: [mcp-v0.5.0](https://githu
e828149c42c1OBSERVED · 2026-10-09Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add bridge --env GITHUB_TOKEN=${GITHUB_TOKEN} -- npx -y [email protected]{
"mcpServers": {
"bridge": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"GITHUB_TOKEN": "${GITHUB_TOKEN}"
}
}
}
}Trust audit
BLOCKgrade F · trust 50/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (4 observation(s))
- Network
- declared (9 observation(s))
- Shell
- declared (3 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
"+api_key = \"sk_live_abcdef1234567890abcdef\"\n"
url: "http://127.0.0.1:4173",
baseURL: "http://127.0.0.1:4173",
const lines = source.replace(/^/, "").split(/\r?\n/).map((t, at) => ({ t, n: at + 1 }));let secret = "BRIDGE-DO-NOT-ECHO-SENTINEL";
batch-import-all-missing-ledgers.utf16le.xml
batch-import-two-missing-ledgers-in-one-voucher.utf16le.xml
company-ledger-count.utf16le.xml
d3-amend-lab-ledger-catalogue-v2.utf16le.xml
d3-amend-lab-ledger-catalogue.utf16le.xml
.node-version
batch-c2.md
Encryption is the PDF standard security handler, revision 3 (RC4, 128-bit).
Real statements commonly use AES; RC4 is used here only because it needs no
# RC4 and the standard security handler (ISO 32000-1, 7.6.3) #
def rc4(key, data):
digest = hashlib.md5(padded(owner)).digest()
`| \`../../../../../scripts/fixtures/shared.bin\` | ${bytes.length} | \`${sha256}\` |\n`,manifest = {"server": {"entry_point": "bin/../../outside"}}for name in ("../outside", "/outside", "bin/../../outside", "bin\\outside", "bin/file:stream", "bin/\0file"):"path = \"../../src-tauri\"",
for (const entryPoint of [{ "darwin-arm64": "bin/bridge_mcp" }, "bin/../../outside"]) {`tools/call validate_masters` — against `http://127.0.0.1:9001`, TallyPrime 7.1, licence tier
canonical_origin: "http://127.0.0.1:9000",
{ canonical_origin: "http://127.0.0.1:9001" },Gates applied: critical_finding, no_behavioural_pass.
e828149c42c1full audit observations/trust-audit/mcp-server/complyeaze__bridge.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | e828149c42c1 | BLOCK | F | 50 | first audit |
Questions
What is the bridge MCP server?
ComplyEaze Bridge is an open-source (Apache-2.0) TallyPrime MCP server for Claude Desktop, for CA firms and accountants. Reads the books on your own computer; prepares vouchers from bank statements as an import file. Posting is off by default; when on, you approve each voucher.
Is bridge safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (50/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does bridge need?
It reads GITHUB_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does bridge run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as bridge at 0.5.1.
How current is this page?
The grade is for one exact copy of the source (e828149c42c1), read on 2026-10-09. The repository is watched and re-audited when it changes.