
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@creditsync-pro/mcp
Advanced tools
MCP server for connecting Claude Desktop to your CreditSync account. Requires a CreditSync Pro subscription.
Landing page: https://www.creditsync.pro/for-developers — tool breakdown and integration overview.
claude_desktop_config.json):{
"mcpServers": {
"creditsync": {
"command": "npx",
"args": ["@creditsync-pro/mcp"],
"env": {
"CREDITSYNC_API_KEY": "cs_your_key_here"
}
}
}
}
| Tool | Description |
|---|---|
list_benefits | List card-linked benefits (statement credits, free nights, companion certs, lounge passes). Filter by card_id, status, expiring_within_days. For standalone items, use list_rewards |
get_benefit | Get detailed info for a specific benefit with all periods |
mark_benefit_used | Mark a benefit as used (default), partial, or unused |
get_dashboard | Dashboard metrics: expiring, captured, available, ROI |
list_cards | List all cards with issuer, issuing_bank, fees, renewal months, last 4 digits, benefit counts |
get_card | Get a single card's full picture: benefits, ROI, renewal, value at risk |
get_action_items | Prioritized action items: 6 types (benefit_expiring, at_risk_this_period, unused_prior_period, fee_renewal, negative_roi, welcome_offer_at_risk). action_types filter accepts both category names (expiring, renewal_approaching) and response-type names (benefit_expiring, at_risk_this_period, fee_renewal) — the latter for precise filtering. Includes historical_rate, historical_rate_n, historical_rate_confidence fields on dollar-denominated benefits |
get_calendar_events | Structured calendar events for benefit deadlines, fee renewals, welcome offers, loyalty program point expirations, and rewards/certificates expirations. welcome_offer_deadline events carry origin + source_event_id fields so agents can filter retention-origin bonuses separately from signup SUBs |
search_catalog | Search card catalog by issuer, name, or combined (e.g., "Amex Platinum") |
bulk_import_cards | Import multiple cards in one call with fuzzy matching, metadata, and welcome offers. Use dry_run to preview. Reduces onboarding from 40+ calls to 1-3 |
create_card | Add a single card to portfolio by name (fuzzy) or exact template ID. Supports full metadata on creation (last_four, open date, business flag, 5/24, notes) — no follow-up update_card call needed |
archive_card | Deactivate a card (soft delete, preserves history) |
list_programs | List loyalty programs with balances, CPP valuations, staleness. Filter by has_balance, type, owner |
update_balance | Set or adjust a loyalty program balance (absolute or delta) |
get_transfer_partners | Get transfer partners for a currency with ratios. Accepts source or program param |
get_earn_rates | Earning rates for a card: bonus categories, multipliers, caps |
get_best_card | Wallet optimizer: best card for a spend category ranked by value |
update_card | Update card metadata: notes, open date, product change, 5/24 status |
log_retention_offer | Log retention offer interactions for strategy history. Structured fields: outcome (accepted/declined/countered/escalated/no_offer), offer_type, offer_value_dollars/offer_points+offer_currency. When spend_requirement + spend_deadline are passed on an accepted offer, server auto-creates a paired WelcomeOffer for calendar reminders. Validates points_bonus requires currency + points; statement_credit requires dollars. Returns event_id |
update_retention_offer | Patch a logged retention offer in place (fix typos, add missing currency, change outcome). Preserves event_id and date; re-runs validation on merged state; records audit breadcrumb. Prefer over delete+relog |
delete_retention_offer | Delete a retention offer entry by event_id (for correcting mistakes). Prefer update_retention_offer for corrections |
create_welcome_offer | Record a welcome offer with bonus, spend requirement, and deadline |
update_welcome_offer | Update spend progress or status on a welcome offer |
list_welcome_offers | List welcome offers with spend progress and deadline urgency |
create_benefit | Add a new benefit to a card with auto-generated periods. Returns 409 on duplicates; force: true to bypass. dry_run: true validates without persisting |
update_benefit | Update benefit details (name, amount, category, status) |
get_524_status | Compute Chase 5/24 eligibility from card metadata + external cards |
archive_benefit | Archive a benefit (soft delete, preserves history) |
add_external_card | Add a non-catalog card for 5/24 tracking |
remove_external_card | Remove an external card from 5/24 tracking |
list_rewards | List standalone rewards NOT tied to a card (gift cards, vouchers, airline credits). Separate from card-linked list_benefits |
add_reward | Track a standalone reward (not from a card). No card numbers or PINs — existence only |
update_reward | Update reward details or mark as used |
remove_reward | Delete a reward permanently |
Ask Claude:
CreditSync MCP provides the data. You decide what to do with it.
The API is read/write, so your AI assistant can both query your benefit data and act on it. This makes it a building block for workflows that go far beyond simple lookups:
The MCP server runs locally on your machine. Any tool your AI has access to (HTTP APIs, local scripts, messaging platforms) can be combined with CreditSync data to create custom workflows.
FAQs
CreditSync MCP server for Claude Desktop
We found that @creditsync-pro/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.