splitwise-mcp 2.0.9 → 2.0.11

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Splitwise — natural-language expense and group management via the Splitwise API",
-    "version": "2.0.9"
+    "version": "2.0.11"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Splitwise",
       "source": "./",
       "description": "MCP server for Splitwise — manage expenses, groups, and friends via natural language",
-      "version": "2.0.9",
+      "version": "2.0.11",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "splitwise-mcp",
   "displayName": "Splitwise",
-  "version": "2.0.9",
+  "version": "2.0.11",
   "description": "MCP server for Splitwise — natural-language expense and group management via the Splitwise API",
   "author": {
     "name": "Chris Hall",

package/dist/bundle.js

@@ -6,7 +6,11 @@ var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -31017,8 +31021,12 @@ var API_KEY_RE = new RegExp([
   // webhook signing secret (Stripe-style)
 ].map((p) => `\\b${p}`).join("|"), "g");
 var QUERY_SECRET_RE = /([?&](?:access_token|refresh_token|client_secret|api_?key|signature|token|key|sig)=)[^&#\s"'<>`]+/gi;
+var AWS_SIGV4_RE = /([?&]X-Amz-(?:Signature|Security-Token|Credential)=)[^&#\s"'<>`]+/gi;
+var JSON_SECRET_KEYS = "access_token|refresh_token|client_secret|api_?key|password|passwd|secret|token";
+var JSON_SECRET_DQ_RE = new RegExp(`("(?:${JSON_SECRET_KEYS})"\\s*:\\s*")[^"]*(")`, "gi");
+var JSON_SECRET_SQ_RE = new RegExp(`('(?:${JSON_SECRET_KEYS})'\\s*:\\s*')[^']*(')`, "gi");
 function redactSecrets(text) {
-  return text.replace(BEARER_RE, "$1[REDACTED]").replace(BASIC_AUTH_RE, "$1[REDACTED]").replace(SET_COOKIE_RE, "$1$2=[REDACTED]").replace(COOKIE_HEADER_RE, (_m, prefix, pairs) => `${prefix}${pairs.replace(/=[^;,\s]*/g, "=[REDACTED]")}`).replace(API_KEY_RE, "[REDACTED]").replace(QUERY_SECRET_RE, "$1[REDACTED]").replace(JWT_RE, "[REDACTED]");
+  return text.replace(BEARER_RE, "$1[REDACTED]").replace(BASIC_AUTH_RE, "$1[REDACTED]").replace(SET_COOKIE_RE, "$1$2=[REDACTED]").replace(COOKIE_HEADER_RE, (_m, prefix, pairs) => `${prefix}${pairs.replace(/=[^;,\s]*/g, "=[REDACTED]")}`).replace(API_KEY_RE, "[REDACTED]").replace(QUERY_SECRET_RE, "$1[REDACTED]").replace(AWS_SIGV4_RE, "$1[REDACTED]").replace(JSON_SECRET_DQ_RE, "$1[REDACTED]$2").replace(JSON_SECRET_SQ_RE, "$1[REDACTED]$2").replace(JWT_RE, "[REDACTED]");
 }
 function truncateErrorMessage(text, max = DEFAULT_ERROR_MESSAGE_MAX) {
   const str = text === null || text === void 0 ? "" : String(text);
@@ -31065,6 +31073,18 @@ async function loadDotenvSafely(opts = {}) {
   }
 }
 
+// node_modules/@chrischall/mcp-utils/dist/http/net-atoms.js
+function parseRetryAfterMs(header, opts = {}) {
+  const defaultMs = opts.defaultMs ?? 2e3;
+  const capMs = opts.capMs ?? 3e4;
+  if (header == null)
+    return defaultMs;
+  const trimmed = header.trim();
+  if (!/^\d+$/.test(trimmed))
+    return defaultMs;
+  return Math.min(Number(trimmed) * 1e3, capMs);
+}
+
 // node_modules/@chrischall/mcp-utils/dist/http/index.js
 var DEFAULT_RETRY = { count: 1, delayMs: 2e3 };
 var defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
@@ -31156,7 +31176,11 @@ function createApiClient(opts) {
       const res = await once();
       if (retryStatuses.includes(res.status) && attempt < retry.count) {
         attempt += 1;
-        await sleep(retry.delayMs);
+        const delay = retry.honorRetryAfter ? parseRetryAfterMs(res.headers.get("retry-after"), {
+          defaultMs: retry.delayMs,
+          capMs: retry.maxRetryAfterMs ?? 3e4
+        }) : retry.delayMs;
+        await sleep(delay);
         continue;
       }
       return res;
@@ -31191,7 +31215,26 @@ function createApiClient(opts) {
     }
     return text;
   }
-  return { fetchJson, fetchHtml };
+  async function fetchRaw(method, path, opt = {}) {
+    const headers = { Accept: "*/*", ...opt.headers };
+    const res = await send(method, path, { ...opt, headers });
+    if (res.status === 401)
+      throw unauthorized();
+    if (res.status === 429)
+      throw rateLimited();
+    if (!res.ok) {
+      const text = await res.text().catch(() => "");
+      throw new ApiError(res.status, formatApiError(res.status, method, path, text, { service }));
+    }
+    const bytes = new Uint8Array(await res.arrayBuffer());
+    return {
+      status: res.status,
+      contentType: res.headers.get("content-type"),
+      headers: res.headers,
+      bytes
+    };
+  }
+  return { fetchJson, fetchHtml, fetchRaw };
 }
 function buildQueryString(params) {
   const parts = [];
@@ -31223,6 +31266,8 @@ var NonNegInt = external_exports.number().int().nonnegative();
 var NonEmptyString = external_exports.string().min(1);
 var IsoDate = external_exports.iso.date();
 var IsoTime = external_exports.string().regex(/^([01]?\d|2[0-3]):[0-5]\d$/, "must be HH:MM (24h), e.g. 19:30");
+var NumericIdString = external_exports.string().regex(/^\d+$/, "must be a numeric id (digits only)").describe("A numeric id string (digits only), safe to interpolate into a URL path.");
+var SafePathSegment = external_exports.string().min(1).regex(/^[^/?#\s]+$/, 'must not contain "/", "?", "#", or whitespace').refine((v) => !v.includes(".."), 'must not contain ".."').describe('A single URL path segment, safe to interpolate: no "/", "..", "?", "#", or whitespace.');
 var schemaOrigin = external_exports.string().optional().describe("Portal origin (e.g. https://<vendor>.example.co) selecting which active session to use. Optional when only one session is active.");
 var schemaConfirm = external_exports.boolean().optional().describe("Must be true to proceed. Without this, the tool returns a preview.");
 var paginationSchema = {
@@ -31279,6 +31324,19 @@ var SplitwiseClient = class {
 };
 var client = new SplitwiseClient();
 
+// src/tools/_confirm.ts
+function previewUnlessConfirmed(confirm, action, method, path, body) {
+  if (confirm === true) return null;
+  return textResult({
+    dryRun: true,
+    action,
+    method,
+    path,
+    ...body !== void 0 ? { willSend: body } : {},
+    note: "Re-run with confirm: true to execute."
+  });
+}
+
 // src/tools/user.ts
 function registerUserTools(server) {
   server.registerTool("sw_get_current_user", {
@@ -31307,9 +31365,10 @@ function registerUserTools(server) {
       email: external_exports.string().optional(),
       password: external_exports.string().optional(),
       locale: external_exports.string().optional(),
-      default_currency: external_exports.string().optional()
+      default_currency: external_exports.string().optional(),
+      confirm: schemaConfirm
     }
-  }, async ({ id, first_name, last_name, email: email3, password, locale, default_currency }) => {
+  }, async ({ id, first_name, last_name, email: email3, password, locale, default_currency, confirm }) => {
     const body = {};
     if (first_name !== void 0) body.first_name = first_name;
     if (last_name !== void 0) body.last_name = last_name;
@@ -31317,6 +31376,9 @@ function registerUserTools(server) {
     if (password !== void 0) body.password = password;
     if (locale !== void 0) body.locale = locale;
     if (default_currency !== void 0) body.default_currency = default_currency;
+    const previewBody = { ...body, ...password !== void 0 ? { password: "[hidden]" } : {} };
+    const gate = previewUnlessConfirmed(confirm, `Update current Splitwise user ${id} profile`, "POST", `/update_user/${id}`, previewBody);
+    if (gate) return gate;
     const data = await client.request("POST", `/update_user/${id}`, body);
     return textResult(data);
   });
@@ -31343,15 +31405,19 @@ function registerGroupTools(server) {
   });
   server.registerTool("sw_create_group", {
     description: "Create a new Splitwise group.",
+    annotations: { destructiveHint: true },
     inputSchema: {
       name: external_exports.string().describe("Group name"),
       group_type: external_exports.enum(["apartment", "house", "trip", "other"]).describe("Type of group").optional(),
-      simplify_by_default: external_exports.boolean().describe("Whether to simplify debts by default").optional()
+      simplify_by_default: external_exports.boolean().describe("Whether to simplify debts by default").optional(),
+      confirm: schemaConfirm
     }
-  }, async ({ name, group_type, simplify_by_default }) => {
+  }, async ({ name, group_type, simplify_by_default, confirm }) => {
     const body = { name };
     if (group_type !== void 0) body.group_type = group_type;
     if (simplify_by_default !== void 0) body.simplify_by_default = simplify_by_default;
+    const gate = previewUnlessConfirmed(confirm, `Create Splitwise group "${name}"`, "POST", "/create_group", body);
+    if (gate) return gate;
     const data = await client.request("POST", "/create_group", body);
     return textResult(data);
   });
@@ -31362,9 +31428,10 @@ function registerGroupTools(server) {
       user_id: external_exports.number().describe("User ID (preferred)").optional(),
       first_name: external_exports.string().optional(),
       last_name: external_exports.string().optional(),
-      email: external_exports.string().optional()
+      email: external_exports.string().optional(),
+      confirm: schemaConfirm
     }
-  }, async ({ group_id, user_id, first_name, last_name, email: email3 }) => {
+  }, async ({ group_id, user_id, first_name, last_name, email: email3, confirm }) => {
     let body;
     if (user_id !== void 0) {
       body = { group_id, user_id };
@@ -31374,26 +31441,35 @@ function registerGroupTools(server) {
       }
       body = { group_id, first_name, last_name, email: email3 };
     }
+    const gate = previewUnlessConfirmed(confirm, `Add a user to Splitwise group ${group_id} (may send an invite email)`, "POST", "/add_user_to_group", body);
+    if (gate) return gate;
     const data = await client.request("POST", "/add_user_to_group", body);
     return textResult(data);
   });
   server.registerTool("sw_remove_user_from_group", {
-    description: "Remove a user from a Splitwise group.",
+    description: "Remove a user from a Splitwise group. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it removes the user.",
+    annotations: { destructiveHint: true },
     inputSchema: {
       group_id: external_exports.number().describe("Group ID"),
-      user_id: external_exports.number().describe("User ID to remove")
+      user_id: external_exports.number().describe("User ID to remove"),
+      confirm: schemaConfirm
     }
-  }, async ({ group_id, user_id }) => {
+  }, async ({ group_id, user_id, confirm }) => {
+    const gate = previewUnlessConfirmed(confirm, `Remove user ${user_id} from Splitwise group ${group_id}`, "POST", "/remove_user_from_group", { group_id, user_id });
+    if (gate) return gate;
     const data = await client.request("POST", "/remove_user_from_group", { group_id, user_id });
     return textResult(data);
   });
   server.registerTool("sw_delete_group", {
-    description: "Soft-delete a Splitwise group.",
+    description: "Soft-delete a Splitwise group. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it deletes.",
     annotations: { destructiveHint: true },
     inputSchema: {
-      id: external_exports.number().describe("Group ID to delete")
+      id: external_exports.number().describe("Group ID to delete"),
+      confirm: schemaConfirm
     }
-  }, async ({ id }) => {
+  }, async ({ id, confirm }) => {
+    const gate = previewUnlessConfirmed(confirm, `Soft-delete Splitwise group ${id}`, "POST", `/delete_group/${id}`);
+    if (gate) return gate;
     const data = await client.request("POST", `/delete_group/${id}`);
     return textResult(data);
   });
@@ -31418,26 +31494,33 @@ function registerFriendTools(server) {
     return textResult(data);
   });
   server.registerTool("sw_create_friend", {
-    description: "Add a Splitwise friend by email.",
+    description: "Add a Splitwise friend by email (sends them an invite). Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it adds the friend.",
+    annotations: { destructiveHint: true },
     inputSchema: {
       user_email: external_exports.string().describe("Email of the user to add as a friend"),
       user_first_name: external_exports.string().describe("First name of the user").optional(),
-      user_last_name: external_exports.string().describe("Last name of the user").optional()
+      user_last_name: external_exports.string().describe("Last name of the user").optional(),
+      confirm: schemaConfirm
     }
-  }, async ({ user_email, user_first_name, user_last_name }) => {
+  }, async ({ user_email, user_first_name, user_last_name, confirm }) => {
     const body = { user_email };
     if (user_first_name !== void 0) body.user_first_name = user_first_name;
     if (user_last_name !== void 0) body.user_last_name = user_last_name;
+    const gate = previewUnlessConfirmed(confirm, `Add ${user_email} as a Splitwise friend`, "POST", "/create_friend", body);
+    if (gate) return gate;
     const data = await client.request("POST", "/create_friend", body);
     return textResult(data);
   });
   server.registerTool("sw_delete_friend", {
-    description: "Remove a Splitwise friendship by user id.",
+    description: "Remove a Splitwise friendship by user id. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it removes the friendship.",
     annotations: { destructiveHint: true },
     inputSchema: {
-      id: external_exports.number().describe("User ID of the friend to remove")
+      id: external_exports.number().describe("User ID of the friend to remove"),
+      confirm: schemaConfirm
     }
-  }, async ({ id }) => {
+  }, async ({ id, confirm }) => {
+    const gate = previewUnlessConfirmed(confirm, `Remove Splitwise friendship with user ${id}`, "POST", `/delete_friend/${id}`);
+    if (gate) return gate;
     const data = await client.request("POST", `/delete_friend/${id}`);
     return textResult(data);
   });
@@ -31454,7 +31537,7 @@ function flattenUsers(users) {
   return flat;
 }
 function buildExpenseBody(args) {
-  const { split_equally, users, expense_id: _id, ...rest } = args;
+  const { split_equally, users, expense_id: _id, confirm: _confirm, ...rest } = args;
   if (split_equally && users) {
     throw new Error("Provide either split_equally or users, not both");
   }
@@ -31510,7 +31593,7 @@ function registerExpenseTools(server) {
     return textResult(data);
   });
   server.registerTool("sw_create_expense", {
-    description: 'Create a Splitwise expense. Use split_equally:true to split evenly among group members, or provide a users array for custom per-person splits (paid_share and owed_share as decimal strings like "25.00"). cost must be a decimal string.',
+    description: 'Create a Splitwise expense. Use split_equally:true to split evenly among group members, or provide a users array for custom per-person splits (paid_share and owed_share as decimal strings like "25.00"). cost must be a decimal string. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it creates the expense.',
     inputSchema: {
       group_id: external_exports.number().describe("Group to add expense to (use 0 for no group)"),
       description: external_exports.string().describe("Short description of the expense"),
@@ -31520,15 +31603,18 @@ function registerExpenseTools(server) {
       currency_code: external_exports.string().describe('Currency code, e.g. "USD". Defaults to group/user default.').optional(),
       date: external_exports.string().describe("ISO 8601 datetime").optional(),
       category_id: external_exports.number().describe("Category id from sw_get_categories").optional(),
-      details: external_exports.string().describe("Notes").optional()
+      details: external_exports.string().describe("Notes").optional(),
+      confirm: schemaConfirm
     }
   }, async (args) => {
     const body = buildExpenseBody(args);
+    const gate = previewUnlessConfirmed(args.confirm, `Create a Splitwise expense "${args.description}" (${args.cost}) \u2014 notifies group members`, "POST", "/create_expense", body);
+    if (gate) return gate;
     const data = await client.request("POST", "/create_expense", body);
     return textResult(data);
   });
   server.registerTool("sw_update_expense", {
-    description: "Edit an existing Splitwise expense. Provide expense_id and any fields to change. For custom split updates, the full users array must be provided (the API replaces the entire split).",
+    description: "Edit an existing Splitwise expense. Provide expense_id and any fields to change. For custom split updates, the full users array must be provided (the API replaces the entire split). Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it updates the expense.",
     inputSchema: {
       expense_id: external_exports.number().describe("ID of the expense to update"),
       description: external_exports.string().optional(),
@@ -31538,21 +31624,27 @@ function registerExpenseTools(server) {
       currency_code: external_exports.string().optional(),
       date: external_exports.string().optional(),
       category_id: external_exports.number().optional(),
-      details: external_exports.string().optional()
+      details: external_exports.string().optional(),
+      confirm: schemaConfirm
     }
   }, async (args) => {
     const { expense_id } = args;
     const body = buildExpenseBody(args);
+    const gate = previewUnlessConfirmed(args.confirm, `Update Splitwise expense ${expense_id} \u2014 notifies group members`, "POST", `/update_expense/${expense_id}`, body);
+    if (gate) return gate;
     const data = await client.request("POST", `/update_expense/${expense_id}`, body);
     return textResult(data);
   });
   server.registerTool("sw_delete_expense", {
-    description: "Soft-delete a Splitwise expense by id. Returns {success: true} on success. Use sw_undelete_expense to restore.",
+    description: "Soft-delete a Splitwise expense by id. Returns {success: true} on success. Use sw_undelete_expense to restore. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it deletes.",
     annotations: { destructiveHint: true },
     inputSchema: {
-      id: external_exports.number().describe("Expense ID to delete")
+      id: external_exports.number().describe("Expense ID to delete"),
+      confirm: schemaConfirm
     }
-  }, async ({ id }) => {
+  }, async ({ id, confirm }) => {
+    const gate = previewUnlessConfirmed(confirm, `Soft-delete Splitwise expense ${id}`, "POST", `/delete_expense/${id}`);
+    if (gate) return gate;
     const data = await client.request("POST", `/delete_expense/${id}`);
     return textResult(data);
   });
@@ -31601,22 +31693,29 @@ function registerUtilityTools(server) {
     return textResult(data);
   });
   server.registerTool("sw_create_comment", {
-    description: "Add a comment to a Splitwise expense.",
+    description: "Add a comment to a Splitwise expense (visible to other participants). Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it posts.",
+    annotations: { destructiveHint: true },
     inputSchema: {
       expense_id: external_exports.number().describe("Expense ID to comment on"),
-      content: external_exports.string().describe("Comment text")
+      content: external_exports.string().describe("Comment text"),
+      confirm: schemaConfirm
     }
-  }, async ({ expense_id, content }) => {
+  }, async ({ expense_id, content, confirm }) => {
+    const gate = previewUnlessConfirmed(confirm, `Comment on Splitwise expense ${expense_id} (visible to participants)`, "POST", "/create_comment", { expense_id, content });
+    if (gate) return gate;
     const data = await client.request("POST", "/create_comment", { expense_id, content });
     return textResult(data);
   });
   server.registerTool("sw_delete_comment", {
-    description: "Delete a comment by id.",
+    description: "Delete a comment by id. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it deletes.",
     annotations: { destructiveHint: true },
     inputSchema: {
-      id: external_exports.number().describe("Comment ID to delete")
+      id: external_exports.number().describe("Comment ID to delete"),
+      confirm: schemaConfirm
     }
-  }, async ({ id }) => {
+  }, async ({ id, confirm }) => {
+    const gate = previewUnlessConfirmed(confirm, `Delete Splitwise comment ${id}`, "POST", `/delete_comment/${id}`);
+    if (gate) return gate;
     const data = await client.request("POST", `/delete_comment/${id}`);
     return textResult(data);
   });
@@ -31625,7 +31724,7 @@ function registerUtilityTools(server) {
 // src/index.ts
 await runMcp({
   name: "splitwise-mcp",
-  version: "2.0.9",
+  version: "2.0.11",
   // x-release-please-version
   banner: "[splitwise-mcp] This project was developed and is maintained by AI (Claude Sonnet 4.6). Use at your own discretion.",
   tools: [

package/dist/index.js

@@ -12,7 +12,7 @@ import { registerUtilityTools } from './tools/utilities.js';
 // the configuration error only surfaces on the first tool call.
 await runMcp({
     name: 'splitwise-mcp',
-    version: '2.0.9', // x-release-please-version
+    version: '2.0.11', // x-release-please-version
     banner: '[splitwise-mcp] This project was developed and is maintained by AI (Claude Sonnet 4.6). Use at your own discretion.',
     tools: [
         registerUserTools,

package/dist/tools/_confirm.js

@@ -0,0 +1,21 @@
+import { schemaConfirm, textResult } from '@chrischall/mcp-utils';
+export { schemaConfirm };
+/**
+ * Confirm-gate for a mutating tool (the fleet convention). When `confirm` is not
+ * `true`, returns a no-network dry-run preview of exactly what would be sent;
+ * when it is `true`, returns `null` so the caller proceeds with the write.
+ * Splitwise writes notify other people (friends / group members), so a single
+ * hallucinated call shouldn't fire silently.
+ */
+export function previewUnlessConfirmed(confirm, action, method, path, body) {
+    if (confirm === true)
+        return null;
+    return textResult({
+        dryRun: true,
+        action,
+        method,
+        path,
+        ...(body !== undefined ? { willSend: body } : {}),
+        note: 'Re-run with confirm: true to execute.',
+    });
+}

package/dist/tools/expenses.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { textResult, buildQueryString } from '@chrischall/mcp-utils';
 import { client } from '../client.js';
+import { previewUnlessConfirmed, schemaConfirm } from './_confirm.js';
 /** Flattens a users array into Splitwise's flat-param JSON format. */
 export function flattenUsers(users) {
     const flat = {};
@@ -12,7 +13,8 @@ export function flattenUsers(users) {
     return flat;
 }
 function buildExpenseBody(args) {
-    const { split_equally, users, expense_id: _id, ...rest } = args;
+    // `confirm` is a tool-gate flag, not part of the Splitwise expense payload.
+    const { split_equally, users, expense_id: _id, confirm: _confirm, ...rest } = args;
     if (split_equally && users) {
         throw new Error('Provide either split_equally or users, not both');
     }
@@ -69,7 +71,7 @@ export function registerExpenseTools(server) {
         return textResult(data);
     });
     server.registerTool('sw_create_expense', {
-        description: 'Create a Splitwise expense. Use split_equally:true to split evenly among group members, or provide a users array for custom per-person splits (paid_share and owed_share as decimal strings like "25.00"). cost must be a decimal string.',
+        description: 'Create a Splitwise expense. Use split_equally:true to split evenly among group members, or provide a users array for custom per-person splits (paid_share and owed_share as decimal strings like "25.00"). cost must be a decimal string. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it creates the expense.',
         inputSchema: {
             group_id: z.number().describe('Group to add expense to (use 0 for no group)'),
             description: z.string().describe('Short description of the expense'),
@@ -80,14 +82,18 @@ export function registerExpenseTools(server) {
             date: z.string().describe('ISO 8601 datetime').optional(),
             category_id: z.number().describe('Category id from sw_get_categories').optional(),
             details: z.string().describe('Notes').optional(),
+            confirm: schemaConfirm,
         },
     }, async (args) => {
         const body = buildExpenseBody(args);
+        const gate = previewUnlessConfirmed(args.confirm, `Create a Splitwise expense "${args.description}" (${args.cost}) — notifies group members`, 'POST', '/create_expense', body);
+        if (gate)
+            return gate;
         const data = await client.request('POST', '/create_expense', body);
         return textResult(data);
     });
     server.registerTool('sw_update_expense', {
-        description: 'Edit an existing Splitwise expense. Provide expense_id and any fields to change. For custom split updates, the full users array must be provided (the API replaces the entire split).',
+        description: 'Edit an existing Splitwise expense. Provide expense_id and any fields to change. For custom split updates, the full users array must be provided (the API replaces the entire split). Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it updates the expense.',
         inputSchema: {
             expense_id: z.number().describe('ID of the expense to update'),
             description: z.string().optional(),
@@ -98,20 +104,28 @@ export function registerExpenseTools(server) {
             date: z.string().optional(),
             category_id: z.number().optional(),
             details: z.string().optional(),
+            confirm: schemaConfirm,
         },
     }, async (args) => {
         const { expense_id } = args;
         const body = buildExpenseBody(args);
+        const gate = previewUnlessConfirmed(args.confirm, `Update Splitwise expense ${expense_id} — notifies group members`, 'POST', `/update_expense/${expense_id}`, body);
+        if (gate)
+            return gate;
         const data = await client.request('POST', `/update_expense/${expense_id}`, body);
         return textResult(data);
     });
     server.registerTool('sw_delete_expense', {
-        description: 'Soft-delete a Splitwise expense by id. Returns {success: true} on success. Use sw_undelete_expense to restore.',
+        description: 'Soft-delete a Splitwise expense by id. Returns {success: true} on success. Use sw_undelete_expense to restore. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it deletes.',
         annotations: { destructiveHint: true },
         inputSchema: {
             id: z.number().describe('Expense ID to delete'),
+            confirm: schemaConfirm,
         },
-    }, async ({ id }) => {
+    }, async ({ id, confirm }) => {
+        const gate = previewUnlessConfirmed(confirm, `Soft-delete Splitwise expense ${id}`, 'POST', `/delete_expense/${id}`);
+        if (gate)
+            return gate;
         const data = await client.request('POST', `/delete_expense/${id}`);
         return textResult(data);
     });

package/dist/tools/friends.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { textResult } from '@chrischall/mcp-utils';
 import { client } from '../client.js';
+import { previewUnlessConfirmed, schemaConfirm } from './_confirm.js';
 export function registerFriendTools(server) {
     server.registerTool('sw_list_friends', {
         description: "List all Splitwise friends with their id, first_name, last_name, and email. Use this to resolve a friend's name to a user_id before adding them to a group or building a custom expense split.",
@@ -10,28 +11,37 @@ export function registerFriendTools(server) {
         return textResult(data);
     });
     server.registerTool('sw_create_friend', {
-        description: 'Add a Splitwise friend by email.',
+        description: 'Add a Splitwise friend by email (sends them an invite). Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it adds the friend.',
+        annotations: { destructiveHint: true },
         inputSchema: {
             user_email: z.string().describe('Email of the user to add as a friend'),
             user_first_name: z.string().describe('First name of the user').optional(),
             user_last_name: z.string().describe('Last name of the user').optional(),
+            confirm: schemaConfirm,
         },
-    }, async ({ user_email, user_first_name, user_last_name }) => {
+    }, async ({ user_email, user_first_name, user_last_name, confirm }) => {
         const body = { user_email };
         if (user_first_name !== undefined)
             body.user_first_name = user_first_name;
         if (user_last_name !== undefined)
             body.user_last_name = user_last_name;
+        const gate = previewUnlessConfirmed(confirm, `Add ${user_email} as a Splitwise friend`, 'POST', '/create_friend', body);
+        if (gate)
+            return gate;
         const data = await client.request('POST', '/create_friend', body);
         return textResult(data);
     });
     server.registerTool('sw_delete_friend', {
-        description: 'Remove a Splitwise friendship by user id.',
+        description: 'Remove a Splitwise friendship by user id. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it removes the friendship.',
         annotations: { destructiveHint: true },
         inputSchema: {
             id: z.number().describe('User ID of the friend to remove'),
+            confirm: schemaConfirm,
         },
-    }, async ({ id }) => {
+    }, async ({ id, confirm }) => {
+        const gate = previewUnlessConfirmed(confirm, `Remove Splitwise friendship with user ${id}`, 'POST', `/delete_friend/${id}`);
+        if (gate)
+            return gate;
         const data = await client.request('POST', `/delete_friend/${id}`);
         return textResult(data);
     });

package/dist/tools/groups.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { textResult } from '@chrischall/mcp-utils';
 import { client } from '../client.js';
+import { previewUnlessConfirmed, schemaConfirm } from './_confirm.js';
 export function registerGroupTools(server) {
     server.registerTool('sw_list_groups', {
         description: 'List all Splitwise groups the current user belongs to. Returns id, name, and members for each group. Use this to resolve a group name to its id.',
@@ -21,17 +22,22 @@ export function registerGroupTools(server) {
     });
     server.registerTool('sw_create_group', {
         description: 'Create a new Splitwise group.',
+        annotations: { destructiveHint: true },
         inputSchema: {
             name: z.string().describe('Group name'),
             group_type: z.enum(['apartment', 'house', 'trip', 'other']).describe('Type of group').optional(),
             simplify_by_default: z.boolean().describe('Whether to simplify debts by default').optional(),
+            confirm: schemaConfirm,
         },
-    }, async ({ name, group_type, simplify_by_default }) => {
+    }, async ({ name, group_type, simplify_by_default, confirm }) => {
         const body = { name };
         if (group_type !== undefined)
             body.group_type = group_type;
         if (simplify_by_default !== undefined)
             body.simplify_by_default = simplify_by_default;
+        const gate = previewUnlessConfirmed(confirm, `Create Splitwise group "${name}"`, 'POST', '/create_group', body);
+        if (gate)
+            return gate;
         const data = await client.request('POST', '/create_group', body);
         return textResult(data);
     });
@@ -43,8 +49,9 @@ export function registerGroupTools(server) {
             first_name: z.string().optional(),
             last_name: z.string().optional(),
             email: z.string().optional(),
+            confirm: schemaConfirm,
         },
-    }, async ({ group_id, user_id, first_name, last_name, email }) => {
+    }, async ({ group_id, user_id, first_name, last_name, email, confirm }) => {
         let body;
         if (user_id !== undefined) {
             body = { group_id, user_id };
@@ -55,26 +62,38 @@ export function registerGroupTools(server) {
             }
             body = { group_id, first_name, last_name, email };
         }
+        const gate = previewUnlessConfirmed(confirm, `Add a user to Splitwise group ${group_id} (may send an invite email)`, 'POST', '/add_user_to_group', body);
+        if (gate)
+            return gate;
         const data = await client.request('POST', '/add_user_to_group', body);
         return textResult(data);
     });
     server.registerTool('sw_remove_user_from_group', {
-        description: 'Remove a user from a Splitwise group.',
+        description: 'Remove a user from a Splitwise group. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it removes the user.',
+        annotations: { destructiveHint: true },
         inputSchema: {
             group_id: z.number().describe('Group ID'),
             user_id: z.number().describe('User ID to remove'),
+            confirm: schemaConfirm,
         },
-    }, async ({ group_id, user_id }) => {
+    }, async ({ group_id, user_id, confirm }) => {
+        const gate = previewUnlessConfirmed(confirm, `Remove user ${user_id} from Splitwise group ${group_id}`, 'POST', '/remove_user_from_group', { group_id, user_id });
+        if (gate)
+            return gate;
         const data = await client.request('POST', '/remove_user_from_group', { group_id, user_id });
         return textResult(data);
     });
     server.registerTool('sw_delete_group', {
-        description: 'Soft-delete a Splitwise group.',
+        description: 'Soft-delete a Splitwise group. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it deletes.',
         annotations: { destructiveHint: true },
         inputSchema: {
             id: z.number().describe('Group ID to delete'),
+            confirm: schemaConfirm,
         },
-    }, async ({ id }) => {
+    }, async ({ id, confirm }) => {
+        const gate = previewUnlessConfirmed(confirm, `Soft-delete Splitwise group ${id}`, 'POST', `/delete_group/${id}`);
+        if (gate)
+            return gate;
         const data = await client.request('POST', `/delete_group/${id}`);
         return textResult(data);
     });

package/dist/tools/user.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { textResult } from '@chrischall/mcp-utils';
 import { client } from '../client.js';
+import { previewUnlessConfirmed, schemaConfirm } from './_confirm.js';
 export function registerUserTools(server) {
     server.registerTool('sw_get_current_user', {
         description: "Get the authenticated Splitwise user's profile (id, first_name, last_name, email). Use the returned id when building custom expense splits.",
@@ -29,8 +30,9 @@ export function registerUserTools(server) {
             password: z.string().optional(),
             locale: z.string().optional(),
             default_currency: z.string().optional(),
+            confirm: schemaConfirm,
         },
-    }, async ({ id, first_name, last_name, email, password, locale, default_currency }) => {
+    }, async ({ id, first_name, last_name, email, password, locale, default_currency, confirm }) => {
         const body = {};
         if (first_name !== undefined)
             body.first_name = first_name;
@@ -44,6 +46,11 @@ export function registerUserTools(server) {
             body.locale = locale;
         if (default_currency !== undefined)
             body.default_currency = default_currency;
+        // Never echo the password in the dry-run preview.
+        const previewBody = { ...body, ...(password !== undefined ? { password: '[hidden]' } : {}) };
+        const gate = previewUnlessConfirmed(confirm, `Update current Splitwise user ${id} profile`, 'POST', `/update_user/${id}`, previewBody);
+        if (gate)
+            return gate;
         const data = await client.request('POST', `/update_user/${id}`, body);
         return textResult(data);
     });

package/dist/tools/utilities.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { textResult, buildQueryString } from '@chrischall/mcp-utils';
 import { client } from '../client.js';
+import { previewUnlessConfirmed, schemaConfirm } from './_confirm.js';
 export function registerUtilityTools(server) {
     server.registerTool('sw_get_notifications', {
         description: 'Get recent Splitwise activity notifications for the current user.',
@@ -36,22 +37,31 @@ export function registerUtilityTools(server) {
         return textResult(data);
     });
     server.registerTool('sw_create_comment', {
-        description: 'Add a comment to a Splitwise expense.',
+        description: 'Add a comment to a Splitwise expense (visible to other participants). Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it posts.',
+        annotations: { destructiveHint: true },
         inputSchema: {
             expense_id: z.number().describe('Expense ID to comment on'),
             content: z.string().describe('Comment text'),
+            confirm: schemaConfirm,
         },
-    }, async ({ expense_id, content }) => {
+    }, async ({ expense_id, content, confirm }) => {
+        const gate = previewUnlessConfirmed(confirm, `Comment on Splitwise expense ${expense_id} (visible to participants)`, 'POST', '/create_comment', { expense_id, content });
+        if (gate)
+            return gate;
         const data = await client.request('POST', '/create_comment', { expense_id, content });
         return textResult(data);
     });
     server.registerTool('sw_delete_comment', {
-        description: 'Delete a comment by id.',
+        description: 'Delete a comment by id. Without confirm:true this returns a dry-run preview and makes NO network call; with confirm:true it deletes.',
         annotations: { destructiveHint: true },
         inputSchema: {
             id: z.number().describe('Comment ID to delete'),
+            confirm: schemaConfirm,
         },
-    }, async ({ id }) => {
+    }, async ({ id, confirm }) => {
+        const gate = previewUnlessConfirmed(confirm, `Delete Splitwise comment ${id}`, 'POST', `/delete_comment/${id}`);
+        if (gate)
+            return gate;
         const data = await client.request('POST', `/delete_comment/${id}`);
         return textResult(data);
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "splitwise-mcp",
-  "version": "2.0.9",
+  "version": "2.0.11",
   "mcpName": "io.github.chrischall/splitwise-mcp",
   "description": "Splitwise MCP server for Claude — developed and maintained by AI (Claude Code)",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -43,13 +43,13 @@
     "test:coverage": "vitest run --coverage"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^0.7.0",
+    "@chrischall/mcp-utils": "^0.12.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "dotenv": "^17.4.0",
     "zod": "^4.4.2"
   },
   "devDependencies": {
-    "@types/node": "^25.5.2",
+    "@types/node": "^26.0.0",
     "@vitest/coverage-v8": "^4.1.2",
     "esbuild": "^0.28.0",
     "typescript": "^6.0.2",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/splitwise-mcp",
     "source": "github"
   },
-  "version": "2.0.9",
+  "version": "2.0.11",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "splitwise-mcp",
-      "version": "2.0.9",
+      "version": "2.0.11",
       "transport": {
         "type": "stdio"
       },