# CukaiMax Developers

CukaiMax exposes public read-only resources for AI agents and developer tooling. On these public endpoints, YA2025 Form BE is source-verified for deterministic preparation, Form B is source-verified for authority search and preparation readiness, and YA2026 is source-verified only as a planning release without return fields.

Important links:
- Developer page: https://www.cukaimax.com/developers
- Tax Authority overview: https://www.cukaimax.com/tax-authority
- Live MCP playground: https://www.cukaimax.com/tax-authority/playground
- Agent skill page: https://www.cukaimax.com/agent-skill
- Installable SKILL.md: https://www.cukaimax.com/skills/cukaimax-tax-authority/SKILL.md
- Agent skill manifest: https://www.cukaimax.com/.well-known/agent-skills.json
- Agent instructions: https://www.cukaimax.com/agents.md
- OpenAPI: https://www.cukaimax.com/openapi.json
- API catalog: https://www.cukaimax.com/.well-known/api-catalog
- MCP endpoint: https://www.cukaimax.com/.well-known/mcp
- MCP tools and examples: https://www.cukaimax.com/mcp.md
- Tax-agent evaluation and audit contract: https://www.cukaimax.com/agent-evaluation.md
- Codex, Claude Code, and generic setup: https://www.cukaimax.com/integrations.md
- Tax Authority JSON API: https://app.cukaimax.com/api/tax-authority/v1?year=2025&form=BE
- CukaiMax account MCP (OAuth, the signed-in user's own data): https://app.cukaimax.com/api/mcp
- Connected apps in the CukaiMax app: https://app.cukaimax.com/settings/connected-apps

The MCP server exposes `list_tax_authority_releases`, `get_tax_authority_release`, `search_tax_authority`, `prepare_be_2025_draft`, and `assess_form_b_2025_readiness`. Every call returns a privacy-safe audit event containing the operation, release version, rule IDs, source versions, and canonical fingerprints. The public evaluation resource contains 36 fictional scenarios for deterministic Claude, Codex, ChatGPT, or other-agent comparisons. No API key is required. The public policy is 120 requests per minute per client. Only a complete YA2025 Form BE draft can report `filingReady`; Form B readiness always remains non-filing, and no tool submits to MyTax.

## Two MCP servers

- The Tax Authority MCP at `https://www.cukaimax.com/.well-known/mcp` is public, anonymous and stateless. It answers questions about Malaysian tax rules and never holds taxpayer data.
- The CukaiMax account MCP at `https://app.cukaimax.com/api/mcp` is private. A CukaiMax user connects it from ChatGPT, Claude or Grok as a custom connector, signs in and approves OAuth consent, and the assistant can then read that user's own tax position, reliefs, receipts and next actions through `get_tax_position`, `list_reliefs`, `get_relief_detail`, `list_transactions` and `get_next_actions`. It also offers the five Tax Authority tools above (`list_tax_authority_releases`, `get_tax_authority_release`, `search_tax_authority`, `prepare_be_2025_draft`, `assess_form_b_2025_readiness`) and the `tax://` resources, with the same inputs and results, so one connection answers both the rule and the user's position. Reads are available on every plan. It also reads income, the Tax Profile, documents and one transaction in full (`list_income`, `get_tax_profile`, `list_documents`, `get_transaction`). On the Personal plan the assistant can also change the user's data through the same checks as the app: income (`set_employment_income`, `apply_ea_form`, `save_income_source`, `remove_income_source`), the Tax Profile (`update_tax_profile`, `set_relief_profile_flag`, `answer_relief_question`), transactions (`add_manual_transaction`, `update_transaction`, `set_qualifying_amount`, `recategorize_transaction`, `delete_transaction`), documents (`record_statement`, `upload_document`, `update_document`, `remove_document`), reliefs (`hide_relief`) and the Inbox (`update_inbox_action`); it can never change billing or submit to MyTax. Per-user limit: 120 calls a minute and 2,000 a day. Details: https://www.cukaimax.com/mcp.md#your-account-cukaimax-mcp