schedule-iii

5 of the 67 tools listed anonymously say in their own descriptions that they need an account or a key (get_schedule3_workspace, confirm_groupings, generate_schedule_iii, get_spreading_reconciliation, get_setup_status), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

The server exposes a public surface before authorization: list_clients, create_client, upload_trial_balance, get_upload, set_header_row, confirm_column_mapping, ingest_upload, list_periods, get_schedule3_workspace, list_grouping_suggestions, confirm_groupings, save_adjustments, save_py_values, save_asset_movements, save_provision_movements, save_reserves_movements, save_share_capital, save_statement_settings, save_disclosures, declare_capture_na, confirm_capture_review, revoke_capture_declaration, copy_capture_declarations, save_partner_capital, get_partner_capital, save_accounting_policies, save_regulatory_affirmations, list_statement_policy_choices, get_finalise_readiness, finalise_statement, get_comparative_source_state, assert_previous_year_no_activity, generate_schedule_iii, get_job, list_snapshots, get_workbook_download, create_upload_link, get_upload_link_status, get_statement_figures, get_statement_notes, get_tb_rows, get_pending_work, list_allocation_runs, get_allocation_account_figures, get_allocation_target_figures, get_spreading_reconciliation, list_budgets, get_budget, get_variance_report, get_consolidated_statements, list_cost_centres, create_cost_centre, list_profit_centres, create_profit_centre, list_account_mappings, confirm_centre_mappings, list_reporting_lines, confirm_reporting_lines, get_setup_status, list_replacements, preview_replacement_restore, restore_replacement, list_chart_rebaselines, preview_chart_rebaseline, confirm_complete_chart, verify_connection, get_help.