Jithox EU Import Preflight

{
  "name": "com.jithox/eu-import-preflight",
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "links": {
        "llmsTxt": "https://import.mcp.jithox.com/llms.txt",
        "product": "https://jithox.com/mcp",
        "securityAndContact": "https://mcp.jithox.com/.well-known/security.txt",
        "oauthProtectedResource": "https://import.mcp.jithox.com/.well-known/oauth-protected-resource",
        "oauthAuthorizationServer": "https://import.mcp.jithox.com/.well-known/oauth-authorization-server"
      },
      "tools": [
        "validate_eori",
        "search_taric_codes",
        "check_eu_import_measures",
        "estimate_low_value_import_cost",
        "prepare_import_preflight_receipt"
      ],
      "scopes": {
        "validate_eori": "eori:validate",
        "search_taric_codes": "taric:search",
        "check_eu_import_measures": "measures:check",
        "estimate_low_value_import_cost": "cost:estimate",
        "prepare_import_preflight_receipt": "preflight:receipt"
      },
      "pricing": "EUR 0.25 per accepted chargeable call. Failed, refused, rate-limited and source-unavailable calls cost EUR 0.00. Free trial first; prepaid credit from EUR 10.",
      "readOnly": true,
      "transport": "streamable-http (remote); no local package.",
      "toolStatus": {
        "validate_eori": "live_proven_provider_opt_in_off",
        "search_taric_codes": "live_proven_taric_baseline_active",
        "check_eu_import_measures": "live_proven_taric_baseline_active",
        "estimate_low_value_import_cost": "live_proven",
        "prepare_import_preflight_receipt": "live_proven"
      },
      "accessModel": "OAuth 2.1 + PKCE S256; discover at https://import.mcp.jithox.com/.well-known/oauth-protected-resource. Or send the workspace access key per call as Authorization: Bearer <key> or X-Jithox-Api-Key — never both. A key in a config file is a password; rotate at jithox.com.",
      "doesNotSend": true,
      "lastVerified": "2026-08-07",
      "commercialStatus": "SELLABLE_SELF_SERVICE_EUR — public self-service; prepaid EUR credit; signed receipts on the product's own key. 0 paying Import Preflight developers at publication; no revenue claim.",
      "protocolVersions": [
        "2026-07-28",
        "2025-11-25",
        "2025-06-18",
        "2025-03-26"
      ],
      "remoteDeployment": "Live at https://import.mcp.jithox.com/mcp (serverInfo.version 0.2.0). All five read-only tools live-proven end-to-end over the money lane (reserve 25 → execute → capture on accepted answers; failed calls EUR 0.00; signed receipts; per-product fleet identity and store isolation; rate limits; kill switch; credential rotation incl. app-side authorization retirement). July-2026 TARIC baseline active; validate_eori runs with the EU EOS provider opt-in OFF (truthful unavailable). Immutable image digest recorded in the fleet repository's deployment evidence at each release. Not independently penetration-tested.",
      "toolDescriptions": {
        "validate_eori": "Structural EORI check + authoritative existence via the official EU EOS when enabled; provider outage/unknown → 'unavailable'/'needs_review', never a false 'invalid'.",
        "search_taric_codes": "Candidate TARIC/CN codes from a dated snapshot; 'needs_review' or 'unavailable' when no baseline; never an invented code.",
        "check_eu_import_measures": "EU import measures for a candidate code from a dated snapshot; compound/unknown → 'needs_review'; no baseline → 'unavailable'.",
        "estimate_low_value_import_cost": "Landed-cost estimate for ≤ EUR 150 consignments on the regime valid at the date; missing data returned as 'missing', never guessed.",
        "prepare_import_preflight_receipt": "One idempotent Ed25519 capability-bound receipt over the preflight inputs/sources/validity — attests the checks, not a clearance."
      },
      "publicationStatus": "PUBLIC SELF-SERVICE — generally available through the official MCP Registry (JX-179).",
      "taricBaselineActive": "The official CIRCABC July-2026 TARIC baseline (schema official-taric-xlsx-1, 22247 nomenclature / 145546 measures, publishedAt 2026-07-01) is ACTIVATED; search_taric_codes and check_eu_import_measures serve it live. Every answer carries the snapshot source, publishedAt and checksum; a future baseline gap makes them truthfully unavailable again, never a fabricated code.",
      "noComplianceGuarantee": true,
      "notBindingClassification": true,
      "notIndependentlyPenetrationTested": true
    }
  },
  "title": "Jithox EU Import Preflight",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://import.mcp.jithox.com/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "isRequired": true,
          "description": "OAuth 2.1 bearer. Discover the authorization server via /.well-known/oauth-protected-resource; PKCE S256 is mandatory; tokens are audience-bound to https://import.mcp.jithox.com/mcp with least-privilege per-tool scopes. A token issued for the Jithox E-Invoice server is rejected here (separate resource/audience). The workspace access key may also be sent directly per call (Authorization: Bearer <access key> or X-Jithox-Api-Key) when an OAuth browser callback is not possible."
        }
      ]
    }
  ],
  "version": "0.4.1",
  "websiteUrl": "https://jithox.com/mcp",
  "description": "Read-only EU import preflight: EORI, TARIC candidates, measures, low-value cost. Evidence only."
}