# Klarefi

> Complete regulated intake work and retrieve cited case files without deciding the case.

- name: com.klarefi/mcp
- version: 0.3.0
- connection class: R0 (autonomous)
- trust: 89/100
- quality: 96/100 (strong)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.klarefi%2Fmcp
- tools: https://api.protogrid.dev/v1/servers/com.klarefi%2Fmcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "klarefi": {
      "type": "http",
      "url": "https://www.klarefi.com/mcp",
      "headers": {
        "Authorization": "Bearer ${KLAREFI_TOKEN}"
      }
    }
  }
}
```

Placeholders to fill: `${KLAREFI_TOKEN}`.

## Trust

- hygiene: 100
- liveness: 98
- freshness: 85
- provenance: 75
- drivers: +repository +dns-namespace +reachable +uptime-94% ~updated-71d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 96/100 (strong)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list declares ttlMs 0, so clients re-fetch it on every use

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 100 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 21 of 21 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 2,871 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: 3 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: 100 (weight 15)

- pass `deps.known_vulns`: no known advisory in 5 resolved packages
- pass `deps.mcp_sdk_version`: @modelcontextprotocol/server 2.0.0, no known advisory
- pass `deps.resolvable`: @klarefi/mcp@0.3.0 resolved: 5 packages

- tools: 21, about 2,871 tokens to load them all
- tool set hash: 54d855600f6576561358116efa6bc0fa
- tools last changed: 2026-10-10T19:11:54.621Z
- badge: [![protogrid quality](https://protogrid.dev/badge/com.klarefi/mcp.svg)](https://protogrid.dev/servers/com.klarefi/mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-10 `get_case_package` changed (description)
  - before: Get the cited case_package.v1 artifact and a signed read-only case-file URL.
  - after: Get the cited case_package.v1 artifact and a signed read-only case-file URL. The package carries the facts, the calculated facts, and the offer or decline on the case with its files.
- 2026-10-06 `give_intake_consent` added
  - Record the applicant's consent to processing. Call it when the intake state's next_action is consent, and only after the applicant has agreed to the notice in next_action.notice. Returns the fresh intake state.
- 2026-10-06 `submit_case_review` changed (description, inputSchema)
  - before: Submit an auditable intake-review command. Allowed commands review or correct facts, request clarification, update evidence, or escalate. This tool cannot complete or reopen a case.
  - after: Submit an auditable intake-review command. Allowed commands review or correct facts, update evidence, or escalate. This tool cannot complete or reopen a case.

Full history: https://api.protogrid.dev/v1/servers/com.klarefi%2Fmcp/changes

## Dependencies

- npm @klarefi/mcp@0.3.0: resolved, 4 dependencies, MCP SDK @modelcontextprotocol/server 2.0.0

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

- https://www.klarefi.com/mcp (streamable-http, auth none, reachable true, uptime30d 0.9385965)

## Packages

- npm @klarefi/mcp@0.3.0 secrets: KLAREFI_API_KEY

## Tools (21)

- `answer_fields`: Answer structured requested facts by fact_id. Values must be strings; yes_no fields take "yes" or "no", and date fields use YYYY-MM-DD.
- `answer_question`: Answer the active applicant question with free text, optionally targeting a task_id.
- `create_connector`: Create or update a Klarefi verification connector manifest. The result reports whether the configuration is active or staged for operator approval.
- `create_connector_from_openapi`: Import a public OpenAPI JSON URL as a Klarefi verification connector. JSON specs only (convert YAML first). The result reports whether the configuration is active or staged for operator approval.
- `create_intake_session`: Create a hosted Klarefi intake session.
- `delete_connector`: Delete a configured Klarefi connector by key or stage its deletion for operator approval.
- `get_case`: Retrieve a Klarefi case and resolved facts.
- `get_case_package`: Get the cited case_package.v1 artifact and a signed read-only case-file URL. The package carries the facts, the calculated facts, and the offer or decline on the case with its files.
- `get_case_workspace`: Inspect a case workspace with facts, cited evidence, blockers, ownership, and timeline. This does not mutate the case.
- `get_intake_state`: Get the current applicant intake state. Pass url, or session_id with access_token, on the hosted MCP endpoint.
- `get_review_command`: Poll the status and result of an intake-review command.
- `give_intake_consent`: Record the applicant's consent to processing. Call it when the intake state's next_action is consent, and only after the applicant has agreed to the notice in next_action.notice. Returns the fresh intake state.
- `list_operator_queue`: List the bounded Klarefi operator queue for this API key's environment. Requires cases:review.
- `list_workflows`: List versioned Form · Fact · Verify workflow declarations.
- `open_intake`: Read an applicant intake from a signed URL or from session_id plus access_token. No Klarefi API key is required. On the hosted MCP endpoint, include the same intake credential in each later intake tool call.
- `save_intake_draft`: Save applicant form draft fields without submitting. Field values must be strings or null.
- `save_workflow_draft`: Validate and save a workflow declaration as a draft. This tool cannot publish or activate the workflow.
- `submit_case_review`: Submit an auditable intake-review command. Allowed commands review or correct facts, update evidence, or escalate. This tool cannot complete or reopen a case.
- `submit_intake`: Submit the applicant intake. Returns submitted, blockers, and the fresh intake state.
- `upload_document`: Upload a requested applicant document. Use content_base64 on the hosted MCP endpoint. Local stdio clients can use file_path. Inline content is limited to 5MB decoded; local files can be up to 25MB.
- `wait_for_next_action`: Poll until the intake leaves processing or the timeout expires. If timed_out is true, call wait_for_next_action again.