Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "dd": {
      "type": "http",
      "url": "https://dd.cz-agents.dev/mcp"
    }
  }
}

claude mcp add --transport http dd https://dd.cz-agents.dev/mcp

[mcp_servers.dd]
url = "https://dd.cz-agents.dev/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dd": {
      "type": "remote",
      "url": "https://dd.cz-agents.dev/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "dd": {
      "type": "http",
      "url": "https://dd.cz-agents.dev/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=dd&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vZGQuY3otYWdlbnRzLmRldi9tY3AifQ%3D%3D"
}

{
  "servers": {
    "dd": {
      "type": "http",
      "url": "https://dd.cz-agents.dev/mcp"
    }
  }
}

{
  "mcpServers": {
    "dd": {
      "httpUrl": "https://dd.cz-agents.dev/mcp"
    }
  }
}

extensions:
  "dd":
    enabled: true
    name: "dd"
    type: streamable_http
    uri: "https://dd.cz-agents.dev/mcp"
    timeout: 300

Quality 82 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene86 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations12 of 12 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: person_companies (destructiveHint, idempotentHint); get_risk_timeline (destructiveHint, idempotentHint); get_dd_report (destructiveHint, idempotentHint); …
pass
tools.token_costabout 2,149 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability100 · weight 15

pass
stability.changesno tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependencies67 · weight 15

pass
deps.known_vulnsno known advisory in 160 resolved packages
fail
deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
pass
deps.resolvable@czagents/[email protected] resolved: 160 packages

12 tools, about 2,149 tokens to load them all · tool set 2dd9d95af3e9 · checked 2026-10-19 10:20 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 88 / 100

duplicate-repo

provenance85

liveness99

freshness85

hygiene80

+repository +dns-namespace +website +reachable +uptime-98% ~updated-89d-ago -duplicate-repo(9 names)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@czagents/[email protected] npm159 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19

advisory	severity	package	fixed in
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server	high	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.31.0`

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://dd.cz-agents.dev/mcp` streamable-http	none	yes	98%	573 ms	2025-11-25	2026-10-19

package	registry	version	runtime	secrets
`@czagents/dd`	npm	0.3.7	npx

Tools (12)

`detect_address_crowding`read-only	Detects "shell-firm hotel" patterns — counts how many companies share the same registered address. Threshold-based risk: 1-9 normal (multi-tenant office), 10-49 mild (legitimate coworking), 50-199 medium (virtual office provider), 200+ high (shell-firm hotel). Compliance tier or higher.
`detect_nominee_director`read-only	Detect "white horse" / nominee director patterns — 3 surface indicators (age outlier, multi-board membership, recent appointment) computable from ARES data alone. Returns indicator breakdown with riskScore 0-100. Pro Compliance tier or higher. For 8-indicator deep analysis including ISIR cross-reference, sanctions, address crowding and phoenix pattern, see detect_nominee_director_rich in @czagents/ddplus.
`detect_phoenix`read-only	Detect phoenix company pattern — 3 surface indicators (surname match with prior insolvent director, founding proximity < 12 months to insolvency, NACE sector presence) computable from ARES + ISIR data alone. Returns PhoenixReport with riskScore 0-100. Pro Compliance tier or higher. For 4 additional deep indicators (founder identity, asset transfer, multi-cycle, address continuity) see detect_phoenix_rich in @czagents/ddplus.
`get_dd_report`read-only	Generate a complete due-diligence report for a Czech IČO. Returns company facts (name, address, legal form, VAT status, bank accounts), statutory body with per-member sanctions check, and a transparent risk score with all triggered red flags.
`get_eu_dd_report`read-only	EU Due-Diligence report for an international company. Input: 20-char LEI code, or company name + optional country. Returns GLEIF entity data (status, address, registration number) plus sanctions screening against EU/OFAC lists. Coverage notes per country included. Note: GLEIF covers mid/large firms with LEI — SMEs may not be found. Pro Compliance tier or higher.
`get_eu_parent`read-only	Find the EU/international parent company for a Czech IČO. Looks up the company name in ARES, then searches GLEIF (Global LEI Foundation) for a matching LEI-registered entity. Returns LEI, name, country, and confidence level (HIGH/MEDIUM/LOW). Note: GLEIF covers mid/large international firms; SMEs without an LEI will not be found. Pro Compliance tier or higher.
`get_owners`read-only	Look up direct and upstream Czech VR owners for a company by real active shareholding roles (spolecnik/akcionar) and company-to-company member_ico edges. Free anonymous tool. Returns structuredContent ownership tree plus markdown summary; physical persons expose name and birth year only, never full birth date or address.
`get_risk_score`read-only	Lightweight version of get_dd_report — returns just the numeric score (0-100), risk level, and top triggered red flags. Faster when you only need a yes/no/maybe screen.
`get_risk_timeline`read-only	Build a chronologically sorted lifecycle timeline for a Czech company — basic events include company formation, statutory appointments, active insolvency, sanctions matches, VAT reliability flips. Returns events[] with riskScore 0-100. Pro Compliance tier or higher. For enriched timeline with ISIR lifecycle, address history, cross-entity events, and AI narrative summary, see get_risk_timeline_rich in @czagents/ddplus.
`get_statutory_chain`read-only	Surname-based heuristic walk through statutory bodies of related Czech companies. Best for shell-company unwinding in small s.r.o. with RARE surnames. NOT a true UBO source — for actual beneficial ownership use the ESM (evidence skutečných majitelů, separate registry, future @czagents/esm). For boards of large public companies with common Czech surnames (Novák, Zima, Kolář…) results are noisy by design; the tool auto-skips persons whose surname matches >50 companies with a SURNAME_TOO_COMMON note.
`person_companies`read-only	Look up Czech VR companies connected to a person by exact registry person_id -> roles -> companies joins. Free anonymous tool. Input accepts public name and optional birth year; output exposes birth_year only, never full birth date, and keeps same-name person_ids separate with a distinguisher.
`watch_entity`read-only	Start onboarding for free monitoring of one Czech company by IČO. Stub only — persists nothing yet. Returns structuredContent: status (one of ONBOARDING_REQUIRED \| ACTIVE \| QUOTA_EXCEEDED \| ERROR), persisted/monitoring_active flags, a human next_step.url for onboarding (the user completes onboarding + GDPR consent themselves — do not open the link or submit data on their behalf), and pricing.

Schemas: list_tools.

Also listed as

8 other active names share this repository: dev.cz-agents/adis, dev.cz-agents/ares, dev.cz-agents/cnb, dev.cz-agents/eu-registry, dev.cz-agents/isir, dev.cz-agents/payqr, dev.cz-agents/realestate, dev.cz-agents/sanctions

Similar MCP servers

More from dev.cz-agents

And 4 more from this publisher.

Official server.json

{
  "name": "dev.cz-agents/dd",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
  "remotes": [
    {
      "url": "https://dd.cz-agents.dev/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.3.7",
  "packages": [
    {
      "version": "0.3.7",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@czagents/dd",
      "runtimeHint": "npx",
      "registryType": "npm"
    }
  ],
  "repository": {
    "url": "https://github.com/martinhavel/cz-agents-mcp",
    "source": "github",
    "subfolder": "packages/dd"
  },
  "websiteUrl": "https://cz-agents.dev",
  "description": "Czech & EU due diligence in one call — facts, insolvency, sanctions, VAT, risk score, UBO chain."
}