# Compabase

> 3M+ Polish companies (KRS, CEIDG): financials, people, rankings and public registries.

- name: io.github.ContentWriterco/compabase
- version: 1.6.2
- connection class: R0 (autonomous)
- trust: 97/100
- quality: 84/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.ContentWriterco%2Fcompabase
- tools: https://api.protogrid.dev/v1/servers/io.github.ContentWriterco%2Fcompabase/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "compabase": {
      "type": "http",
      "url": "https://compabase.com/api/mcp",
      "headers": {
        "Authorization": "Bearer ${COMPABASE_TOKEN}"
      }
    }
  }
}
```

Placeholders to fill: `${COMPABASE_TOKEN}`.

## Trust

- hygiene: 100
- liveness: 99
- freshness: 100
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-97% +updated-12d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 84/100 (good)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list carries no ttlMs, so clients re-fetch it

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 86 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 50 of 50 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- warn `tools.token_cost`: about 9,957 tokens to load every tool
- warn `tools.api_dump`: 50 tools, 86% named like REST operations: looks like an API mapped one endpoint per tool

### stability: 75 (weight 15)

- warn `stability.changes`: 14 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 50, about 9,957 tokens to load them all
- tool set hash: b0cd8bb352443e8d897b297c576e3684
- tools last changed: 2026-10-12T18:33:40.236Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.ContentWriterco/compabase.svg)](https://protogrid.dev/servers/io.github.ContentWriterco/compabase)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-12 `search_companies` changed (inputSchema)
- 2026-10-11 `get_company_procurement_disputes` added
  - Get National Appeal Chamber (Krajowa Izba Odwoławcza, KIO) rulings in public procurement disputes involving the company — as appellant (with upheld / dismissed / discontinued / rejected counts), as participant or as contracting authority — with case numbers, dates, other party and outcome. Parties are matched by name and city. Identify company by name, KRS, or NIP.
- 2026-10-11 `get_company_trademarks` added
  - Get Polish Patent Office (UPRP) trademarks owned or applied for by the company — mark name, application number, Nice classes, status (protected / pending / expired / refused), filing, registration and expiry dates, plus counts. Owners are matched by company name and city (UPRP does not publish NIP). Identify company by name, KRS, or NIP.
- 2026-10-09 `get_company_nfz_contracts` added
  - Get contracts between the company (as a healthcare provider) and Poland's National Health Fund (NFZ) — value of NFZ contracts in the latest year and every year since 2008, types of care (hospital, outpatient, dental, rehabilitation, pharmacy etc.) with NFZ regional branch, and the largest contracts. Amounts are annual contract values in PLN. Keyed by NIP. Identify company by name, KRS, or NIP.
- 2026-10-09 `get_company_public_contracts` added
  - Get contracts from Poland's Central Register of Contracts (CRU JSFP, Ministry of Finance) where the company is the contractor of a public-sector unit (ministries, municipalities, schools, hospitals) — count, total value, top public buyers and the 50 most recent contracts (date, subject, value in PLN, buyer, link). Register live since July 2026; covers contracts below tender thresholds too. Keyed by NIP. Identify company by name, KRS, or NIP.
- 2026-10-09 `get_company_real_estate` added
  - Company real estate from the latest financial statement (period ending 2025+): land incl. perpetual usufruct, buildings and premises, investment property (book values in PLN/EUR/USD) plus property locations named as mortgage collateral (address, land-register KW numbers, creditor). Keyed by KRS; null when the balance sheet shows no real estate (micro and small entities have no such breakdown).
- 2026-10-08 `get_company_articles` changed (title, annotations)
- 2026-10-08 `get_company_procurement` changed (title, annotations)
- 2026-10-07 `get_company_secured_liabilities` added
  - Secured liabilities from the latest financial-statement notes (period ending 2025+): mortgages (hipoteki), registered / financial pledges (zastawy), transfers of ownership, assignments — with creditor, amount, secured debt, asset and land-register (KW) numbers. Keyed by KRS; null when nothing is disclosed.
- 2026-10-07 `get_company_financial_supervision` added
  - KNF register (Polish Financial Supervision Authority): licences and entries of a financial company — banks, payment / e-money institutions, investment firms, insurers, lending institutions, agents. Returns entries with kind, KNF number, status, registration / decision / strike-off dates and services. Keyed by NIP; null when the company has no KNF entry.

Full history: https://api.protogrid.dev/v1/servers/io.github.ContentWriterco%2Fcompabase/changes

## Remotes

- https://compabase.com/api/mcp (streamable-http, auth none, reachable true, uptime30d 0.96581197)

## Packages

_none_

## Tools (50)

- `add_to_watchlist`: Add a company to the user's watchlist. Identify by KRS (10-digit) or NIP (10-digit). Supports both KRS companies and CEIDG sole proprietorships (via NIP).
- `add_watchlist_batch`: Add multiple companies to watchlist in one call. Provide an array of KRS/NIP identifiers (max 500). Resolves identifiers to companies, skips duplicates, respects plan limits.
- `check_signup`: Poll a request_signup session. When the user has confirmed email, returns mcp_key once and cursor_mcp_json to write to MCP config. Call every 3 seconds until status is ready, expired, or already_delivered. No auth required.
- `count_companies`: Count KRS companies matching given filters. Returns a single number — no company list. Does not count JDG in this tool (full CEIDG is in Compabase; listing is RODO-gated). Sparse or zero counts in JDG-dominated PKDs include a `hint`.
- `create_api_key`: Create a new REST API key (cb_…). The raw key is returned once and cannot be retrieved later.
- `create_mcp_key`: Create a new MCP key (mcpk_…). The raw key is returned once and cannot be retrieved later.
- `delete_api_key`: Revoke (deactivate) a REST API key by its ID. The key stops working immediately.
- `delete_byok_key`: Remove a configured BYOK provider key. After removal, the platform falls back to its own model access.
- `delete_mcp_key`: Revoke (deactivate) an MCP key by its ID. Cannot revoke the key currently in use. The key stops working immediately.
- `execute_sql`: Execute a read-only SQL SELECT query against the Compabase database. Use when dedicated tools are not enough (aggregations, joins, custom analysis).
- `export_companies`: Bulk file export of companies matching filters (CSV / XLSX / JSON). Up to 500 rows per call. Default `fields=contacts_only`: name, NIP, KRS, city, email, phone, website — small enough to use in-chat. `fields=summary` adds location, PKD, latest revenue/profit. `fields=full` is the complete dump (change history, rankings, people, enrichments, CSV twins) and often exceeds MCP client limits. Consumes export quota only after the file is built successfully. For a short list of emails after search_companies, use search with fields=contacts_only instead.
- `get_byok_keys`: List configured Bring-Your-Own-Key (BYOK) provider keys status. Shows which providers (openai, claude, gemini) have keys configured, with prefix and last-used date. Never returns the actual key.
- `get_company`: Get company registry profile and headline financials for one latest filed period (`financials.period_to` / `financial_period_to`): revenue, profit, costs, assets, estimated_value (Ohlson/RIM equity estimate), PKD, address, plus contacts when on record, full address, share capital, representation, recent KRS changes and `vat` (MF white list: VAT status, VAT registration date, bank accounts, removal/restoration, date Compabase checked it). All money fields in this response are that same period — there is no nested summary from a different year. NIP lookup also returns a CEIDG/JDG firm when it has a public contact email (RODO). Does NOT include balance-sheet line items (cash, receivables, inventories). For those or earlier years, use get_financials.
- `get_company_articles`: Get full text of the company's articles of association or statute (umowa spółki / statut) from RAR (Repozytorium Akt Rejestrowych). Use when the user asks about: share transfer consent, preemption rights, non-compete clauses, company duration, voting rights, special share classes, representation rules from the deed, or any clause in the founding document. Returns doc metadata + full extracted text. KRS companies only.
- `get_company_beneficiaries`: Get CRBR beneficial owners for a KRS company. All names are returned (same as zarząd / wspólnicy). PESEL is never included (birth_year only). JDG are not in CRBR.
- `get_company_court_gazette`: Get Court and Commercial Gazette (MSiG) notices for one company. Matched by KRS or NIP (creditor calls, dissolution, mergers, liquidation).
- `get_company_debt_registry`: Get KRZ insolvency / restructuring proceedings. KRS companies via company_krz; sole proprietors via CEIDG KRZ by NIP.
- `get_company_energy_licenses`: Get URE energy concessions for a company — full list of electricity, gas, heat, and liquid fuels, with validity dates and pending applications. Keyed by NIP. Identify company by name, KRS, or NIP.
- `get_company_eu_funds`: Get European Funds (Fundusze Europejskie) projects for a company — official MFiPR lists, EU co-financing, programme and dates. Keyed by NIP. Identify company by name, KRS, or NIP. Cohesion/shared-management funds; not TED procurement, not FTS Commission grants, and not SUDOP state aid.
- `get_company_eu_tenders`: Get TED EU-threshold public procurement — full awards as contractor and notices as buyer. Keyed by NIP. Identify company by name, KRS, or NIP.
- `get_company_financial_supervision`: KNF register (Polish Financial Supervision Authority): licences and entries of a financial company — banks, payment / e-money institutions, investment firms, insurers, lending institutions, agents. Returns entries with kind, KNF number, status, registration / decision / strike-off dates and services. Keyed by NIP; null when the company has no KNF entry.
- `get_company_nfz_contracts`: Get contracts between the company (as a healthcare provider) and Poland's National Health Fund (NFZ) — value of NFZ contracts in the latest year and every year since 2008, types of care (hospital, outpatient, dental, rehabilitation, pharmacy etc.) with NFZ regional branch, and the largest contracts. Amounts are annual contract values in PLN. Keyed by NIP. Identify company by name, KRS, or NIP.
- `get_company_people`: Get people associated with a company — management board, supervisory board, shareholders, proxies. Returns display names, role labels, and relationship types (management, supervisory, ownership, procuration). Identify by name, KRS, or NIP.
- `get_company_procurement`: Get European Commission FTS awards for a company — Horizon, LIFE, Erasmus and other direct/indirect-management grants. Keyed by NIP (VAT). Identify by name, KRS, or NIP. Not cohesion funds (get_company_fe) and not TED procurement.
- `get_company_procurement_disputes`: Get National Appeal Chamber (Krajowa Izba Odwoławcza, KIO) rulings in public procurement disputes involving the company — as appellant (with upheld / dismissed / discontinued / rejected counts), as participant or as contracting authority — with case numbers, dates, other party and outcome. Parties are matched by name and city. Identify company by name, KRS, or NIP.
- `get_company_public_aid`: Get SUDOP public aid / grants for a company — full case list with amounts, grantor, measure, purpose. Keyed by NIP. Identify company by name, KRS, or NIP.
- `get_company_public_contracts`: Get contracts from Poland's Central Register of Contracts (CRU JSFP, Ministry of Finance) where the company is the contractor of a public-sector unit (ministries, municipalities, schools, hospitals) — count, total value, top public buyers and the 50 most recent contracts (date, subject, value in PLN, buyer, link). Register live since July 2026; covers contracts below tender thresholds too. Keyed by NIP. Identify company by name, KRS, or NIP.
- `get_company_public_tenders`: Get BZP public procurement data — full awards as contractor and notices as buyer, with award values. Keyed by NIP. Identify company by name, KRS, or NIP.
- `get_company_rankings`: Get a company's revenue rank positions within its industry (PKD), region (voivodeship), and all of Poland. Returns rows from company_financial_rankings — one row per scope (pkd_full, pkd_division, pkd_section, region, country). Use for questions like: where does company X rank in Poland / its industry / its region?
- `get_company_real_estate`: Company real estate from the latest financial statement (period ending 2025+): land incl. perpetual usufruct, buildings and premises, investment property (book values in PLN/EUR/USD) plus property locations named as mortgage collateral (address, land-register KW numbers, creditor). Keyed by KRS; null when the balance sheet shows no real estate (micro and small entities have no such breakdown).
- `get_company_sanctions`: Official MSWiA sanctions listing for one company. Returns measures and legal grounds when the company is listed; null when it is not. Matched by KRS, NIP, or REGON. The same payload is included on get_company as sanctions.
- `get_company_secured_liabilities`: Secured liabilities from the latest financial-statement notes (period ending 2025+): mortgages (hipoteki), registered / financial pledges (zastawy), transfers of ownership, assignments — with creditor, amount, secured debt, asset and land-register (KW) numbers. Keyed by KRS; null when nothing is disclosed.
- `get_company_stock_market`: Get Warsaw Stock Exchange listing for a company — ticker, ISIN, market (GPW main / NewConnect / GlobalConnect), last close and change, market cap, shares outstanding, TTM EPS, TTM P/E (falls back to last annual filing), last quarterly results, next earnings date, dividend per share and yield. Quotes delayed ~15 minutes, in PLN. Snapshot plus a few recent daily bars — not full OHLCV history. Keyed by NIP. Identify company by name, KRS, or NIP.
- `get_company_trademarks`: Get Polish Patent Office (UPRP) trademarks owned or applied for by the company — mark name, application number, Nice classes, status (protected / pending / expired / refused), filing, registration and expiry dates, plus counts. Owners are matched by company name and city (UPRP does not publish NIP). Identify company by name, KRS, or NIP.
- `get_company_waste_registry`: Get BDO waste and packaging register data — registration number, EUP site count, activity flags, and headquarters decisions with issue and validity dates. Keyed by NIP. Identify company by name, KRS, or NIP.
- `get_financials`: Get full financial statement metrics per fiscal period — all entity_financial_metrics columns. Includes cash_and_equivalents, inventories, receivables, liabilities, equity, cost breakdown, revenue lines. Identify company by name, KRS, or NIP.
- `get_financial_stats`: Get precomputed aggregate financial statistics for a sector, region, PKD branch, or country. Returns median, p25/p75/p90, winsorized mean, mean, total, n_companies, min/max. Use for questions like: what is the median revenue / average profit / assets in industry X or region Y? Prefer median or winsor_mean over mean. cost_wages is PLN-only.
- `get_plan`: Get the user's active billing plan details — plan name, price, status, limits, prepaid credit balance, and billing period reset date.
- `get_usage`: Get current billing period usage and remaining quota — mcp_queries, api_requests, export_companies, ask_ai_credits, watchlist_companies. Includes limits and reset date.
- `list_api_keys`: List all active REST API keys (cb_…) for the user's account. Returns id, name, key_prefix, created_at, last_used_at.
- `list_mcp_keys`: List all active MCP keys (mcpk_…) for the user's account. Returns id, name, key_prefix, created_at, last_used_at.
- `list_plans`: List Compabase billing plans and limits. No auth required. After sign-up, use upgrade_plan to get a Stripe Checkout URL.
- `list_watchlist`: List companies on the user's watchlist with company data (name, KRS, NIP, revenue, city). Supports pagination via limit/offset.
- `remove_from_watchlist`: Remove a company from the user's watchlist. Identify by KRS or NIP.
- `request_signup`: Start Compabase account setup for an email. Sends a magic link. After the user clicks it, poll check_signup with the returned setup_id until status is ready — then you receive an MCP key automatically. Do not ask the user to generate a key in the portal. No auth required.
- `search_companies`: Search and filter Polish KRS companies (spółki). Compabase also holds the full CEIDG/JDG register; this tool does not browse JDG — those without a public contact email are hidden because of RODO. Default `fields=summary` returns a compact row (name, NIP, KRS, location, PKD, latest financials, email/phone/website) — small enough for MCP clients. `fields=contacts_only` is name/NIP/KRS/city/email/phone/website only. `fields=full` returns every company_search column plus contacts and may exceed client size limits. Use for rankings, sector filters, city/county/region browsing, name search, or NIP/KRS lookup. When a PKD is mostly JDG, a sparse result includes a `hint` (full CEIDG is in the database; listing is RODO-gated). Do not call export_companies just to get a handful of emails or phones.
- `set_byok_key`: Add or update a BYOK provider API key. Key is encrypted at rest (AES-256-GCM). Requires paid plan (Pro+). Providers: openai (sk-…), claude (sk-ant-…), gemini (AIza… or AQ.…).
- `set_notification_preferences`: Get or update email notification preferences for watchlist changes. When email_notifications=true, you will receive an email whenever a watched company's data changes (registry updates, new financial statements, deregistration, etc.).
- `set_webhook_url`: Configure, view, or remove webhook for watchlist event notifications. Events: watchlist.company_changed, watchlist.financials_updated, watchlist.company_removed_from_registry.
- `upgrade_plan`: Create a Stripe Checkout session for a plan upgrade. Shows current plan and available upgrades. Pass plan_id ('pro' or 'scale') to get a checkout_url on checkout.stripe.com — open it in the browser for the user to pay. Do not send the user to the marketing pricing page.
