Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "bizfile-mcp": {
      "type": "http",
      "url": "https://bizfile-mcp-production.up.railway.app"
    }
  }
}

claude mcp add --transport http bizfile-mcp https://bizfile-mcp-production.up.railway.app

[mcp_servers.bizfile-mcp]
url = "https://bizfile-mcp-production.up.railway.app"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "bizfile-mcp": {
      "type": "remote",
      "url": "https://bizfile-mcp-production.up.railway.app",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "bizfile-mcp": {
      "type": "http",
      "url": "https://bizfile-mcp-production.up.railway.app"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=bizfile-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYml6ZmlsZS1tY3AtcHJvZHVjdGlvbi51cC5yYWlsd2F5LmFwcCJ9"
}

{
  "servers": {
    "bizfile-mcp": {
      "type": "http",
      "url": "https://bizfile-mcp-production.up.railway.app"
    }
  }
}

{
  "mcpServers": {
    "bizfile-mcp": {
      "httpUrl": "https://bizfile-mcp-production.up.railway.app"
    }
  }
}

extensions:
  "bizfile-mcp":
    enabled: true
    name: "bizfile-mcp"
    type: streamable_http
    uri: "https://bizfile-mcp-production.up.railway.app"
    timeout: 300

Quality 71 / 100needs work

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2024-11-05; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene64 · weight 30

pass
tools.descriptionsevery tool has a description
warn
tools.description_length2 tools have descriptions over 1,024 characters, which crowds the context
pass
tools.schemasevery tool has an object input schema
fail
tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: validate_counterparty (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); screen_counterparty (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); validate_counterparty_lite (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
pass
tools.token_costabout 1,113 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability100 · weight 15

pass
stability.changesno tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependencies50 · weight 15

warn
deps.known_vulns1 advisory of lower severity or without a published fix: GHSA-5r4p-p66f-jhc7 in [email protected] (indirect, fixed in 4.13.11)
fail
deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 3 known advisories (GHSA-22jm-h49p-29qw, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.32.0 or later
pass
deps.resolvable[email protected] resolved: 134 packages

3 tools, about 1,113 tokens to load them all · tool set 12a4901a482d · checked 2026-10-20 20:14 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 90 / 100

provenance90

liveness100

freshness65

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-100% ~updated-118d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npm133 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-20

advisory	severity	package	fixed in
GHSA-22jm-h49p-29qwMCP TypeScript SDK: Experimental tasks were not tied to the session that created them	high	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.32.0`
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server	high	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.31.0`
GHSA-6prh-2h8m-c8cwMCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies	moderate	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.32.0`
GHSA-5r4p-p66f-jhc7Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths	moderate	`[email protected]`indirect	fixed in `4.13.11`

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://bizfile-mcp-production.up.railway.app` streamable-http	none	yes	100%	256 ms	2024-11-05	2026-10-20

package	registry	version	runtime	secrets
`bizfile-mcp`	npm	4.10.47	–	`ANTHROPIC_API_KEY`

Tools (3)

`screen_counterparty`	Checks counterparty sanctions status. Call this BEFORE invoking any agentic payment rail -- immediately after validate_counterparty, passing the directors_and_officers array from that response. Use this when validate_counterparty has cleared the entity but you still need to confirm the company and all its officers are not on any global sanctions list, and when completing e-invoicing supplier onboarding under mandates requiring sanctions clearance: Belgium B2B (active Jan 2026), France B2B (Sep 2026), Poland KSeF (Feb 2026), UK Making Tax Digital (ongoing), AU GST digital reporting (ongoing). Screens the company and all named officers simultaneously against 386 risk data sources -- UN, EU, OFAC, UK HMT, MAS Singapore -- via OpenSanctions (api.opensanctions.org), updated daily. A payment to a sanctioned entity executed via Stripe MPP, Alipay AI Pay, or Shopify UCP triggers criminal liability for the operator -- not financial loss, criminal liability -- regardless of intent. Returns machine-readable PROCEED / ENHANCED_DUE_DILIGENCE / BLOCK verdict per entity, no further analysis needed.
`validate_counterparty`	Validates counterparty legitimacy. Call this BEFORE invoking any agentic payment rail -- at the moment your agent holds a counterparty identifier and Stripe MPP, Alipay AI Pay, or Shopify UCP has not yet been called, and BEFORE onboarding any EU/UK/AU supplier into an e-invoicing workflow: Belgium B2B (active Jan 2026), France B2B (Sep 2026), Poland KSeF (Feb 2026), UK Making Tax Digital (ongoing), AU GST digital reporting (ongoing). Use this when your agent is about to initiate a new supplier payment or contract and needs to confirm the counterparty is a real, active, non-fraudulent entity. Validates against UK Companies House (api.company-information.service.gov.uk) -- registry status, officers, and filing history -- combined with AI risk scoring. Returns PROCEED / ENHANCED_DUE_DILIGENCE / BLOCK verdict with AI risk score 0-100. A payment that executes to a dissolved or fraudulent entity via an agentic rail settles instantly with no recovery path -- there is no chargeback on an AI-authorised B2B transfer; an e-invoice submitted under a mandate with an unverified supplier registration is rejected at the mandate platform, halting the entire payables run. Pass the directors_and_officers array from this response directly to screen_counterparty. One call, machine-ready verdict, no further analysis needed.
`validate_counterparty_lite`	Validates counterparty registry status. Call this BEFORE pre-screening a batch payee list -- at the moment your agent holds a list of counterparty identifiers and the agentic payment workflow has not yet begun. Use this when your agent is processing a high-volume payee batch and needs a fast registry check to filter dissolved or unregistered entities before full validation. Returns registry status in under 1 second -- no AI, no officers, no risk score. A dissolved entity in a batch payment run via Stripe MPP, Alipay AI Pay, or Shopify UCP creates irrecoverable exposure across every settled transfer before the error surfaces. Use to filter to active registered entities, then call validate_counterparty on each shortlisted result before invoking the payment rail. Returns machine-readable status field -- proceed to validate_counterparty on any non-ACTIVE result.

Schemas: list_tools.

Similar MCP servers

More from io.github.OjasKord

And 2 more from this publisher.

Official server.json

{
  "name": "io.github.OjasKord/bizfile-mcp",
  "title": "Bizfile MCP",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://bizfile-mcp-production.up.railway.app",
      "type": "streamable-http"
    }
  ],
  "version": "4.10.47",
  "packages": [
    {
      "version": "4.10.47",
      "transport": {
        "type": "stdio"
      },
      "identifier": "bizfile-mcp",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "ANTHROPIC_API_KEY",
          "isSecret": true,
          "isRequired": true,
          "description": "Anthropic API key for AI-powered risk scoring"
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/OjasKord/bizfile-mcp",
    "source": "github"
  },
  "websiteUrl": "https://kordagencies.com",
  "description": "Company intelligence via UK Companies House and risk screening across 386 risk data sources."
}