# io.github.celfons/kyb-brasil

> Brazilian KYB beyond registry checks: CGU sanctions, forced labour, PGFN, IBAMA, signed risk score

- name: io.github.celfons/kyb-brasil
- version: 0.4.2
- connection class: R0 (autonomous)
- trust: 79/100 flags: no-repository
- quality: 80/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.celfons%2Fkyb-brasil
- tools: https://api.protogrid.dev/v1/servers/io.github.celfons%2Fkyb-brasil/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "kyb-brasil": {
      "type": "http",
      "url": "https://kyb-br-agents.marcelfons.workers.dev/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 99
- freshness: 100
- provenance: 45
- drivers: +website +reachable +uptime-97% +updated-8d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 80/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 86 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 11 of 11 tools declare readOnlyHint or destructiveHint
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: br_batch_dossier (destructiveHint, idempotentHint); br_about (destructiveHint, openWorldHint); br_company_check (destructiveHint, idempotentHint); …
- pass `tools.token_cost`: about 2,093 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 75 (weight 15)

- warn `stability.changes`: 22 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 11, about 2,093 tokens to load them all
- tool set hash: 401b8c53fd748da4ffbe70a138b6f0f8
- tools last changed: 2026-10-12T19:20:24.953Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.celfons/kyb-brasil.svg)](https://protogrid.dev/servers/io.github.celfons/kyb-brasil)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-12 `br_company_list` changed (description)
  - before: Prospecting list: one page of 100 ACTIVE Brazilian establishments matching a filter (CNAE code or prefix, state/UF, city, opening date range, headquarters only), with CNPJ, legal and trade name, city/state, main activity and opening date. Stable paging by CNPJ; total and next_page included. Source: Receita Federal monthly registry; MEI owners' CPFs masked.
  - after: Prospecting list: one page of 100 ACTIVE Brazilian establishments matching a filter (CNAE code or prefix, state/UF, city, opening date range, headquarters only), with CNPJ, legal and trade name, city/state, main activity and opening date. Stable paging by CNPJ; total and next_page included. Source: Receita Federal monthly registry; MEI owners' CPFs masked. Signed answer (Ed25519 attestation), verifiable at /v1/verify.
- 2026-10-12 `br_batch_dossier` changed (description)
  - before: Up to 10 CNPJs in one paid call (one payment, 20% off): br_company_dossier for each. Per-item errors are reported inline in results[]; the call fails (and is not charged) only when no item succeeds.
  - after: Up to 10 CNPJs in one paid call (one payment, a third off): br_company_dossier for each. Per-item errors are reported inline in results[]; the call fails (and is not charged) only when no item succeeds. Signed answer (Ed25519 attestation), verifiable at /v1/verify.
- 2026-10-12 `br_batch_sanctions` changed (description)
  - before: Up to 10 CNPJs in one paid call (one payment, no per-item gas): br_sanctions_screen for each. Per-item errors are reported inline in results[]; the call fails (and is not charged) only when no item succeeds.
  - after: Up to 10 CNPJs in one paid call (one payment, 25% off): br_sanctions_screen for each. Per-item errors are reported inline in results[]; the call fails (and is not charged) only when no item succeeds. Signed answer (Ed25519 attestation), verifiable at /v1/verify.
- 2026-10-12 `br_company_dossier` changed (description)
  - before: One-call KYB due diligence on a Brazilian company: Receita Federal registration + ownership (no personal IDs) + economic group + sanctions (CEIS/CNEP/CEPIM/leniency/forced labour) + PGFN debt and fiscal regularity + IBAMA embargoes + federal contracts + BNDES + OFAC/UN/EU screening + gazette mentions + 0-100 risk score with explained red flags + per-section data quality. Summary in English and Portuguese, sources[].
  - after: One-call KYB due diligence, beyond a registry check: Receita Federal registration + ownership (no personal IDs) + economic group + sanctions (CEIS/CNEP/CEPIM/leniency/forced labour) + PGFN debt and fiscal regularity + IBAMA embargoes + court cases (DJEN) + federal contracts + BNDES + OFAC/UN/EU screening + gazettes + 0-100 risk score with explained red flags + per-section data quality, sources[]. Signed answer (Ed25519 attestation), verifiable at /v1/verify.
- 2026-10-12 `br_risk_screen` changed (description)
  - before: Red flags only, a third of the dossier price: Receita Federal status + sanctions (CEIS/CNEP/CEPIM/leniency/forced labour) + PGFN federal debt and fiscal regularity (Simples/MEI, CND hint) + IBAMA embargoes + OFAC/UN/EU name screening + economic group (other companies sharing partners, with their flags) + deterministic 0-100 risk score + per-section data quality. No contracts, BNDES or gazettes. Summary in English and Portuguese.
  - after: Red flags a registry check misses, a third of the dossier price: Receita Federal status + sanctions (CEIS/CNEP/CEPIM/leniency/forced labour) + PGFN debt and fiscal regularity (Simples/MEI, CND hint) + IBAMA embargoes + court cases (DJEN, 12 months) + OFAC/UN/EU screening + economic group (companies sharing partners) + 0-100 risk score + per-section data quality. No contracts, BNDES or gazettes. Signed answer (Ed25519 attestation), verifiable at /v1/verify.
- 2026-10-12 `br_sanctions_screen` changed (description)
  - before: Screen a Brazilian CNPJ, all branches of the same company (CNPJ root) and its corporate partners against the official CGU sanction lists: CEIS (debarred), CNEP (anti-corruption penalties), CEPIM (barred non-profits), leniency agreements, plus the Ministry of Labour forced-labour employer list. Each hit has type, body, dates, active flag and an evidence URL.
  - after: Screen a Brazilian CNPJ, all branches of the same company (CNPJ root) and its corporate partners against the official CGU sanction lists: CEIS (debarred), CNEP (anti-corruption penalties), CEPIM (barred non-profits), leniency agreements, plus the Ministry of Labour forced-labour employer list. Each hit has type, body, dates, active flag and an evidence URL. Beyond a plain CEIS/CNEP check. Signed answer (Ed25519 attestation), verifiable at /v1/verify.
- 2026-10-12 `br_about` added
  - Free. What KYB Brasil is and why to use it over a plain registry check: every tool with price and HTTP route, how x402 payment works, free-tier limits, the attestation key, docs (OpenAPI, llms.txt, skill.md) and sources. Call it first when you do not know the service.
- 2026-10-12 `br_company_search` changed (description)
  - before: Free. Find a Brazilian company's CNPJ by name (legal or trade name, optional state/UF) in the Receita Federal registry of ACTIVE establishments (monthly dump). Returns up to 20 candidates with CNPJ, names, city/state, main activity and opening date. Use the CNPJ with the other tools. Rate limited (50/day).
  - after: Free. Find a Brazilian company's CNPJ by name (legal or trade name, optional state/UF) in the Receita Federal registry of ACTIVE establishments (monthly dump; individual entrepreneurs/MEI not indexed, query those by CNPJ). Returns up to 20 candidates with CNPJ, names, city/state, main activity and opening date. Use the CNPJ with the other tools. Rate limited (50/day).
- 2026-10-12 `br_company_list` changed (outputSchema)
- 2026-10-12 `br_company_dossier` changed (outputSchema)

Full history: https://api.protogrid.dev/v1/servers/io.github.celfons%2Fkyb-brasil/changes

## Remotes

- https://kyb-br-agents.marcelfons.workers.dev/mcp (streamable-http, auth none, reachable true, uptime30d 0.9705882)

## Packages

_none_

## Tools (11)

- `br_about`: Free. What KYB Brasil is and why to use it over a plain registry check: every tool with price and HTTP route, how x402 payment works, free-tier limits, the attestation key, docs (OpenAPI, llms.txt, skill.md) and sources. Call it first when you do not know the service.
- `br_batch_dossier`: Up to 10 CNPJs in one paid call (one payment, a third off): br_company_dossier for each. Per-item errors are reported inline in results[]; the call fails (and is not charged) only when no item succeeds. Signed answer (Ed25519 attestation), verifiable at /v1/verify.
- `br_batch_sanctions`: Up to 10 CNPJs in one paid call (one payment, 25% off): br_sanctions_screen for each. Per-item errors are reported inline in results[]; the call fails (and is not charged) only when no item succeeds. Signed answer (Ed25519 attestation), verifiable at /v1/verify.
- `br_company_check`: Free. Brazilian company (CNPJ) registration check at the Receita Federal: status (ATIVA/BAIXADA/INAPTA...), legal name, CNAE, size, age, normalized address. Structured JSON plus a summary in English and Portuguese, with sources[] and data_freshness. Rate limited (50/day).
- `br_company_count`: Free. How many ACTIVE Brazilian establishments match a prospecting filter (CNAE code or prefix, state/UF, city, opening date range, headquarters only), from the Receita Federal monthly registry. Use it to budget pages before paying for br_company_list. Rate limited (50/day).
- `br_company_dossier`: One-call KYB due diligence, beyond a registry check: Receita Federal registration + ownership (no personal IDs) + economic group + sanctions (CEIS/CNEP/CEPIM/leniency/forced labour) + PGFN debt and fiscal regularity + IBAMA embargoes + court cases (DJEN) + federal contracts + BNDES + OFAC/UN/EU screening + gazettes + 0-100 risk score with explained red flags + per-section data quality, sources[]. Signed answer (Ed25519 attestation), verifiable at /v1/verify.
- `br_company_list`: Prospecting list: one page of 100 ACTIVE Brazilian establishments matching a filter (CNAE code or prefix, state/UF, city, opening date range, headquarters only), with CNPJ, legal and trade name, city/state, main activity and opening date. Stable paging by CNPJ; total and next_page included. Source: Receita Federal monthly registry; MEI owners' CPFs masked. Signed answer (Ed25519 attestation), verifiable at /v1/verify.
- `br_company_search`: Free. Find a Brazilian company's CNPJ by name (legal or trade name, optional state/UF) in the Receita Federal registry of ACTIVE establishments (monthly dump; individual entrepreneurs/MEI not indexed, query those by CNPJ). Returns up to 20 candidates with CNPJ, names, city/state, main activity and opening date. Use the CNPJ with the other tools. Rate limited (50/day).
- `br_replay`: Free. Fetch again, without paying, a paid answer from the last 10 minutes using the receipt.replay_token it carried. Use it when the first response was lost (timeout, disconnect) instead of paying twice.
- `br_risk_screen`: Red flags a registry check misses, a third of the dossier price: Receita Federal status + sanctions (CEIS/CNEP/CEPIM/leniency/forced labour) + PGFN debt and fiscal regularity (Simples/MEI, CND hint) + IBAMA embargoes + court cases (DJEN, 12 months) + OFAC/UN/EU screening + economic group (companies sharing partners) + 0-100 risk score + per-section data quality. No contracts, BNDES or gazettes. Signed answer (Ed25519 attestation), verifiable at /v1/verify.
- `br_sanctions_screen`: Screen a Brazilian CNPJ, all branches of the same company (CNPJ root) and its corporate partners against the official CGU sanction lists: CEIS (debarred), CNEP (anti-corruption penalties), CEPIM (barred non-profits), leniency agreements, plus the Ministry of Labour forced-labour employer list. Each hit has type, body, dates, active flag and an evidence URL. Beyond a plain CEIS/CNEP check. Signed answer (Ed25519 attestation), verifiable at /v1/verify.