# Blackbook Protocol Advisor

> Purchaser-gated MCP for Vault, HMRC TRS, 95/5 equity, and Companies House PSC.

- name: io.github.koynlabs/blackbook-advisor
- version: 1.0.3
- connection class: R0 (autonomous)
- trust: 94/100
- quality: 91/100 (strong)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.koynlabs%2Fblackbook-advisor
- tools: https://api.protogrid.dev/v1/servers/io.github.koynlabs%2Fblackbook-advisor/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "blackbook-advisor": {
      "type": "http",
      "url": "https://theblackbook.pro"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 100
- freshness: 85
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-100% ~updated-52d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 91/100 (strong)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 100 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 25 of 25 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 5,469 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 25, about 5,469 tokens to load them all
- tool set hash: 901f17004becf220e5f1147d56619ecf
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.koynlabs/blackbook-advisor.svg)](https://protogrid.dev/servers/io.github.koynlabs/blackbook-advisor)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://theblackbook.pro (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (25)

- `confirm_and_submit`: Submit the current portal form only after the human provides a valid one-time confirmationToken from prepare_submit_confirmation. This can file on a government portal.
- `draft_form_answers`: Draft preparation notes for TRS, IHT100, IHT400, and related professional-review questions from a completed intake. Label as a Protocol guide for solicitor execution.
- `end_browser_session`: Tear down the assisted browser session. No credentials are persisted. Safe to call more than once for the same id after expiry.
- `explain_current_screen`: Summarise the current portal page: URL, text excerpt, fillable fields, Protocol hint, signedInLikely.
- `fill_fields`: Fill non-secret form fields (label/placeholder/name). Never passwords, OTPs, or Companies House auth codes.
- `generate_review_bundle`: Generate a cited professional-review bundle from a completed intake for the Owner to take to a solicitor or CTA.
- `get_companies_house_guidance`: Retrieve approved Companies House / PSC / WebFiling guidance. PSC filings name individuals (trustees), never the Trust itself.
- `get_hmrc_guidance`: Retrieve approved GOV.UK/HMRC trust and inheritance-tax guidance by topic. Returns a title, official URL, and short summary. Not a live scrape of GOV.UK.
- `get_legal_boundary`: Return the mandatory educational / non-advice boundary statement. Call when the Owner asks if this is legal advice.
- `get_module_playbook`: REQUIRED when coaching setup. Return the ordered Protocol checklist for a module. For 95/5 / share transfer into the Trust use equity_95_5 (not a freestyle solicitor checklist). Modules: vault, trs, equity_95_5, psc, banking, ip, philosophy, legacy, property.
- `get_self_serve_portal`: Self-serve path: return the official portal URL plus Protocol checklist for the Owner’s own browser. Present portalUrl as a clickable markdown link (MCP cannot launch local browsers). Do not start Browserbase.
- `get_skill`: Load a Protocol workflow skill as markdown. Names: establish-vault-trust, register-trust-trs, implement-95-5-equity-split, update-psc-companies-house, run-portal-copilot.
- `list_fillable_fields`: Inventory visible non-secret form controls (label/name/type) on the current portal page. Use to align prepare_portal_fill keys.
- `list_implementation_modes`: List Owner choices: self_serve (own browser + guidance) vs assisted (Browserbase live view + optional fill). Ask before starting co-pilot.
- `list_modules`: List available Protocol advisor modules in coaching order.
- `list_risk_flags`: Return legal, tax, and practical red flags detected from customer facts (settlor-as-beneficiary, lender consent, offshore, time pressure).
- `list_skills`: List Protocol Architect workflow skills (Vault, TRS, 95/5, PSC, portal co-pilot). Call when the Owner asks how to set something up; then get_skill for the matching workflow.
- `open_portal`: Navigate the assisted session to an allowlisted portal: trs, trs_manage, companies_house_webfiling, or companies_house_psc.
- `prepare_portal_fill`: Map intake facts to a fill_fields payload for TRS or Companies House PSC. Secrets (auth code) are listed but never filled. Call after Owner login; align labels with list_fillable_fields. Never maps the Trust as a PSC organisation.
- `prepare_submit_confirmation`: Create a one-time confirmation token required before confirm_and_submit. Show the token to the human Owner; do not submit without it.
- `request_user_action`: Pause for Owner login, CAPTCHA, 2FA, or review in the Browserbase live view. Never ask the Owner to paste passwords into chat.
- `run_trust_intake`: Validate a structured trust setup intake and return missing facts, Protocol warnings, and next modules. Call before drafting forms or opening portals.
- `search_book`: REQUIRED before substantive Protocol answers. Search approved Blackbook Protocol passages and return cited excerpts. Prefer Protocol vocabulary from hits over generic UK legal advice. Returns ranked results plus the educational boundary.
- `start_browser_session`: ASSISTED mode only. Start a fresh ephemeral Browserbase (or mock) co-pilot session. Returns liveViewUrl — no purchaser email. If Owner prefers their own browser, use get_self_serve_portal instead.
- `wait_for_user_ready`: After request_user_action(login|2fa), poll until the page leaves the sign-in surface (or timeout). Then continue fill.