protogrid

Search / su.hpt/hptsu-mcp

hptsu-mcp

R2· OAuth, once

Search hpt.su — Russian/EAEU vehicle compliance documents: type approvals, certificates, VIN lookup.

v0.4.4 · active · repository · website · descriptor JSON · versions

An agent can connect after a one-time OAuth consent by a human.Remote endpoint behind OAuth 2. Tokens stay with the agent; the registry only exposes the authorization metadata.
Quality82good
Trust93of 100
Uptime, 30 days100%
Latency p50863 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "hptsu-mcp": {
      "type": "http",
      "url": "https://mcp.hpt.su/mcp",
      "headers": {
        "X-API-Key": "${X_API_KEY}"
      }
    }
  }
}
claude mcp add --transport http hptsu-mcp https://mcp.hpt.su/mcp --header "X-API-Key: ${X_API_KEY}"
[mcp_servers.hptsu-mcp]
url = "https://mcp.hpt.su/mcp"
env_http_headers = { "X-API-Key" = "X_API_KEY" }
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "hptsu-mcp": {
      "type": "remote",
      "url": "https://mcp.hpt.su/mcp",
      "enabled": true,
      "headers": {
        "X-API-Key": "{env:X_API_KEY}"
      }
    }
  }
}
{
  "mcpServers": {
    "hptsu-mcp": {
      "type": "http",
      "url": "https://mcp.hpt.su/mcp",
      "headers": {
        "X-API-Key": "${X_API_KEY}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=hptsu-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbWNwLmhwdC5zdS9tY3AiLCJoZWFkZXJzIjp7IlgtQVBJLUtleSI6IiR7WF9BUElfS0VZfSJ9fQ%3D%3D"
}
{
  "servers": {
    "hptsu-mcp": {
      "type": "http",
      "url": "https://mcp.hpt.su/mcp",
      "headers": {
        "X-API-Key": "${X_API_KEY}"
      }
    }
  }
}
{
  "mcpServers": {
    "hptsu-mcp": {
      "httpUrl": "https://mcp.hpt.su/mcp",
      "headers": {
        "X-API-Key": "${X_API_KEY}"
      }
    }
  }
}
extensions:
  "hptsu-mcp":
    enabled: true
    name: "hptsu-mcp"
    type: streamable_http
    uri: "https://mcp.hpt.su/mcp"
    headers:
      "X-API-Key": "${X_API_KEY}"
    timeout: 300

Placeholders to fill from your own secret store: ${X_API_KEY}. The registry never accepts secret values.

Quality 82 / 100good

protocoln/a · weight 25
  • n/a
    protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)
authorization83 · weight 15
  • pass
    auth.prmProtected Resource Metadata (RFC 9728) published
  • pass
    auth.as_metadataauthorization server metadata reachable
  • warn
    auth.cimdonly Dynamic Client Registration, deprecated in 2026-07-28 in favour of CIMD
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene71 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • fail
    tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: search_documents (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_document (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); search_otts (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
  • pass
    tools.token_costabout 6,267 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool history not recorded yet
dependencies100 · weight 15
  • pass
    deps.known_vulnsno known advisory in 30 resolved packages
  • pass
    deps.mcp_sdk_versionmcp 1.30.0, no known advisory
  • pass
    deps.resolvable[email protected] resolved: 30 packages

21 tools, about 6,267 tokens to load them all · checked 2026-10-19 13:05 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 93 / 100

provenance85
liveness100
freshness85
hygiene100

+repository +dns-namespace +website +reachable +uptime-100% ~updated-61d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] PyPI29 dependencies, resolved · MCP SDK mcp 1.30.0 · advisories checked 2026-10-19

No known advisory affects this dependency graph.

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://mcp.hpt.su/mcp streamable-httpoauth2 AS: https://hpt.suyes100%863 ms–2026-10-19
packageregistryversionruntimesecrets
hptsu-mcppypi0.4.4uvxHPTSU_API_KEY

Tools (21)

download_document_fileGet links for a document file: page URL for everyone, direct download URL when the plan allows it. Always returns `document_page_url` — the document's page on hpt.su where the user can download the file manually under their account. Share this link with the user. When the plan includes direct downloads, the response also contains `download_url` — a personal temporary link to the PDF. It can be fetched programmatically: send a GET request with the same `X-API-Key: <key>` header used for this API. In a browser it works when signed in to hpt.su under the account that owns the key. The link is bound to the key owner — it does not work with anyone else's key or account. The download quota is charged at actual download time. Otherwise `download_url` is null and `download_note` explains why.
fulltext_searchFull-text search inside type-approval document bodies (PDF text). Covers ОТТС / ОТШ / ЗОТТС / ЗОТШ. Other document kinds (СБКТС / ЗОЕТС / СУТ / cert / decl) are not covered by full-text search. **Premium feature** — requires a plan that includes full-text search (see https://hpt.su/pricing/) with a subscription covering at least one type-approval kind.
get_documentFetch a single Document by slug+kind.
list_brandsResolve a vehicle brand name to its canonical record (used to filter type approvals).
list_certification_bodiesLookup accredited certification bodies (issuers of сертификатов/деклараций).
list_document_filesList the files attached to a document. Returns `[{file_uid, file_name, kind, pages_count, published_at}]` — each entry's `file_uid` can be passed to `download_document_file`. A document often has several PDFs (e.g. cleaned + original); use this tool to enumerate them and pick the right one before download.
list_registry_kindsReturn the catalogue of registry kinds exposed by the hpt.su public API.
list_test_labsLookup accredited testing laboratories (issuers of СБКТС/ЗОЕТС).
list_tnved_codesTN VED EAEU classifier lookup. Note: TN VED codes are linked **only** to certificates and declarations — not to vehicle type approvals or safety reports.
list_vehicle_modelsResolve a vehicle model name (within a brand) to canonical record.
search_by_vinAggregated search by VIN across all car-kinds (ОТТС/ОТШ/ЗОТТС/ЗОТШ/ СБКТС/ЗОЕТС). Open for any active API key — no subscription required. Returns documents whose VIN field contains the given fragment, newest first. For exact full-VIN search within a single registry use the per-kind tool (search_otts/search_sbkts/…) with its `vin` parameter.
search_certificatesSearch conformity certificates (ТР ТС / ТР ЕАЭС).
search_declarationsSearch declarations of conformity (ТР ТС / ТР ЕАЭС).
search_documentsCross-registry search by document number across all hpt.su kinds.
search_otchSearch ОТШ (chassis type approvals).
search_ottsSearch ОТТС (vehicle type approvals, ТР ТС 018/2011).
search_sbktsSearch СБКТС (vehicle safety certificate).
search_soutSearch СУТ (vehicle type notification — small dataset, only basic fields).
search_zoetsSearch ЗОЕТС (vehicle technical expertise conclusion).
search_zotchSearch ЗОТШ (chassis conformity assessment conclusion).
search_zottsSearch ЗОТТС (vehicle conformity assessment conclusion).

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "su.hpt/hptsu-mcp",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
  "remotes": [
    {
      "url": "https://mcp.hpt.su/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "X-API-Key",
          "isSecret": true,
          "isRequired": true,
          "description": "API key issued at https://hpt.su/user/mcp/ (free tier available)."
        }
      ]
    }
  ],
  "version": "0.4.4",
  "packages": [
    {
      "version": "0.4.4",
      "transport": {
        "type": "stdio"
      },
      "identifier": "hptsu-mcp",
      "runtimeHint": "uvx",
      "registryType": "pypi",
      "environmentVariables": [
        {
          "name": "HPTSU_API_KEY",
          "isSecret": true,
          "isRequired": true,
          "description": "X-API-Key issued in the hpt.su cabinet (requires MCP_FREE or MCP_PAID scope)."
        },
        {
          "name": "HPTSU_BASE_URL",
          "default": "https://hpt.su/api/v1",
          "description": "Override of the API base URL."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/hpt-su/hptsu-mcp",
    "source": "github"
  },
  "websiteUrl": "https://hpt.su",
  "description": "Search hpt.su — Russian/EAEU vehicle compliance documents: type approvals, certificates, VIN lookup."
}