CGU (Controladoria Geral da União)
Server Details
Looks up records of a person or company at the Federal Comptroller General (CGU) from the CPF or CNP
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- mcp-dir/cgu-mcp
- GitHub Stars
- 0
- Server Listing
- CGU (Controladoria Geral da União)
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.2/5 across 7 of 7 tools scored.
Most tools have clearly distinct purposes (auth, query, status, feedback, version, toolkit state). However, marketplace is a mega-tool that includes report_bug functionality, creating some overlap with the dedicated report_bug tool, and connect/toolkit_info both relate to connection status.
Naming is inconsistent: camelCase (connect, report_bug), snake_case (cgu_consultar), and mixed patterns overall. Also, cgu_consultar is Portuguese while other tool names are English, breaking a predictable convention.
Seven tools is a reasonable count, but the marketplace tool is overloaded with many sub-actions (search, describe, invoke, install, subscribe, etc.), making it feel like a large number of hidden tools bundled into one.
The server's primary domain is CGU data consultation, but only one tool (cgu_consultar) addresses that domain. The rest are platform utilities (auth, marketplace, version, etc.), leaving obvious gaps such as different consultation types, data explanations, or batch operations.
Available Tools
7 toolsauthenticateAIdempotentInspect
MCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header Authorization: Bearer <token> for a permanent, non-expiring connection. Or paste it here for a session-only login: call with { token: "" } after the user pastes, or with no args to get the link.
| Name | Required | Description | Default |
|---|---|---|---|
| token | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses behavioral traits beyond annotations: the permanent vs. session-only distinction, the requirement to login in the browser, and that no args returns a link. Annotations already indicate idempotency and non-destructiveness, and the description adds useful context without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and tightly structured, using a colon and alternatives to front-load the tool's purpose. Every sentence conveys necessary information about configuration, session login, and the no-arg behavior.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the key use cases and the return behavior (link vs. session). Lacking an output schema, it adequately describes what the tool does, though it doesn't explicitly state error handling or the exact response after successful token submission.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has one optional string parameter with no description (0% coverage). The description fully compensates by explaining the token parameter: 'call with { token: "<jwt>" } after the user pastes' and 'with no args to get the link'.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly indicates this tool enables authentication to MCP.AI for IDE agents, including the browser login flow and token handling. However, it does not explicitly distinguish it from sibling tools like 'connect' or specify when not to use it.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit usage instructions: the recommended permanent approach via config header, a session-only login by passing a token, and getting the login link with no arguments. It also states the trigger ('after the user pastes') for using the token parameter.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
cgu_consultarARead-onlyIdempotentInspect
Consulta registros de uma pessoa ou empresa na Controladoria Geral da União (CGU) a partir do CPF ou CNPJ. Hospedado pela plataforma, sem credenciais, pague por consulta com crédito pré-pago. Consulta informação de ACESSO PÚBLICO em bases e fontes oficiais (a mesma disponível ao cidadão), não é dado privado nem sigiloso. O cliente é o controlador dos dados e responde pela finalidade legítima (LGPD).
| Name | Required | Description | Default |
|---|---|---|---|
| Cpf | Yes | ||
| Cnpj | Yes | ||
| Tipo | Yes | ||
| completo | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive. Description adds operational details: hosted by platform, no credentials, prepaid credit cost, data is public not private, and LGPD data controller responsibility. These go beyond annotation hints and are consistent with them. No contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, each adds unique information: purpose, payment/credentials, and data legal context. The first sentence is the core purpose, followed by necessary operational details. Slightly long due to LGPD clause, but every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite annotations, the tool has 4 parameters and no output schema. Description provides high-level context (public data, cost, no credentials) but leaves critical parameter semantics unexplained and does not describe what result records contain. An agent would struggle to correctly invoke this tool without additional information.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so description must compensate. It only explains Cpf/Cnpj as identifiers, but fails to clarify 'Tipo' or 'completo'. Additionally, it says 'a partir do CPF ou CNPJ' while the schema requires both Cpf and Cnpj, creating confusion about how to fill them. This is insufficient for correct invocation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool queries records of a person or company at CGU using CPF or CNPJ. This is a specific verb ('consulta') + resource ('registros na CGU') and stands out from unrelated sibling tools like authenticate or connect.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear context: use when needing CGU public data, no credentials required, pay per query with prepaid credit. It does not explicitly name alternatives, but sibling tools are unrelated, so no alternative is needed. The context is sufficient for an agent to decide when to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
connectARead-onlyIdempotentInspect
Returns connection status and URLs. When all providers are connected, returns authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-install URLs.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and idempotentHint=true. The description adds meaningful behavioral detail: it explains the output states for connected vs. missing credentials, including the exact fields returned. This helps the agent anticipate results, though it doesn't cover all possible states.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences long with no filler. It front-loads the primary purpose ('Returns connection status and URLs') then elaborates on behavior.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (no params, no output schema), the description covers what the tool does and its key output variations. It's sufficient for an agent to know when and how to invoke it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the description has no need to explain parameter syntax. The schema is empty and the baseline for 0 params is 4. The description adds no parameter info, but none is needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns connection status and URLs, with specific behavior for two conditions. This distinguishes it from sibling tools like 'authenticate' which likely initiates authentication. No ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for checking connection status, but doesn't explicitly state when to use it versus 'authenticate' or other siblings. No alternatives or exclusions are mentioned. It's functional but lacks explicit guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
marketplaceAInspect
The official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them. Covers capability requests like "find an MCP that does X", "consulta um CPF", "is there a tool for Y". Core flow: action=search discovers MCPs by intent → describe returns one MCP's full profile (every tool with its id + params, pricing, auth) so you pick the right tool_id → invoke RUNS that tool. KEY: invoke works even when the MCP is NOT installed — it runs the tool pontualmente (one-off), without adding the MCP to the toolkit and without bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wallet is empty, invoke returns a checkout/top-up link (the user opens it, then you retry). Use install only to make an MCP PERMANENT in the active toolkit (its tools then show up natively in future sessions); prefer invoke for a single/occasional use. list_tools lists what is callable right now. subscribe/cancel handle per-MCP billing; report_bug sends feedback; request_mcp asks us to build a NEW MCP when nothing fits. Search/describe flag installed_in_toolkit vs installed_in_workspace. Writes (install/uninstall/subscribe/cancel and the one-off install behind invoke) require workspace owner/admin. It also carries the mcp.ai PROMPT LIBRARY, which is about ready-made prompt TEXT rather than MCPs: search_prompts finds one, get_prompt returns its full text with {{variables}} filled, and publish_prompt saves a prompt and returns a shareable mcp.ai/p/ link that opens without login.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| query | No | ||
| action | No | search | |
| mcp_id | No | ||
| message | No | ||
| tool_id | No | ||
| arguments | No | {} | |
| immediate | No | ||
| tier_slug | No | ||
| prompt_body | No | ||
| prompt_slug | No | ||
| prompt_tool | No | ||
| prompt_vars | No | {} | |
| conversation | No | [] | |
| prompt_title | No | ||
| request_name | No | ||
| cancel_reason | No | ||
| cancel_comment | No | ||
| prompt_targets | No | ||
| report_context | No | ||
| prompt_category | No | ||
| request_details | No | ||
| prompt_description | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses important behaviors: invoke works even when the MCP is not installed, one-off installs do not bloat the toolkit, auth/payment failures return connect or checkout links that require retry, and writes require owner/admin. It also explains installed_in_toolkit vs installed_in_workspace flags and the prompt library's login-free share links, adding substantial non-obvious context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense and lengthy, but this is largely justified by the tool's 14 distinct actions and complex invoke/install distinction. It is organized by core flow, key behavior, usage preference, auth, and prompt library, and almost every sentence adds needed information; a little repetition and the single long paragraph prevent a perfect score.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's high complexity, 23 parameters, and no output schema, the description covers the essential workflow, auth/ownership requirements, billing interactions, retry logic, and the prompt library sub-system. It does not fully specify return value shapes for search/list_tools or detail all parameter combinations, but it provides enough context for a capable agent to navigate the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema coverage, the description carries significant burden and does clarify the meaning of action, mcp_id/tool_id, invoke behavior, and prompt-related parameters. However, many parameters remain unexplained—limit, immediate, tier_slug, cancel_reason, cancel_comment, conversation, request_details, prompt_targets, and several others—leaving gaps an agent would need to guess at.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the marketplace as the official MCP/tool catalog and execution runner, with a core search → describe → invoke flow plus prompt library functions. It distinguishes itself from siblings by naming the platform and explaining its unique multi-action role, though the purpose is spread across many actions rather than a single verb+resource.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit guidance: prefer invoke for one-off use, use install only when permanent toolkit membership is desired, use request_mcp when nothing fits, and use list_tools to see what is callable now. It also states when writes require owner/admin and how credentials/payment link flows work, making alternatives and conditions clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
report_bugAIdempotentInspect
Report a bug, missing feature, or send feedback. Include the conversation array with recent messages for reproduction.
| Name | Required | Description | Default |
|---|---|---|---|
| context | No | ||
| message | Yes | ||
| conversation | No | [] |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, and idempotentHint=true, covering the basic safety profile. The description adds that the tool forwards bug reports and that the conversation parameter aids reproduction. However, it does not clarify what side effects occur (e.g., creating a ticket) or whether authentication is required, leaving some behavioral ambiguity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the primary purpose. The second sentence gives a specific, actionable instruction about the conversation parameter. There is no unnecessary detail, making it highly concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is relatively simple, and the description covers the core action and one key parameter. However, it omits information about expected return values, prerequisites like authentication (given the sibling authenticate tool), and the purpose of the context parameter. These gaps are notable given there is no output schema to compensate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must carry parameter meaning. It explains that 'conversation' should contain recent messages for reproduction, but does not explain 'message' (the required parameter) or 'context'. The description also calls 'conversation' an array while the schema types it as string, which could cause confusion. Overall, only one of three parameters receives meaningful elaboration.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Report') and identifies the resources ('bug, missing feature, or send feedback'). This clearly distinguishes it from sibling tools like show_version and marketplace, leaving no ambiguity about its purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states the use case: to report a bug, missing feature, or provide feedback. It also gives a directive to include the conversation array for reproduction. No alternative tools are mentioned, but none are needed since no other sibling handles issue submission, so the context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
show_versionARead-onlyIdempotentInspect
Show the current MCP platform and adapter versions.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description is consistent with annotations (readOnlyHint=true, idempotentHint=true, destructiveHint=false). It adds minimal extra context ('current' suggests live retrieval), but relies on annotations for behavioral safety. Does not disclose return format or potential errors, though this is a simple read-only tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single concise sentence that is front-loaded with the verb and resource. Every word contributes meaning; no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a no-parameter, read-only version check, the description is complete. It explains exactly what the tool shows without needing details on parameters or return types. Sibling context does not introduce ambiguity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the schema fully covers all inputs (vacuously). The description adds no parameter-specific semantics; the baseline for 0 parameters is 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function with a specific verb ('show') and resource ('MCP platform and adapter versions'). It is unambiguous and distinguishes itself from siblings like authenticate, connect, and toolkit_info, which serve different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied: use when you need the current platform and adapter versions. However, no explicit guidance is given on when not to use it or how it differs from sibling tools like toolkit_info, which might also provide version-related information.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
toolkit_infoARead-onlyIdempotentInspect
Returns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, covering safety. The description adds value by detailing exactly what state will be returned, which helps the agent understand the scope without repeating annotation data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that front-loads the action and lists the key components. Every word earns its place with no redundant or vague phrasing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless, read-only info tool with no output schema, the description fully conveys what the agent needs to know: it returns the toolkit state with the specified details. Annotations cover safety, so no further disclosure is needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the baseline is 4 per the rubric. The description adds no parameter info, but none is needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the specific verb 'Returns' and clearly identifies the resource: toolkit state, including installed MCPs, connection status, connected accounts, and catalog counts. This clearly separates it from action-oriented siblings like connect and authenticate.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description makes the use case evident—use this to inspect toolkit state—and implies it is the go-to for status queries. It does not explicitly name alternatives or exclusions, but the context is clear enough given the sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- Alicense-qualityCmaintenanceVerifica se uma pessoa ou empresa consta no Cadastro Nacional de Empresas Punidas (CNEP) a partir do CPF ou CNPJ, com consulta por crédito pré-pago e integração MCP.MIT
- -license-quality-maintenanceConsulta infrações trabalhistas registradas pelo Ministério do Trabalho e Emprego a partir de CPF ou CNPJ. Enables read-only querying of labor infractions for individuals or companies via MCP.
- Alicense-qualityCmaintenanceVerifies whether a company has entered into a leniency agreement under the Brazilian Anti-Corruption Law by CNPJ, read-only, hosted without credentials, pay-per-query.MIT
- Flicense-qualityCmaintenanceEnables searching and querying Brazilian politically exposed persons and federal public servants data through natural language.
Your Connectors
Sign in to create a connector for this server.