SEFAZ AP: Certidão Negativa de Débitos
Server Details
SEFAZ AP: Clearance Certificate (Debts), official-source lookup. Platform-hosted, pay per query with
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- mcp-dir/sefaz_ap_certidao_debitos-mcp
- GitHub Stars
- 0
- Server Listing
- SEFAZ AP: Certidão Negativa de Débitos
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.3/5 across 7 of 7 tools scored. Lowest: 3.1/5.
Most tools are clearly distinct: authenticate, connect, show_version, report_bug, toolkit_info, and the SEFAZ query tool. However, 'connect' vs 'toolkit_info' vs 'authenticate' have overlapping concerns about connection/auth state, and 'marketplace' is a sprawling multi-purpose tool that overlaps with 'connect' (connecting providers) and with 'report_bug' and 'show_version' indirectly. The primary domain tool is unique, but the platform-level tools blur boundaries.
Naming is highly inconsistent: verbs like authenticate, connect, report_bug, show_version, and noun-based names like marketplace and toolkit_info. There is no verb_noun pattern; 'marketplace' is a noun while others are verbs. Also, the SEFAZ tool uses a long, descriptive snake_case name that doesn't fit any pattern with the others. The camelCase and mixed verbs create confusion.
With 7 tools, the count is within a reasonable range for a server that combines platform/utility functions with a single domain-specific integration. It is slightly heavy on platform management tools relative to the single core data function, but still acceptable. No tool is obviously superfluous, though some could be merged.
The core purpose is to query SEFAZ AP certificates. The single query tool covers the main need, but there is no tool for listing types of certificates or handling multiple queries in batch. The platform-level tools (auth, connection, marketplace, bug reporting) provide supporting infrastructure, so overall the set covers the essential workflow. Minor gaps exist in the domain surface but are not fatal.
Available Tools
7 toolsauthenticateAIdempotentInspect
MCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header Authorization: Bearer <token> for a permanent, non-expiring connection. Or paste it here for a session-only login: call with { token: "" } after the user pastes, or with no args to get the link.
| Name | Required | Description | Default |
|---|---|---|---|
| token | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate non-read-only, idempotent, non-destructive. Description adds valuable context about the browser flow, permanent vs session tokens, and the no-args link behavior. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with clear structure ('Best:' and 'Or'). Slightly verbose but every sentence provides necessary guidance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For an auth tool without output schema, the description covers the full flow, both auth methods, and edge case (no args). Could mention error handling, but overall complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 0% description coverage, but the description fully explains the token parameter (JWT), its optionality, and the behavior when omitted. This goes well beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states this tool authenticates the user for MCP.AI in IDE agents, with specific actions (log in, copy token). It distinguishes from siblings like 'connect' by focusing on login/token handling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear guidance on two usage modes (permanent config vs session-only) and when to call with/without token. However, it does not explicitly address alternatives among sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
connectARead-onlyIdempotentInspect
Returns connection status and URLs. When all providers are connected, returns authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-install URLs.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, non-destructive behavior, and the description adds valuable response-state details: authenticated:true with empty pending[], and connect_url plus per-install URLs for missing credentials. This gives the agent useful behavioral expectations beyond the safety flags without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences, front-loaded with the primary action and followed by conditional response behavior. Every word adds useful information with no redundancy or vague filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and no parameters, the description sufficiently explains the return values for both the connected and missing-credential scenarios. This is enough for an agent to select the tool and understand the expected outcome before invoking it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so there is no parameter burden for the description to carry. The empty input schema and 100% schema coverage mean nothing further needs to be explained, matching the baseline for no-parameter tools.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns connection status and URLs, with specific outputs for different states. It is distinct from sibling tools like authenticate by focusing on status/URL retrieval rather than initiating an authentication flow.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear contextual use cases: checking whether all providers are connected and obtaining connect_url when credentials are missing. It does not explicitly name alternatives or exclusions, but the purpose and triggering conditions are discernible.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
marketplaceAInspect
The official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them. Covers capability requests like "find an MCP that does X", "consulta um CPF", "is there a tool for Y". Core flow: action=search discovers MCPs by intent → describe returns one MCP's full profile (every tool with its id + params, pricing, auth) so you pick the right tool_id → invoke RUNS that tool. KEY: invoke works even when the MCP is NOT installed — it runs the tool pontualmente (one-off), without adding the MCP to the toolkit and without bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wallet is empty, invoke returns a checkout/top-up link (the user opens it, then you retry). Use install only to make an MCP PERMANENT in the active toolkit (its tools then show up natively in future sessions); prefer invoke for a single/occasional use. list_tools lists what is callable right now. subscribe/cancel handle per-MCP billing; report_bug sends feedback; request_mcp asks us to build a NEW MCP when nothing fits. Search/describe flag installed_in_toolkit vs installed_in_workspace. Writes (install/uninstall/subscribe/cancel and the one-off install behind invoke) require workspace owner/admin. It also carries the mcp.ai PROMPT LIBRARY, which is about ready-made prompt TEXT rather than MCPs: search_prompts finds one, get_prompt returns its full text with {{variables}} filled, and publish_prompt saves a prompt and returns a shareable mcp.ai/p/ link that opens without login.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| query | No | ||
| action | No | search | |
| mcp_id | No | ||
| message | No | ||
| tool_id | No | ||
| arguments | No | {} | |
| immediate | No | ||
| tier_slug | No | ||
| prompt_body | No | ||
| prompt_slug | No | ||
| prompt_tool | No | ||
| prompt_vars | No | {} | |
| conversation | No | [] | |
| prompt_title | No | ||
| request_name | No | ||
| cancel_reason | No | ||
| cancel_comment | No | ||
| prompt_targets | No | ||
| report_context | No | ||
| prompt_category | No | ||
| request_details | No | ||
| prompt_description | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses important runtime behaviors: invoke works even when the MCP is not installed, it is one-off and does not bloat the tool list, credential/background paywall flows return connect/checkout links requiring user action then retry, and writes such as install/subscribe/cancel require workspace owner/admin. It also explains installed_in_toolkit vs installed_in_workspace flags. There is no contradiction with the stated annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense and front-loaded with the core identity and flow. It earns most of its sentences, but it runs into one long manual-style paragraph—space use, bullets, or short separations for billing, permissions, and prompt-library would have improved scanability.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a very complex 23-parameter, no-output-schema marketplace tool, the description is impressively complete: it explains the core lifecycle, auth/payment side effects, prompt library, and other workspaces. It still leaves gaps: it does not enumerate every parameter, anything about `resume`, the `arguments` JSON format/system, or what the exact return shapes for overview outputs will look like, so the agent may still need to infer.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description carries a strong burden here. It does add real meaning to core parameters: action values (search/describe/install/list_tools/subscribe/cancel/prompt actions), tool_id selection, prompt slug links, and cancel/billing behavior. However, several fields are left unexplained, such as limit, immediate, conversation, cancel_reason/comment, and arguments syntax; the description also refers to an 'invoke' flow that is not visible in the action enum, leaving some ambiguity.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a strong definition: 'official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them.' It then clarifies the search–describe–invoke flow and distinguishes marketplace actions such as install, list_tools, subscribe, and the prompt library, so an agent can tell what this tool is for.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit decision guidance: 'prefer invoke for a single/occasional use', 'Use install only to make an MCP PERMANENT', and 'list_tools lists what is callable right now'. It also states the when-to-fallback path: 'request_mcp asks us to build a NEW MCP when nothing fits.' This is concrete when/when-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
report_bugAIdempotentInspect
Report a bug, missing feature, or send feedback. Include the conversation array with recent messages for reproduction.
| Name | Required | Description | Default |
|---|---|---|---|
| context | No | ||
| message | Yes | ||
| conversation | No | [] |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the tool is not read-only, not destructive, and idempotent, so the description only needs to add behavioral nuance. It adds that the conversation array should be included for reproduction, but it does not explain whether data is transmitted externally, what happens after submission, or how the system treats duplicate reports.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two short sentences, front-loaded with the purpose and followed by a useful reproduction instruction. Every clause earns its place with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple reporting tool with three flat parameters, no nested objects, and no output schema, the description is mostly complete. It gives the purpose and the key repro instruction, though explicit guidance for context and message would make it fully self-contained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate for all three params. Only the conversation parameter receives meaningful explanation, while the required message and optional context are left entirely to property-name inference without format or examples.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description is specific: 'Report a bug, missing feature, or send feedback' names the exact action and resource. It also clarifies that the conversation array is intended for reproduction, distinguishing this from unrelated sibling tools like connect, marketplace, and the Sefaz lookup.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear when-to-use context: call this when reporting a bug, missing feature, or feedback. It does not explicitly list alternatives, but none of the sibling tools serve the same reporting purpose, so no exclusion is necessary.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sefaz_ap_certidao_debitos_consultarBRead-onlyIdempotentInspect
SEFAZ AP: Certidão Negativa de Débitos, consulta em fonte oficial. Hospedado pela plataforma, sem credenciais da plataforma, pague por consulta com crédito pré-pago. Consulta informação de fontes e órgãos oficiais brasileiros (a mesma disponível ao cidadão), não é dado sigiloso. O cliente é o controlador dos dados e responde pela finalidade legítima (LGPD).
| Name | Required | Description | Default |
|---|---|---|---|
| ie | No | ||
| cpf | No | ||
| cnpj | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (readOnly, idempotent, non-destructive), the description adds meaningful behavioral details: it mentions prepaid credit cost, no platform credentials required, and LGPD compliance. This enhances transparency about side effects and data handling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is relatively short but contains redundancy (e.g., repeating 'consulta' and official source info). It could be more tightly structured, but it does not contain excessive verbosity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description should provide context about expected results or return data. It mentions the source and legal aspects but does not clarify what the tool actually returns (e.g., certificate status, JSON structure). It also fails to elaborate on the parameters, leaving the tool's overall usage incomplete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema defines three parameters (ie, cpf, cnpj) with no descriptions, and the tool description does not explain what they stand for or their expected formats. The description adds no value to parameter understanding, and schema coverage is 0%.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool is for consulting a negative debt certificate (Certidão Negativa de Débitos) from an official source. It specifies the action (consulta) and resource, distinguishing it from the sibling tools like authenticate or show_version.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage context (official Brazilian tax query) and notes payment (prepaid credits) and lack of platform credentials, but does not explicitly state when to use this tool over alternatives or provide exclusionary conditions. The guidance is mostly implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
show_versionARead-onlyIdempotentInspect
Show the current MCP platform and adapter versions.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and no destructive action. The description adds specificity about what versions are shown (platform and adapter), providing useful context beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single concise sentence with no fluff. It is front-loaded and every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only tool with no parameters and no output schema, the description fully covers what the tool does. No additional explanation is necessary.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has no parameters, and schema coverage is 100%. Per rubric, baseline for 0 params is 4, and no param info is needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Show' and a clear resource: current MCP platform and adapter versions. It distinguishes from sibling tools like connect, authenticate, and marketplace by specifying version information.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The context is clear—use when you need version info. No exclusions or alternatives are mentioned, but given its simplicity and no parameters, the usage is self-evident.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
toolkit_infoARead-onlyIdempotentInspect
Returns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false; the description adds detail beyond these by specifying the returned state elements (installed MCPs, connection status, accounts, tool counts). It adds enough behavioral context for an information-only tool without contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-constructed sentence that front-loads the action ('Returns the current toolkit state') and then compresses the relevant data items into one list. There is no filler or redundant repetition of the tool name.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple zero-parameter, read-only state getter with strong annotations; the description covers the return value contents sufficiently and there is no output schema requiring additional explanation. It is a complete description for this tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema is empty, so there are no parameter semantics to describe; the zero-parameter baseline is 4. The description correctly implies that no configuration or arguments are needed to retrieve the toolkit state.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Returns') with a defined resource ('current toolkit state') and enumerates exactly what it provides: installed MCPs, connection statuses, connected accounts, and catalog tool counts. This clearly distinguishes it from action-oriented siblings like connect, authenticate, and report_bug.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description makes the context obvious: this is the read-only way to inspect overall toolkit status, including MCP connections and accounts. It does not explicitly name show_version or provide when-not-to-use guidance, but the stated content makes the appropriate use case clear without being misleading.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- Alicense-qualityCmaintenanceEnables querying official SINTEGRA AP data (Brazilian state tax registration) via a hosted MCP server, with read-only access and prepaid credits.MIT
- -license-qualityCmaintenanceProvides read-only access to query tax clearance certificates (CNDA/CND) from SEFAZ Piauí via an official source, with pay-per-use prepaid credits and magic-link authentication.
- Alicense-qualityCmaintenanceEnables consulting Brazilian federal tax debt certificates (CND) from the official PGFN source through a read-only MCP tool, with pay-per-use hosted access.MIT
- Alicense-qualityCmaintenanceEnables querying official tax debt certificates (Certidão de Dívida Ativa) from SEFAZ DF (Federal District Revenue) via a read-only MCP tool. Supports use with any MCP client over HTTP, with prepaid credits.MIT
Your Connectors
Sign in to create a connector for this server.