SEFAZ DF: ISS
Server Details
SEFAZ DF: ISS, official-source lookup. Platform-hosted, pay per query with prepaid credit.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- mcp-dir/sefaz_df_iss-mcp
- GitHub Stars
- 0
- Server Listing
- SEFAZ DF: ISS
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.2/5 across 7 of 7 tools scored. Lowest: 3.3/5.
The tools are a mix of platform-level utilities (authenticate, connect, marketplace, report_bug, show_version, toolkit_info) and one domain-specific tool (sefaz_df_iss_consultar). The platform tools have overlapping purposes: authenticate and connect both deal with connection/auth status, and marketplace and toolkit_info both describe available tools/MCPs. The single domain tool is clearly distinct, but the platform tools blur boundaries.
Naming is inconsistent: some tools use snake_case (sefaz_df_iss_consultar), some use lowercase single words (connect, marketplace), and some use underscore-separated phrases (report_bug, show_version, toolkit_info). There is no consistent verb_noun pattern, and the domain tool's name is verbose and not aligned with the others.
7 tools is a reasonable count, but the server appears to be a platform wrapper with only one actual domain tool (SEFAZ DF ISS). The other six are generic platform utilities that could be considered out of scope for a domain-specific server, making the count feel padded rather than focused.
For a server named 'SEFAZ DF: ISS', the only domain operation is a single consult (query) tool. There is no support for other ISS-related operations (e.g., issuing, updating, or managing documents), and the rest of the tools are unrelated platform management functions. The domain surface is severely incomplete.
Available Tools
7 toolsauthenticateAIdempotentInspect
MCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header Authorization: Bearer <token> for a permanent, non-expiring connection. Or paste it here for a session-only login: call with { token: "" } after the user pastes, or with no args to get the link.
| Name | Required | Description | Default |
|---|---|---|---|
| token | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description reveals important behavior beyond annotations: no-args returns a login link, pasting a JWT creates a session-only login, and config headers create a permanent non-expiring connection. These details are not captured by the annotations and add meaningful context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized and front-loaded with the purpose, then expands into the two authentication options. Every sentence contributes actionable information with no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-optional-parameter auth tool with no output schema, this description is complete. It covers the permanent path, session path, token parameter semantics, and no-arg behavior, leaving no important usage gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, but the description fully compensates by explaining that the single `token` parameter is a JWT access token and how to use it. It also specifies the no-argument behavior, which is not evident from the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: authenticating IDE agents to MCP.AI by logging in and obtaining an access token. It distinguishes itself by explaining both permanent config-based auth and session-only token auth, which goes beyond the generic tool name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit usage instructions: add the token as an Authorization header for permanent access, paste it for session-only login, or call with no args to get a login link. It does not explicitly contrast with sibling tools like connect, so it stops short of full alternative-tool guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
connectARead-onlyIdempotentInspect
Returns connection status and URLs. When all providers are connected, returns authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-install URLs.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds specificity about return states (authenticated:true, pending[], connect_url) and behavior when credentials are missing, which is valuable beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no waste, front-loaded purpose. Every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Fully describes the two possible states (all connected, missing credentials) and the returned fields, which is complete for a simple status tool with no parameters and no output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Tool has zero parameters rank. With 0 params, baseline is 4. The description explains the output behavior, which suffices for a parameterless tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States exactly what the tool does — returns connection status and URLs. Clearly distinguishes from siblings like 'authenticate' and 'show_version' by describing its scope (connection state, not authentication or version).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies use for checking connection readiness before other operations, but does not explicitly state when not to use or name alternatives. Clear context, but lacks explicit exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
marketplaceAInspect
The official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them. Covers capability requests like "find an MCP that does X", "consulta um CPF", "is there a tool for Y". Core flow: action=search discovers MCPs by intent → describe returns one MCP's full profile (every tool with its id + params, pricing, auth) so you pick the right tool_id → invoke RUNS that tool. KEY: invoke works even when the MCP is NOT installed — it runs the tool pontualmente (one-off), without adding the MCP to the toolkit and without bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wallet is empty, invoke returns a checkout/top-up link (the user opens it, then you retry). Use install only to make an MCP PERMANENT in the active toolkit (its tools then show up natively in future sessions); prefer invoke for a single/occasional use. list_tools lists what is callable right now. subscribe/cancel handle per-MCP billing; report_bug sends feedback; request_mcp asks us to build a NEW MCP when nothing fits. Search/describe flag installed_in_toolkit vs installed_in_workspace. Writes (install/uninstall/subscribe/cancel and the one-off install behind invoke) require workspace owner/admin. It also carries the mcp.ai PROMPT LIBRARY, which is about ready-made prompt TEXT rather than MCPs: search_prompts finds one, get_prompt returns its full text with {{variables}} filled, and publish_prompt saves a prompt and returns a shareable mcp.ai/p/ link that opens without login.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| query | No | ||
| action | No | search | |
| mcp_id | No | ||
| message | No | ||
| tool_id | No | ||
| arguments | No | {} | |
| immediate | No | ||
| tier_slug | No | ||
| prompt_body | No | ||
| prompt_slug | No | ||
| prompt_tool | No | ||
| prompt_vars | No | {} | |
| conversation | No | [] | |
| prompt_title | No | ||
| request_name | No | ||
| cancel_reason | No | ||
| cancel_comment | No | ||
| prompt_targets | No | ||
| report_context | No | ||
| prompt_category | No | ||
| request_details | No | ||
| prompt_description | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond the sparse annotations by explaining side effects: invoke can return auth or checkout links when credentials/payment are needed, writes require workspace owner/admin, and invoke does a one-off install without bloat. It also clarifies installed_in_toolkit vs installed_in_workspace flags and the prompt library's shareable-link behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single informational paragraph with no wasted sentences, but its length and rapid-fire clauses make it harder to scan. For a 23-parameter automated marketplace tool with 14 actions, the density is understandable, though a bullet list or sectioned split would improve clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's size and no output schema, it covers nearly every action: search, describe, invoke, install, subscribe/cancel, report_bug, request_mcp, and the prompt library. There are still gaps (e.g., 'resume' action is not explained, and parameter-specific examples are missing), but for such a broad surface the description is unusually complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage, the description carries a heavy burden. It adds meaning to the most important parameters (action, query, mcp_id, tool_id, arguments, prompt_*, tier_slug implied by billing) and lays out the call sequence. It does not describe all 23 params or give concrete formats, so it is a solid but not exhaustive compensation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'the official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them' and then walks through the search → describe → invoke flow. This makes the tool's full scope explicit and differentiates it from the sibling authentication, connection, and informational tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives concrete when-to-use guidance: 'Use search if you need to find an MCP by intent', 'Use invoke when you need a one-off run without installing', and 'Use install only to make an MCP permanent'. It also names alternatives like list_tools for 'what is callable right now' and request_mcp when nothing fits.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
report_bugAIdempotentInspect
Report a bug, missing feature, or send feedback. Include the conversation array with recent messages for reproduction.
| Name | Required | Description | Default |
|---|---|---|---|
| context | No | ||
| message | Yes | ||
| conversation | No | [] |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, destructiveHint=false, and idempotentHint=true. The description adds minimal behavioral context beyond that, only instructing to include the conversation array for reproduction. It doesn't describe side effects (e.g., sending data) or response behavior, but since annotations cover the safety profile, a score of 3 is appropriate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise—two sentences—and front-loads the core purpose. Every sentence adds value: the first states what the tool does, and the second provides a key usage hint. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With only 3 simple parameters and no output schema, the tool is relatively straightforward. The description adequately explains the tool's purpose and provides guidance on one important parameter. However, it does not clarify the 'context' parameter or what happens after reporting (e.g., confirmation), but these are minor gaps for a tool of this simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It partially explains the 'conversation' parameter (for reproduction) but says nothing about 'message' or 'context'. The main parameter 'message' is inferred from the tool name, but 'context' remains ambiguous. Given the low coverage, the description falls short.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Report a bug, missing feature, or send feedback.' This is a specific verb ('report') combined with a resource (bug/feature/feedback), and it is clearly distinct from siblings like authenticate or show_version, which serve different functions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: use when you want to report an issue or feedback. It also provides a specific usage hint: 'Include the conversation array with recent messages for reproduction.' However, it does not explicitly mention when not to use this tool or alternatives, so it falls slightly short of the highest tier.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sefaz_df_iss_consultarBRead-onlyIdempotentInspect
SEFAZ DF: ISS, consulta em fonte oficial. Hospedado pela plataforma, sem credenciais da plataforma, pague por consulta com crédito pré-pago. Consulta informação de fontes e órgãos oficiais brasileiros (a mesma disponível ao cidadão), não é dado sigiloso. O cliente é o controlador dos dados e responde pela finalidade legítima (LGPD).
| Name | Required | Description | Default |
|---|---|---|---|
| ie | No | ||
| cpf | No | ||
| cnpj | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already indicate readOnly, idempotent, and non-destructive behavior. The description adds useful context beyond annotations by disclosing prepaid cost, lack of platform credentials, official-source status, absence of confidential data, and LGPD/controller responsibility. There is no contradiction with the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The main purpose is front-loaded, and the supporting platform/cost/privacy details are stated compactly. The text could be better structured or trimmed slightly, but every part contributes meaningful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description adequately explains the tool's domain, cost, and legal status for selection purposes. However, because it does not describe how to use the input identifiers or what the consultation returns, and no output schema is present, the description is not sufficient for fully reliable invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not mention the parameters ie, cpf, or cnpj at all. It gives no guidance on whether any of them is required, which one to use, accepted formats, or whether multiple identifiers can be combined, so the agent cannot safely determine how to invoke the tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description says 'SEFAZ DF: ISS, consulta em fonte oficial', giving a clear action and resource: it is an ISS consultation in the official SEFAZ DF source. It is specific enough to distinguish from the sibling tools, but it does not describe exactly what kind of result or coverage the consultation returns.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides useful operational context such as being hosted by the platform, requiring no platform credentials, and being paid by prepaid credits. However, it does not explicitly state when to prefer this tool over alternatives or name any sibling tools/exclusions, so usage guidance is still mostly implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
show_versionARead-onlyIdempotentInspect
Show the current MCP platform and adapter versions.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and idempotentHint=true, so the description does not need to repeat that. However, it adds no additional behavioral context beyond the basic purpose, such as output format or side effects, which is acceptable given the simple nature.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that front-loads the verb and resource. No waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple version-info tool with no parameters and good annotations, the description is complete. It fully explains the tool's function without needing more details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so there is nothing to explain. Baseline for zero params is 4, as the description is not required to add parameter details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool shows current MCP platform and adapter versions, with a specific verb ('show') and resource. It is distinct from sibling tools like authenticate or connect, so purpose is clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool vs alternatives. It does not mention exclusions or provide context. Sibling tools like toolkit_info might overlap, but no differentiation is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
toolkit_infoARead-onlyIdempotentInspect
Returns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so safety behavior is covered. The description adds the exact return content (installed MCPs, statuses, accounts, counts), providing useful context beyond the annotations. No contradictions or missing behavioral notes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that front-loads the core purpose and then lists the specific pieces of information returned. Every word adds value with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has no parameters, no output schema, and the description fully enumerates what it returns, the description is complete for an agent to invoke and interpret the result. Annotations cover safety, so nothing essential is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
This tool has zero parameters, so the baseline is 4. The description correctly omits parameter details since none exist. The schema coverage is trivially 100%.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Returns the current toolkit state' with specific details on what it includes (installed MCPs, connection status, accounts, catalog tool counts). This is a specific verb+resource and distinctly differentiates from siblings like show_version or connect.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The purpose is clear enough that an agent would infer when to use it (e.g., to inspect toolkit status). However, it does not explicitly mention alternative tools or situations to avoid, such as 'use this before connecting' or 'for authentication use authenticate instead.' The guidance is implicit, but not explicitly stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- Alicense-qualityCmaintenanceEnables querying official SINTEGRA DF tax registration data from any MCP-compatible client. Read-only server with a single tool, paid per query via prepaid credits.MIT
- Alicense-qualityCmaintenanceEnables querying SEFAZ's centralized taxpayer registration (CCC) from the official source via a read-only tool. Pay-per-use with prepaid credits.MIT
- Alicense-qualityCmaintenanceEnables querying official tax debt certificates (Certidão de Dívida Ativa) from SEFAZ DF (Federal District Revenue) via a read-only MCP tool. Supports use with any MCP client over HTTP, with prepaid credits.MIT
- Alicense-qualityCmaintenanceEnables AI agents to consult SEFAZ DF official negative debt certificates (Certidão Negativa de Débitos) through a single read-only MCP tool, with prepaid usage and no platform credentials.MIT
Your Connectors
Sign in to create a connector for this server.