SEFAZ SP: Certidão Negativa de Débitos
Server Details
SEFAZ SP: Clearance Certificate (Debts), official-source lookup. Platform-hosted, pay per query with
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- mcp-dir/sefaz_sp_certidao_debitos-mcp
- GitHub Stars
- 0
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.1/5 across 7 of 7 tools scored. Lowest: 3.5/5.
Each tool has a clear, distinct purpose: authentication, connection status, marketplace search, bug reporting, certificate query, version display, and toolkit info. No overlapping or ambiguous functions.
Tool names mix single-word verbs (authenticate, connect), nouns (marketplace), and inconsistent snake_case patterns (report_bug vs show_version vs toolkit_info). The domain-specific tool name is excessively long and does not follow any common convention, making the set feel uncoordinated.
The 7 tools fall within the typical 3-15 range, but most are generic platform operations rather than domain-specific. For a single-purpose certificate query server, the count is slightly inflated, though still reasonable for a modular platform.
The server provides only one domain-specific operation (querying the negative debt certificate) and lacks any additional related capabilities such as status checks, history, or multiple certificate types. The platform tools are not directly relevant to the domain, leaving the actual functional surface thin.
Available Tools
7 toolsauthenticateAIdempotentInspect
MCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header Authorization: Bearer <token> for a permanent, non-expiring connection. Or paste it here for a session-only login: call with { token: "" } after the user pastes, or with no args to get the link.
| Name | Required | Description | Default |
|---|---|---|---|
| token | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description clarifies side effects (session creation), persistence ("permanent, non-expiring" vs "session-only"), and behavior with no arguments ("get the link"). This goes well beyond the annotations, which only specify idempotentHint=true and readOnlyHint=false, by explaining the actual state changes involved.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single block of text with multiple clauses and parentheticals, making it dense and slightly run-on. It front-loads the main action but could be improved with bullets or clearer separation of ideas. Every sentence adds value, but structure is suboptimal.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with only one optional parameter and no output schema, the description covers invocation variants and configuration steps. It doesn't mention error cases or return format, but for the tool's simplicity, it is sufficiently complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Even though schema description coverage is 0%, the description fully explains the 'token' parameter as a pasted JWT and describes the no-argument behavior (returns a login link). This compensates for the missing parameter documentation in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description implies authentication through imperative instructions ("log in in the browser, copy the access token") but never explicitly states the tool's purpose as a noun phrase. It's clear from context but indirect. It does not explicitly differentiate from sibling tool 'connect'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit guidance on the best approach ("Best: add it to this server's config...") and contrasts permanent vs. session-only login methods. It does not compare to sibling tools, but it clearly explains when to use each invocation type.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
connectARead-onlyIdempotentInspect
Returns connection status and URLs. When all providers are connected, returns authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-install URLs.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint. The description adds valuable context beyond annotations by specifying return behavior under different conditions (e.g., returns authenticated:true when connected, returns connect_url when credentials missing). This helps the agent predict outputs without an output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the core purpose, and uses conditional clauses to efficiently convey behavior. No redundant information or filler. Every sentence serves a purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers two key states (all providers connected and credentials missing), which are likely common cases. However, it does not explicitly address partial connection states or provide details on the exact structure of the URLs. Given the simplicity and existing annotations, this is still reasonably complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and the input schema is empty. With no parameters to document, the baseline of 4 applies. The description does not need to explain parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Returns connection status and URLs.' It distinguishes itself from sibling 'authenticate' by focusing on status/URL retrieval rather than authentication actions. The conditional details ('When all providers are connected...', 'When credentials are missing...') further clarify the behavior.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The usage context is implied: use this tool to check connection status or get URLs. However, there is no explicit guidance on when NOT to use it or how it compares to alternatives like 'authenticate'. It could be improved by stating that this is for status queries, not for initiating connections.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
marketplaceAInspect
The official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them. Covers capability requests like "find an MCP that does X", "consulta um CPF", "is there a tool for Y". Core flow: action=search discovers MCPs by intent → describe returns one MCP's full profile (every tool with its id + params, pricing, auth) so you pick the right tool_id → invoke RUNS that tool. KEY: invoke works even when the MCP is NOT installed — it runs the tool pontualmente (one-off), without adding the MCP to the toolkit and without bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wallet is empty, invoke returns a checkout/top-up link (the user opens it, then you retry). Use install only to make an MCP PERMANENT in the active toolkit (its tools then show up natively in future sessions); prefer invoke for a single/occasional use. list_tools lists what is callable right now. subscribe/cancel handle per-MCP billing; report_bug sends feedback; request_mcp asks us to build a NEW MCP when nothing fits. Search/describe flag installed_in_toolkit vs installed_in_workspace. Writes (install/uninstall/subscribe/cancel and the one-off install behind invoke) require workspace owner/admin. It also carries the mcp.ai PROMPT LIBRARY, which is about ready-made prompt TEXT rather than MCPs: search_prompts finds one, get_prompt returns its full text with {{variables}} filled, and publish_prompt saves a prompt and returns a shareable mcp.ai/p/ link that opens without login.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| query | No | ||
| action | No | search | |
| mcp_id | No | ||
| message | No | ||
| tool_id | No | ||
| arguments | No | {} | |
| immediate | No | ||
| tier_slug | No | ||
| prompt_body | No | ||
| prompt_slug | No | ||
| prompt_tool | No | ||
| prompt_vars | No | {} | |
| conversation | No | [] | |
| prompt_title | No | ||
| request_name | No | ||
| cancel_reason | No | ||
| cancel_comment | No | ||
| prompt_targets | No | ||
| report_context | No | ||
| prompt_category | No | ||
| request_details | No | ||
| prompt_description | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses that writes 'require workspace owner/admin,' that invoke returns a connect link when credentials are needed, and that it returns a checkout/top-up link when payment is required. It also explains the one-off nature of invoke versus the permanent effect of install, plus installed_in_toolkit vs installed_in_workspace flags. This is rich behavioral context and does not contradict the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one dense paragraph but packed with useful information: core flow, invoke-vs-install distinction, auth/billing links, permission requirements, and prompt library. Every segment earns its place, though the structure could be more scannable with bullets or action-by-action formatting. It is appropriately sized for the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 23 parameters, no output schema, and no schema descriptions, the description covers the essential flows, edge cases, and permissions remarkably well. It explains return-link behavior, install vs one-off execution, and the prompt library workflow. Some gaps remain, such as the 'resume' action and parameters like immediate, conversation, limit, and query, so it is not fully exhaustive, but it is contextually sufficient for the main workflows.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It does a good job explaining the high-signal action parameter and core identifiers (mcp_id, tool_id, arguments by implication), including action values like search, describe, invoke, install, and subscribe/cancel. However, many parameters such as limit, conversation, immediate, tier_slug, prompt_body, prompt_targets, request_details, and cancel_reason are left unexplained in both the schema and description, so the gap is only partially filled.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool is 'the official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them' and then enumerates concrete actions (search, describe, invoke, install). It distinguishes itself from siblings by framing itself as both catalog and runner, rather than a narrow utility. The purpose is specific and unambiguous even though the tool is multi-action.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives an explicit core flow: 'action=search discovers MCPs by intent → describe returns one MCP's full profile ... → invoke RUNS that tool.' It also provides strong when-to-use guidance: 'prefer invoke for a single/occasional use' and 'Use install only to make an MCP PERMANENT in the active toolkit.' It additionally contrasts the prompt library ('ready-made prompt TEXT rather than MCPs') and names alternatives like list_tools and request_mcp.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
report_bugAIdempotentInspect
Report a bug, missing feature, or send feedback. Include the conversation array with recent messages for reproduction.
| Name | Required | Description | Default |
|---|---|---|---|
| context | No | ||
| message | Yes | ||
| conversation | No | [] |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate non-destructive and idempotent behavior. The description adds that the conversation array is used for reproduction, which is useful context, but it doesn't disclose potential side effects like data being sent externally or what happens after reporting. The bar is lower due to annotations, so this is adequate but not rich.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two short, direct sentences. Every word earns its place—no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple reporting tool with no output schema. The description provides the essential information (what to report, what to include) and is complete enough given the low complexity. It doesn't need to describe return values.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema coverage, the description must compensate. It does explain that 'conversation' should contain recent messages for reproduction, but it doesn't elaborate on 'message' or 'context'. Partial compensation for three parameters, so a score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Report a bug, missing feature, or send feedback.' It uses a specific verb with a clear resource, and is easily distinguished from the unrelated sibling tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool (bug reports, features, feedback) and even gives reproduction guidance ('Include the conversation array with recent messages'). It doesn't explicitly name alternatives, but no sibling tool serves a similar purpose, so clear contextual use is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sefaz_sp_certidao_debitos_consultarARead-onlyIdempotentInspect
SEFAZ SP: Certidão Negativa de Débitos, consulta em fonte oficial. Hospedado pela plataforma, sem credenciais da plataforma, pague por consulta com crédito pré-pago. Consulta informação de fontes e órgãos oficiais brasileiros (a mesma disponível ao cidadão), não é dado sigiloso. O cliente é o controlador dos dados e responde pela finalidade legítima (LGPD).
| Name | Required | Description | Default |
|---|---|---|---|
| cpf | No | ||
| cnpj | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnly, idempotent, non-destructive behavior, and the description reinforces this with 'consulta'. It adds useful context beyond annotations: no platform credentials are required, queries are paid with prepaid credit, the data is public/non-confidential, and the client bears LGPD responsibility. It does not contradict the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the primary purpose and then provides relevant operational and legal context (hosting, credentials, prepaid credit, public data, LGPD). It is somewhat dense but not bloated; each sentence contributes meaningful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter query tool, the description covers purpose, official source, cost, authentication, and privacy obligations. However, with no output schema and no parameter explanations, the agent is left uncertain about what the response looks like and how to supply the CPF/CNPJ. It is usable but not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides only `cpf` and `cnpj` strings with no descriptions and 0% schema coverage. The description does not mention these parameters, their formats, whether one or both can be supplied, or any validation rules. The property names are somewhat self-explanatory, but the description adds none of the needed semantic detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'SEFAZ SP: Certidão Negativa de Débitos, consulta em fonte oficial', clearly identifying the exact resource (SEFAZ SP negative debt certificate) and the query action ('consulta'). It is easily distinguished from the generic sibling tools like authenticate, marketplace, and report_bug.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance on when to use this tool vs. alternatives, nor any exclusions or alternative suggestions. The description provides operational context (hosted, no credentials, prepaid credit, LGPD) but does not tell the agent when this tool is the appropriate choice among possible SEFAZ or certificate-related options.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
show_versionARead-onlyIdempotentInspect
Show the current MCP platform and adapter versions.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, so the safety profile is clear. The description adds no extra behavioral context beyond the verb 'show', but for a simple read-only version check this is adequate. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence with no unnecessary words. It front-loads the action and subject, achieving maximum clarity with minimal length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no parameters, no output schema, and safety annotations already covering read-only/idempotent behavior, the description fully conveys what the tool does. There is no missing information that would leave an agent uncertain about invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and schema description coverage is 100% (empty schema). Per the baseline rule for 0 parameters, the description is not required to add parameter details, so a score of 4 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function with a specific verb ('Show') and resource ('current MCP platform and adapter versions'). It distinguishes from siblings like 'authenticate' or 'connect', none of which relate to version information.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It only states what it does, without contextual cues like 'when you need to check versions' or exclusions of similar tools (e.g., 'use instead of toolkit_info for detailed info').
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
toolkit_infoARead-onlyIdempotentInspect
Returns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnly, non-destructive, idempotent behavior. The description adds useful context beyond annotations by enumerating exactly what information is returned (installed MCPs, connection status, accounts, catalog tool counts), giving the agent a richer expectation of the operation's output.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, tightly constructed sentence that front-loads the core action ('Returns the current toolkit state') and then lists the key data points in a compact, easily parsed format. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless, read-only info tool with no output schema, the description fully specifies the return contents and scope. It leaves no ambiguity about what the agent should expect from invoking this tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, and the schema is trivially fully covered. With no parameters to describe, the baseline is 4, and the description correctly omits parameter details since none exist.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Returns') and names the exact resource ('current toolkit state') with concrete details: installed MCPs, connection status, connected accounts, and catalog tool counts. This clearly distinguishes it from action-oriented siblings like authenticate and connect, and from show_version.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description makes it clear that this tool is for inspecting toolkit state, which implies when to use it. However, it provides no explicit 'use when' statements or comparisons to alternatives such as show_version or marketplace, leaving differentiation to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- Alicense-qualityCmaintenanceEnables consulting Brazilian federal tax debt certificates (CND) from the official PGFN source through a read-only MCP tool, with pay-per-use hosted access.MIT
- Alicense-qualityCmaintenanceProvides query access to official SINTEGRA SE data through a single read-only MCP tool, with pay-per-use credits and no platform credentials required.MIT
- -license-quality-maintenanceEnables querying SEFAZ's centralized taxpayer registration (CCC) from the official source via a read-only tool. Pay-per-use with prepaid credits.
- Alicense-qualityCmaintenanceEmits simplified company certificates from JUCESP (Brazilian state registry) via CNPJ, NIRE, or name. Read-only, hosted MCP server with pay-per-use credit system.MIT