MCP-сервер проверки российских контрагентов: ЕГРЮЛ, банкротство, налоговые долги, приставы и арбитражные дела. Для разведки компаний — подключается к Cursor, Claude и любому клиенту MCP.
Russian counterparty check for AI agents.
Готов к подключению в Claude Desktop, Cursor, Claude Code, Cline и любой другой клиент, совместимый с Model Context Protocol (MCP).
AI-агент (Claude, Cursor, etc.) обычно ничего не знает о российских контрагентах: ЕГРЮЛ не индексируется поисковиками нормально, данные в Прозрачном бизнесе ФНС — за POST-запросами и CAPTCHA, ЕФРСБ отдаёт HTML. Этот MCP-сервер даёт агенту семь тулзов, через которые он за один вызов получит полную картину:
Кто это: наименование, адрес, ОКВЭД, руководитель.
Жив ли: действующее, в ликвидации, банкротство, ликвидировано, реорганизация.
Безопасно ли с ним работать: массовый адрес, массовый руководитель, дисквалификация, банкротство, налоговые долги, исполнительные производства, арбитражные дела.
Главный тул — check_contractor(identifier) — принимает ИНН или ОГРН и возвращает агрегированный отчёт с вердиктом (safe_to_proceed / manual_review_required / high_risk_do_not_proceed / impossible_contractor_defunct) и список конкретных рекомендаций.
Related MCP server: mcp-egrul
pip install atomno-mcp-fns-checkИли через uv / pipx:
uv pip install atomno-mcp-fns-check
# или
pipx install atomno-mcp-fns-checkatomno-mcp-fns-check --version
# → atomno-mcp-fns-check 0.1.1
atomno-mcp-fns-check --help
# → полный список флагов: --transport / --host / --port / --log-levelПо умолчанию пакет запускается как stdio-MCP-сервер: агент общается с ним через stdin/stdout JSON-RPC. Напрямую из шелла вы его не «потыкаете» — подключите к MCP-клиенту. Для сетевых сценариев доступен флаг --transport {http,sse,streamable-http} с --host/--port.
Отредактируйте mcp.json (Cursor → Settings → Cursor Settings → MCP):
{
"mcpServers": {
"fns-check": {
"command": "atomno-mcp-fns-check"
}
}
}Перезапустите Cursor. В чате спросите: «Проверь контрагента ИНН 7707083893» — агент сам вызовет check_contractor.
Отредактируйте claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\):
{
"mcpServers": {
"fns-check": {
"command": "atomno-mcp-fns-check"
}
}
}Перезапустите Claude Desktop.
claude mcp add fns-check atomno-mcp-fns-checkВ cline_mcp_settings.json:
{
"mcpServers": {
"fns-check": {
"command": "atomno-mcp-fns-check",
"disabled": false,
"autoApprove": []
}
}
}Тул | Назначение | Вход | Источники |
| Главный. Полная проверка по одному идентификатору + детерминированный вердикт и рекомендации |
| все 5 |
| Базовая карточка ЕГРЮЛ |
| egrul.nalog.ru |
| Базовая карточка по ОГРН/ОГРНИП |
| egrul.nalog.ru |
| Жизненный статус с обогащением |
| ЕГРЮЛ + ЕФРСБ |
| Коды ОКВЭД с расшифровкой |
| ЕГРЮЛ + словарь ОКВЭД-2 |
| Текущий руководитель (+ история по мере Open Data) |
| ЕГРЮЛ |
| 7 проверок риска (4 базовые + 3 расширенные) |
| все источники |
Используемые публичные источники:
egrul.nalog.ru — ЕГРЮЛ/ЕГРИП, карточка контрагента.
bankrot.fedresurs.ru — ЕФРСБ (Единый федеральный реестр сведений о банкротстве).
Открытые данные ФНС, набор «debtam» — налоговая задолженность (локальная выгрузка).
service.nalog.ru — живой реестр дисквалифицированных лиц.
fssp.gov.ru — Банк данных исполнительных производств ФССП.
kad.arbitr.ru — Картотека арбитражных дел.
Локальные срезы реестров ФНС — массовые адреса, массовые руководители, дисквалифицированные лица (загружаются скриптом atomno-mcp-fns-etl из Open Data ФНС).
Проверки непредставления налоговой отчётности в наборе нет: публичного источника этих сведений не существует, а отвечать «отчётность сдаётся» без данных сервис не будет.
check_contractor{
"identifier": "7707083893",
"identifier_type": "inn",
"inn": "7707083893",
"ogrn": "1027700132195",
"card": {
"name": {"full": "ПАО СБЕРБАНК", "short": "СБЕРБАНК"},
"status": "active",
"address": {"full": "117997, Г.Москва, УЛ. ВАВИЛОВА, Д. 19", "is_mass_address": false},
"director": {"full_name": "Греф Г. О.", "position": "Президент"},
"okved_main": {"code": "64.19", "name": "Денежное посредничество прочее"}
},
"legal_status": {"status": "active", "status_label_ru": "Действующее", "sources_checked": ["egrul", "efrsb"]},
"risks": {"overall_risk_level": "low", "overall_risk_score": 0, "flags": [], "errors": []},
"verdict_action": "safe_to_proceed",
"verdict_reason_ru": "Статус «Действующее», уровень риска — low (score 0/100). Препятствий к заключению сделки по открытым источникам не найдено.",
"recommendations": [
"По открытым источникам препятствий к заключению сделки не обнаружено. Соблюдайте стандартные меры должной осмотрительности (ст. 54.1 НК РФ): копия устава, приказ на руководителя, договор."
],
"sources": {"sources_queried": ["efrsb", "egrul", "fssp", "kad", "pb_fns", "registries"]},
"tier": "open",
"checked_at": "2026-04-24T20:15:00Z"
}ЕГРЮЛ — единственный blocking-источник. Если он недоступен, check_contractor поднимает SourceUnavailableError (агент получит человекочитаемое сообщение).
Остальные источники подмешиваются best-effort: CAPTCHA на ФССП, antibot на КАД, 5xx на pb.nalog.ru — всё складывается в risks.errors[] и НЕ валит отчёт. Верхнеуровневый вердикт становится manual_review_required.
Все настройки — через переменные окружения. Никаких креденшелов не требуется (источники публичные).
Переменная | Описание | По умолчанию |
| Путь к SQLite-файлу кэша карточек | каталог данных пользователя ( |
| Путь к SQLite-файлу реестров (массовые адреса/руководители/дисквалификации) |
|
| TTL кэшированных карточек, часов |
|
| Таймаут HTTP, секунд |
|
| User-Agent HTTP-клиента |
|
| Уровень логирования (DEBUG/INFO/WARNING/ERROR) |
|
Шаблон — .env.example.
Реестры массовых адресов / руководителей — это CSV-выгрузки открытых данных ФНС. Без загруженной выгрузки эти проверки отвечают «не выполнена» и не влияют на вердикт так, будто источник ответил. В поставке есть учебный файл registries_seed.json только для тестов; сервер его в рабочую базу не подгружает.
Для рабочих проверок загрузите срезы через CLI atomno-mcp-fns-etl:
atomno-mcp-fns-etl --registry mass_addresses --source ./fns_open_data/ulm.csv --commit
atomno-mcp-fns-etl --registry mass_directors --source ./fns_open_data/uchredt.csv --commit
atomno-mcp-fns-etl --registry disqualified --source ./fns_open_data/disqualified.csv --commitИсточники Open Data:
mass_addresses → nalog.gov.ru/opendata/7707329152-masaddress/
mass_directors → nalog.gov.ru/opendata/7707329152-massleaders/
disqualified → service.nalog.ru/disqualified.do
По умолчанию CLI работает в --dry-run (парсит и печатает sample); для записи нужен явный --commit. Meta-поля <registry>.last_etl, <registry>.last_etl_source, <registry>.last_etl_count сохраняются автоматически — используйте их для cron-мониторинга свежести данных.
git clone https://github.com/atomno-mcp/mcp-fns-check
cd mcp-fns-check
python -m venv .venv
source .venv/bin/activate # Linux/macOS
# .venv/Scripts/activate # Windows
pip install -e ".[dev]"
pytest -v --cov=src/atomno_mcp_fns_checkВнешние API в тестах никогда не вызываются напрямую — только через respx (мокинг httpx) + локальные фикстуры в tests/fixtures/.
Нет history для руководителей — ФНС не отдаёт историю смены через search-API; полная история появится после загрузки Open Data slice ЕГРЮЛ (планируется в v0.5+).
ЕФРСБ (банкротство юрлица) для программного запроса закрыт защитой Qrator (403 / проверка «человек или робот»). Автоматически эта проверка часто не выполняется; в отчёте это ошибка источника, а не «банкротства нет». Готового обхода нет — нужен официальный доступ Федресурса либо ручная проверка на bankrot.fedresurs.ru.
ФССП на публичном поиске отвечает окном с кодом с картинки. Код не разгадываем: проверка честно попадает в errors[] с причиной captcha_required.
КАД на программный поиск отвечает 451 (защита DDoS-Guard). Это не ошибка сертификата: сайт подписан Let's Encrypt. Официальный доступ — у оператора картотеки. В отчёте это «не проверено», не «судов нет».
Если часть проверок не ответила, итоговый уровень риска — «не определён» (unknown), а не «низкий». Пустой flags[] сам по себе не означает «чисто».
Налоговые долги берутся из открытых данных ФНС (набор «debtam»): суммы недоимки, пеней и штрафов есть, но данные публикуются срезом за отчётную дату, а не в реальном времени. Актуальную сумму подтверждайте справкой ИФНС.
Локальные реестры ФНС (массовые адреса, массовые руководители, дисквалифицированные) требуют регулярной загрузки. Если выгрузка пустая или устарела, проверка честно отвечает «не проверено» и попадает в errors[] — «совпадений нет» по устаревшим данным не выдаётся.
Непредставление налоговой отчётности не проверяется — публичного источника нет.
Pro-tier (hosted backend в atomno-mcp-fns-check-server — закрытый бэк) убирает эти ограничения через: кэш Redis 24h, ротация прокси для обхода CAPTCHA, полный срез Open Data ЕГРЮЛ, batch-проверки до 100 ИНН, AI-summary через LLM. Сам backend не опубликован.
Все источники — публично открытые данные ФНС и связанных реестров. Использование легально по 149-ФЗ «Об информации».
Юридические лица и ИП не подпадают под 152-ФЗ (О персональных данных).
ФИО физических лиц-руководителей публикуются ФНС в ЕГРЮЛ открыто; в outbound-ответах ИНН физлица-руководителя маскируется (формат XXX*****YY).
Никаких write-операций ни в один внешний API.
Никаких credential'ов / токенов не требуется — источники полностью публичные.
Сервис — агрегатор и удобный интерфейс над публичными данными ФНС. Не аффилирован с ФНС России, ЕФРСБ, КАД, ФССП. Используется на ваш риск.
Информация в ответах сервиса не заменяет полноценной юридической или финансовой оценки. Решение о заключении договора с контрагентом принимаете вы.
MIT — см. LICENSE.
GitHub: atomno-mcp/mcp-fns-check
Больше MCP-серверов под брендом atomno: каталог atomno-mcp.ru
MCP-спецификация: modelcontextprotocol.io
Главный тул: полная проверка контрагента по одному идентификатору.
Принимает ИНН (10 цифр — юр.лицо, 12 — ИП/физлицо) или ОГРН (13 цифр — юр.лицо, 15 — ИП). Тип определяется строго по длине и контрольной цифре.
| Name | Required | Description | Default |
|---|---|---|---|
| identifier | Yes | ИНН (10/12 цифр) или ОГРН/ОГРНИП (13/15 цифр). Пример: '7707083893' (Сбербанк) или '1027700132195'. | |
| include_extended_risks | No | Запускать ли 4 расширенные проверки (Прозрачный бизнес, ФССП, КАД). По умолчанию True. | |
| lawsuits_threshold_rub | No | Порог фильтрации арбитражных дел в рублях. По умолчанию 1 000 000 ₽ — отсекает мелкие споры. |
| Name | Required | Description |
|---|---|---|
No output parameters | ||
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description bears full responsibility. It discloses identifier validation logic and parameter defaults (extended risks, lawsuit threshold), but does not elaborate on what the 'full check' entails, side effects, or authentication requirements. The output schema exists but is not referenced.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise (three sentences) with the main purpose front-loaded. Every sentence adds critical information: identifier formats, validation, and parameter defaults. No redundant or vague phrasing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the output schema, return values are covered. The description sufficiently explains input validation and parameter behavior for a 3-param tool. It does not mention prerequisites (e.g., API keys) or how this tool relates to siblings beyond being the 'main' one, but overall it is adequate for agent invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema coverage, the description adds significant value beyond the schema. It explains identifier format and validation rules, specifies what extended risks include (4 checks: transparent business, FSSP, KAD), and clarifies the lawsuit threshold filters small disputes. Default values are contextualized.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs a full counterparty check using a single identifier (INN or OGRN). It specifies validation criteria (digit length, control digit) and implicitly differentiates from sibling tools (check_inn, check_ogrn) that only handle one identifier type.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description advises when to use this tool (for a full check) and provides input validation rules. It does not explicitly state when to use alternatives or when not to use this tool, but the context of being the 'main tool' implies it is the default for comprehensive checks.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Агрегированный риск-чек по контрагенту (8 проверок, SPEC §3.5).
Базовые 4 проверки (всегда):
mass_address — массовый юр.адрес ФНС;
mass_director — массовый руководитель (≥10 действующих компаний);
disqualified_director — руководитель в реестре дисквалифицированных;
bankruptcy_records — активные дела в ЕФРСБ.
Расширенные 4 проверки (include_extended=True):
tax_debts — индикатор задолженности по налогам (Прозрачный бизнес);
no_reporting — нет налоговой отчётности > 1 года (Прозрачный бизнес);
enforcement_proceedings — открытые исп.производства (Банк данных ФССП);
active_lawsuits — активные арбитражные дела где контрагент ответчик
(КАД), фильтр по сумме иска через lawsuits_threshold_rub.
Любая внешняя проверка может вернуть ошибку (CAPTCHA, 5xx, timeout) — она
попадёт в errors[] и не сорвёт остальные проверки.
| Name | Required | Description | Default |
|---|---|---|---|
| inn | Yes | ИНН контрагента (10 или 12 цифр). | |
| include_extended | No | запускать ли расширенные 4 проверки. По умолчанию True. | |
| lawsuits_threshold_rub | No | порог фильтра арбитражных дел в рублях. По умолчанию 1 000 000 ₽ (отсечь мелкие споры). |
| Name | Required | Description |
|---|---|---|
No output parameters | ||
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations, so description carries full burden. Discloses possible errors (CAPTCHA, 5xx, timeout) and that errors are collected without failing other checks. Reveals behavioral traits beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-structured with bullet points for readability, but slightly lengthy. Front-loaded with purpose. Could be slightly more concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers purpose, parameter details, error handling, and references SPEC. Output schema exists, so return values are handled. Adequate for a tool with 8 sub-checks and error handling.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% coverage, but description adds value by listing the specific checks controlled by include_extended and explaining the lawsuit filter threshold.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states it performs a aggregated risk check with 8 checks, referencing SPEC §3.5. Differentiates from siblings like check_contractor, check_inn by being comprehensive.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explains basic vs extended checks with include_extended, and describes error handling. Does not explicitly contrast with sibling tools, but context is clear when to use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Полная карточка контрагента по ИНН (10 цифр — юр.лицо, 12 — ИП).
| Name | Required | Description | Default |
|---|---|---|---|
| inn | Yes | ИНН контрагента. Пример: '7707083893' (Сбербанк). | |
| include_extended | No | зарезервировано для S2.x (Прозрачный бизнес). |
| Name | Required | Description |
|---|---|---|
No output parameters | ||
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It describes the output as a 'full card' but does not disclose behavioral traits such as auth requirements, rate limits, or side effects. The description adds minimal behavioral context beyond the input format.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that front-loads the main purpose. Every word adds value, with no filler. It is appropriately concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that an output schema exists, the description does not need to detail return values. However, the description is terse and does not specify what the 'full card' includes, leaving some ambiguity. It adequately covers the basic purpose but could be more comprehensive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so baseline is 3. The description adds meaningful context for the 'inn' parameter by specifying the digit length for legal entities vs IPs. For 'include_extended', it clarifies it is reserved for future use, adding value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns a full counterparty card by INN, and specifies the length distinction (10 digits for legal entities, 12 for individual entrepreneurs). This is a specific verb and resource, and it helps distinguish from sibling tools like check_ogrn (which checks OGRN).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for obtaining a counterparty card based on INN but does not explicitly state when to use this tool versus alternatives like check_contractor or check_for_red_flags. No when-not conditions or alternative recommendations are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Карточка контрагента по ОГРН (13 цифр) или ОГРНИП (15 цифр).
| Name | Required | Description | Default |
|---|---|---|---|
| ogrn | Yes | ||
| include_extended | No |
| Name | Required | Description |
|---|---|---|
No output parameters | ||
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It does not disclose any behavioral traits, such as whether the operation is read-only, requires authentication, or has rate limits. The description only states what the tool does, not its side effects or safety profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence that front-loads the purpose. No wasted words, but could be slightly more informative without losing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the output schema exists, return values need not be described. However, the description is minimal; it lacks context about the optional parameter and does not clarify the scope of 'counterparty card' relative to sibling tools.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must compensate. It adds meaning to the 'ogrn' parameter by specifying digit length (13 or 15). However, it does not mention the 'include_extended' parameter, leaving it unexplained.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it returns a counterparty card by OGRN/OGRNIP, distinguishing it from siblings like check_inn which uses a different identifier. However, it doesn't elaborate on what the card contains, preventing a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives like check_inn or check_contractor. The description only implies usage when an OGRN is available.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
История смены руководителей и учредителей по ИНН.
На стадии S3 возвращает только текущего руководителя из egrul.nalog.ru плюс предупреждение о неполноте данных. Полная история (с датами назначения/увольнения) появится на стадии S5 после загрузки Open Data slice ЕГРЮЛ.
| Name | Required | Description | Default |
|---|---|---|---|
| inn | Yes | ИНН контрагента (10 или 12 цифр). | |
| depth_years | No | на S3 не используется (история пока без дат). | |
| include_founders | No | на S3 не используется (ЕГРЮЛ-search не отдаёт учредителей). |
| Name | Required | Description |
|---|---|---|
No output parameters | ||
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, but description discloses important behavioral traits: returns only current director at S3 with data incompleteness warning, and full history only at S5. Details about parameter non-usage at S3 add transparency. Doesn't mention auth or rate limits, but given no annotations, this is good.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with front-loaded purpose. No wasted words; each sentence provides distinct, necessary information (purpose, stage behavior, parameter notes).
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 3 parameters and existing output schema, the description covers stage-dependent behavior and parameter constraints. It doesn't detail output schema, but that's covered by the output schema itself. Sufficient for the complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and the description adds value by noting that depth_years and include_founders are not effective at S3. This clarifies parameter behavior beyond the schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states 'История смены руководителей и учредителей по ИНН' (History of changes of directors and founders by TIN), specifying the verb (get history) and resource (by TIN). This distinguishes it from sibling tools like check_inn or get_legal_status.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides stage-specific behavior: at S3 returns only current director with a warning, full history at S5. Also explains that depth_years and include_founders are not used at S3. While it doesn't explicitly list when not to use or compare to siblings, it gives clear usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Текущий жизненный статус: active / liquidating / bankruptcy / liquidated / reorganizing / excluded_inactive.
Минимум один из inn или ogrn обязателен.
| Name | Required | Description | Default |
|---|---|---|---|
| inn | No | ||
| ogrn | No |
| Name | Required | Description |
|---|---|---|
No output parameters | ||
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must disclose behavioral traits. It lists possible output values, which is helpful, but it does not mention whether the tool is read-only, requires authentication, or has any side effects. There is no indication of error behavior if required parameters are missing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise with two sentences. The first sentence presents the output values upfront, and the second provides a critical usage requirement. No extraneous information is included.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
While the output schema exists (context signals indicate it), the description does not leverage or reference it. It explains the return values but omits context about error handling, prerequisites (e.g., authentication), or how this tool fits into a workflow alongside siblings. The missing enforcement of the required parameter in the schema adds ambiguity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It only adds that at least one parameter is required, without explaining what 'inn' and 'ogrn' represent, their formats, or constraints. This minimal addition does not adequately compensate for the lack of schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The tool name 'get_legal_status' combined with the description clearly indicates that the tool retrieves the current legal status from a list of enumerated values (active, liquidating, etc.). It is distinguishable from sibling tools like 'check_inn' and 'check_ogrn' which likely validate identifiers, and 'get_directors_history' which retrieves different data. However, the description does not explicitly contrast with these siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states that at least one of 'inn' or 'ogrn' is required, which provides a key usage constraint. However, it does not explain when to use this tool versus alternatives such as 'check_inn' or 'check_for_red_flags'. The guideline is present but incomplete.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Перечень кодов ОКВЭД основной + дополнительные с расшифровкой по справочнику ОКВЭД-2.
| Name | Required | Description | Default |
|---|---|---|---|
| inn | No | ||
| ogrn | No | ||
| include_history | No |
| Name | Required | Description |
|---|---|---|
No output parameters | ||
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, and the description does not disclose behavioral traits such as read-only nature, authorization needs, or rate limits. For a tool with no annotations, more behavioral context is needed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single short sentence, which is concise but omits essential information about inputs and usage. It is underspecified for a tool with multiple optional parameters.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of param documentation and annotations, the description is insufficient. The output schema exists but the description does not cover input semantics or invocation requirements.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not explain the purpose of any parameter (inn, ogrn, include_history). The agent cannot infer how to specify input correctly.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns a list of OKVED codes with interpretations. However, it does not specify that the user must provide either INN or OGRN as input, which is crucial for clarity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus siblings like check_inn or get_directors_history. No alternatives or exclusions are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Диагностический тул: проверяет, что сервер запущен и доступен.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
| Name | Required | Description |
|---|---|---|
No output parameters | ||
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, but the description discloses that the tool performs a read-only check without side effects. It is adequate for a ping tool; additional details like return type are covered by the output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence with no wasted words. Front-loaded purpose, efficient and structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (no parameters, no side effects), the description is complete. Output schema exists to explain return values, so no further description needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, so baseline score of 4 applies. Description adds no parameter info, but none is needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool is a diagnostic tool that checks server availability, using specific verb 'проверяет' and resource 'сервер'. It distinguishes well from sibling tools which focus on business data.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for verifying server connectivity, which is distinct from siblings. However, it does not explicitly state when to use or when not to use, but the context is clear enough for a simple diagnostic tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
v0.1.1check_contractorcheck_for_red_flagscheck_inncheck_ogrnget_directors_historyget_legal_statusget_okvedspingScored across 8 tools
Each tool targets a distinct aspect of contractor verification: comprehensive checks by identifier, risk flags, specific identifier lookups, director history, legal status, OKVED codes, and a diagnostic ping. No overlap in purpose.
Tools follow a consistent snake_case pattern with clear verb prefixes (check_, get_, ping). Minor deviation with 'check_for_red_flags' using 'for', but overall pattern is predictable.
8 tools is well-scoped for the domain of Russian contractor verification, covering all essential operations without being excessive or too sparse.
Covers core lifecycle: identifier validation, comprehensive checks, risk assessment, director history, legal status, and OKVED codes. Minor gaps like batch operations, but the main workflows are complete.
Russian company lookup (EGRUL/INN), Cyrillic search, RU page to Markdown. Pay per call in USDC.
Remote MCP server to enrich company profiles with structured B2B data and confidence scores.
MCP server for Russian books search, details, and recommendation candidates.
MCP server offering regulator-sourced legitimacy checks on investment entities by name or URL.
