{"name":"io.github.carrotly-ai/disclosures","slug":"carrotly-ai-disclosures","title":null,"description":"Corporate disclosures from 26 official sources across 21 jurisdiction routes via ten tools.","url":"https://mcp.market/server/carrotly-ai-disclosures","rating":null,"grade":"B","score":77,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":29,"stars":2,"forks":0,"downloads_week":85,"last_push_at":"2026-09-13T14:21:23.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/carrotly-ai/disclosures","website":null,"version":"0.8.0","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"disclosures","version":"0.8.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"Descriptive User-Agent with contact info, required only for SEC-backed US operations (e.g. 'Your Org you@example.com'). SEC_EDGAR_USER_AGENT is also accepted.","name":"DISCLOSURES_USER_AGENT"},{"description":"UK Companies House API key. Required only for GB operations.","isSecret":true,"name":"COMPANIES_HOUSE_API_KEY"},{"description":"South Korea OpenDART API key. Required only for KR operations.","isSecret":true,"name":"OPENDART_API_KEY"},{"description":"Japan EDINET API key. Required only for JP document search; JP resolution is keyless.","isSecret":true,"name":"EDINET_API_KEY"},{"description":"Thailand DBD API key. Required only for company-name search; exact 13-digit juristic-person lookups are keyless.","isSecret":true,"name":"DBD_API_KEY"},{"description":"Set to 1 only after reviewing ASX's restrictive terms and confirming you have the rights to use ASX data. ASIC open-data routes remain available without it.","name":"DISCLOSURES_ACKNOWLEDGE_ASX_TERMS"},{"description":"Set to 1 only after reviewing PSE EDGE's restrictive terms and confirming you have the rights to use PSE data.","name":"DISCLOSURES_ACKNOWLEDGE_PSE_TERMS"}]}],"tools":[],"scan":{"score":77,"grade":"B","scanned_at":"2026-09-20T20:56:30.286Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-20T20:56:30.191Z","components":{"code":{"score":20,"max":25,"notes":["45 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 7 days ago"]},"identity":{"score":9,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/server.mjs: …eCode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"disclosures","version":"0.8.0","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":0,"publishedAt":"2026-08-31T08:10:36.129Z","repositoryUrl":"git+https://github.com/carrotly-ai/disclosures.git","weeklyDownloads":85}],"repo":{"found":true,"owner":"carrotly-ai","repo":"disclosures","archived":false,"pushedAt":"2026-09-13T14:21:23Z","stars":2,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/148449962?v=4","ownerCreatedAt":"2023-10-19T11:01:31Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/148449962?v=4&s=128","source":"github"},"presence":{"stars":2,"forks":0,"downloadsWeek":85,"license":"Apache-2.0","lastPushAt":"2026-09-13T14:21:23.000Z","score":29}}}},"grade_history":[],"reviews":[]}