MCP.Market

4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting MCP server

by 4chems.com·com.4chems/platform-api·v0.12.1
No reviews yet

Remote MCP server for 4chems hosted IUCLID, CHESAR and QSAR Toolbox: onboarding, inquiries, admin.

B84/100grade B
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
B84/100

full report

Adoption
Growing

0 stars

Reviews

Write one

Nobody has reviewed 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting tools (32, 3 write)

write = sends, deletes, buys or posts
  • accept_invitationFree

    Accept a pending invitation and grant the invitee's first role assignment. Call this when an invitee has a valid invite link and wants to join the tenant; single-use, consuming the token marks it accepted.

  • add_tenant_serviceFree

    Request a new service subscription for the caller's tenant and return its status. Call this when a tenant admin wants to add a service (ADR 0016 code fix: requires `admin`, was `customer` realm role only).

  • approve_access_requestFree

    Approve a pending access request: issue a `member` invitation to the requester and resolve the request (level `admin` or `owner` of the request's tenant). The response carries the single-use invitation token to hand to the requester, who accepts via `accept_invitation`. 409 `access_request.not_pending` unless the request is pending.

  • complete_billingFree

    Complete the tenant's billing details: legal-entity name and type, VAT id, invoice address, invoice email and optional PO reference. Call this when the owner or a billing contact has the details. EU VAT ids are validated against VIES by the worker; a failed operation with `billing.vat_check_unavailable` can be retried by submitting again. Returns `202` with an operation to poll.

  • create_access_requestwrite actionFree

    Request access to the tenant that owns the caller's verified email domain.

  • create_invitationwrite actionFree

    Invite an email address to the caller's tenant at the specified access level and return the invitation, including the raw single-use accept token. Call this when a tenant admin wants to add a new member; the invitee accepts via `accept_invitation`.

  • create_self_service_tenantwrite actionFree

    Create a 7-day trial tenant for the caller's business email domain (UC-052). Needs a verified email on a business domain and `attestation: true`; answers `auth.email_not_verified`, `tenant.attestation_required`, `tenant.free_mail_domain` (free-mail address), `tenant.domain_exists` (a live trial tenant on the domain) or `trial.exists_for_domain` (the domain already had its one trial; call `start_inquiry`). The trial lasts exactly 7 days; `ttl` / `expires_at` in the body are ignored.

  • dismiss_access_requestFree

    Dismiss a pending access request (level `admin` or `owner` of the request's tenant). The requester is mailed — naming the tenant, never the dismissing admin — and may ask again. 409 `access_request.not_pending` unless the request is pending.

  • enrich_domainFree

    Fetch the caller's domain imprint and suggest legal-entity details (UC-057).

  • get_billingFree

    Return the tenant's stored billing details: VAT id, invoice address, invoice email and PO reference. Call this to check whether billing is complete; only the owner and billing contacts may read it (`403 rbac.insufficient_level`).

  • get_catalog_templatesFree

    Return the enabled ApplicationTemplate catalog, ordered by name. Call this to discuss trial and template options with a prospect or customer before starting a trial. If this doesn't answer your question, call `start_inquiry` to ask 4chems directly or request a call.

  • get_legal_entity_typesFree

    Return the legal-entity types available for *country*, ordered alphabetically. If this doesn't answer your question, call `start_inquiry` to ask 4chems directly or request a call.

  • get_my_accessFree

    Return the caller's access level per related tenant. Call this to check what the current caller is authorized to do before attempting an action that requires a specific level, or to discover a pending invitation or access request.

  • get_my_operationFree

    Return the status, result and error of an operation the caller started, such as the `Location` of a `202` from `complete_billing`. Call this to poll it to completion.

  • get_onboarding_routeFree

    Return the next onboarding step. If this doesn't answer your question, call `start_inquiry` to ask 4chems directly or request a call.

  • grant_assignmentFree

    Grant a role x scope assignment to a tenant member.

  • list_consentsFree

    Return the caller's own recorded consents plus the tenant-scope consents of every tenant where the caller is at least a viewer. Call this to check which legal documents have already been accepted before asking again. Pass `tenant_id` to list one tenant's consents only (a caller of several tenants must).

  • list_invitationsFree

    List all invitations for the caller's tenant, most recent first. Call this to show a tenant admin which invitations are pending, accepted, or revoked; the raw token is never included.

  • list_membersFree

    List tenant members with their effective role x scope assignments.

  • list_tenant_servicesFree

    Return the caller's tenant's active service subscriptions. Call this before offering to add a service, to check what is already subscribed.

  • record_consentFree

    Record acceptance of a legal document version and return the entry; call this only after showing the user the document URL and version and receiving an explicit affirmative answer.

  • revoke_assignmentFree

    Revoke a role x scope assignment from a tenant member.

  • revoke_invitationFree

    Revoke a pending invitation so its token can no longer be accepted. Call this when a tenant admin wants to withdraw an invite sent by mistake or no longer needed; accepted invitations cannot be revoked.

  • start_account_registrationFree

    Start registering a 4chems account with a business email address (`email`, `name`, optional `company`). Anonymous. Emails a 6-digit code to the address; no account exists yet. Ask the user for the code, then call verify_account_registration with the returned challenge_id and code. Free-mail addresses (gmail.com, ...) are refused: use the company address, or call start_inquiry. The answer is the same whether or not the address already has an account.

  • start_device_loginFree

    Sign in to an existing account by device login (UC-091, RFC 8628). Anonymous, empty body; the account must exist (start_account_registration, then set the password through the emailed link). Show `verification_uri` (or `verification_uri_complete`) and `user_code` to the human, who signs in there, then call `verify_device_login` with `challenge_id`, waiting `interval` seconds between calls. The response never contains the Keycloak device_code or the agent client secret.

  • start_inquiryFree

    Store an anonymous inquiry draft and email a 6-digit verification code. Ask the user for the code, then call verify_inquiry with the returned challenge_id and code — the inquiry reaches 4chems only after that verification succeeds.

  • start_registrationFree

    DEPRECATED: use start_device_login. Deprecated — use start_device_login (same behaviour).

  • verify_account_registrationFree

    Verify the emailed 6-digit code (`challenge_id`, `code`) and create the 4chems account. Never guess or retry codes, and never ask the user for a password.

  • verify_device_loginFree

    Poll a device login to token issuance (UC-091, RFC 8628). Anonymous. While the human has not signed in yet it answers `{"status": "pending", "retry_after": <seconds>}`: wait `retry_after` seconds and call again with the same `challenge_id`. On approval it returns Keycloak's token set (`access_token`, `refresh_token`, `expires_in`, ...) exactly once; pass the `access_token` as `authorization` ('Bearer <token>') to every other tool.

  • verify_inquiryFree

    Verify the 6-digit code and deliver the inquiry to the helpdesk inbox.

  • verify_registrationFree

    DEPRECATED: use verify_device_login. Deprecated — use verify_device_login (same behaviour).

  • withdraw_access_requestFree

    Withdraw the caller's own pending access request; no notification is sent. Any other caller gets 404 `access_request.not_found`, the same as for an unknown id. 409 `access_request.not_pending` unless pending.

Public scan report

scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1643ms20/20
  • Tool poisoning32 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
  • Maintenancelast push 4 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year; website matches verified namespace10/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 84/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
84/100
higher than 68% of 48,255 servers
Tools
32
the typical server has 7
Tools that change things
9%
typical: 0%. Fewer write tools means less an agent can break
Uptime
89%
of our recent checks; the typical remote server answers 100%
Response time
876 ms
faster than 14% of 30,031 servers

What its tools let an agent do: 21 read · 4 create · 1 change · 2 delete · 4 run or deploy

Install 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting in Claude Code, Cursor or VS Code

claude mcp add --transport http platform-api https://mcp.4chems.com/mcp
Add to Cursor

What the publisher says

From the 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting repository's README, as published. We do not edit it. Read it on GitHub

4chems MCP server — IUCLID, CHESAR & QSAR Toolbox hosting

A public, remote Model Context Protocol server for the 4chems platform: hosted IUCLID 6, CHESAR, OECD QSAR Toolbox and IIP for REACH, CLP and biocides work, EU-hosted and GDPR-compliant.

Connect

Claude Code

claude mcp add --transport http 4chems https://mcp.4chems.com/mcp

Claude Desktop / claude.ai — Settings → Connectors → Add custom connector → https://mcp.4chems.com/mcp. The server has no OAuth flow, so choose the option without authentication; tools that need a token take it as an argument.

Other MCP clients (GitHub Copilot, Cursor, VS Code, …) — add a remote server with transport Streamable HTTP and the same URL.

Raw handshake (no client needed):

curl -s -X POST https://mcp.4chems.com/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"probe","version":"0"}}}'

Tools

The server exposes the customer tier of the 4chems platform API (/v1). This endpoint carries no substance or dossier data — see What this is not.

No token needed

Bearer token required (authorization: "Bearer ")

Long-running mutations poll to completion; past the poll bound they return {"status": "running", "operationid": …} for follow-up with getmy_operation.

Rules for the assisting agent

The initialize response carries these as server instructions:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting: common questions

Is 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting MCP server safe?
Mostly: it is graded B (84/100). Read the 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting safety report
How do I install 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting?
It runs remotely at mcp.4chems.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting maintained?
The last commit was 26 days ago (2026-10-09). The latest release is v0.12.1.
Is 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting up?
89% of our last 28 checks got an answer. We check remote servers about four times a day.
How does 4chems Platform — IUCLID, CHESAR & QSAR Toolbox hosting compare with other MCP servers?
safety score 84/100 (higher than 68% of 48,255 servers); tools 32 (the typical server has 7); tools that change things 9% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.