Disclosures MCP server

by carrotly-ai·io.github.carrotly-ai/disclosures·v0.8.0

Corporate disclosures from 26 official sources across 21 jurisdiction routes via ten tools.

B77/100grade B

What users say

No reviews yet

Safety scan

B77/100

Adoption

Growing

2 stars85 downloads/wk

Reviews

Nobody has reviewed Disclosures yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

No tool declarations could be read from the package source. They show once the server is installed.

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

1 medium

Code scan45 source files scanned20/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 7 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

mediumeval / new Function usedexec.eval

dist/server.mjs: …eCode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…

Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y disclosures on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add disclosures -- npx -y disclosures

Is Disclosures MCP server safe?: Mostly: it is graded B (77/100). Read the Disclosures safety report
How do I install Disclosures?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Disclosures need an API key?: Yes. The registry entry asks for COMPANIES_HOUSE_API_KEY, OPENDART_API_KEY, EDINET_API_KEY, DBD_API_KEY.
Is Disclosures maintained?: The last commit was 8 days ago (2026-09-13). The latest release is v0.8.0.
What can I use instead of Disclosures?: Servers from other publishers that do the same job: Claudexor MCP server.

Same job from other publishers: the closest match first, then the best rated.

Claudexor
Route coding work across Claude Code, Codex, Cursor, and OpenCode with shared context.
not reviewed
Established
A

Local package. It runs on your machine, not through the gateway.

DISCLOSURES_USER_AGENTDescriptive User-Agent with contact info, required only for SEC-backed US operations (e.g. 'Your Org you@example.com'). SEC_EDGAR_USER_AGENT is also accepted.
COMPANIES_HOUSE_API_KEYsecretUK Companies House API key. Required only for GB operations.
OPENDART_API_KEYsecretSouth Korea OpenDART API key. Required only for KR operations.
EDINET_API_KEYsecretJapan EDINET API key. Required only for JP document search; JP resolution is keyless.
DBD_API_KEYsecretThailand DBD API key. Required only for company-name search; exact 13-digit juristic-person lookups are keyless.
DISCLOSURES_ACKNOWLEDGE_ASX_TERMSSet to 1 only after reviewing ASX's restrictive terms and confirming you have the rights to use ASX data. ASIC open-data routes remain available without it.
DISCLOSURES_ACKNOWLEDGE_PSE_TERMSSet to 1 only after reviewing PSE EDGE's restrictive terms and confirming you have the rights to use PSE data.

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/carrotly-ai-disclosures.svg)](https://mcp.market/server/carrotly-ai-disclosures)