MCP.Market

Brdata MCP server

by thomenz·io.github.thomenz/brdata-mcp·v0.3.7

Brazilian company, risk & public-tender data (CNPJ, CEIS/CNEP, PNCP) as x402-paid agent tools

B72/100grade B
What users say
No reviews yet
Be the first
Safety scan
B72/100

full report

Adoption
New

0 stars47 downloads/wk

Reviews

Write one

Nobody has reviewed Brdata yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Brdata tools (15)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • decode_boleto

    Decode a Brazilian boleto linha digitável (47 or 48 digits): bank, amount, due date, validity. Paid (…).

  • decode_nfe_key

    Decode a 44-digit Brazilian electronic invoice (NF-e/NFC-e) access key: issuer CNPJ, state, emission date, invoice number, model. Paid (…).

  • decode_tender_id

    Offline decode of a Compras.gov.br 17-digit tender id (UASG + modality + number + year), with the modality name in English. Paid (…).

  • get_tender

    Full header of a Brazilian public tender by PNCP coordinates: object, modality, status, estimated value, opening/closing dates, buyer, price-registration flag. Paid (…).

  • get_tender_documents

    Document list (download URIs) of a Brazilian public tender. ZIPs usually contain the full edital PDF and item list. Metadata only — files are not fetched. Paid (…).

  • get_tender_items

    All items of a Brazilian public tender: quantities, maximum accepted prices, units, and SME-exclusive (ME/EPP) flags. Essential for bid/no-bid analysis. Paid (…).

  • lookup_cep

    Enriched CEP lookup: full address, IBGE city code, coordinates when available. Paid (…).

  • lookup_company

    Consolidated official registry profile of a Brazilian company by CNPJ: legal name, status, activities (CNAE), address, incorporation date. Paid (…).

  • lookup_company_full

    Full profile: everything in lookup_company plus partners/shareholders (QSA, no CPF) and the same 5-registry regulatory screen as screen_company_risk — debarment (CEIS), anti-corruption (CNEP), leniency, impeded non-profits (CEPIM) and the forced-labor register — with a verdict and 0-100 risk score. `sources_checked` names the registries that answered. Paid (…).

  • resolve_tender

    Resolve any Brazilian public tender reference (Compras.gov.br 17-digit id or URL, PNCP URL, or control number) into canonical PNCP coordinates + a summary (object, modality, estimated value, dates). Paid (…).

  • screen_company_risk

    Screen a Brazilian company by CNPJ against 5 federal registries: debarment (CEIS), anti-corruption (CNEP), impeded non-profits (CEPIM), leniency agreements and the forced-labor register ('Lista Suja' — MTE Cadastro de Empregadores). Returns a single verdict (clear/flagged) + 0–100 risk score, each hit flagged active vs historical, plus per-source data_as_of freshness. The Brazilian complement that

  • search_companies

    Search active Brazilian companies by industry (CNAE prefix, main OR secondary activity),

  • search_tenders

    Search Brazilian public procurement tenders (PNCP) by keyword. Returns normalized references (CNPJ/year/sequential, control number, PNCP URL) ready for detail lookups. Paid (…).

  • validate_cnpj

    Free local check-digit/format validation of a single CNPJ (numeric or alphanumeric). No payment required.

  • validate_documents

    Validate up to 100 Brazilian identifiers: CPF, CNPJ (incl. alphanumeric), PIS, license plates, Pix keys. Paid (…).

Public scan report

scanner v0.1.10 · 2026-11-04 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 92 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Brdata compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
72/100
higher than 40% of 4,461 AI and agents servers
Tools
15
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
47
more than 37% of 1,554 AI and agents servers with a package

What its tools let an agent do: 15 read

Install Brdata in Claude Code, Cursor or VS Code

Runs npx -y brdata-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add brdata-mcp -- npx -y brdata-mcp
Add to Cursor

What the publisher says

From the Brdata repository's README, as published. We do not edit it. Read it on GitHub

brdata-mcp

An MCP (Model Context Protocol) server for Brazilian company & public-procurement data, for agent harnesses (Claude Code, Claude Desktop, …). It covers: CNPJ company registry lookup (basic + full due-diligence), company search/discovery across ~28M active companies by filters (CNAE activity, state/city, size, MEI, name), public tenders / licitações via PNCP (decode Compras.gov.br IDs, resolve, header, line items, edital documents, keyword search), NF-e & boleto decoding, CEP lookup, and batch document validation — for KYB, due diligence, and B2G (public-sector) sales intelligence.

Paid tools automatically settle the underlying x402-protected HTTP endpoints in USDC on Base or Solana using a wallet you configure; a call is charged only on success. Configure a Base wallet (EVMPRIVATEKEY), a Solana wallet (SOLANAPRIVATEKEY), or both — the x402 layer settles on whichever rail the server's 402 challenge advertises.

Tools

search_companies requires the Worker to have the Phase 2 database configured (Hyperdrive); otherwise it returns a 503 (and no payment is charged). MEI contact data is redacted (LGPD).

Configuration

Environment variables:

⚠️ Security

EVMPRIVATEKEY controls real funds. Anything that can read this process' environment (or the MCP config file) can spend from that wallet.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Brdata: common questions

Is Brdata MCP server safe?
Mostly: it is graded B (72/100). Read the Brdata safety report
How do I install Brdata?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Brdata need an API key?
Yes. The registry entry asks for EVM_PRIVATE_KEY, SOLANA_PRIVATE_KEY.
Is Brdata maintained?
The last commit was 93 days ago (2026-08-04). The latest release is v0.3.7.
What can I use instead of Brdata?
Servers from other publishers that do the same job: Spotifyscraper MCP server, three.ws 3D Agent Tools MCP server and Skillsmith MCP server.
How does Brdata compare with other AI and agents MCP servers?
safety score 72/100 (higher than 40% of 4,461 AI and agents servers); tools 15 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Brdata

Same job from other publishers: the closest match first, then the best rated.

  • Spotifyscraper
    Public Spotify metadata, lyrics and podcasts for LLM agents. No API key, read-only.
    B
  • three.ws 3D Agent Tools
    MCP tools from three.ws: free + paid text-to-3D, rigging, agent reputation, market intel.
    B
  • Skillsmith
    Share agent skills across your team, scan them for risk, and track what's actually used.
    B

More from thomenz →