Skip to content
anlyon.devby Anlyon

Reciba

br.com.reciba/recibosreciba.com.brstreamable-httpv1.0.0Scanned

Receipts, quotes and service orders for Brazil: drafted in chat, issued on Reciba with a QR check.

4 tools: 3 change things and 1 only read.

Tools: 0 delete, 0 irreversible, 3 write, 1 read.
  • Reads private data · 1
  • Reads text others write · 1
  • Can send data out · 0
  • 1 finding

Anlyon alternative

3 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

4 tools

Changes things 3Claude Code: ask
  • amount_in_wordsWrites an amount in Brazilian reais in words, in Brazilian Portuguese, the way it appears on receipts (1500,50 becomes "mil e quinhentos reais e cinquenta centavos").1 finding

    Why it is in this group

    • The description's first verb is "write": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "amount_in_words" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "write": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Writes an amount in Brazilian reais in words, in Brazilian Portuguese, the way it appears on receipts (1500,50 becomes "mil e quinhentos reais e cinquenta centavos"). Accepts 0 to 999.999.999,99. Stores nothing.

    Annotations the server declares

    • title: Amount in words
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • prepare_documentDrafts a Brazilian payment receipt, rent receipt, service quote or service order on Reciba from the details in the conversation and returns a single-use link where the person revie…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Drafts a Brazilian payment receipt, rent receipt, service quote or service order on Reciba from the details in the conversation and returns a single-use link where the person reviews the full preview and issues it from their own Reciba account. This tool issues, charges and sends nothing. It is for documents the person issues about their own service, sale or rental. It is not for a tax invoice (nota fiscal), for a receipt that someone else has to issue (for example a dentist's or a landlord's receipt for the person), for health-service receipts that professionals issue in Receita Saúde, or for advice on prices, such as how much to charge. CPF, CNPJ and RG numbers are not accepted; the person adds them on the site if needed. Amounts in reais as "1500,00"; dates as YYYY-MM-DD; months as YYYY-MM; item lists as arrays of objects with the columns of the type.

    Annotations the server declares

    • title: Prepare a document
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: false
  • verify_documentChecks a document issued on Reciba from the verification code printed under its QR code (32 characters) or from its reciba.com.br/d/ link: document type, issue date and time, wheth…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Checks a document issued on Reciba from the verification code printed under its QR code (32 characters) or from its reciba.com.br/d/ link: document type, issue date and time, whether it was issued from the issuer's own account with a confirmed e-mail at that moment, whether the other party registered acceptance, and the status of its public timestamp (OpenTimestamps). Returns no personal data: no names or e-mail addresses of the people involved. When a document looks forged or misused, the result includes where to report it.

    Annotations the server declares

    • title: Verify a document
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
Only reads 1Show 1 read-only tool
  • list_document_typesLists the document types Reciba can draft from a conversation (payment receipt, rent receipt, service quote and service order, for Brazil) and the fields of each one, with the type…Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "list_document_types" says "list": a word for reading.

    What it can reach

    • private-dataThe name "list_document_types" says "list" and "document": it reads documents.
    • private-dataThe description's first sentence says "list" and "document": it reads documents.
    • untrusted-inputThe description's first sentence says "list" and "conversation": it reads messages, which other people can write.
    Description, as the server wrote it
    Lists the document types Reciba can draft from a conversation (payment receipt, rent receipt, service quote and service order, for Brazil) and the fields of each one, with the type id that prepare_document takes. Reads nothing about the person. Tax invoices (nota fiscal) and health-service receipts for income tax are not available here. The declaração de residência, declaração de união estável and declaração de renda (a personal statement of income, not a tax return) and the recibo de salário are made by the person directly on reciba.com.br, not through this connector.

    Annotations the server declares

    • title: List document types
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write1
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • Warnamount_in_words

    The server marks "amount_in_words" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "write": a word for a change.

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http recibos https://reciba.com.br/mcp
claude mcp add --transport http recibos https://reciba.com.br/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__recibos__list_document_types"
    ],
    "ask": [
      "mcp__recibos__amount_in_words",
      "mcp__recibos__prepare_document",
      "mcp__recibos__verify_document"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as recibos. Review it before you use it.

Capability tags behind 1 rule
  • mcp__recibos__list_document_types private-data, untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/br.com.reciba/recibos/verify?hash=076e35ba2648714217d3b5dedcf167ced1dbaaed1cbeceef727aa1c4ae7d1905" | jq -e '.changed == false'

Pinned hash 076e35ba2648, from Nov 3, 2026, 05:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/br.com.reciba/recibos/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for br.com.reciba/recibos
[![anlyon.dev](https://anlyon.dev/badge/br.com.reciba/recibos.svg)](https://anlyon.dev/servers/br.com.reciba/recibos)

Source: MCP Registry. Synced Nov 3, 2026, 05:17 UTC.