AgentStall: Africa and global data for agents

com.padawanconsulting/agentstallpadawanconsulting.comstreamable-httpv1.6.0Scanned 1 hour ago

Holidays and business days (220+ countries), WHOIS, FX, phishing and DMARC checks, SA tenders. x402.

19 tools: 1 do something that can't be undone, 13 change things and 5 only read.

Reads private data · 0
Reads text others write · 0
Can send data out · 2
2 findings

Anlyon alternative

14 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

19 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

za_sars_deadlinesSouth African tax deadlines from SARS between two dates: EMP201 PAYE/UIF/SDL payments, VAT201 returns, provisional tax (IRP6), EMP501 reconciliations and income tax filing-season d…Can send data out1 finding
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Findings
- Warn
  The server marks "za_sars_deadlines" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.
  What this check looks for
Description, as the server wrote it
South African tax deadlines from SARS between two dates: EMP201 PAYE/UIF/SDL payments, VAT201 returns, provisional tax (IRP6), EMP501 reconciliations and income tax filing-season deadlines, already moved to the previous business day where SARS rules require it. Useful for payroll, bookkeeping, accounting and tax compliance reminders in South Africa. Price: $0.005 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false

Changes things 13Creates or changes something that can be changed back.Claude Code: ask

agentstall_catalogFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free. Lists every paid tool with its price in USDC, payment network and an example result.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
domain_intelWHOIS / RDAP domain lookup: registrar, registration and expiry dates, domain age, status, nameservers and DNSSEC from the registry, plus DNS records, email security grade (DMARC, S…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
WHOIS / RDAP domain lookup: registrar, registration and expiry dates, domain age, status, nameservers and DNSSEC from the registry, plus DNS records, email security grade (DMARC, SPF, MTA-STS) and plain-language risk flags such as newly registered, expiring soon or easily spoofed, with impersonation signals for African banks, tax authorities and mobile money. Useful for phishing triage, vendor due diligence and research. Price: $0.005 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
exchange_ratesCurrency exchange rates and conversion for 150+ currencies, updated daily: USD, EUR, GBP, CNY, INR and every African currency, including South African rand (ZAR), Nigerian naira (N…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Currency exchange rates and conversion for 150+ currencies, updated daily: USD, EUR, GBP, CNY, INR and every African currency, including South African rand (ZAR), Nigerian naira (NGN), Kenyan shilling (KES), Egyptian pound (EGP), Ghanaian cedi (GHS) and CFA francs. Any base currency, optional amount conversion. Mid-market reference rates from an open daily dataset, not official central-bank fixings. Useful for pricing, invoices and reports. Price: $0.002 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_add_business_daysBusiness days calculator: adds or subtracts working days from a date in any of 220+ countries, skipping weekends and public holidays, and lists the holidays skipped.1 finding
Why it is in this group
- The name "za_add_business_days" says "add": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "za_add_business_days" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "za_add_business_days" says "add": a word for a change.
  What this check looks for
Description, as the server wrote it
Business days calculator: adds or subtracts working days from a date in any of 220+ countries, skipping weekends and public holidays, and lists the holidays skipped. Local weekends supported (e.g. Friday-Saturday in Saudi Arabia and Egypt). Verified calendars for South Africa and 10 African countries. Useful for payment terms such as 'net 5 business days', notice periods, SLAs, delivery estimates and legal deadlines. Price: $0.002 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_bank_branch_codesSouth African bank universal branch codes for EFT payments and debit orders: Absa, Capitec, FNB, Nedbank, Standard Bank, TymeBank, Discovery Bank, Investec, African Bank and Bidves…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
South African bank universal branch codes for EFT payments and debit orders: Absa, Capitec, FNB, Nedbank, Standard Bank, TymeBank, Discovery Bank, Investec, African Bank and Bidvest Bank. Look up one bank or list all. Useful for completing South African bank payment details. Price: $0.001 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_email_securityDMARC and SPF checker for any domain: grades DMARC, SPF, DNSSEC, MTA-STS and TLS-RPT from public DNS (score and A-F grade), says how easily fake email could be sent in the domain's…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
DMARC and SPF checker for any domain: grades DMARC, SPF, DNSSEC, MTA-STS and TLS-RPT from public DNS (score and A-F grade), says how easily fake email could be sent in the domain's name and lists the fixes. Also returns daily-updated email security scorecards ranking banks, governments, regulators and telecoms in South Africa, Nigeria, Kenya, Egypt, Ghana and 6 more African countries. Price: $0.003 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_incident_reporting_obligationsData breach and cyber incident reporting obligations in South Africa, Nigeria, Kenya, Egypt, Ghana, Morocco, Rwanda, Uganda, Tanzania, Mauritius and Botswana: which regulators and …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Data breach and cyber incident reporting obligations in South Africa, Nigeria, Kenya, Egypt, Ghana, Morocco, Rwanda, Uganda, Tanzania, Mauritius and Botswana: which regulators and people must be notified, the legal deadline (such as 72 hours) and the computed due time from discovery. Covers POPIA and FSCA/PA rules in South Africa, NDPA and ngCERT in Nigeria, and Kenya's Data Protection Act. Triage guidance, not legal advice. Price: $0.01 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_is_business_dayChecks whether a date is a business (working) day in any of 220+ countries and says why not: weekend or which public holiday.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Checks whether a date is a business (working) day in any of 220+ countries and says why not: weekend or which public holiday. Returns the next and previous business days. Handles local weekends (Friday-Saturday in Saudi Arabia, Egypt and Israel) and observed holidays, with verified calendars for South Africa, Nigeria, Kenya, Egypt and 7 more African countries. Useful for payment, settlement and delivery dates. Price: $0.001 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_normalize_phoneSouth African phone number formatting and classification: converts an SA number in any common format to international +27 (E.164) and local formats, and says whether it is mobile, …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
South African phone number formatting and classification: converts an SA number in any common format to international +27 (E.164) and local formats, and says whether it is mobile, landline (with area for major cities), toll-free, VoIP or premium-rate. Useful for cleaning contact lists, SMS and WhatsApp messaging, and form validation. Price: $0.001 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_official_domain_checkPhishing URL and fake-website check for Africa: compares a link or domain with the official domains of about 130 tax authorities (SARS, KRA, FIRS, GRA), central banks, government s…Can send data outNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
Description, as the server wrote it
Phishing URL and fake-website check for Africa: compares a link or domain with the official domains of about 130 tax authorities (SARS, KRA, FIRS, GRA), central banks, government services, banks, mobile money (M-Pesa, MTN MoMo, OPay) and telecoms in South Africa and 10 other African countries, and flags lookalike domains, typosquats, brand names in unofficial domains and newly registered domains. Price: $0.005 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_public_holidaysPublic holidays for any country and year (220+ countries by ISO code), with date and English name.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Public holidays for any country and year (220+ countries by ISO code), with date and English name. Covers the US, UK, Europe, India, UAE, Saudi Arabia, Pakistan, China, Japan, Brazil and all of Africa. South Africa, Nigeria, Kenya, Egypt, Ghana and 6 more African countries use AgentStall's verified calendars with observed days and declared Islamic holidays. Free open sources: Nager.Date and date-holidays. Useful for scheduling, payroll and deadlines. Price: $0.001 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_sarb_ratesSouth African interest rates, inflation and rand exchange rates from the South African Reserve Bank (SARB): repo rate, prime lending rate, CPI and PPI inflation, and rand (ZAR) per…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
South African interest rates, inflation and rand exchange rates from the South African Reserve Bank (SARB): repo rate, prime lending rate, CPI and PPI inflation, and rand (ZAR) per US dollar, pound, euro and yen, each with its as-of date. Useful for loan and interest calculations, pricing in rand and economic context. Price: $0.005 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_school_calendarSouth African public school calendar: term dates and school holidays for 2026 and 2027 from the Department of Basic Education, special school holidays, and whether a given date is …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
South African public school calendar: term dates and school holidays for 2026 and 2027 from the Department of Basic Education, special school holidays, and whether a given date is a school day. Useful for family travel, childcare, events and education planning in South Africa. Price: $0.003 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false

Only reads 5Looks things up and changes nothing.Show 5 read-only tools

za_count_business_daysWorking days calculator: counts the business days between two dates in any of 220+ countries, excluding weekends and public holidays, and lists the holidays excluded.No findings
Why it is in this group
- The name "za_count_business_days" says "count": a word for reading.
Description, as the server wrote it
Working days calculator: counts the business days between two dates in any of 220+ countries, excluding weekends and public holidays, and lists the holidays excluded. Local weekends supported. Verified calendars for South Africa, Nigeria, Kenya, Egypt, Ghana and 6 more African countries. Useful for SLAs, turnaround times, leave days and deadlines measured in business days. Price: $0.002 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_tender_searchSouth African government tenders and RFQs: searches open tenders from national and provincial departments, municipalities and state-owned companies published on the National Treasu…No findings
Why it is in this group
- The name "za_tender_search" says "search": a word for reading.
Description, as the server wrote it
South African government tenders and RFQs: searches open tenders from national and provincial departments, municipalities and state-owned companies published on the National Treasury eTenders portal. Filter by keyword, closing date, category and buyer. Returns tender number, description, buyer, procurement method, opening and closing dates, and tender document links. Updated every 3 hours. Price: $0.005 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_validate_company_numberSouth African company registration number check: validates a CIPC registration number (YYYY/NNNNNN/NN) and decodes the registration year and entity type, such as (Pty) Ltd, Ltd, NP…No findings
Why it is in this group
- The name "za_validate_company_number" says "validate": a word for reading.
Description, as the server wrote it
South African company registration number check: validates a CIPC registration number (YYYY/NNNNNN/NN) and decodes the registration year and entity type, such as (Pty) Ltd, Ltd, NPC, Inc, CC, co-operative or SOC. Format check only, not a CIPC status lookup. Useful for supplier onboarding, invoices and tender paperwork. Price: $0.002 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_validate_id_numberSouth African ID number validation: checks a 13-digit SA ID number (date of birth, citizenship digit and Luhn checksum) and decodes date of birth, age, gender and citizenship statu…No findings
Why it is in this group
- The name "za_validate_id_number" says "validate": a word for reading.
Description, as the server wrote it
South African ID number validation: checks a 13-digit SA ID number (date of birth, citizenship digit and Luhn checksum) and decodes date of birth, age, gender and citizenship status. Structural check only, with no Home Affairs lookup; the number is not stored. Useful for KYC and onboarding forms and for catching typos. Price: $0.005 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false
za_validate_tax_numberSouth African tax number validation: checks a 10-digit SARS VAT registration number or income tax reference number (format and modulus-10 check digit) and says which type it is.No findings
Why it is in this group
- The name "za_validate_tax_number" says "validate": a word for reading.
Description, as the server wrote it
South African tax number validation: checks a 10-digit SARS VAT registration number or income tax reference number (format and modulus-10 check digit) and says which type it is. Format check only, not a SARS registration lookup; nothing is stored. Useful for invoices, supplier onboarding and form validation. Price: $0.002 USDC per call (x402, Base mainnet).
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out2: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; za_official_domain_check
za_sars_deadlines

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warnza_add_business_days
The server marks "za_add_business_days" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The name "za_add_business_days" says "add": a word for a change.
What this check looks for
Warnza_sars_deadlines
The server marks "za_sars_deadlines" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.6.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http agentstall https://agentstall.padawanconsulting.com/mcp

claude mcp add --transport http agentstall https://agentstall.padawanconsulting.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__agentstall__za_count_business_days",
      "mcp__agentstall__za_tender_search",
      "mcp__agentstall__za_validate_id_number",
      "mcp__agentstall__za_validate_tax_number",
      "mcp__agentstall__za_validate_company_number"
    ],
    "ask": [
      "mcp__agentstall__agentstall_catalog",
      "mcp__agentstall__za_public_holidays",
      "mcp__agentstall__za_is_business_day",
      "mcp__agentstall__za_add_business_days",
      "mcp__agentstall__za_school_calendar",
      "mcp__agentstall__za_sars_deadlines",
      "mcp__agentstall__za_sarb_rates",
      "mcp__agentstall__za_bank_branch_codes",
      "mcp__agentstall__exchange_rates",
      "mcp__agentstall__za_normalize_phone",
      "mcp__agentstall__za_incident_reporting_obligations",
      "mcp__agentstall__za_official_domain_check",
      "mcp__agentstall__za_email_security",
      "mcp__agentstall__domain_intel"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as agentstall. Review it before you use it.

Capability tags behind 2 rules

mcp__agentstall__za_sars_deadlines outbound
mcp__agentstall__za_official_domain_check outbound

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.padawanconsulting/agentstall/verify?hash=ea3a361ab9884cdbb65cc2c3aca612bfe3ccd5978d076faef466a386b24bafb5" | jq -e '.changed == false'

Pinned hash ea3a361ab988, from Nov 5, 2026, 09:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.padawanconsulting/agentstall/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.padawanconsulting/agentstall.svg)](https://anlyon.dev/servers/com.padawanconsulting/agentstall)

Source: MCP Registry. Synced Nov 5, 2026, 09:17 UTC.