AI標案雷達

com.tenderrader/mcptenderrader.comstreamable-httpv1.0.0Scanned 2 hours ago

台灣政府採購標案唯讀查詢：金額級距、等標期計算、投標知識庫、招標公告、廠商與機關。免費免註冊。

8 tools: 1 change things and 7 only read.

Reads private data · 0
Reads text others write · 0
Can send data out · 0
No findings

Anlyon alternative

1 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

8 tools

Changes things 1Creates or changes something that can be changed back.Claude Code: ask

calc_tender_deadline依招標期限標準計算：採購金額落在哪個級距、法定最短等標期幾日，以及（給公告日時）最早可截止投標日。支援招標期限標準第 2～6、9、11 條，含電子領標／投標等縮短情形。算的是法定下限，機關可訂得更長。No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
依招標期限標準計算：採購金額落在哪個級距、法定最短等標期幾日，以及（給公告日時）最早可截止投標日。支援招標期限標準第 2～6、9、11 條，含電子領標／投標等縮短情形。算的是法定下限，機關可訂得更長。
Annotations the server declares
- title: 法定最短等標期計算
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 7Looks things up and changes nothing.Show 7 read-only tools

get_market_stats回傳本站用自己資料算好的統計快照：招標預算級距、流標廢標之後同案是否再決標、標的分類分布；附母體定義與統計日期。No findings
Why it is in this group
- The name "get_market_stats" says "get": a word for reading.
Description, as the server wrote it
回傳本站用自己資料算好的統計快照：招標預算級距、流標廢標之後同案是否再決標、標的分類分布；附母體定義與統計日期。
Annotations the server declares
- title: 政府標案統計
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_procurement_thresholds回傳現行政府採購金額級距（112 年 1 月 1 日起）：中央機關小額採購 15 萬元以下、公告金額 150 萬元、查核金額與巨額採購（依工程／財物／勞務不同），含法規出處與常見舊資料提醒。No findings
Why it is in this group
- The name "get_procurement_thresholds" says "get": a word for reading.
Description, as the server wrote it
回傳現行政府採購金額級距（112 年 1 月 1 日起）：中央機關小額採購 15 萬元以下、公告金額 150 萬元、查核金額與巨額採購（依工程／財物／勞務不同），含法規出處與常見舊資料提醒。
Annotations the server declares
- title: 政府採購金額級距
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_tender用機關代碼與案號查單一標案：標題、機關、公告日、類型、預算、狀態，以及（有本輪決標公告時）決標金額與得標廠商。只讀本站資料，不即時查政府網站。No findings
Why it is in this group
- The name "get_tender" says "get": a word for reading.
Description, as the server wrote it
用機關代碼與案號查單一標案：標題、機關、公告日、類型、預算、狀態，以及（有本輪決標公告時）決標金額與得標廠商。只讀本站資料，不即時查政府網站。
Annotations the server declares
- title: 查單一標案
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
lookup_agency用機關代碼（或名稱關鍵字）查機關：收錄的招標公告與決標件數、常用公告類型、主要得標廠商、近 12 個月每月收錄件數、近期標案。No findings
Why it is in this group
- The name "lookup_agency" says "lookup": a word for reading.
Description, as the server wrote it
用機關代碼（或名稱關鍵字）查機關：收錄的招標公告與決標件數、常用公告類型、主要得標廠商、近 12 個月每月收錄件數、近期標案。
Annotations the server declares
- title: 查招標機關
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
lookup_vendor用統一編號（或公司名稱開頭）查廠商：投標件數（下限）、得標件數、期間、主要往來機關、商工登記基本資料。不提供得標率、電話、負責人或地址。No findings
Why it is in this group
- The name "lookup_vendor" says "lookup": a word for reading.
Description, as the server wrote it
用統一編號（或公司名稱開頭）查廠商：投標件數（下限）、得標件數、期間、主要往來機關、商工登記基本資料。不提供得標率、電話、負責人或地址。
Annotations the server declares
- title: 查廠商得標紀錄
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_guides用問題或關鍵字檢索 AI標案雷達的投標知識庫（47 篇制度與實務說明）與免費工具，回傳「一句話答案」、法規出處與頁面網址。適合回答「開口契約是什麼」「押標金什麼情況沒收」這類制度問題。No findings
Why it is in this group
- The name "search_guides" says "search": a word for reading.
Description, as the server wrote it
用問題或關鍵字檢索 AI標案雷達的投標知識庫（47 篇制度與實務說明）與免費工具，回傳「一句話答案」、法規出處與頁面網址。適合回答「開口契約是什麼」「押標金什麼情況沒收」這類制度問題。
Annotations the server declares
- title: 檢索投標知識庫與工具
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_tenders搜尋本站索引中近期（最多 30 天）的政府招標公告，可依關鍵字、機關所在地、採購類別、狀態篩選，最多 10 筆。逐日讀取（每天最多 1,500 筆），不是全部歷史；招標公告只從 2026/06 起收錄。No findings
Why it is in this group
- The name "search_tenders" says "search": a word for reading.
Description, as the server wrote it
搜尋本站索引中近期（最多 30 天）的政府招標公告，可依關鍵字、機關所在地、採購類別、狀態篩選，最多 10 筆。逐日讀取（每天最多 1,500 筆），不是全部歷史；招標公告只從 2026/06 起收錄。
Annotations the server declares
- title: 搜尋近期招標公告
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input or outbound.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http tenderrader https://tenderrader.com/mcp

claude mcp add --transport http tenderrader https://tenderrader.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__tenderrader__get_procurement_thresholds",
      "mcp__tenderrader__search_guides",
      "mcp__tenderrader__search_tenders",
      "mcp__tenderrader__get_tender",
      "mcp__tenderrader__lookup_vendor",
      "mcp__tenderrader__lookup_agency",
      "mcp__tenderrader__get_market_stats"
    ],
    "ask": [
      "mcp__tenderrader__calc_tender_deadline"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as tenderrader. Review it before you use it.

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.tenderrader/mcp/verify?hash=29d37d482b1c2ad00cd84177ab2a1d86dcbe72070b80f29fa4696bec8dedcbad" | jq -e '.changed == false'

Pinned hash 29d37d482b1c, from Oct 27, 2026, 02:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.tenderrader/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.tenderrader/mcp.svg)](https://anlyon.dev/servers/com.tenderrader/mcp)

Source: MCP Registry. Synced Oct 27, 2026, 02:17 UTC.