Skip to content

com.tollwyn/uidwatch

by tollwyn.com · remote · no sign-in to list tools · v1.0.0 · published by com.tollwyn

Swiss bankruptcy, liquidation and register alerts for a UID list. Source: SHAB. Webhook, API, email.

Deletes · 3Changes · 5
CompareRegistry entry

12 tools: 3 can delete or cancel things, 5 change things and 4 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http uidwatch https://uidwatch.tollwyn.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • Warnuidwatch_signup

    The description contains "every other tool", wording about other tools or servers.

    Matched text

    description: "...configuration of the MCP client, which every other tool needs. accept_terms must be true: it ac..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

12 tools

Deletes or cancels 3Claude Code: deny
  • watchlist_removeRemove one entry from the watchlist; name its group if it has one.No findings

    Why it is in this group

    • The name "watchlist_remove" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove one entry from the watchlist; name its group if it has one.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
  • watchlist_replaceReplace the whole watchlist with these entries, e.g.No findings

    Why it is in this group

    • The name "watchlist_replace" says "replace": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Replace the whole watchlist with these entries, e.g. to sync it from an ERP every night: entries missing from items are removed, entries that stay keep their date. UIDs are accepted as CHE-123.456.789, CHE123456789 or with MWST/TVA/IVA; the check digit must match. Each entry may carry your reference (e.g. a customer number) and a group (e.g. the client a debtor belongs to). All or nothing: one invalid UID rejects the call with every problem listed. New entries get an initial check of the history in the gazette.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
  • webhook_deleteDelete a webhook endpoint; no more events are posted to it.No findings

    Why it is in this group

    • The name "webhook_delete" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete a webhook endpoint; no more events are posted to it.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
Changes things 5Claude Code: ask
  • billing_checkoutA Stripe Checkout link for the subscription: CHF 33 per month per package of 2500 entries, 1 to 10 packages, cancel monthly.No findings

    Why it is in this group

    • The name "billing_checkout" says "checkout": a word for a change.
    Description, as the server wrote it
    A Stripe Checkout link for the subscription: CHF 33 per month per package of 2500 entries, 1 to 10 packages, cancel monthly. A person, or an agent with its own payment method, opens the link and pays there.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • uidwatch_signupCreate a UIDWatch account and get its API key.1 finding

    Why it is in this group

    • The description's first verb is "create": a word for a change.

    Findings

    • Warn

      The description contains "every other tool", wording about other tools or servers.

      Matched text

      description: "...configuration of the MCP client, which every other tool needs. accept_terms must be true: it ac..."

      What this check looks for
    Description, as the server wrote it
    Create a UIDWatch account and get its API key. The key is shown only in this answer: keep it and send it as "Authorization: Bearer <key>" in the configuration of the MCP client, which every other tool needs. accept_terms must be true: it accepts the terms of service (https://uidwatch.tollwyn.com/terms?via=mcp-registry), including the data processing terms in section 8, on behalf of the business that signs up. The trial lasts 30 days and watches 20 entries until a person confirms the email address from the mail UIDWatch sends, then 2500. via is an optional partner id; without one the account counts as signed up through MCP.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • watchlist_addAdd entries to the watchlist, or change the reference of entries already on it.No findings

    Why it is in this group

    • The name "watchlist_add" says "add": a word for a change.
    Description, as the server wrote it
    Add entries to the watchlist, or change the reference of entries already on it. UIDs are accepted as CHE-123.456.789, CHE123456789 or with MWST/TVA/IVA; the check digit must match. Each entry may carry your reference (e.g. a customer number) and a group (e.g. the client a debtor belongs to). All or nothing: one invalid UID rejects the call with every problem listed. New entries get an initial check of the history in the gazette.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • webhook_createAdd a webhook endpoint (https on a public address, at most 5): every new event of the chosen kinds (default: all) is posted to it as JSON, signed with HMAC-SHA256 in the UIDWatch-S…No findings

    Why it is in this group

    • The name "webhook_create" says "create": a word for a change.
    Description, as the server wrote it
    Add a webhook endpoint (https on a public address, at most 5): every new event of the chosen kinds (default: all) is posted to it as JSON, signed with HMAC-SHA256 in the UIDWatch-Signature header. The signing secret is returned only in this answer.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
  • webhook_testPost a sample event marked "test": true to a webhook endpoint now and tell how it answered (10 per minute).No findings

    Why it is in this group

    • The description's first verb is "post": a word for a change.
    Description, as the server wrote it
    Post a sample event marked "test": true to a webhook endpoint now and tell how it answered (10 per minute).

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
Only reads 4Claude Code: allow
  • account_statusThe account: plan (trial, monitor or paused), whether the list is monitored, the limit and usage in entries, the end of the trial, whether the email address is confirmed, and last_…No findings

    Why it is in this group

    • The name "account_status" says "status": a word for reading.
    Description, as the server wrote it
    The account: plan (trial, monitor or paused), whether the list is monitored, the limit and usage in entries, the end of the trial, whether the email address is confirmed, and last_scan_at, the last successful check of the gazette.

    Annotations the server declares

    • readOnlyHint: true
  • events_listEvents for the watchlist after a cursor, oldest first: bankruptcies, compositions, debt enforcement, liquidations, deletions, register deficiencies and changes, and new entries pub…No findings

    Why it is in this group

    • The name "events_list" says "list": a word for reading.
    Description, as the server wrote it
    Events for the watchlist after a cursor, oldest first: bankruptcies, compositions, debt enforcement, liquidations, deletions, register deficiencies and changes, and new entries published in the Swiss Official Gazette of Commerce (SHAB), each with a link to the notice and its signed PDF. Keep next_cursor and pass it as cursor next time: every event comes exactly once. historical "true" filters the findings of the initial check, published before the entry was added.

    Annotations the server declares

    • readOnlyHint: true
  • watchlist_listA page of the watchlist, oldest entry first, optionally of one group.No findings

    Why it is in this group

    • The name "watchlist_list" says "list": a word for reading.
    Description, as the server wrote it
    A page of the watchlist, oldest entry first, optionally of one group. Each entry tells whether its initial check is done (checked_at) and whether it is within the limit of the plan (monitored).

    Annotations the server declares

    • readOnlyHint: true
  • webhook_listThe webhook endpoints of the account with their kinds.No findings

    Why it is in this group

    • The name "webhook_list" says "list": a word for reading.
    Description, as the server wrote it
    The webhook endpoints of the account with their kinds.

    Annotations the server declares

    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http uidwatch https://uidwatch.tollwyn.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__uidwatch__watchlist_list",
      "mcp__uidwatch__events_list",
      "mcp__uidwatch__webhook_list",
      "mcp__uidwatch__account_status"
    ],
    "ask": [
      "mcp__uidwatch__uidwatch_signup",
      "mcp__uidwatch__watchlist_add",
      "mcp__uidwatch__webhook_create",
      "mcp__uidwatch__webhook_test",
      "mcp__uidwatch__billing_checkout"
    ],
    "deny": [
      "mcp__uidwatch__watchlist_replace",
      "mcp__uidwatch__watchlist_remove",
      "mcp__uidwatch__webhook_delete"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as uidwatch. Review it before you use it.