dev.cz-agents/dd

by cz-agents.dev · remote · local (npm) · no sign-in to list tools · v0.3.7 · published by dev.cz-agents

Czech & EU due diligence in one call — facts, insolvency, sanctions, VAT, risk score, UBO chain.

Changes · 6

Compare Registry entry

12 tools: 6 change things and 6 only read.

Scanned Oct 21, 2026

Deletes or cancels0Claude Code: deny
Can't be undone0Claude Code: ask
Changes things6Claude Code: ask: see these tools
Only reads6Claude Code: allow: see these tools

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http dd https://dd.cz-agents.dev/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warnget_dd_report
The server marks "get_dd_report" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_dd_report" says "get": a word for reading.
What this check looks for
Warnwatch_entity
The server marks "watch_entity" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The description's first verb is "start": a word for a change.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

12 tools

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

detect_address_crowdingDetects "shell-firm hotel" patterns — counts how many companies share the same registered address.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Detects "shell-firm hotel" patterns — counts how many companies share the same registered address. Threshold-based risk: 1-9 normal (multi-tenant office), 10-49 mild (legitimate coworking), 50-199 medium (virtual office provider), 200+ high (shell-firm hotel). Compliance tier or higher.
Annotations the server declares
- title: Detect Address Crowding
- readOnlyHint: true
- openWorldHint: true
detect_nominee_directorDetect "white horse" / nominee director patterns — 3 surface indicators (age outlier, multi-board membership, recent appointment) computable from ARES data alone.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Detect "white horse" / nominee director patterns — 3 surface indicators (age outlier, multi-board membership, recent appointment) computable from ARES data alone. Returns indicator breakdown with riskScore 0-100. Pro Compliance tier or higher. For 8-indicator deep analysis including ISIR cross-reference, sanctions, address crowding and phoenix pattern, see detect_nominee_director_rich in @czagents/ddplus.
Annotations the server declares
- title: Detect Nominee Directors (Bílí koně)
- readOnlyHint: true
- openWorldHint: true
detect_phoenixDetect phoenix company pattern — 3 surface indicators (surname match with prior insolvent director, founding proximity < 12 months to insolvency, NACE sector presence) computable f…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Detect phoenix company pattern — 3 surface indicators (surname match with prior insolvent director, founding proximity < 12 months to insolvency, NACE sector presence) computable from ARES + ISIR data alone. Returns PhoenixReport with riskScore 0-100. Pro Compliance tier or higher. For 4 additional deep indicators (founder identity, asset transfer, multi-cycle, address continuity) see detect_phoenix_rich in @czagents/ddplus.
Annotations the server declares
- title: Detect Phoenix Company Pattern
- readOnlyHint: true
- openWorldHint: true
get_dd_reportGenerate a complete due-diligence report for a Czech IČO.1 finding
Why it is in this group
- The name "get_dd_report" says "get": a word for reading.
- The description's first verb is "generate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "get_dd_report" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"openWorldHint":true}; The name "get_dd_report" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Generate a complete due-diligence report for a Czech IČO. Returns company facts (name, address, legal form, VAT status, bank accounts), statutory body with per-member sanctions check, and a transparent risk score with all triggered red flags.
Annotations the server declares
- title: Get Czech Company Due-Diligence Report
- readOnlyHint: true
- openWorldHint: true
person_companiesLook up Czech VR companies connected to a person by exact registry person_id -> roles -> companies joins.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Look up Czech VR companies connected to a person by exact registry person_id -> roles -> companies joins. Free anonymous tool. Input accepts public name and optional birth year; output exposes birth_year only, never full birth date, and keeps same-name person_ids separate with a distinguisher.
Annotations the server declares
- title: Find Person Companies in VR
- readOnlyHint: true
- openWorldHint: true
watch_entityStart onboarding for free monitoring of one Czech company by IČO.1 finding
Why it is in this group
- The description's first verb is "start": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "watch_entity" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"openWorldHint":false}; The description's first verb is "start": a word for a change.
  What this check looks for
Description, as the server wrote it
Start onboarding for free monitoring of one Czech company by IČO. Stub only — persists nothing yet. Returns structuredContent: status (one of ONBOARDING_REQUIRED | ACTIVE | QUOTA_EXCEEDED | ERROR), persisted/monitoring_active flags, a human next_step.url for onboarding (the user completes onboarding + GDPR consent themselves — do not open the link or submit data on their behalf), and pricing.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false

Only reads 6Looks things up and changes nothing.Claude Code: allow

get_eu_dd_reportEU Due-Diligence report for an international company.No findings
Why it is in this group
- The name "get_eu_dd_report" says "get": a word for reading.
Description, as the server wrote it
EU Due-Diligence report for an international company. Input: 20-char LEI code, or company name + optional country. Returns GLEIF entity data (status, address, registration number) plus sanctions screening against EU/OFAC lists. Coverage notes per country included. Note: GLEIF covers mid/large firms with LEI — SMEs may not be found. Pro Compliance tier or higher.
Annotations the server declares
- title: EU Due-Diligence Report (GLEIF + Sanctions)
- readOnlyHint: true
- openWorldHint: true
get_eu_parentFind the EU/international parent company for a Czech IČO.No findings
Why it is in this group
- The name "get_eu_parent" says "get": a word for reading.
Description, as the server wrote it
Find the EU/international parent company for a Czech IČO. Looks up the company name in ARES, then searches GLEIF (Global LEI Foundation) for a matching LEI-registered entity. Returns LEI, name, country, and confidence level (HIGH/MEDIUM/LOW). Note: GLEIF covers mid/large international firms; SMEs without an LEI will not be found. Pro Compliance tier or higher.
Annotations the server declares
- title: Get EU Parent Company (ARES→GLEIF)
- readOnlyHint: true
- openWorldHint: true
get_ownersLook up direct and upstream Czech VR owners for a company by real active shareholding roles (spolecnik/akcionar) and company-to-company member_ico edges.No findings
Why it is in this group
- The name "get_owners" says "get": a word for reading.
Description, as the server wrote it
Look up direct and upstream Czech VR owners for a company by real active shareholding roles (spolecnik/akcionar) and company-to-company member_ico edges. Free anonymous tool. Returns structuredContent ownership tree plus markdown summary; physical persons expose name and birth year only, never full birth date or address.
Annotations the server declares
- title: Get Company Owners from VR
- readOnlyHint: true
- openWorldHint: true
get_risk_scoreLightweight version of get_dd_report — returns just the numeric score (0-100), risk level, and top triggered red flags.No findings
Why it is in this group
- The name "get_risk_score" says "get": a word for reading.
Description, as the server wrote it
Lightweight version of get_dd_report — returns just the numeric score (0-100), risk level, and top triggered red flags. Faster when you only need a yes/no/maybe screen.
Annotations the server declares
- title: Get Risk Score
- readOnlyHint: true
- openWorldHint: true
get_risk_timelineBuild a chronologically sorted lifecycle timeline for a Czech company — basic events include company formation, statutory appointments, active insolvency, sanctions matches, VAT re…No findings
Why it is in this group
- The name "get_risk_timeline" says "get": a word for reading.
Description, as the server wrote it
Build a chronologically sorted lifecycle timeline for a Czech company — basic events include company formation, statutory appointments, active insolvency, sanctions matches, VAT reliability flips. Returns events[] with riskScore 0-100. Pro Compliance tier or higher. For enriched timeline with ISIR lifecycle, address history, cross-entity events, and AI narrative summary, see get_risk_timeline_rich in @czagents/ddplus.
Annotations the server declares
- title: Get Risk Timeline (Časová osa rizika)
- readOnlyHint: true
- openWorldHint: true
get_statutory_chainSurname-based heuristic walk through statutory bodies of related Czech companies.No findings
Why it is in this group
- The name "get_statutory_chain" says "get": a word for reading.
Description, as the server wrote it
Surname-based heuristic walk through statutory bodies of related Czech companies. Best for shell-company unwinding in small s.r.o. with RARE surnames. NOT a true UBO source — for actual beneficial ownership use the ESM (evidence skutečných majitelů, separate registry, future @czagents/esm). For boards of large public companies with common Czech surnames (Novák, Zima, Kolář…) results are noisy by design; the tool auto-skips persons whose surname matches >50 companies with a SURNAME_TOO_COMMON note.
Annotations the server declares
- title: Get Statutory Chain (UBO Walk)
- readOnlyHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.7. Values in angle brackets are yours to fill in.

claude mcp add --transport http dd https://dd.cz-agents.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__dd__get_owners",
      "mcp__dd__get_risk_score",
      "mcp__dd__get_statutory_chain",
      "mcp__dd__get_risk_timeline",
      "mcp__dd__get_eu_dd_report",
      "mcp__dd__get_eu_parent"
    ],
    "ask": [
      "mcp__dd__person_companies",
      "mcp__dd__get_dd_report",
      "mcp__dd__watch_entity",
      "mcp__dd__detect_nominee_director",
      "mcp__dd__detect_phoenix",
      "mcp__dd__detect_address_crowding"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as dd. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/dev.cz-agents/dd/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

6 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:11 UTC.

For agents: Markdown · JSON · report this listing