LegalOne Entreprises
fr.legalone/entrepriseslegalone.frstreamable-httpv0.1.0Scanned
French company data from public registers (Sirene, RNE, BODACC) and French legal notices.
11 tools: 2 change things and 9 only read.
- Reads private data · 2
- Reads text others write · 2
- Can send data out · 0
- No findings
Anlyon alternative
2 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
11 tools
Changes things 2Claude Code: ask
prepare_legal_noticeUse this when the user wants LegalOne to prepare their legal notice for an existing company (registered office transfer, change of manager or president, name, corporate purpose, sh…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Use this when the user wants LegalOne to prepare their legal notice for an existing company (registered office transfer, change of manager or president, name, corporate purpose, share capital, duration, early dissolution, liquidation closure): creates a draft on legalone.fr from the SIREN and the facts the user gave, and returns the notice text, what is left to complete and a link, valid 7 days, that opens the pre-filled form. The user reviews, completes and pays on legalone.fr; nothing is published or paid here. Do not use for a company creation, and do not send home addresses, birth dates or contact details: they are completed on legalone.fr.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- title: Prepare a French legal notice on legalone.fr
which_legal_noticeUse this when a French company or its adviser describes a corporate event (creation, registered office transfer within or outside the department, change of manager or president, na…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Use this when a French company or its adviser describes a corporate event (creation, registered office transfer within or outside the department, change of manager or president, name, corporate purpose, share capital, legal form, duration, dissolution, liquidation closure, sale of a business…) and needs to know which legal notices are mandatory, how many, in which department, on what legal basis and at what price. The answer comes from a fixed table of rules; when it needs one more fact, it returns a question instead of a guess. Do not use for court-ordered insolvency notices or for legal advice on whether to take the decision.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Find which French legal notices a company must publish
Only reads 9Show 9 read-only tools
get_bodacc_noticeUse this when you have a BODACC notice identifier (for example from list_bodacc_notices) and need its detailed content.No findings
Why it is in this group
- The name "get_bodacc_notice" says "get": a word for reading.
Description, as the server wrote it Use this when you have a BODACC notice identifier (for example from list_bodacc_notices) and need its detailed content. Personal details such as birth dates and home addresses are never included. Do not use to look for notices without an identifier.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Read one BODACC notice
get_companyUse this when you know a company's SIREN and the user wants its official identity, or wants to pre-fill a business customer's onboarding form: name, active or ceased, legal form co…No findings
Why it is in this group
- The name "get_company" says "get": a word for reading.
Description, as the server wrote it Use this when you know a company's SIREN and the user wants its official identity, or wants to pre-fill a business customer's onboarding form: name, active or ceased, legal form code, NAF code, creation date, head office, establishments, share capital and current officers (name and role only), with sources and update date. Do not use for financial statements, beneficial owners, contact details or people searches, or as a regulatory identity check (KYC); that data is not provided.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Get a French company's official profile
get_establishmentUse this when the user gives a SIRET (14 digits) and wants that establishment's address, activity code, status and whether it is the head office.No findings
Why it is in this group
- The name "get_establishment" says "get": a word for reading.
Description, as the server wrote it Use this when the user gives a SIRET (14 digits) and wants that establishment's address, activity code, status and whether it is the head office. Do not use to find all establishments of a company; get_company lists them.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Get a French establishment by SIRET
get_legal_notice_priceUse this when the user asks how much a legal notice (annonce légale) costs for a formality in a French department: returns the exact regulated price excluding and including VAT, se…No findings
Why it is in this group
- The name "get_legal_notice_price" says "get": a word for reading.
Description, as the server wrote it Use this when the user asks how much a legal notice (annonce légale) costs for a formality in a French department: returns the exact regulated price excluding and including VAT, set by ministerial order and identical in every authorised newspaper of that department. Notices priced by the character need their text for an exact amount; without it the rate per character is returned. Do not use to compare newspapers or providers: the price is set by law and is the same everywhere.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Get the regulated price of a French legal notice
get_next_stepsUse this when the user has published, or is about to publish, a legal notice and asks what comes next: the filing on the one-stop shop for business formalities (guichet unique, INP…Reads private dataNo findings
Why it is in this group
- The name "get_next_steps" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "document": it reads documents.
Description, as the server wrote it Use this when the user has published, or is about to publish, a legal notice and asks what comes next: the filing on the one-stop shop for business formalities (guichet unique, INPI), deadlines, what the court registry does (BODACC) and the documents to prepare for that formality. Do not use as a substitute for the official checklist shown by the one-stop shop when filing.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Next steps after a French legal notice
list_bodacc_noticesUse this when the user asks what was officially published about a company (registration, changes, sale of business, insolvency proceedings, removal) and you know its SIREN: returns…No findings
Why it is in this group
- The name "list_bodacc_notices" says "list": a word for reading.
Description, as the server wrote it Use this when the user asks what was officially published about a company (registration, changes, sale of business, insolvency proceedings, removal) and you know its SIREN: returns the latest BODACC notices, newest first, with links to the official text. Do not use to search notices by person, court decision type or region.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: List a company's BODACC notices
list_company_documentsUse this when the user wants to know which deeds or annual-accounts filings a company has registered (title and dates), with a link to download them from the INPI.Reads private dataNo findings
Why it is in this group
- The name "list_company_documents" says "list": a word for reading.
What it can reach
- private-dataThe name "list_company_documents" says "list" and "document": it reads documents.
Description, as the server wrote it Use this when the user wants to know which deeds or annual-accounts filings a company has registered (title and dates), with a link to download them from the INPI. Do not use to read financial figures; the documents themselves are not returned.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: List a company's filed documents
search_addressesUse this when the user gives a French postal address, complete or partial, and wants it checked, completed, normalized or geolocated: returns the best Base Adresse Nationale matche…Reads text others writeNo findings
Why it is in this group
- The name "search_addresses" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Use this when the user gives a French postal address, complete or partial, and wants it checked, completed, normalized or geolocated: returns the best Base Adresse Nationale matches with house number, street, postcode, city, INSEE municipality code, coordinates and a match score, plus whether the best match is reliable. Do not use for addresses outside France, for finding who lives or works at an address, or for listing the companies at an address.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- title: Normalize a French postal address
search_companiesUse this when the user names a French company (or gives a SIREN or SIRET) and you need to identify it: returns up to 20 matches with name, SIREN, status, legal form code, NAF code …No findings
Why it is in this group
- The name "search_companies" says "search": a word for reading.
Description, as the server wrote it Use this when the user names a French company (or gives a SIREN or SIRET) and you need to identify it: returns up to 20 matches with name, SIREN, status, legal form code, NAF code and head-office city. Name matching is a prefix match on the official name. Do not use for people, officers or shareholders, and do not use it to list companies by sector or area.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Search French companies
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.
- Reads private data2
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write2
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 0.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http entreprises https://mcp.legalone.fr/mcpclaude mcp add --transport http entreprises https://mcp.legalone.fr/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__entreprises__search_companies",
"mcp__entreprises__get_company",
"mcp__entreprises__get_establishment",
"mcp__entreprises__list_bodacc_notices",
"mcp__entreprises__get_bodacc_notice",
"mcp__entreprises__list_company_documents",
"mcp__entreprises__search_addresses",
"mcp__entreprises__get_legal_notice_price",
"mcp__entreprises__get_next_steps"
],
"ask": [
"mcp__entreprises__which_legal_notice",
"mcp__entreprises__prepare_legal_notice"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as entreprises. Review it before you use it.
Capability tags behind 4 rules
- mcp__entreprises__list_company_documents private-data
- mcp__entreprises__search_addresses untrusted-input
- mcp__entreprises__get_next_steps private-data
- mcp__entreprises__prepare_legal_notice untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/fr.legalone/entreprises/verify?hash=72bf48f6cba15ff417cb29bc779bb4b6f43a9d61fc96618c43505ef61707d86a" | jq -e '.changed == false'Pinned hash 72bf48f6cba1, from Oct 29, 2026, 14:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/fr.legalone/entreprises/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/fr.legalone/entreprises)Source: MCP Registry · repository. Synced Oct 29, 2026, 14:17 UTC.