Aurelmark

by Ishan73744 · remote · no sign-in to list tools · v0.4.5 · published by GitHub user Ishan73744

EU compliance facts with sources: TED tender deadline changes, CBAM values, EU deadlines, EUDR scope

Final · 1Changes · 8Changed

Compare Registry entry

14 tools: 1 do something that can't be undone, 8 change things and 5 only read.

Scanned Oct 22, 2026 · tools changed Oct 22, 2026

Deletes or cancels0Claude Code: deny
Can't be undone1Claude Code: ask: see these tools
Changes things8Claude Code: ask: see these tools
Only reads5Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http aurelmark https://aurelmark.live/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warneu_compliance_deadlines
The server marks "eu_compliance_deadlines" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

14 tools

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

eu_compliance_deadlinesDated EU compliance deadlines (CBAM, EUDR and others), each with its legal source and days remaining.Reads text others writeCan send data out1 finding
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Findings
- Warn
  The server marks "eu_compliance_deadlines" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The input addresses people (input.to): what it sends cannot be taken back.
  What this check looks for
Description, as the server wrote it
Dated EU compliance deadlines (CBAM, EUDR and others), each with its legal source and days remaining. Filter by law, status or date range. Free.
Annotations the server declares
- title: EU compliance deadlines
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Changes things 8Creates or changes something that can be changed back.Claude Code: ask

cbam_certificate_priceThe current CBAM certificate price used for cost estimates, with its official source.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
The current CBAM certificate price used for cost estimates, with its official source. Free.
Annotations the server declares
- title: CBAM certificate price
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
cbam_countriesCountries of origin that have their own CBAM default values.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Countries of origin that have their own CBAM default values. Free.
Annotations the server declares
- title: CBAM countries with default values
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
cbam_default_valuesThe EU's official CBAM default embedded-emission values for a CN code, by country of origin and year, with the cost per tonne at the current certificate price and links to the impl…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
The EU's official CBAM default embedded-emission values for a CN code, by country of origin and year, with the cost per tonne at the current certificate price and links to the implementing regulation. Free.
Annotations the server declares
- title: CBAM default emission values
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
eu_compliance_deadlineOne deadline from eu_compliance_deadlines by its id, with its source and history.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One deadline from eu_compliance_deadlines by its id, with its source and history. Free.
Annotations the server declares
- title: One EU compliance deadline
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
eu_contract_awardsEU public contracts awarded, from official TED contract award notices: who won, the buyer, value, CPV codes, country, award and contract dates and lots, each with the notice link a…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
EU public contracts awarded, from official TED contract award notices: who won, the buyer, value, CPV codes, country, award and contract dates and lots, each with the notice link and a SHA-256 proof of the TED answer. Use since (YYYY-MM-DD) for new awards, and filter by CPV code or prefix, buyer country, or winner (company name prefix or official identifier) to answer "has company X won anything since D". Pass next_cursor back as cursor to page or to poll for awards stored since. Uses the free tier, or the caller's API key.
Annotations the server declares
- title: EU public-contract winners
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
eudr_productsThe full list of products in scope of the EUDR (Annex I), with application dates and sources.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
The full list of products in scope of the EUDR (Annex I), with application dates and sources. Free.
Annotations the server declares
- title: EUDR products in scope
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
eudr_scopeWhether a CN or HS code is in scope of the EU Deforestation Regulation (EUDR), which commodity it falls under, and when the rules apply, with sources.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Whether a CN or HS code is in scope of the EU Deforestation Regulation (EUDR), which commodity it falls under, and when the rules apply, with sources. Free.
Annotations the server declares
- title: EUDR scope check
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sanctions_entryOne current listing by list and id (as returned by sanctions_search or sanctions_list_changes), with proof of the file it came from.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One current listing by list and id (as returned by sanctions_search or sanctions_list_changes), with proof of the file it came from. Uses the free tier, or the caller's API key.
Annotations the server declares
- title: One sanctions listing
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 5Looks things up and changes nothing.Claude Code: allow

get_eu_contract_awardOne TED contract award notice by its publication number, with winners, buyer, value, CPV, dates, lots, the notice link and proof.Reads text others writeNo findings
Why it is in this group
- The name "get_eu_contract_award" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
One TED contract award notice by its publication number, with winners, buyer, value, CPV, dates, lots, the notice link and proof. Uses the free tier, or the caller's API key.
Annotations the server declares
- title: One EU contract award
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_tender_deadline_changesObserved submission-deadline changes, per lot, for a watched TED tender, with the old and new deadline (local and UTC) and links to both official notices.Reads text others writeNo findings
Why it is in this group
- The name "get_tender_deadline_changes" says "get": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Observed submission-deadline changes, per lot, for a watched TED tender, with the old and new deadline (local and UTC) and links to both official notices. Also returns the current deadlines. Pass next_cursor or checkpoint_cursor back as cursor to page or to poll for new changes. Uses the free tier, or the caller's API key.
Annotations the server declares
- title: Get deadline changes for an EU tender
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
list_watched_tendersThe TED tenders Aurelmark watches for submission-deadline changes, with when each was last checked and whether its data is fresh.Reads text others writeNo findings
Why it is in this group
- The name "list_watched_tenders" says "list": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
The TED tenders Aurelmark watches for submission-deadline changes, with when each was last checked and whether its data is fresh. Free. To have a tender added, email the address in /docs.
Annotations the server declares
- title: List watched EU tenders
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sanctions_list_changesListings added to, amended on or removed from the US OFAC SDN and Consolidated lists, the UK Sanctions List and the EU Consolidated Financial Sanctions List, found by comparing eac…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "sanctions_list_changes" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "file": it reads files.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Listings added to, amended on or removed from the US OFAC SDN and Consolidated lists, the UK Sanctions List and the EU Consolidated Financial Sanctions List, found by comparing each official file with the previous copy. Each change has the listing (names, aliases, type, programmes, countries, listing date), the fields that changed, and proof: the official file's URL, its SHA-256 and date. Pass next_cursor back as cursor to page or to poll. The official publication is authoritative. Uses the free tier, or the caller's API key.
Annotations the server declares
- title: Sanctions list changes
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
sanctions_searchCurrent listings on the US OFAC, UK and EU sanctions lists whose name or alias contains a word starting with the given text (case, accents and punctuation ignored).Reads text others writeNo findings
Why it is in this group
- The name "sanctions_search" says "search": a word for reading.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Current listings on the US OFAC, UK and EU sanctions lists whose name or alias contains a word starting with the given text (case, accents and punctuation ignored). A lead for screening, not a match decision: confirm against the official list. Uses the free tier, or the caller's API key.
Annotations the server declares
- title: Search current sanctions listings
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

14 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; sanctions_list_changes
Reads text others write14: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; cbam_certificate_price
cbam_countries
cbam_default_values
eu_compliance_deadline
eu_compliance_deadlines
eu_contract_awards
eudr_products
eudr_scope
get_eu_contract_award
get_tender_deadline_changes
list_watched_tenders
sanctions_entry
and 2 more
Can send data out1: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; eu_compliance_deadlines

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__aurelmark__eu_compliance_deadlines"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Tool changes

Every rescan that found different tool definitions, newest first.

Oct 22, 2026
806068d6f96e
+5 added
- Added:eu_contract_awardsChanges things
- Added:get_eu_contract_awardOnly reads
- Added:sanctions_entryChanges things
- Added:sanctions_list_changesOnly reads
- Added:sanctions_searchOnly reads

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 14:52 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable: yes
HTTP status of an anonymous initialize: 200
tools/list served without credentials: yes
Tools that change things, listed without credentials: 9
Protocol version: 2025-06-18
WWW-Authenticate on 401: not observed
resource_metadata in WWW-Authenticate: none
RFC 9728 protected resource metadata: none
Authorization servers: none
Legacy HTTP+SSE transport: no
Dynamic client registration: not observed
Client ID metadata documents: not observed

HighThe whole server
The endpoint served tools/list without credentials, and the list has 9 tools that change things (1 irreversible, 8 write). Whether a call also works without credentials was not tested: tools are never called.
Matched text
https://aurelmark.live/mcp: tools/list returned 14 tools to an anonymous client, including eu_compliance_deadlines (irreversible), cbam_default_values (write), cbam_certificate_price (write), cbam_countries (write), eu_contract_awards (write) and 4 more
What this check looks for

Install

Pinned to version 0.4.5. Values in angle brackets are yours to fill in.

claude mcp add --transport http aurelmark https://aurelmark.live/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__aurelmark__list_watched_tenders",
      "mcp__aurelmark__get_tender_deadline_changes",
      "mcp__aurelmark__get_eu_contract_award",
      "mcp__aurelmark__sanctions_list_changes",
      "mcp__aurelmark__sanctions_search"
    ],
    "ask": [
      "mcp__aurelmark__cbam_default_values",
      "mcp__aurelmark__cbam_certificate_price",
      "mcp__aurelmark__cbam_countries",
      "mcp__aurelmark__eu_contract_awards",
      "mcp__aurelmark__sanctions_entry",
      "mcp__aurelmark__eu_compliance_deadlines",
      "mcp__aurelmark__eu_compliance_deadline",
      "mcp__aurelmark__eudr_scope",
      "mcp__aurelmark__eudr_products"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as aurelmark. Review it before you use it.

Capability tags behind 14 rules

mcp__aurelmark__list_watched_tenders untrusted-input
mcp__aurelmark__get_tender_deadline_changes untrusted-input
mcp__aurelmark__cbam_default_values untrusted-input
mcp__aurelmark__cbam_certificate_price untrusted-input
mcp__aurelmark__cbam_countries untrusted-input
mcp__aurelmark__eu_contract_awards untrusted-input
mcp__aurelmark__get_eu_contract_award untrusted-input
mcp__aurelmark__sanctions_list_changes private-data, untrusted-input
mcp__aurelmark__sanctions_search untrusted-input
mcp__aurelmark__sanctions_entry untrusted-input
mcp__aurelmark__eu_compliance_deadlines untrusted-input, outbound
mcp__aurelmark__eu_compliance_deadline untrusted-input
mcp__aurelmark__eudr_scope untrusted-input
mcp__aurelmark__eudr_products untrusted-input

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.Ishan73744/aurelmark/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

9 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 22, 2026, 04:17 UTC.

For agents: Markdown · JSON · report this listing