vergabe-api: German public procurement notices
by applehorsefrog · remote · no sign-in to list tools · v0.4.0 · published by GitHub user applehorsefrog
German public tenders as normalised JSON (CPV, NUTS, deadlines). Free sample; search paid via x402.
5 tools: 2 change things and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads3Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http vergabe-api https://vergabe-api.applehorsefrog.workers.dev/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
5 tools
Changes things 2Claude Code: ask
sample_tendersFREE.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it FREE. The 5 most recent German public calls for tenders (compact fields) from oeffentlichevergabe.de, optionally filtered by one CPV code or prefix. Data: CC0, personal contact data removed.
Annotations the server declares
- readOnlyHint: true
tender_statsFREE.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it FREE. Imported notices per publication day for the last 30 days, split by kind.
Annotations the server declares
- readOnlyHint: true
Only reads 3Claude Code: allow
describe_apiFREE.No findings
Why it is in this group
- The name "describe_api" says "describe": a word for reading.
Description, as the server wrote it FREE. Endpoints, prices, x402 payment details (USDC on Base), data source and licence, provider and legal notice, how to use the paid tools.
Annotations the server declares
- readOnlyHint: true
get_tenderPAID ($0.002 USDC on Base per call via x402).No findings
Why it is in this group
- The name "get_tender" says "get": a word for reading.
Description, as the server wrote it PAID ($0.002 USDC on Base per call via x402). One notice by UUID with lots, deadlines, links and winners. Returns the HTTP URL and payment requirements; pay via the local MCP server or an x402 HTTP client.
Annotations the server declares
- readOnlyHint: true
search_tendersPAID ($0.01 USDC on Base per call via x402).No findings
Why it is in this group
- The name "search_tenders" says "search": a word for reading.
Description, as the server wrote it PAID ($0.01 USDC on Base per call via x402). Full-text and structured search over German public procurement notices (CPV, NUTS, deadline, buyer type, value). This remote server cannot pay on your behalf: the tool returns the exact HTTP URL and payment requirements; use the local MCP server (npx -y github:applehorsefrog/vergabe-api) or an x402 HTTP client to get data.
Annotations the server declares
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.4.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http vergabe-api https://vergabe-api.applehorsefrog.workers.dev/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__vergabe-api__describe_api",
"mcp__vergabe-api__search_tenders",
"mcp__vergabe-api__get_tender"
],
"ask": [
"mcp__vergabe-api__sample_tenders",
"mcp__vergabe-api__tender_stats"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as vergabe-api. Review it before you use it.
