Skip to content

io.github.itsoft7/egrul-mcp

by itsoft7 · remote · no sign-in to list tools · v1.0.0 · published by GitHub user itsoft7

Проверка организаций, ИП и физлиц по данным ЕГРЮЛ/ЕГРИП ФНС: санкции, иноагенты, банкротство.

Deletes · 1Final · 2Changes · 29
CompareRegistry entry

39 tools: 1 can delete or cancel things, 2 do something that can't be undone, 29 change things and 7 only read.

Scanned Oct 21, 2026

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http egrul https://egrul.org/mcp/

Findings

Matches of fixed checks, with the text they matched.

3 warn
  • Warnorg_links

    The server marks "org_links" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "org_links" says "link": a word for a change.

    What this check looks for
  • Warncurrency_rate

    The server marks "currency_rate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The input takes a statement or command to run (input.code), which can change anything it can reach.

    What this check looks for
  • Warnmonitoring_list

    The server marks "monitoring_list" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "monitoring_list" says "list": a word for reading.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

39 tools

Deletes or cancels 1Claude Code: deny
  • monitoring_unsubscribeОтписаться от мониторинга указанных ИНН, либо от всех сразу (inn="all").No findings

    Why it is in this group

    • The name "monitoring_unsubscribe" says "unsubscribe": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Отписаться от мониторинга указанных ИНН, либо от всех сразу (inn="all"). Необратимо — настройки фильтров этих подписок будут потеряны.

    Annotations the server declares

    • title: Отписка от мониторинга
    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
Can't be undone 2Claude Code: ask
  • monitoring_listСписок текущих подписок мониторинга (свой аккаунт) и настроек доставки уведомлений (notify_url, notify_email).Reads private dataReads text others write1 finding

    Why it is in this group

    • The name "monitoring_list" says "list": a word for reading.
    • The description's first verb is "notify": a word for sending, and what is sent cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "notify" and "url": it reads web pages, which anyone can write.

    Findings

    • Warn

      The server marks "monitoring_list" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The name "monitoring_list" says "list": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Список текущих подписок мониторинга (свой аккаунт) и настроек доставки уведомлений (notify_url, notify_email).

    Annotations the server declares

    • title: Список подписок мониторинга
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • monitoring_set_notifyНастроить канал доставки уведомлений мониторинга: webhook (notify_url) и/или email (notify_email).Can send data outNo findings

    Why it is in this group

    • The name "monitoring_set_notify" says "set": a word for a change.
    • The name "monitoring_set_notify" also says "notify": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • outboundThe name "monitoring_set_notify" says "notify": it sends or publishes something to other people.
    Description, as the server wrote it
    Настроить канал доставки уведомлений мониторинга: webhook (notify_url) и/или email (notify_email). Пустая строка отключает канал. При первом включении webhook возвращается notify_secret — ключ подписи HMAC-SHA256 заголовка X-Signature.

    Annotations the server declares

    • title: Настройка уведомлений мониторинга
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
Changes things 29Claude Code: ask
  • check_bankrot_orgПроверка на банкротство по Единому федеральному реестру сведений о банкротстве (Федресурс) по ИНН.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка на банкротство по Единому федеральному реестру сведений о банкротстве (Федресурс) по ИНН.

    Annotations the server declares

    • title: Проверка на банкротство
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_disqualifiedПроверка по реестру дисквалифицированных лиц ФНС — организация (10 цифр ИНН) или физлицо/руководитель (12 цифр ИНН).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка по реестру дисквалифицированных лиц ФНС — организация (10 цифр ИНН) или физлицо/руководитель (12 цифр ИНН).

    Annotations the server declares

    • title: Реестр дисквалифицированных лиц
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_disqualified_by_org_nameПроверка по реестру дисквалифицированных лиц ФНС по точному наименованию организации (вариант check_disqualified для случаев без ИНН).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка по реестру дисквалифицированных лиц ФНС по точному наименованию организации (вариант check_disqualified для случаев без ИНН).

    Annotations the server declares

    • title: Дисквалификация по названию организации
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_disqualified_by_personПроверка по реестру дисквалифицированных лиц ФНС по ФИО (точное совпадение; год рождения уточняет совпадение, но необязателен).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка по реестру дисквалифицированных лиц ФНС по ФИО (точное совпадение; год рождения уточняет совпадение, но необязателен).

    Annotations the server declares

    • title: Дисквалификация по ФИО
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_fedsfm_orgПроверка организации по перечню террористов и экстремистов Росфинмониторинга по ИНН.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка организации по перечню террористов и экстремистов Росфинмониторинга по ИНН.

    Annotations the server declares

    • title: Перечень Росфинмониторинга: организация
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_fedsfm_personПроверка физлица по перечню террористов и экстремистов Росфинмониторинга (ФИО + год рождения, точное совпадение).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка физлица по перечню террористов и экстремистов Росфинмониторинга (ФИО + год рождения, точное совпадение).

    Annotations the server declares

    • title: Перечень Росфинмониторинга: физлицо
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_fsin_wantedПроверка физлица по базе розыска ФСИН России (ФИО + год рождения, точное совпадение).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка физлица по базе розыска ФСИН России (ФИО + год рождения, точное совпадение).

    Annotations the server declares

    • title: База розыска ФСИН
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_inoagent_orgПроверка организации по реестру иностранных агентов Минюста РФ по ИНН.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка организации по реестру иностранных агентов Минюста РФ по ИНН.

    Annotations the server declares

    • title: Реестр иноагентов: организация
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_inoagent_personПроверка физлица по реестру иностранных агентов Минюста РФ (ФИО + год рождения, точное совпадение).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка физлица по реестру иностранных агентов Минюста РФ (ФИО + год рождения, точное совпадение).

    Annotations the server declares

    • title: Реестр иноагентов: физлицо
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_invalid_innПроверка действительности ИНН по реестрам ФНС «Недействительные ИНН юридических/физических лиц».Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка действительности ИНН по реестрам ФНС «Недействительные ИНН юридических/физических лиц».

    Annotations the server declares

    • title: Проверка действительности ИНН
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_koap1928_orgПроверка по реестру юрлиц, привлечённых к ответственности по ст.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка по реестру юрлиц, привлечённых к ответственности по ст. 19.28 КоАП РФ (коррупционные правонарушения), по ИНН.

    Annotations the server declares

    • title: Проверка по ст. 19.28 КоАП РФ
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_mvd_wantedПроверка физлица по базе розыска МВД России (ФИО + год рождения, точное совпадение).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка физлица по базе розыска МВД России (ФИО + год рождения, точное совпадение).

    Annotations the server declares

    • title: База розыска МВД
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_nalog_bi_orgДействующие приостановления операций по счетам (блокировки счетов ФНС) по ИНН.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Действующие приостановления операций по счетам (блокировки счетов ФНС) по ИНН.

    Annotations the server declares

    • title: Блокировки счетов ФНС
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_rnp_orgПроверка по реестру недобросовестных поставщиков (РНП) ЕИС (zakupki.gov.ru) по ИНН.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка по реестру недобросовестных поставщиков (РНП) ЕИС (zakupki.gov.ru) по ИНН.

    Annotations the server declares

    • title: Реестр недобросовестных поставщиков
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_rom_orgРеестр обеспечительных мер ФНС по ИНН: залог и арест имущества (ст.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Реестр обеспечительных мер ФНС по ИНН: залог и арест имущества (ст. 73 и 77 НК РФ), запрет на отчуждение (п. 10 ст. 101 НК РФ).

    Annotations the server declares

    • title: Реестр обеспечительных мер ФНС
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_sanctions_orgПроверка организации по международным санкционным спискам (OFAC, EU, UK и др.) по ИНН.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка организации по международным санкционным спискам (OFAC, EU, UK и др.) по ИНН.

    Annotations the server declares

    • title: Санкционные списки: организация
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_sanctions_personПроверка физлица по международным санкционным спискам (OFAC, EU, UK, ООН) — по ИНН (10 или 12 цифр) либо по ФИО и году рождения (точное совпадение по алиасам).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Проверка физлица по международным санкционным спискам (OFAC, EU, UK, ООН) — по ИНН (10 или 12 цифр) либо по ФИО и году рождения (точное совпадение по алиасам).

    Annotations the server declares

    • title: Санкционные списки: физлицо
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_zakupki_orgИзвещения о закупках ЕИС (zakupki.gov.ru) по ИНН: до 100 последних извещений, где организация — заказчик или участник.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Извещения о закупках ЕИС (zakupki.gov.ru) по ИНН: до 100 последних извещений, где организация — заказчик или участник.

    Annotations the server declares

    • title: Закупки ЕИС по организации
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • currency_rateКурс валюты или драгметалла ЦБ РФ на указанную дату.Reads text others write1 finding

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Warn

      The server marks "currency_rate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The input takes a statement or command to run (input.code), which can change anything it can reach.

      What this check looks for
    Description, as the server wrote it
    Курс валюты или драгметалла ЦБ РФ на указанную дату.

    Annotations the server declares

    • title: Курс валюты ЦБ РФ
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • monitoring_subscribeПодписаться на мониторинг изменений по организации(-ям)/ИП: изменения выписки ЕГРЮЛ/ЕГРИП, сданная/несданная бухотчётность, новые исполнительные производства ФССП, рост долгов по н…No findings

    Why it is in this group

    • The name "monitoring_subscribe" says "subscribe": a word for a change.
    Description, as the server wrote it
    Подписаться на мониторинг изменений по организации(-ям)/ИП: изменения выписки ЕГРЮЛ/ЕГРИП, сданная/несданная бухотчётность, новые исполнительные производства ФССП, рост долгов по налогам, налоговые правонарушения, новые записи в плане проверок, смена налогового режима. Уведомления 3 раза в сутки на notify_url и/или notify_email (настраиваются через monitoring_set_notify). 1 ИНН на мониторинге = 1 запрос из суточного лимита.

    Annotations the server declares

    • title: Подписка на мониторинг изменений
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
  • new_entrepreneursСписок ИНН ИП, зарегистрированных в ЕГРИП за указанную дату.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Список ИНН ИП, зарегистрированных в ЕГРИП за указанную дату. Можно отфильтровать по региону.

    Annotations the server declares

    • title: Новые ИП за дату
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • new_organizationsСписок ИНН организаций, зарегистрированных в ЕГРЮЛ за указанную дату.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Список ИНН организаций, зарегистрированных в ЕГРЮЛ за указанную дату. Можно отфильтровать по региону.

    Annotations the server declares

    • title: Новые организации за дату
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • org_accounting_filesСписок файлов бухгалтерской отчётности организации по ИНН (имена файлов; содержимое — через внешний файловый доступ сайта, не через этот инструмент).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Список файлов бухгалтерской отчётности организации по ИНН (имена файлов; содержимое — через внешний файловый доступ сайта, не через этот инструмент).

    Annotations the server declares

    • title: Файлы бухгалтерской отчётности
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • org_filing_historyСписок исторических версий выписки ЕГРЮЛ/ЕГРИП организации или ИП (дата каждой версии и xml_file_id для org_filing_snapshot), постранично — у отдельных организаций счёт идёт на тыс…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Список исторических версий выписки ЕГРЮЛ/ЕГРИП организации или ИП (дата каждой версии и xml_file_id для org_filing_snapshot), постранично — у отдельных организаций счёт идёт на тысячи версий. Ответ содержит total (всего версий) и has_more. Нужно для вопросов про историю изменений (например «кто были все директора/учредители за всё время») — получить список версий отсюда (при необходимости — несколькими страницами через offset), затем смотреть нужные версии через org_filing_snapshot.

    Annotations the server declares

    • title: История версий выписки ЕГРЮЛ/ЕГРИП
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • org_financialsФинансовая отчётность организации по годам (выручка, налоги и т.п.) из данных ФНС/Росстата.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Финансовая отчётность организации по годам (выручка, налоги и т.п.) из данных ФНС/Росстата.

    Annotations the server declares

    • title: Финансовая отчётность организации
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • org_ratingПозиция организации в рейтинге компаний по обороту (по отрасли/региону), по годам.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Позиция организации в рейтинге компаний по обороту (по отрасли/региону), по годам.

    Annotations the server declares

    • title: Рейтинг организации по обороту
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • updated_entrepreneursСписок ИНН ИП с изменённой выпиской ЕГРИП за указанную дату (дата выписки, не регистрации).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Список ИНН ИП с изменённой выпиской ЕГРИП за указанную дату (дата выписки, не регистрации). Можно отфильтровать по региону.

    Annotations the server declares

    • title: ИП с изменённой выпиской
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • updated_organizationsСписок ИНН организаций с изменённой выпиской ЕГРЮЛ за указанную дату (дата выписки, не регистрации).Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Список ИНН организаций с изменённой выпиской ЕГРЮЛ за указанную дату (дата выписки, не регистрации). Можно отфильтровать по региону.

    Annotations the server declares

    • title: Организации с изменённой выпиской
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
Only reads 7Claude Code: allow
  • bik_lookupСправочник БИК банков России (ЦБ РФ, ежедневный справочник ED807) — поиск по БИК или по наименованию банка.Reads text others writeNo findings

    Why it is in this group

    • The name "bik_lookup" says "lookup": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Справочник БИК банков России (ЦБ РФ, ежедневный справочник ED807) — поиск по БИК или по наименованию банка.

    Annotations the server declares

    • title: Справочник БИК банков
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • check_fl_npd_statusСтатус плательщика налога на профессиональный доход (самозанятого) по ИНН физлица на дату.Reads text others writeNo findings

    Why it is in this group

    • The name "check_fl_npd_status" says "status": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Статус плательщика налога на профессиональный доход (самозанятого) по ИНН физлица на дату.

    Annotations the server declares

    • title: Статус самозанятого
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_referenceОткрытые справочники-классификаторы целиком в JSON: ОКВЭД 2, ОКФС, ОКОПФ, ОКПД, ОКПД 2, коды строк финансовой отчётности.Reads text others writeNo findings

    Why it is in this group

    • The name "get_reference" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Открытые справочники-классификаторы целиком в JSON: ОКВЭД 2, ОКФС, ОКОПФ, ОКПД, ОКПД 2, коды строк финансовой отчётности. Ответ может быть большим (полный классификатор).

    Annotations the server declares

    • title: Справочники-классификаторы
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • lookup_inn_by_passportИНН физлица по паспортным данным через сервис ФНС.Reads text others writeNo findings

    Why it is in this group

    • The name "lookup_inn_by_passport" says "lookup": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    ИНН физлица по паспортным данным через сервис ФНС. Требует точных персональных данных человека (ФИО, паспорт, дата рождения) — использовать только с явного согласия/по поручению самого человека, не для слежки за третьими лицами.

    Annotations the server declares

    • title: ИНН физлица по паспорту
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • org_filing_snapshotСодержимое одной исторической версии выписки ЕГРЮЛ/ЕГРИП (xml_file_id — из org_filing_history), разобранное в структурированный JSON.Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "org_filing_snapshot" says "snapshot": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "file": it reads files.
    • private-dataThe input names a file (input.xml_file_id), and the tool reads: it reads files.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Содержимое одной исторической версии выписки ЕГРЮЛ/ЕГРИП (xml_file_id — из org_filing_history), разобранное в структурированный JSON. Без section — вся выписка целиком (может быть большой). С section — только указанный раздел по имени тега кириллицей, например СвУчредит (учредители/владельцы), СведДолжнФЛ (руководитель), СвАдресЮЛ (адрес), СвОКВЭДОсн (основной вид деятельности). Чтобы получить всех владельцев организации за всё время — вызвать для каждой версии из org_filing_history с section=СвУчредит и сравнить.

    Annotations the server declares

    • title: Снимок версии выписки
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • org_lookupКраткая карточка организации или ИП из ЕГРЮЛ/ЕГРИП по ИНН или ОГРН/ОГРНИП: название, адрес, статус, признаки недостоверности сведений.Reads text others writeNo findings

    Why it is in this group

    • The name "org_lookup" says "lookup": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Краткая карточка организации или ИП из ЕГРЮЛ/ЕГРИП по ИНН или ОГРН/ОГРНИП: название, адрес, статус, признаки недостоверности сведений.

    Annotations the server declares

    • title: Карточка организации или ИП
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • search_organizationsПоиск организаций по префиксу названия, email или региону (не полнотекстовый поиск — совпадение с начала строки).Reads private dataReads text others writeNo findings

    Why it is in this group

    • The name "search_organizations" says "search": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "email": it reads mail.
    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "email": it reads inbound email, which other people can write.
    Description, as the server wrote it
    Поиск организаций по префиксу названия, email или региону (не полнотекстовый поиск — совпадение с начала строки). Нужен хотя бы один параметр; можно комбинировать. До 20 результатов; стоимость — по числу фактически найденных записей (минимум 1).

    Annotations the server declares

    • title: Поиск организаций
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

108 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data3
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write36
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__egrul__monitoring_set_notify"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Remote posture

What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.

Looked at Oct 22, 2026, 15:00 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.

Reachable
yes
HTTP status of an anonymous initialize
200
tools/list served without credentials
yes
Tools that change things, listed without credentials
32
Protocol version
2025-06-18
WWW-Authenticate on 401
not observed
resource_metadata in WWW-Authenticate
none
RFC 9728 protected resource metadata
https://egrul.org/.well-known/oauth-protected-resource/mcp
Authorization servers
https://egrul.org
Legacy HTTP+SSE transport
no
Dynamic client registration
yes
Client ID metadata documents
no
  • HighThe whole server

    The endpoint served tools/list without credentials, and the list has 32 tools that change things (1 destructive, 2 irreversible, 29 write). Whether a call also works without credentials was not tested: tools are never called.

    Matched text

    https://egrul.org/mcp/: tools/list returned 39 tools to an anonymous client, including monitoring_unsubscribe (destructive), monitoring_list (irreversible), monitoring_set_notify (irreversible), org_links (write), org_financials (write) and 27 more

    What this check looks for

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http egrul https://egrul.org/mcp/

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__egrul__org_lookup",
      "mcp__egrul__search_organizations",
      "mcp__egrul__bik_lookup",
      "mcp__egrul__get_reference",
      "mcp__egrul__check_fl_npd_status",
      "mcp__egrul__lookup_inn_by_passport",
      "mcp__egrul__org_filing_snapshot"
    ],
    "ask": [
      "mcp__egrul__org_links",
      "mcp__egrul__org_financials",
      "mcp__egrul__org_rating",
      "mcp__egrul__check_sanctions_org",
      "mcp__egrul__check_inoagent_org",
      "mcp__egrul__check_fedsfm_org",
      "mcp__egrul__check_disqualified",
      "mcp__egrul__check_mvd_wanted",
      "mcp__egrul__check_fsin_wanted",
      "mcp__egrul__new_organizations",
      "mcp__egrul__new_entrepreneurs",
      "mcp__egrul__updated_organizations",
      "mcp__egrul__updated_entrepreneurs",
      "mcp__egrul__check_sanctions_person",
      "mcp__egrul__check_inoagent_person",
      "mcp__egrul__check_fedsfm_person",
      "mcp__egrul__check_zakupki_org",
      "mcp__egrul__currency_rate",
      "mcp__egrul__check_bankrot_org",
      "mcp__egrul__check_rnp_org",
      "mcp__egrul__check_koap1928_org",
      "mcp__egrul__check_rom_org",
      "mcp__egrul__check_nalog_bi_org",
      "mcp__egrul__check_invalid_inn",
      "mcp__egrul__monitoring_subscribe",
      "mcp__egrul__monitoring_list",
      "mcp__egrul__monitoring_set_notify",
      "mcp__egrul__check_disqualified_by_org_name",
      "mcp__egrul__check_disqualified_by_person",
      "mcp__egrul__org_accounting_files",
      "mcp__egrul__org_filing_history"
    ],
    "deny": [
      "mcp__egrul__monitoring_unsubscribe"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as egrul. Review it before you use it.

Capability tags behind 37 rules
  • mcp__egrul__org_lookup untrusted-input
  • mcp__egrul__search_organizations private-data, untrusted-input
  • mcp__egrul__org_links untrusted-input
  • mcp__egrul__org_financials untrusted-input
  • mcp__egrul__org_rating untrusted-input
  • mcp__egrul__check_sanctions_org untrusted-input
  • mcp__egrul__check_inoagent_org untrusted-input
  • mcp__egrul__check_fedsfm_org untrusted-input
  • mcp__egrul__check_disqualified untrusted-input
  • mcp__egrul__check_mvd_wanted untrusted-input
  • mcp__egrul__check_fsin_wanted untrusted-input
  • mcp__egrul__new_organizations untrusted-input
  • mcp__egrul__new_entrepreneurs untrusted-input
  • mcp__egrul__updated_organizations untrusted-input
  • mcp__egrul__updated_entrepreneurs untrusted-input
  • mcp__egrul__check_sanctions_person untrusted-input
  • mcp__egrul__check_inoagent_person untrusted-input
  • mcp__egrul__check_fedsfm_person untrusted-input
  • mcp__egrul__check_zakupki_org untrusted-input
  • mcp__egrul__bik_lookup untrusted-input
  • mcp__egrul__currency_rate untrusted-input
  • mcp__egrul__get_reference untrusted-input
  • mcp__egrul__check_bankrot_org untrusted-input
  • mcp__egrul__check_rnp_org untrusted-input
  • mcp__egrul__check_koap1928_org untrusted-input
  • mcp__egrul__check_rom_org untrusted-input
  • mcp__egrul__check_nalog_bi_org untrusted-input
  • mcp__egrul__check_invalid_inn untrusted-input
  • mcp__egrul__check_fl_npd_status untrusted-input
  • mcp__egrul__monitoring_list private-data, untrusted-input
  • mcp__egrul__monitoring_set_notify outbound
  • mcp__egrul__check_disqualified_by_org_name untrusted-input
  • mcp__egrul__check_disqualified_by_person untrusted-input
  • mcp__egrul__org_accounting_files untrusted-input
  • mcp__egrul__lookup_inn_by_passport untrusted-input
  • mcp__egrul__org_filing_history untrusted-input
  • mcp__egrul__org_filing_snapshot private-data, untrusted-input