Skip to content

HiveCloud CT-e / MDF-e

by mcp-dir · remote · no sign-in to list tools · v0.1.0 · published by GitHub user mcp-dir

Transportation fiscal-document issuer from Bsoft by nstech (HiveCloud). Query CT-e (freight bill of

Deletes · 3Changes · 16
CompareRegistry entry

33 tools: 3 can delete or cancel things, 16 change things and 14 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http hivecloud https://api.mcp.ai/p_hivecloud

Findings

Matches of fixed checks, with the text they matched.

2 info
  • Infoconnect

    The description mentions "credentials".

    Matched text

    description: "...nticated:true and empty pending[]. When credentials are missing, returns connect_url for th..."

    What this check looks for
  • Infomarketplace

    The description mentions "credential".

    Matched text

    description: "...ating the tool list. If the MCP needs a credential/login, invoke returns a connect link; i..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

33 tools

Deletes or cancels 3Claude Code: deny
  • hivecloud_cte_cancelarATO FISCAL REAL: cancela um ou mais CT-e autorizados (por id) junto à SEFAZ.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    ATO FISCAL REAL: cancela um ou mais CT-e autorizados (por id) junto à SEFAZ. Irreversível. Exige allow_writes.

    Annotations the server declares

    • title: hivecloud_cte_cancelar
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • hivecloud_cte_excluirExclui um ou mais CT-e (rascunhos/rejeitados, por id).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Exclui um ou mais CT-e (rascunhos/rejeitados, por id). Irreversível. Exige allow_writes.

    Annotations the server declares

    • title: hivecloud_cte_excluir
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • hivecloud_mdfe_cancelarATO FISCAL REAL: cancela um ou mais MDF-e (por id) junto à SEFAZ.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    ATO FISCAL REAL: cancela um ou mais MDF-e (por id) junto à SEFAZ. Irreversível. Exige allow_writes + mdfe_tenant_id.

    Annotations the server declares

    • title: hivecloud_mdfe_cancelar
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
Changes things 16Claude Code: ask
  • authenticateMCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    MCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header `Authorization: Bearer <token>` for a permanent, non-expiring connection. Or paste it here for a session-only login: call with { token: "<jwt>" } after the user pastes, or with no args to get the link.

    Annotations the server declares

    • title: Authenticate
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_cte_averbarAverba (registra o seguro de carga) um ou mais CT-e (por id).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Averba (registra o seguro de carga) um ou mais CT-e (por id). Exige allow_writes.

    Annotations the server declares

    • title: hivecloud_cte_averbar
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • hivecloud_cte_carta_correcaoATO FISCAL REAL: emite uma carta de correção (CC-e) para um CT-e autorizado.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    ATO FISCAL REAL: emite uma carta de correção (CC-e) para um CT-e autorizado. `correcoes` é um objeto só com os campos a corrigir (ex.: {caracteristicaAdicionalTransporte, tipoServico, finalidadeEmissao, localEmissao, remetente, destinatario, ...}). Exige allow_writes. Bulk support: accepts cte_ids, empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_cte_carta_correcao
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • hivecloud_cte_criar_de_nfeCria um RASCUNHO de CT-e a partir de uma ou mais chaves de NF-e (mesmo remetente e destinatário).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Cria um RASCUNHO de CT-e a partir de uma ou mais chaves de NF-e (mesmo remetente e destinatário). Importa os dados da nota, usa o último CT-e autorizado da empresa como base de imposto/CFOP/local de emissão e preenche carga, valores e envolvidos. NÃO transmite à SEFAZ: o documento fica em digitação pra revisão e emissão. Exige allow_writes na conexão. Bulk support: accepts template_cte_ids, empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_cte_criar_de_nfe
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • hivecloud_cte_dacteGera o PDF do DACTE de um ou mais CT-e autorizados e devolve a URL de download (temporária).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Gera o PDF do DACTE de um ou mais CT-e autorizados e devolve a URL de download (temporária). Mesma ação do botão Imprimir DACTe do emissor, não altera o documento.

    Annotations the server declares

    • title: hivecloud_cte_dacte
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_cte_emitirATO FISCAL REAL: transmite um ou mais CT-e à SEFAZ (por id).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    ATO FISCAL REAL: transmite um ou mais CT-e à SEFAZ (por id). Opera sobre documentos já criados/em digitação. Exige allow_writes habilitado na conexão.

    Annotations the server declares

    • title: hivecloud_cte_emitir
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • hivecloud_cte_xmlExporta o XML de um ou mais CT-e (zip) e devolve a URL de download (temporária).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Exporta o XML de um ou mais CT-e (zip) e devolve a URL de download (temporária). Mesma ação do botão Exportar XML do emissor, não altera o documento.

    Annotations the server declares

    • title: hivecloud_cte_xml
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_mdfe_damdfeGera o PDF do DAMDFE de um ou mais MDF-e e devolve a URL de download (temporária).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Gera o PDF do DAMDFE de um ou mais MDF-e e devolve a URL de download (temporária). Mesma ação do botão de impressão do emissor, não altera o documento. Exige mdfe_tenant_id na conexão.

    Annotations the server declares

    • title: hivecloud_mdfe_damdfe
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_mdfe_emitirATO FISCAL REAL: transmite um ou mais MDF-e à SEFAZ (por id).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    ATO FISCAL REAL: transmite um ou mais MDF-e à SEFAZ (por id). Exige allow_writes + mdfe_tenant_id.

    Annotations the server declares

    • title: hivecloud_mdfe_emitir
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • hivecloud_mdfe_empresasLista as empresas emitentes do ambiente de MDF-e (o MDF-e tem ambiente e empresas PRÓPRIOS, distintos do CT-e).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Lista as empresas emitentes do ambiente de MDF-e (o MDF-e tem ambiente e empresas PRÓPRIOS, distintos do CT-e). O `id` é o `empresa_id` das tools de MDF-e. Exige mdfe_tenant_id na conexão.

    Annotations the server declares

    • title: hivecloud_mdfe_empresas
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_mdfe_encerrarATO FISCAL REAL: encerra um ou mais MDF-e (por id) após o fim da viagem.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    ATO FISCAL REAL: encerra um ou mais MDF-e (por id) após o fim da viagem. Exige allow_writes + mdfe_tenant_id.

    Annotations the server declares

    • title: hivecloud_mdfe_encerrar
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • hivecloud_mdfe_xmlExporta o XML de um ou mais MDF-e (zip) e devolve a URL de download (temporária).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Exporta o XML de um ou mais MDF-e (zip) e devolve a URL de download (temporária). Não altera o documento. Exige mdfe_tenant_id na conexão.

    Annotations the server declares

    • title: hivecloud_mdfe_xml
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_nfe_infoConsulta os dados de uma NF-e pela chave de acesso (44 dígitos) via emissor: remetente e destinatário (já resolvidos no cadastro), valor da carga, pesos, volumes e produto predomin…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Consulta os dados de uma NF-e pela chave de acesso (44 dígitos) via emissor: remetente e destinatário (já resolvidos no cadastro), valor da carga, pesos, volumes e produto predominante. É o passo antes de criar o CT-e. A consulta conta na franquia de consultas de NF-e do plano do emissor. Bulk support: accepts empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_nfe_info
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_relatorio_viagensRelatório consolidado de viagens (MDF-e) por período: contagem por mês, ranking por placa e por motorista, com filtros por placa e/ou motorista (CPF ou nome) e faturamento opcional…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Relatório consolidado de viagens (MDF-e) por período: contagem por mês, ranking por placa e por motorista, com filtros por placa e/ou motorista (CPF ou nome) e faturamento opcional (soma do valorTotalFrete dos CT-e vinculados a cada MDF-e). Consolida N empresas numa chamada (empresa_ids; omitido = todas). Resolve tudo server-side (lista o período e detalha cada MDF-e). Cancelados ficam fora por padrão. Exige mdfe_tenant_id na conexão. Responde perguntas como: quantas cargas a placa X fez no trimestre e quanto faturou.

    Annotations the server declares

    • title: hivecloud_relatorio_viagens
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • marketplaceThe official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ating the tool list. If the MCP needs a credential/login, invoke returns a connect link; i..."

      What this check looks for
    Description, as the server wrote it
    The official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them. Covers capability requests like "find an MCP that does X", "consulta um CPF", "is there a tool for Y". Core flow: action=search discovers MCPs by intent → describe returns one MCP's full profile (every tool with its id + params, pricing, auth) so you pick the right tool_id → invoke RUNS that tool. KEY: invoke works even when the MCP is NOT installed — it runs the tool pontualmente (one-off), without adding the MCP to the toolkit and without bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wallet is empty, invoke returns a checkout/top-up link (the user opens it, then you retry). Use install only to make an MCP PERMANENT in the active toolkit (its tools then show up natively in future sessions); prefer invoke for a single/occasional use. list_tools lists what is callable right now. subscribe/cancel handle per-MCP billing; report_bug sends feedback; request_mcp asks us to build a NEW MCP when nothing fits. Search/describe flag installed_in_toolkit vs installed_in_workspace. Writes (install/uninstall/subscribe/cancel and the one-off install behind invoke) require workspace owner/admin. It also carries the mcp.ai PROMPT LIBRARY, which is about ready-made prompt TEXT rather than MCPs: search_prompts finds one, get_prompt returns its full text with {{variables}} filled, and publish_prompt saves a prompt and returns a shareable mcp.ai/p/<slug> link that opens without login.

    Annotations the server declares

    • title: Marketplace
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • report_bugReport a bug, missing feature, or send feedback.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Report a bug, missing feature, or send feedback. Include the conversation array with recent messages for reproduction.

    Annotations the server declares

    • title: Report Bug
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 14Claude Code: allow
  • connectReturns connection status and URLs.1 finding

    Why it is in this group

    • The description's first verb is "return": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...nticated:true and empty pending[]. When credentials are missing, returns connect_url for th..."

      What this check looks for
    Description, as the server wrote it
    Returns connection status and URLs. When all providers are connected, returns authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-install URLs.

    Annotations the server declares

    • title: Connection Status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_get_cteDetalha um CT-e específico pelo id.No findings

    Why it is in this group

    • The name "hivecloud_get_cte" says "get": a word for reading.
    Description, as the server wrote it
    Detalha um CT-e específico pelo id. Bulk support: accepts ids, empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_get_cte
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_get_mdfeDetalha um MDF-e pelo id: placa do veículo (dadosVeiculo), condutores (nome/CPF), CIOT, documentos vinculados (chaves de CT-e/NF-e), UFs, valor e peso da carga, status e protocolos…No findings

    Why it is in this group

    • The name "hivecloud_get_mdfe" says "get": a word for reading.
    Description, as the server wrote it
    Detalha um MDF-e pelo id: placa do veículo (dadosVeiculo), condutores (nome/CPF), CIOT, documentos vinculados (chaves de CT-e/NF-e), UFs, valor e peso da carga, status e protocolos. A listagem não traz esses campos, só o detalhe. Exige mdfe_tenant_id na conexão. Bulk support: accepts ids, empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_get_mdfe
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_list_accountsLista as contas HiveCloud conectadas a este install (cada usuário+ambiente = uma conta).No findings

    Why it is in this group

    • The name "hivecloud_list_accounts" says "list": a word for reading.
    Description, as the server wrote it
    Lista as contas HiveCloud conectadas a este install (cada usuário+ambiente = uma conta).

    Annotations the server declares

    • title: hivecloud_list_accounts
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_list_ctesLista os CT-e (Conhecimento de Transporte eletrônico) da empresa, paginado, com filtro por data de emissão.No findings

    Why it is in this group

    • The name "hivecloud_list_ctes" says "list": a word for reading.
    Description, as the server wrote it
    Lista os CT-e (Conhecimento de Transporte eletrônico) da empresa, paginado, com filtro por data de emissão. Retorna número, série, UF inicial/final, valor do frete, remetente/destinatário, status, datas e status de averbação. Bulk support: accepts empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_list_ctes
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_list_dcesLista as DC-e (Declaração de Conteúdo eletrônica) da empresa, paginado.No findings

    Why it is in this group

    • The name "hivecloud_list_dces" says "list": a word for reading.
    Description, as the server wrote it
    Lista as DC-e (Declaração de Conteúdo eletrônica) da empresa, paginado. Bulk support: accepts empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_list_dces
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_list_empresasLista as empresas emitentes do ambiente (id, nome, cnpj).No findings

    Why it is in this group

    • The name "hivecloud_list_empresas" says "list": a word for reading.
    Description, as the server wrote it
    Lista as empresas emitentes do ambiente (id, nome, cnpj). O `id` é o `empresa_id` exigido nas demais tools (passo de seleção da empresa).

    Annotations the server declares

    • title: hivecloud_list_empresas
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_list_inutilizacoesLista as inutilizações de numeração de CT-e da empresa, paginado.No findings

    Why it is in this group

    • The name "hivecloud_list_inutilizacoes" says "list": a word for reading.
    Description, as the server wrote it
    Lista as inutilizações de numeração de CT-e da empresa, paginado. Bulk support: accepts empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_list_inutilizacoes
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_list_mdfesLista os MDF-e (Manifesto Eletrônico de Documentos Fiscais) da empresa, paginado (número, série, dataEmissao, statusMdfe, UF de carregamento/descarregamento, CIOT).No findings

    Why it is in this group

    • The name "hivecloud_list_mdfes" says "list": a word for reading.
    Description, as the server wrote it
    Lista os MDF-e (Manifesto Eletrônico de Documentos Fiscais) da empresa, paginado (número, série, dataEmissao, statusMdfe, UF de carregamento/descarregamento, CIOT). Exige mdfe_tenant_id na conexão (ambiente do MDF-e, distinto do CT-e). Bulk support: accepts empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_list_mdfes
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_list_motoristasLista os motoristas/condutores cadastrados (nome, cpf, cnh), usados no MDF-e, paginado.No findings

    Why it is in this group

    • The name "hivecloud_list_motoristas" says "list": a word for reading.
    Description, as the server wrote it
    Lista os motoristas/condutores cadastrados (nome, cpf, cnh), usados no MDF-e, paginado. Exige mdfe_tenant_id na conexão. Bulk support: accepts empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_list_motoristas
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_list_veiculosLista os veículos cadastrados (placa, motorista, reboque, tara), usados no MDF-e, paginado.No findings

    Why it is in this group

    • The name "hivecloud_list_veiculos" says "list": a word for reading.
    Description, as the server wrote it
    Lista os veículos cadastrados (placa, motorista, reboque, tara), usados no MDF-e, paginado. Exige mdfe_tenant_id na conexão. Bulk support: accepts empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_list_veiculos
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • hivecloud_sefaz_statusStatus do serviço da SEFAZ para a empresa (se o servidor da Fazenda está em operação).No findings

    Why it is in this group

    • The name "hivecloud_sefaz_status" says "status": a word for reading.
    Description, as the server wrote it
    Status do serviço da SEFAZ para a empresa (se o servidor da Fazenda está em operação). Bulk support: accepts empresa_ids for batched execution.

    Annotations the server declares

    • title: hivecloud_sefaz_status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • show_versionShow the current MCP platform and adapter versions.No findings

    Why it is in this group

    • The name "show_version" says "show": a word for reading.
    Description, as the server wrote it
    Show the current MCP platform and adapter versions.

    Annotations the server declares

    • title: Show Version
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • toolkit_infoReturns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.

    Annotations the server declares

    • title: Toolkit Info
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http hivecloud https://api.mcp.ai/p_hivecloud

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__hivecloud__hivecloud_list_accounts",
      "mcp__hivecloud__hivecloud_list_empresas",
      "mcp__hivecloud__hivecloud_list_ctes",
      "mcp__hivecloud__hivecloud_get_cte",
      "mcp__hivecloud__hivecloud_list_dces",
      "mcp__hivecloud__hivecloud_list_inutilizacoes",
      "mcp__hivecloud__hivecloud_sefaz_status",
      "mcp__hivecloud__hivecloud_list_mdfes",
      "mcp__hivecloud__hivecloud_get_mdfe",
      "mcp__hivecloud__hivecloud_list_veiculos",
      "mcp__hivecloud__hivecloud_list_motoristas",
      "mcp__hivecloud__show_version",
      "mcp__hivecloud__connect",
      "mcp__hivecloud__toolkit_info"
    ],
    "ask": [
      "mcp__hivecloud__hivecloud_cte_dacte",
      "mcp__hivecloud__hivecloud_cte_xml",
      "mcp__hivecloud__hivecloud_nfe_info",
      "mcp__hivecloud__hivecloud_cte_criar_de_nfe",
      "mcp__hivecloud__hivecloud_mdfe_empresas",
      "mcp__hivecloud__hivecloud_mdfe_damdfe",
      "mcp__hivecloud__hivecloud_mdfe_xml",
      "mcp__hivecloud__hivecloud_relatorio_viagens",
      "mcp__hivecloud__hivecloud_cte_emitir",
      "mcp__hivecloud__hivecloud_cte_averbar",
      "mcp__hivecloud__hivecloud_cte_carta_correcao",
      "mcp__hivecloud__hivecloud_mdfe_emitir",
      "mcp__hivecloud__hivecloud_mdfe_encerrar",
      "mcp__hivecloud__report_bug",
      "mcp__hivecloud__marketplace",
      "mcp__hivecloud__authenticate"
    ],
    "deny": [
      "mcp__hivecloud__hivecloud_cte_cancelar",
      "mcp__hivecloud__hivecloud_cte_excluir",
      "mcp__hivecloud__hivecloud_mdfe_cancelar"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as hivecloud. Review it before you use it.