io.github.bartosz-kuc/skanfirmy

Est-ce que io.github.bartosz-kuc/skanfirmy est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.bartosz-kuc/skanfirmy » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 14 outils

• changes_since≈ 240 tokens

  Return changes (VAT status, bank accounts, or registry data — name, address, KRS, REGON — from the White List) detected since a given date for the NIPs you monitor. The field property is one of: status_vat, account_added, account_removed, name, address, krs, regon. For natural persons (entities without a KRS number; natural_person: true) only status_vat, account_added and account_removed are returned, account numbers are masked (check digits + last 4, e.g. 61…2874) and name is null (GDPR); check a specific account with sprawdz_rachunek. A polling channel for agents. Requires a skanfirmy API key.

  Paramètres, retour & exemple (2)

  Paramètres

  • since · string · optionnel
    ISO date/timestamp (e.g. 2026-08-01). Returns changes since that date. Defaults to the beginning.
  • api_key · string · optionnel
    skanfirmy API key (optional, if not in the header).

  Exemple d'appel

  {"name": "changes_since", "arguments": {"since": "texte", "api_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• generuj_mikrorachunek≈ 142 tokens

  Generate the individual tax micro-account (for PIT/CIT/VAT payments) from a NIP. The server does not accept PESEL (personal ID) — for a PESEL compute it locally: BBAN = "101000712221" + PESEL + "0", IBAN = "PL" + ISO 7064 mod-97 check digits + BBAN (or use skanfirmy.pl/mikrorachunek, which computes it in the browser).

  Paramètres, retour & exemple (1)

  Paramètres

  • identyfikator · string · requis
    NIP (10 digits). PESEL is not accepted by the server.

  Exemple d'appel

  {"name": "generuj_mikrorachunek", "arguments": {"identyfikator": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_observations≈ 149 tokens

  Return the list of NIPs you monitor, with their current VAT status and last-checked date (name is null for natural persons running a business). Each entry keeps the raw Ministry of Finance literal in status_vat and, when a status is known, adds derived language-neutral fields vat_active (boolean) and status_vat_code (active/exempt/not_registered). Requires a skanfirmy API key.

  Paramètres, retour & exemple (1)

  Paramètres

  • api_key · string · optionnel
    skanfirmy API key (optional, if not in the header).

  Exemple d'appel

  {"name": "list_observations", "arguments": {"api_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• oblicz_odsetki≈ 214 tokens

  Calculate statutory or commercial (B2B) late-payment interest, broken down by NBP reference-rate periods.

  Paramètres, retour & exemple (4)

  Paramètres

  • typ · string · requis · kc | h10 | h8
    kc = statutory late-payment interest (Civil Code art. 481, NBP reference rate + 5.5 pp); h10 = commercial B2B transactions, non-public debtor (NBP reference rate on 1 Jan / 1 Jul + 10 pp); h8 = commercial transactions, public healthcare debtor (NBP reference rate on 1 Jan / 1 Jul + 8 pp).
  • kwota · number · requis
    Overdue amount in PLN.
  • dataDo · string · requis
    Actual payment date, format YYYY-MM-DD.
  • dataOd · string · requis
    Payment due date, format YYYY-MM-DD.

  Exemple d'appel

  {"name": "oblicz_odsetki", "arguments": {"typ": "kc", "kwota": 1, "dataDo": "texte", "dataOd": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• observe_nip≈ 195 tokens

  Add a NIP to monitoring. You get notified (via changes_since or email) when its VAT status, bank account, or registry data shown on the Ministry of Finance White List (name, address, KRS, REGON) changes. For natural persons running a business (entities without a KRS number) only the VAT status and masked bank accounts are monitored (GDPR): no name, address or REGON changes. Requires a skanfirmy API key (Authorization: Bearer, or the api_key argument). Free plan: up to 10 NIPs.

  Paramètres, retour & exemple (2)

  Paramètres

  • nip · string · requis
    10-digit NIP to monitor.
  • api_key · string · optionnel
    skanfirmy API key (if not provided in the Authorization header).

  Exemple d'appel

  {"name": "observe_nip", "arguments": {"nip": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• set_webhook≈ 163 tokens

  Set (or clear) a push webhook URL for your monitoring, instead of or in addition to polling. When we detect a change for a monitored NIP, we send a POST signed with HMAC-SHA256 (X-Skanfirmy-Signature header). Returns the secret ONCE. Pass an empty url to disable. Requires a skanfirmy API key. Public https addresses only (port 443).

  Paramètres, retour & exemple (2)

  Paramètres

  • url · string · optionnel
    Public https URL of the receiver (empty = disable the webhook).
  • api_key · string · optionnel
    skanfirmy API key (optional, if not in the header).

  Exemple d'appel

  {"name": "set_webhook", "arguments": {"url": "texte", "api_key": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• sprawdz_lista_nip≈ 308 tokens

  Bulk-check up to 30 NIPs in one call to the Ministry of Finance VAT White List: VAT status, bank accounts, REGON, KRS number and address of each entity. For entities without a KRS number (natural persons) the address is reduced to the town and bank accounts to their count, and no REGON number or registration date is returned (GDPR) — check a specific account with sprawdz_rachunek. For verifying a portfolio of counterparties. Ministry limits: max 30 NIPs per call; the Ministry's daily query limit is shared by the whole service — when it is exhausted, the tool returns an error. Does not fetch full KRS data (use sprawdz_nip for individual entities). If every NIP in the list is an entity with a KRS number already checked today, the result comes from a same-day cache without a Ministry query: mfCached is true and mfRequestDateTime is the time of the oldest of those queries.

  Paramètres, retour & exemple (1)

  Paramètres

  • nipy · array · requis
    List of NIPs (1 to 30). Each 10-digit with a valid checksum. Invalid NIPs are returned separately in the invalidInput field.

  Exemple d'appel

  {"name": "sprawdz_lista_nip", "arguments": {"nipy": []}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• sprawdz_nip≈ 229 tokens

  Check VAT status (VAT White List / Biała Lista) and KRS data for a Polish company by NIP. For entities without a KRS number (sole proprietors and civil partnerships, i.e. natural persons) personal data is limited (GDPR): the address is reduced to the town (the White List does not say whether it is a business or a home address), and bank accounts to their count — check a specific account with sprawdz_rachunek; no REGON number, registration date or PKD codes are returned for them (the ceidg field is always null). The privacy field lists what was hidden. White List data for entities with a KRS number may come from a same-day cache: then mfCached is true and bl.mfRequestDateTime is the time of the original Ministry query.

  Paramètres, retour & exemple (1)

  Paramètres

  • nip · string · requis
    10-digit Polish NIP (tax ID).

  Exemple d'appel

  {"name": "sprawdz_nip", "arguments": {"nip": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• sprawdz_rachunek≈ 116 tokens

  Check whether a bank account number (NRB) appears in the VAT White List for a given NIP. Due diligence for payments above PLN 15,000.

  Paramètres, retour & exemple (2)

  Paramètres

  • nip · string · requis
    10-digit NIP of the counterparty.
  • numerRachunku · string · requis
    26-digit bank account number (NRB), without the PL prefix.

  Exemple d'appel

  {"name": "sprawdz_rachunek", "arguments": {"nip": "texte", "numerRachunku": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• sprawdz_regon≈ 213 tokens

  Look up entity data in the REGON register (Statistics Poland / GUS BIR) by NIP: REGON number, official name, legal form (legal or natural person), address (voivodeship, county, municipality). Covers ALL entities, including sole proprietors that are not in the KRS. For natural persons (GUS type F / LF) and civil partnerships (s.c.) only the NIP, name, entity type code (typ), form (forma: 'osoba fizyczna' / 'jednostka lokalna osoby fizycznej' / 'spółka cywilna'), town and activity status (status: active / ended) are returned — no REGON number, address, administrative units or dates (GDPR); the full entry is in the GUS REGON search (privacy.officialSource).

  Paramètres, retour & exemple (1)

  Paramètres

  • nip · string · requis
    10-digit Polish NIP (tax ID).

  Exemple d'appel

  {"name": "sprawdz_regon", "arguments": {"nip": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• sprawdz_vies≈ 176 tokens

  Validate a counterparty's EU VAT number in the VIES system (European Commission). For Polish (PL) numbers the address is reduced to the town, because the number may belong to a natural person (GDPR).

  Paramètres, retour & exemple (2)

  Paramètres

  • vatNumber · string · requis
    VAT number without the country prefix.
  • countryCode · string · requis · AT | BE | BG | CY | CZ | DE | DK | EE
    Two-letter EU country code (e.g. DE, IE, FR).

  Exemple d'appel

  {"name": "sprawdz_vies", "arguments": {"vatNumber": "texte", "countryCode": "AT"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• szukaj_katalog_api≈ 188 tokens

  Search otwarteAPI.pl, a catalog of public Polish and EU APIs (VAT, KRS, GUS, NBP, ECB, Eurostat and more). Returns matching entries with a link to each API's official docs. An empty query returns the whole catalog (optionally narrowed by scope or topic).

  Paramètres, retour & exemple (3)

  Paramètres

  • temat · string · optionnel
    Narrow to a specific catalog tag, e.g. "firmy" or "dane-statystyczne". Optional.
  • zasieg · string · optionnel · PL | EU
    Narrow to Polish (PL) or EU APIs. Optional.
  • zapytanie · string · optionnel
    Natural-language query, e.g. "euro exchange rate" or "weather data". Optional.

  Exemple d'appel

  {"name": "szukaj_katalog_api", "arguments": {"temat": "texte", "zasieg": "PL", "zapytanie": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• szukaj_pkd≈ 76 tokens

  Search PKD 2025 business activity codes by activity name or code number.

  Paramètres, retour & exemple (1)

  Paramètres

  • zapytanie · string · requis
    Activity name (e.g. "software") or PKD code (e.g. "62.01").

  Exemple d'appel

  {"name": "szukaj_pkd", "arguments": {"zapytanie": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• unobserve_nip≈ 94 tokens

  Stop watching a NIP — the watch is deleted right away. Requires a skanfirmy API key.

  Paramètres, retour & exemple (2)

  Paramètres

  • nip · string · requis
    10-digit NIP to stop watching.
  • api_key · string · optionnel
    skanfirmy API key (optional, if not in the header).

  Exemple d'appel

  {"name": "unobserve_nip", "arguments": {"nip": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://skanfirmy.pl/mcp