com.4chemsPublished by 4chems.comOfficial publisherv0.12.1Updated Oct 24, 2026
Remote MCP server for 4chems hosted IUCLID, CHESAR and QSAR Toolbox: onboarding, inquiries, admin.
Remote MCP server for the 4chems hosting platform, letting an assistant handle account sign-up, inquiries, tenant access, invitations, billing and service setup
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/com.4chems%2Fplatform-api/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"4chems-platform-iuclid-chesar-qsar-toolb": {
"type": "http",
"url": "https://mcp.4chems.com/mcp"
}
}
}A public, remote Model Context Protocol server for the 4chems platform: hosted IUCLID 6, CHESAR, OECD QSAR Toolbox and IIP for REACH, CLP and biocides work, EU-hosted and GDPR-compliant.
Claude Code
Claude Desktop / claude.ai — Settings → Connectors → Add custom connector →
https://mcp.4chems.com/mcp. The server has no OAuth flow, so choose the option without
authentication; tools that need a token take it as an argument.
Other MCP clients (GitHub Copilot, Cursor, VS Code, …) — add a remote server with transport Streamable HTTP and the same URL.
Raw handshake (no client needed):
The server exposes the customer tier of the 4chems platform API (/v1). This endpoint
carries no substance or dossier data — see What this is not.
No token needed
Bearer token required (authorization: "Bearer <token>")
Long-running mutations poll to completion; past the poll bound they return
{"status": "running", "operation_id": …} for follow-up with get_my_operation.
The initialize response carries these as server instructions:
authorization argument, never log it.start_inquiry.server.json; the server itself is operated by 4chems.Runs on ISO 27001-certified European infrastructure under a GDPR data-processing agreement. 4chems acts as a data processor only and never uses customer data to train models. Security questionnaire: https://www.4chems.com/security-questionnaire/.
start_inquiry (no account needed)Source: README.md at commit f8df593
Get Catalog Templates
Return the enabled ApplicationTemplate catalog, ordered by name. Call this to discuss trial and template options with a prospect or customer before starting a trial. If this doesn't answer your question, call `start_inquiry` to ask 4chems directly or request a call.
authorizationList Consents
Return the caller's own recorded consents plus the tenant-scope consents of every tenant where the caller is at least a viewer. Call this to check which legal documents have already been accepted before asking again. Pass `tenant_id` to list one tenant's consents only (a caller of several tenants must).
tenant_idauthorizationrequiredRecord Consent
Record acceptance of a legal document version and return the entry; call this only after showing the user the document URL and version and receiving an explicit affirmative answer.
tenant_idauthorizationrequireddocument_coderequireddocument_versionrequiredStart Inquiry
Store an anonymous inquiry draft and email a 6-digit verification code. Ask the user for the code, then call verify_inquiry with the returned challenge_id and code — the inquiry reaches 4chems only after that verification succeeds.
bodyauthorizationVerify Inquiry
Verify the 6-digit code and deliver the inquiry to the helpdesk inbox.
bodyauthorizationAccept Invitation
Accept a pending invitation and grant the invitee's first role assignment. Call this when an invitee has a valid invite link and wants to join the tenant; single-use, consuming the token marks it accepted.
tokenrequiredauthorizationrequiredGet My Access
Return the caller's access level per related tenant. Call this to check what the current caller is authorized to do before attempting an action that requires a specific level, or to discover a pending invitation or access request.
authorizationrequiredCreate Access Request Endpoint
Request access to the tenant that owns the caller's verified email domain.
authorizationrequiredApprove Access Request Endpoint
Approve a pending access request: issue a `member` invitation to the requester and resolve the request (level `admin` or `owner` of the request's tenant). The response carries the single-use invitation token to hand to the requester, who accepts via `accept_invitation`. 409 `access_request.not_pending` unless the request is pending.
authorizationrequiredaccess_request_idrequiredDismiss Access Request Endpoint
Dismiss a pending access request (level `admin` or `owner` of the request's tenant). The requester is mailed — naming the tenant, never the dismissing admin — and may ask again. 409 `access_request.not_pending` unless the request is pending.
authorizationrequiredaccess_request_idrequiredWithdraw Access Request Endpoint
Withdraw the caller's own pending access request; no notification is sent. Any other caller gets 404 `access_request.not_found`, the same as for an unknown id. 409 `access_request.not_pending` unless pending.
authorizationrequiredaccess_request_idrequiredEnrich Domain Endpoint
Fetch the caller's domain imprint and suggest legal-entity details (UC-057).
authorizationrequiredStart Device Login
Sign in to an existing account by device login (UC-091, RFC 8628). Anonymous, empty body; the account must exist (start_account_registration, then set the password through the emailed link). Show `verification_uri` (or `verification_uri_complete`) and `user_code` to the human, who signs in there, then call `verify_device_login` with `challenge_id`, waiting `interval` seconds between calls. The response never contains the Keycloak device_code or the agent client secret.
authorizationVerify Device Login
Poll a device login to token issuance (UC-091, RFC 8628). Anonymous. While the human has not signed in yet it answers `{"status": "pending", "retry_after": <seconds>}`: wait `retry_after` seconds and call again with the same `challenge_id`. On approval it returns Keycloak's token set (`access_token`, `refresh_token`, `expires_in`, ...) exactly once; pass the `access_token` as `authorization` ('Bearer <token>') to every other tool.
bodyauthorizationStart Account Registration
Start registering a 4chems account with a business email address (`email`, `name`, optional `company`). Anonymous. Emails a 6-digit code to the address; no account exists yet. Ask the user for the code, then call verify_account_registration with the returned challenge_id and code. Free-mail addresses (gmail.com, ...) are refused: use the company address, or call start_inquiry. The answer is the same whether or not the address already has an account.
bodyauthorizationVerify Account Registration
Verify the emailed 6-digit code (`challenge_id`, `code`) and create the 4chems account. Never guess or retry codes, and never ask the user for a password.
bodyauthorizationStart Registration (deprecated — use start_device_login)
DEPRECATED: use start_device_login. Deprecated — use start_device_login (same behaviour).
authorizationVerify Registration (deprecated — use verify_device_login)
DEPRECATED: use verify_device_login. Deprecated — use verify_device_login (same behaviour).
bodyauthorizationGet Onboarding Route
Return the next onboarding step. If this doesn't answer your question, call `start_inquiry` to ask 4chems directly or request a call.
authorizationCreate Self Service Tenant
Create a 7-day trial tenant for the caller's business email domain (UC-052). Needs a verified email on a business domain and `attestation: true`; answers `auth.email_not_verified`, `tenant.attestation_required`, `tenant.free_mail_domain` (free-mail address), `tenant.domain_exists` (a live trial tenant on the domain) or `trial.exists_for_domain` (the domain already had its one trial; call `start_inquiry`). The trial lasts exactly 7 days; `ttl` / `expires_at` in the body are ignored.
bodyauthorizationrequiredGet My Operation
Return the status, result and error of an operation the caller started, such as the `Location` of a `202` from `complete_billing`. Call this to poll it to completion.
operation_idrequiredauthorizationrequiredGet Legal Entity Types
Return the legal-entity types available for *country*, ordered alphabetically. If this doesn't answer your question, call `start_inquiry` to ask 4chems directly or request a call.
countryrequiredauthorizationGet Billing
Return the tenant's stored billing details: VAT id, invoice address, invoice email and PO reference. Call this to check whether billing is complete; only the owner and billing contacts may read it (`403 rbac.insufficient_level`).
tenant_idauthorizationrequiredComplete Billing
Complete the tenant's billing details: legal-entity name and type, VAT id, invoice address, invoice email and optional PO reference. Call this when the owner or a billing contact has the details. EU VAT ids are validated against VIES by the worker; a failed operation with `billing.vat_check_unavailable` can be retried by submitting again. Returns `202` with an operation to poll.
bodytenant_idauthorizationrequiredList Invitations
List all invitations for the caller's tenant, most recent first. Call this to show a tenant admin which invitations are pending, accepted, or revoked; the raw token is never included.
tenant_idauthorizationrequiredCreate Invitation
Invite an email address to the caller's tenant at the specified access level and return the invitation, including the raw single-use accept token. Call this when a tenant admin wants to add a new member; the invitee accepts via `accept_invitation`.
bodytenant_idauthorizationrequiredRevoke Invitation
Revoke a pending invitation so its token can no longer be accepted. Call this when a tenant admin wants to withdraw an invite sent by mistake or no longer needed; accepted invitations cannot be revoked.
tenant_idauthorizationrequiredinvitation_idrequiredList Members
List tenant members with their effective role x scope assignments.
tenant_idauthorizationrequiredGrant Assignment
Grant a role x scope assignment to a tenant member.
subrequiredbodytenant_idauthorizationrequiredRevoke Assignment
Revoke a role x scope assignment from a tenant member.
idrequiredsubrequiredtenant_idauthorizationrequiredList Tenant Services
Return the caller's tenant's active service subscriptions. Call this before offering to add a service, to check what is already subscribed.
tenant_idauthorizationrequiredAdd Tenant Service
Request a new service subscription for the caller's tenant and return its status. Call this when a tenant admin wants to add a service (ADR 0016 code fix: requires `admin`, was `customer` realm role only).
bodytenant_idauthorizationrequired90% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Declare a license in the repository or the registry entry.
claude mcp add --transport http 4chems https://mcp.4chems.com/mcpcurl -s -X POST https://mcp.4chems.com/mcp \ -H 'Content-Type: application/json' \ -H 'Accept: application/json, text/event-stream' \ -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"probe","version":"0"}}}'