uratori（ウラトリ）

today.utsuroiPublished by utsuroi.todayOfficial publisherv1.0.0Updated Oct 27, 2026

日本企業の第三者認証(ISO 27001/Pマーク/ISMAP等)を公開情報から実調査し、5区分の判定と証跡URLを返す。未確認は未取得の断定ではない。

VerifiedStreamable HTTPWeb executableSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Researches a Japanese vendor's third-party certifications (ISO/IEC 27001, PrivacyMark, ISMAP, SOC 2) from public sources and returns a graded verdict with…

What you can do
  • Research one Japanese vendor's certification and audit status from public registries and official company sites, optionally keyed to a 13-digit corporate number to avoid mixing up same-named companies
  • Return each result as one of five verdicts (officially confirmed, self-declared public statement, vendor confirmation required, not found in public sources, expired or withdrawn), with an evidence URL and retrieval date per verdict
  • Explain the verdict definitions, the four sub-categories of "not found", and the research method and its limits
When to use it
Useful when checking whether a prospective Japanese supplier or partner holds certifications such as ISO/IEC 27001, PrivacyMark, ISMAP or SOC 2, and when you need a traceable, source-backed starting point for vendor due diligence rather than a pass/fail judgment.
Requirements
Remote streamable HTTP endpoint; no packages, environment variables or headers declared. A 13-digit Japanese corporate number is optional but recommended to disambiguate companies with the same name. Requests are free and may take tens of seconds.
Before you install
Results are reference information only, not a safety or risk verdict and not a guarantee that a certification exists; "not found" does not mean the vendor lacks the certification. Verdicts may rest on self-declared public statements, so confirm with the vendor where the result says so.

Installation

In SourceWeft

  1. Open uratori（ウラトリ） in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/today.utsuroi%2Furatori/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "uratori": {
      "type": "http",
      "url": "https://uratori.utsuroi.today/api/mcp"
    }
  }
}

Tools

2

research_vendor_certifications

日本の取引先(ベンダー)1社の第三者認証・監査レポート(ISO/IEC 27001, プライバシーマーク, ISMAP, SOC 2 等)の取得状況を、公開情報(公的レジストリ・企業公式サイト)から実調査して返す。判定は5区分(公式確認/公開記載=自己申告/要ベンダー確認/公開情報では未確認/失効・取消)で、各判定に証跡URLと取得日が付く。「未確認」は未取得の断定ではない。結果は参考情報であり、安全/危険の判定や認証の保証ではない。法人番号(13桁)を指定すると同名別法人との取り違えを防げる。無料・数十秒かかることがある。

ParametersserviceUrlcompanyNamerequiredserviceNamecorporateNumber

get_status_definitions

uratori の判定5区分(verified_official / public_evidence / vendor_confirm_required / not_found / expired_or_negative)と、not_found の内訳4区分の定義、調査方法と限界を返す。research_vendor_certifications の結果を解釈する前に一度読むことを推奨。

Takes no parameters.

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.