Brdata Mcp

io.github.thomenz由 GitHub 账号 thomenz 发布v0.3.7更新于 Oct 24, 2026

Brazilian company, risk & public-tender data (CNPJ, CEIS/CNEP, PNCP) as x402-paid agent tools

已验证STDIO仅桌面金融商业与电商

概览

AI 生成的概览

面向巴西公司、风险与公共招标数据（CNPJ、CEIS/CNEP、PNCP）的 MCP 服务器，按调用从你配置的钱包以 USDC 付费。

可以做什么
查询 CNPJ 公司档案，包括含合伙人与制裁信息的完整尽职调查视图，并跨联邦登记库筛查监管风险，给出结论与评分。按 CNAE 活动、地点、规模、成立年限和名称搜索并细分活跃公司。解码与解析 Compras.gov.br 和 PNCP 的公共招标，包括标头、明细项、文件链接和关键词搜索。解码 NF-e 访问密钥和 boleto 条码，查询邮政编码，并批量校验 CPF、CNPJ、PIS、车牌和 Pix 标识。可免费校验单个 CNPJ 校验位。
适用场景
适用于巴西公司与公共采购的 KYB、供应商尽职调查、合规筛查和 B2G 销售情报，让助手直接获取这些数据并按次付费。
运行要求
通过 npx 或 Node.js 在本地运行。付费工具需要在 EVM_PRIVATE_KEY 中配置专用 Base 钱包密钥，和/或在 SOLANA_PRIVATE_KEY 中配置 Solana 钱包密钥，并持有 USDC。可选 BRDATA_BASE_URL、SOLANA_RPC_URL 和 X402_NETWORK（base 或 base-sepolia）。需要访问 brdata API 的网络。
安装前请注意
EVM_PRIVATE_KEY 和 SOLANA_PRIVATE_KEY 控制真实资金，任何能读取进程环境或 MCP 配置的程序都可能自动花费；请使用余额较少的专用钱包，切勿使用个人或资金池密钥。每次付费调用消耗 USDC，仅在成功时扣费。测试网模式应仅使用测试 USDC。MEI 联系方式依据 LGPD 被脱敏。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Brdata Mcp，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

brdata-mcp

An MCP (Model Context Protocol) server for Brazilian company & public-procurement data, for agent harnesses (Claude Code, Claude Desktop, …). It covers: CNPJ company registry lookup (basic + full due-diligence), company search/discovery across ~28M active companies by filters (CNAE activity, state/city, size, MEI, name), public tenders / licitações via PNCP (decode Compras.gov.br IDs, resolve, header, line items, edital documents, keyword search), NF-e & boleto decoding, CEP lookup, and batch document validation — for KYB, due diligence, and B2G (public-sector) sales intelligence.

Paid tools automatically settle the underlying x402-protected HTTP endpoints in USDC on Base or Solana using a wallet you configure; a call is charged only on success. Configure a Base wallet (EVM_PRIVATE_KEY), a Solana wallet (SOLANA_PRIVATE_KEY), or both — the x402 layer settles on whichever rail the server's 402 challenge advertises.

Tools

ToolEndpointPriceDescription
lookup_companyGET /company/{cnpj}$0.005Consolidated registry profile
lookup_company_fullGET /company/{cnpj}/full$0.03+ partners (QSA) + sanctions
screen_company_riskGET /risk/company/{cnpj}$0.015Regulatory risk & compliance screen across 5 federal registries: debarment (CEIS), anti-corruption (CNEP), impeded non-profits (CEPIM), leniency & forced-labor register ("Lista Suja", MTE) → verdict + 0–100 score + per-source data_as_of
decode_nfe_keyGET /nfe/{key}$0.005NF-e/NFC-e 44-digit access-key decoder
decode_boletoPOST /boleto/decode$0.005Boleto digitable-line decoder
validate_documentsPOST /validate/batch$0.001Batch validate CPF/CNPJ/PIS/plate/Pix (≤100)
lookup_cepGET /cep/{cep}$0.002Enriched postal-code lookup
search_companiesPOST /companies/search$0.015/pageSearch & segment active companies by CNAE/location/size/age/name
decode_tender_idGET /tender/decode/{id}$0.005Offline decode of a Compras.gov.br 17-digit tender id
resolve_tenderPOST /tender/resolve$0.02Resolve any tender reference (id/URL/control number) to PNCP + summary
get_tenderGET /tender/{cnpj}/{year}/{seq}$0.01Full tender header (PNCP)
get_tender_itemsGET /tender/{cnpj}/{year}/{seq}/items$0.03All tender items + ME/EPP-exclusive flags
get_tender_documentsGET /tender/{cnpj}/{year}/{seq}/documents$0.01Tender document URIs (no PDF download)
search_tendersPOST /tender/search$0.05Search public tenders (PNCP) by keyword
validate_cnpjGET /validate/{cnpj}freeSingle CNPJ check-digit validation

search_companies requires the Worker to have the Phase 2 database configured (Hyperdrive); otherwise it returns a 503 (and no payment is charged). MEI contact data is redacted (LGPD).

Configuration

Environment variables:

VarRequiredDefaultMeaning
BRDATA_BASE_URLnohttps://brdata.thomenz.meBase URL of a brdata Worker (defaults to the hosted production API)
EVM_PRIVATE_KEYfor paid tools (Base)—0x-prefixed key of the paying Base wallet (holds USDC)
SOLANA_PRIVATE_KEYfor paid tools (Solana)—base58 or JSON-array secret key of the paying Solana wallet (holds USDC). Configure this and/or EVM_PRIVATE_KEY
SOLANA_RPC_URLnopublic RPCOptional Solana RPC override used to build the payment (e.g. a Helius URL)
X402_NETWORKnobasebase (mainnet, matches the default URL) or base-sepolia (testnet → Solana devnet)

⚠️ Security

EVM_PRIVATE_KEY controls real funds. Anything that can read this process' environment (or the MCP config file) can spend from that wallet.

  • Use a dedicated wallet with a small balance, funded only with what you're willing to auto-spend. Never a personal or treasury key.
  • On testnet (base-sepolia) use test USDC only.
  • The key is read from the environment; it is never sent anywhere except to sign x402 payment authorizations for BRDATA_BASE_URL.

Use with Claude Code / Claude Desktop

Add to your mcpServers configuration:

json
{  "mcpServers": {    "brdata": {      "command": "npx",      "args": ["-y", "brdata-mcp"],      "env": {        "EVM_PRIVATE_KEY": "0x<dedicated-wallet-key-with-USDC>"      }    }  }}

For local development against wrangler dev, point BRDATA_BASE_URL at http://localhost:8787 and use X402_NETWORK=base-sepolia with a testnet wallet.

If you run from source instead of npm, use:

json
{  "mcpServers": {    "brdata": {      "command": "node",      "args": ["/absolute/path/to/packages/brdata-mcp/dist/index.js"],      "env": { "BRDATA_BASE_URL": "http://localhost:8787", "EVM_PRIVATE_KEY": "0x...", "X402_NETWORK": "base-sepolia" }    }  }}

Example

"Use brdata to run full due diligence on CNPJ 00.000.000/0001-91."

The agent calls lookup_company_full, which pays $0.03 in USDC and returns the consolidated English profile with partners and sanction checks.

Build & publish

bash
pnpm installpnpm run build        # emits dist/pnpm run typecheck# publish (see checklist in the main repo README before doing this):npm publish --access public

License

MIT

来源：README.md，提交 2ca58ab

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

1
  1. v0.3.7最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分