Brdata Mcp

io.github.thomenz由 GitHub 帳號 thomenz 發布v0.3.7更新於 Oct 24, 2026

Brazilian company, risk & public-tender data (CNPJ, CEIS/CNEP, PNCP) as x402-paid agent tools

已驗證STDIO僅桌面金融商業與電商

概覽

AI 產生的概覽

針對巴西公司、風險與公共招標資料（CNPJ、CEIS/CNEP、PNCP）的 MCP 伺服器，依呼叫從你設定的錢包以 USDC 付費。

可以做什麼
查詢 CNPJ 公司檔案，包含含合夥人與制裁資訊的完整盡職調查檢視，並跨聯邦登記庫篩查監管風險，給出結論與評分。依 CNAE 活動、地點、規模、成立年數和名稱搜尋並細分活躍公司。解碼與解析 Compras.gov.br 和 PNCP 的公共招標，包括標頭、明細項目、文件連結和關鍵字搜尋。解碼 NF-e 存取金鑰和 boleto 條碼，查詢郵遞區號，並批次驗證 CPF、CNPJ、PIS、車牌和 Pix 識別碼。可免費驗證單一 CNPJ 檢查碼。
適用情境
適用於巴西公司與公共採購的 KYB、供應商盡職調查、合規篩查和 B2G 銷售情報，讓助理直接取得這些資料並按次付費。
執行需求
透過 npx 或 Node.js 在本機執行。付費工具需要在 EVM_PRIVATE_KEY 設定專用 Base 錢包金鑰，和/或在 SOLANA_PRIVATE_KEY 設定 Solana 錢包金鑰，並持有 USDC。選用 BRDATA_BASE_URL、SOLANA_RPC_URL 和 X402_NETWORK（base 或 base-sepolia）。需要存取 brdata API 的網路。
安裝前請注意
EVM_PRIVATE_KEY 和 SOLANA_PRIVATE_KEY 控制真實資金，任何能讀取行程環境或 MCP 設定的程式都可能自動花費；請使用餘額較少的專用錢包，切勿使用個人或資金池金鑰。每次付費呼叫消耗 USDC，僅在成功時扣款。測試網模式應僅使用測試 USDC。MEI 聯絡資料依 LGPD 去識別化。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Brdata Mcp，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

brdata-mcp

An MCP (Model Context Protocol) server for Brazilian company & public-procurement data, for agent harnesses (Claude Code, Claude Desktop, …). It covers: CNPJ company registry lookup (basic + full due-diligence), company search/discovery across ~28M active companies by filters (CNAE activity, state/city, size, MEI, name), public tenders / licitações via PNCP (decode Compras.gov.br IDs, resolve, header, line items, edital documents, keyword search), NF-e & boleto decoding, CEP lookup, and batch document validation — for KYB, due diligence, and B2G (public-sector) sales intelligence.

Paid tools automatically settle the underlying x402-protected HTTP endpoints in USDC on Base or Solana using a wallet you configure; a call is charged only on success. Configure a Base wallet (EVM_PRIVATE_KEY), a Solana wallet (SOLANA_PRIVATE_KEY), or both — the x402 layer settles on whichever rail the server's 402 challenge advertises.

Tools

ToolEndpointPriceDescription
lookup_companyGET /company/{cnpj}$0.005Consolidated registry profile
lookup_company_fullGET /company/{cnpj}/full$0.03+ partners (QSA) + sanctions
screen_company_riskGET /risk/company/{cnpj}$0.015Regulatory risk & compliance screen across 5 federal registries: debarment (CEIS), anti-corruption (CNEP), impeded non-profits (CEPIM), leniency & forced-labor register ("Lista Suja", MTE) → verdict + 0–100 score + per-source data_as_of
decode_nfe_keyGET /nfe/{key}$0.005NF-e/NFC-e 44-digit access-key decoder
decode_boletoPOST /boleto/decode$0.005Boleto digitable-line decoder
validate_documentsPOST /validate/batch$0.001Batch validate CPF/CNPJ/PIS/plate/Pix (≤100)
lookup_cepGET /cep/{cep}$0.002Enriched postal-code lookup
search_companiesPOST /companies/search$0.015/pageSearch & segment active companies by CNAE/location/size/age/name
decode_tender_idGET /tender/decode/{id}$0.005Offline decode of a Compras.gov.br 17-digit tender id
resolve_tenderPOST /tender/resolve$0.02Resolve any tender reference (id/URL/control number) to PNCP + summary
get_tenderGET /tender/{cnpj}/{year}/{seq}$0.01Full tender header (PNCP)
get_tender_itemsGET /tender/{cnpj}/{year}/{seq}/items$0.03All tender items + ME/EPP-exclusive flags
get_tender_documentsGET /tender/{cnpj}/{year}/{seq}/documents$0.01Tender document URIs (no PDF download)
search_tendersPOST /tender/search$0.05Search public tenders (PNCP) by keyword
validate_cnpjGET /validate/{cnpj}freeSingle CNPJ check-digit validation

search_companies requires the Worker to have the Phase 2 database configured (Hyperdrive); otherwise it returns a 503 (and no payment is charged). MEI contact data is redacted (LGPD).

Configuration

Environment variables:

VarRequiredDefaultMeaning
BRDATA_BASE_URLnohttps://brdata.thomenz.meBase URL of a brdata Worker (defaults to the hosted production API)
EVM_PRIVATE_KEYfor paid tools (Base)—0x-prefixed key of the paying Base wallet (holds USDC)
SOLANA_PRIVATE_KEYfor paid tools (Solana)—base58 or JSON-array secret key of the paying Solana wallet (holds USDC). Configure this and/or EVM_PRIVATE_KEY
SOLANA_RPC_URLnopublic RPCOptional Solana RPC override used to build the payment (e.g. a Helius URL)
X402_NETWORKnobasebase (mainnet, matches the default URL) or base-sepolia (testnet → Solana devnet)

⚠️ Security

EVM_PRIVATE_KEY controls real funds. Anything that can read this process' environment (or the MCP config file) can spend from that wallet.

  • Use a dedicated wallet with a small balance, funded only with what you're willing to auto-spend. Never a personal or treasury key.
  • On testnet (base-sepolia) use test USDC only.
  • The key is read from the environment; it is never sent anywhere except to sign x402 payment authorizations for BRDATA_BASE_URL.

Use with Claude Code / Claude Desktop

Add to your mcpServers configuration:

json
{  "mcpServers": {    "brdata": {      "command": "npx",      "args": ["-y", "brdata-mcp"],      "env": {        "EVM_PRIVATE_KEY": "0x<dedicated-wallet-key-with-USDC>"      }    }  }}

For local development against wrangler dev, point BRDATA_BASE_URL at http://localhost:8787 and use X402_NETWORK=base-sepolia with a testnet wallet.

If you run from source instead of npm, use:

json
{  "mcpServers": {    "brdata": {      "command": "node",      "args": ["/absolute/path/to/packages/brdata-mcp/dist/index.js"],      "env": { "BRDATA_BASE_URL": "http://localhost:8787", "EVM_PRIVATE_KEY": "0x...", "X402_NETWORK": "base-sepolia" }    }  }}

Example

"Use brdata to run full due diligence on CNPJ 00.000.000/0001-91."

The agent calls lookup_company_full, which pays $0.03 in USDC and returns the consolidated English profile with partners and sanction checks.

Build & publish

bash
pnpm installpnpm run build        # emits dist/pnpm run typecheck# publish (see checklist in the main repo README before doing this):npm publish --access public

License

MIT

來源：README.md，提交 2ca58ab

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.3.7最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分