LeashIndex Get the report

Index / other

MCP Compras.gov.br

io-github-opedrosoares-mcp-compras declares 100 capabilities across 100 tools, with 1 critical issue.

85/100 exposureHigh exposure

Manifest recorded 2026-10-11 from tools/list on https://mcp-compras.up.railway.app/mcp, published in the official MCP registry as io.github.opedrosoares/mcp-compras 0.4.0. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 100 tools

100 of 100 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 100 tools

100 of 100 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 100 tools

100 of 100 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 100 tools

100 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
compras_aggregate_contratacoes_por_periodoread declared
compras_comparar_periodos_contratacoesread declared
compras_arp_listarread declared
compras_arp_consultarread declared
compras_arp_por_fim_vigenciaread declared
compras_arp_buscar_por_objetoread declared
compras_arp_itens_listarread declared
compras_arp_unidades_itemread declared
compras_arp_saldo_itemread declared
compras_arp_adesoes_itemread declared
compras_pncp_atas_listarread declared
compras_catmat_listar_gruposread declared
compras_catmat_listar_classesread declared
compras_catmat_consultarread declared
compras_catmat_listar_pdmsread declared
compras_catmat_buscarread declared
compras_catser_listar_secoesread declared
compras_catser_listar_classesread declared
compras_catser_consultarread declared
compras_pesquisar_precos_para_etpread declared
compras_checar_sancoes_fornecedorread declared
compras_montar_dossie_arpread declared
compras_buscar_contratacoes_similaresread declared
compras_perfil_fornecedor_completoread declared
compras_contratacoes_14133_listarread declared
compras_contratacoes_14133_consultarread declared
compras_contratacoes_14133_itens_listarread declared
compras_contratacoes_14133_itens_por_contratacaoread declared
compras_contratacoes_14133_resultados_listarread declared
compras_contratacoes_14133_resultados_por_contratacaoread declared
compras_legado_licitacoes_listarread declared
compras_legado_licitacao_consultarread declared
compras_legado_itens_licitacao_listarread declared
compras_legado_pregoes_listarread declared
compras_legado_compras_sem_licitacaoread declared
compras_legado_rdc_listarread declared
compras_legado_itens_pregao_listarread declared
compras_legado_itens_sem_licitacao_listarread declared
compras_contratos_listarread declared
compras_contratos_consultarread declared
compras_contratos_listar_por_fim_vigenciaread declared
compras_contratos_itens_listarread declared
compras_contratos_item_consultarread declared
compras_contrato_comprasnet_consultarread declared
compras_contrato_comprasnet_por_uasgread declared
compras_contrato_historico_aditivosread declared
compras_contrato_garantiasread declared
compras_contrato_faturasread declared
compras_contrato_ocorrenciasread declared
compras_contrato_responsaveisread declared
compras_contrato_empenhosread declared
compras_contrato_publicacoesread declared
compras_contrato_cronogramaread declared
compras_listar_promptsread declared
compras_obter_promptread declared
compras_listar_resourcesread declared
compras_obter_resourceread declared
compras_fornecedor_cnpj_receitaread declared
compras_fornecedor_consultarread declared
compras_fornecedor_listarread declared
compras_fornecedor_impedimentos_por_itensread declared
compras_fornecedor_contratos_por_itemread declared
compras_indicadores_consolidadosread declared
compras_indicadores_por_periodoread declared
compras_uasg_listarread declared
compras_uasg_consultarread declared
compras_orgao_listarread declared
compras_orgao_consultarread declared
compras_pncp_orgao_unidadesread declared
compras_uasg_buscarread declared
compras_pesquisar_preco_materialread declared
compras_detalhar_preco_materialread declared
compras_pesquisar_preco_servicoread declared
compras_detalhar_preco_servicoread declared
compras_pgc_listarread declared
compras_pgc_por_catalogoread declared
compras_pgc_agregacaoread declared
compras_pgc_listar_csvread declared
compras_pncp_pca_listarread declared
compras_pncp_pca_atualizacaoread declared
compras_pncp_pca_por_usuarioread declared
compras_pncp_pca_por_classificacao_superiorread declared
compras_pncp_contratacoes_publicacaoread declared
compras_pncp_contratacoes_propostaread declared
compras_pncp_contratacoes_atualizacaoread declared
compras_pncp_contratacao_por_orgaoread declared
compras_pncp_contratacao_itensread declared
compras_pncp_contratacao_item_resultadosread declared
compras_pncp_contratos_listarread declared
compras_pncp_contrato_por_orgaoread declared
compras_pncp_modalidadesread declared
compras_pncp_contratacao_arquivosread declared
compras_pncp_ata_arquivosread declared
compras_sancao_ceisread declared
compras_sancao_cnepread declared
compras_sancao_ceafread declared
compras_sancao_cepimread declared
compras_sancao_acordos_lenienciaread declared
compras_versaoread declared
compras_healthcheckread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.