← Back to search

mtender-mcp-server

GitHub Actions Scanned 27d ago

Modern MCP server for Moldova's MTender public procurement data (OCDS 1.1.5). Protocol revision 2025-11-25. Tools, resources, prompts, vision-OCR for scanned PDFs, SSRF-hardened.

C
64 / 100

Versions

3.3.0latest
May 6, 2026
3.2.0
May 6, 2026
3.1.1
May 1, 2026
3.1.0
May 1, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 14

fetch_tender_document
annotations: verified low

Download a document from Moldova's MTender storage and return its content.

readOnlyHint false openWorldHint true idempotentHint true destructiveHint false
get_tender
annotations: none low

Compile a full OCDS tender summary by fetching every release package (PN/TN/EV/AC/CO) and merging them. Returns parties, items (with CPV), documents, amendments, awards, contracts, related processes.

list_tender_documents
annotations: none low

List every document URL attached to a tender across its releases (tender, awards, contracts).

get_release_history
annotations: none low

Return a chronological list of OCDS releases for a tender (planningUpdate, tender, award, contract, amendment, tenderCancellation, etc.) with their tags and timestamps.

list_enquiries
annotations: none low

Return the public Q&A thread on a tender — questions submitted by potential bidders and the buyer's answers (OCDS enquiry extension).

list_lots
annotations: none low

Return the lots of a tender — many Moldovan procurements are split into separately-evaluated lots, each with its own status, value, and items.

list_bid_statistics
annotations: none low

Return bid statistics for a tender (OCDS bids extension). Measures include bids submitted, valid bids, etc., per-lot.

aggregate_by_buyer
annotations: none low

Scan the latest N tenders, group by buyer, return tender count + total tender value. Slow.

scanLatest number
aggregate_by_supplier
annotations: none low

Scan the latest N tenders, count awards per supplier, return total awarded value + the OCIDs they appear in. Slow.

scanLatest number
flag_single_bid_awards
annotations: none low

Scan the latest N tenders and flag those whose award has only one supplier — a classic red flag for limited competition.

scanLatest number
get_budget
annotations: none low

Fetch the planning budget linked to a procurement process by OCID.

get_funding_source
annotations: none low

Fetch the funding source record linked to a procurement budget by OCID.

search_tenders
annotations: none low

List Moldova procurement notices, ascending by publication date. Returns lightweight {ocid, date} entries plus resource_link blocks. Without `offset`, defaults to the last ~30 days. Use the returned `nextOffset` to paginate forward in time. For richer filters (buyer/supplier/CPV/value/status), use search_tenders_deep.

limit number dateTo string dateFrom string
search_tenders_deep
annotations: none low

Fetch the latest N tenders and filter by buyer name, supplier name, CPV prefix, status, procurement method, or value range. Slow (one upstream call per tender). Use only when search_tenders is insufficient. Concurrency-bounded; emits progress.

status string maxValue number minValue number scanLatest number buyerContains string supplierContains string procurementMethod string

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 53

low
Permission: filesystem access detected permission_analyzer · 90%
medium
Permission: network access detected permission_analyzer · 70%
low
Tool 'aggregate_by_supplier' has no annotations annotation_checker · 100%
low
Tool 'flag_single_bid_awards' has no annotations annotation_checker · 100%
low
Tool 'get_budget' has no annotations annotation_checker · 100%
info
Tool 'fetch_tender_document' annotations are consistent annotation_checker · 80%
low
Tool 'get_tender' has no annotations annotation_checker · 100%
low
Tool 'list_tender_documents' has no annotations annotation_checker · 100%
low
Tool 'get_release_history' has no annotations annotation_checker · 100%
low
Tool 'list_enquiries' has no annotations annotation_checker · 100%
low
Tool 'list_lots' has no annotations annotation_checker · 100%
low
Tool 'list_bid_statistics' has no annotations annotation_checker · 100%
low
Tool 'aggregate_by_buyer' has no annotations annotation_checker · 100%
low
Tool 'get_funding_source' has no annotations annotation_checker · 100%
low
Tool 'search_tenders' has no annotations annotation_checker · 100%
low
Tool 'search_tenders_deep' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: sharp@0.34.5 (GHSA-f88m-g3jw-g9cj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-35p6-xmwp-9g52) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-38rv-x7px-6hhq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-g8m3-5g58-fq7m) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-hm92-r4w5-c3mj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-p88m-4jfj-68fv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-pr7r-676h-xcf6) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-vmh5-mc38-953g) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.1.0 (GHSA-vxpw-j846-p89q) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: fetch_tender_document manifest_parser · 85%
info
Tool: get_tender manifest_parser · 85%
info
Tool: list_tender_documents manifest_parser · 85%
info
Tool: get_release_history manifest_parser · 85%
info
Tool: list_enquiries manifest_parser · 85%
info
Tool: list_lots manifest_parser · 85%
info
Tool: list_bid_statistics manifest_parser · 85%
info
Tool: aggregate_by_buyer manifest_parser · 85%
info
Tool: aggregate_by_supplier manifest_parser · 85%
info
Tool: flag_single_bid_awards manifest_parser · 85%
info
Tool: get_budget manifest_parser · 85%
info
Tool: get_funding_source manifest_parser · 85%
info
Tool: search_tenders manifest_parser · 85%
info
Tool: search_tenders_deep manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (10) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 204 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%