Back to Browse

Brdata MCP Server

Developer ToolsModerate6.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

Brazilian public data: IBGE, CNPJ, CEP, CPF, BCB rates, FIPE, PNCP, gazettes, and health units.

About

Brazilian public data: IBGE, CNPJ, CEP, CPF, BCB rates, FIPE, PNCP, gazettes, and health units.

Security Report

6.7
Moderate6.7Moderate Risk

brdata is a keyless MCP and CLI wrapper over Brazilian public data APIs (IBGE, BrasilAPI, BCB, FIPE, PNCP, CNES, and others) with no hardcoded secrets, no shell execution, no dynamic code evaluation, and no obfuscation. Its only meaningful permission is outbound HTTP to fixed public hosts, which matches its purpose, and the cpf_validate tool is pure local math. The only notes are minor: several upstream request shapes are unverified reconstructions, and the server passes user input into URLs and query strings without strict allowlisting, though path segments are digit-validated or URL-encoded. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

system_info

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-brdata": {
      "args": [
        "-y",
        "@reneturcios/brdata"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

brdata

brdata puts Brazil's open public data behind one small command-line tool and one stdio MCP server. Most of the questions it answers need no account and no key: where a CEP lands, what a company registration says, whether a CPF number is even arithmetically valid, what the central bank's headline rates are doing, which vehicle brands the FIPE table tracks, what a state or municipality looks like in the IBGE geography, and what is being bought, published, or registered in the public procurement portal, municipal gazettes, the lawyers' registry, the slave-labour blacklist, and the national health facility registry.

Twelve tools are included. This is a labelled core subset of a larger catalogue: company deep profiles, court-process and warrant searches, wanted-person and consumer-complaint lookups, and several other tools from that catalogue are deliberately out of scope here.

Install

npx @reneturcios/brdata ibge --uf SP

Or run the container image:

docker run -i ghcr.io/cloudcorprecords/brdata

The container defaults to the MCP server. Pass CLI arguments to use it as a CLI instead. No environment variable is required: every upstream used here is a public, keyless endpoint.

CLI

brdata ibge --scope municipios --uf SP
brdata pncp merenda --uf BA
brdata diario edital
brdata oab "Maria Silva" --uf RJ
brdata lista-suja "Fazenda Exemplo"
brdata cnpj 12345678000195
brdata cep 01310-100
brdata cpf 529.982.247-25
brdata whois example.com.br
brdata bacen --indicator selic
brdata fipe Fiat
brdata cnes "Hospital Central" --municipio Campinas

brdata --version

Each command prints the upstream JSON payload, except cpf, which prints the local validation result. Exit codes: 0 on success, 1 when a call or validation input fails, 2 for usage errors.

MCP server

npx -y @reneturcios/brdata mcp

MCP client configuration:

{
  "mcpServers": {
    "brdata": {
      "command": "npx",
      "args": ["-y", "@reneturcios/brdata", "mcp"]
    }
  }
}

Tools

ToolInputWhat it returns
ibge_localidadesscope (optional: estados/municipios), uf (optional)IBGE states or municipalities.
pncp_licitacoesquery, uf (both optional)PNCP public procurement notices.
querido_diarioquery (required)Municipal gazette search results.
oab_advogadoname (required), uf (optional)OAB lawyer registry matches.
lista_suja_lookupquery (required)Slave-labour blacklist matches.
cnpj_lookupcnpj (required, 14 digits)Company registration data via BrasilAPI.
cep_lookupcep (required, 8 digits)Postal-code locality via BrasilAPI.
cpf_validatecpf (required)Local check-digit validation; no network call.
domain_whoisdomain (required).br domain WHOIS via the registro.br data on BrasilAPI.
bacen_taxasindicator (optional: selic/ipca/usd/eur/cdi)Latest Banco Central SGS value for the indicator.
fipe_veiculosquery (optional)FIPE vehicle brands, filtered by the query when given.
cnes_saudequery, municipio (both optional)CNES health facilities.

Notes on sources: IBGE geography comes from the IBGE localities service, Banco Central figures from the BCB open-data SGS series, FIPE brands from the public Parallelum FIPE API, and CNPJ/CEP/WHOIS from BrasilAPI. The PNCP, OAB, lista suja, and CNES requests are shaped against those services' public endpoints; their parameter shapes are reconstructions from the public search surface and are labelled as such in the build report, since no live call was made while building this package.

CPF validation is exact, not sampled: it strips punctuation, rejects all-equal digits and wrong lengths, and recomputes both modulo-11 check digits locally.

Development

npm install
npm run build   # tsc -> dist/
npm test        # node test runner over test/*.test.ts, no network (fake fetch fixtures)
npm run dev     # run the CLI from source via tsx

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!