← Back to search

ARES (Czech business registry)

milos106 Scanned 23h ago

MCP for ARES, the Czech business registry: lookup, due diligence, insolvency, signed provenance

D
40 / 100

Versions

0.1.0latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 19

ares_search_companies
annotations: none low

Search Czech companies by structured filters (name, postal code, municipality, legal form, CZ-NACE). At least one filter is required to avoid full-registry scans. Returns paginated results with totals.

ares_search_by_address
annotations: none low

Find all Czech companies whose registered seat (sídlo) matches a given address. Useful for shell-company / virtual-office detection: an address with dozens or hundreds of entities at it is a strong signal. Returns IČOs, names, and the canonical address ARES holds for each.

ares_cross_company_persons
annotations: none low

Given a list of Czech IČOs, find natural persons (and legal entities) who hold active statutory roles in two or more of them. Returns a structured cross-reference plus an optional Mermaid graph for visualization. Useful for due diligence (holding-group mapping, undisclosed beneficial connections, nominee director detection on a small known set).

ares_check_vat_payer
annotations: none low

Check whether a Czech entity is registered as a VAT payer (plátce DPH) based on ARES. Returns the IČ DPH (= DIČ) if active. NOTE: ARES reflects VAT-payer status with up to 24h delay; the authoritative source is MFČR (adisspr.mfcr.cz).

ares_export_for_invoicing
annotations: none low

Transform an ARES company profile into a payload ready for a Czech invoicing system: Fakturoid (JSON), iDoklad (JSON), or Pohoda (XML-hint JSON). Pure data transformation — no calls to the target system. The result is a paste-ready or post-ready object that fills the identification + address fields; the caller adds contact, bank and pricing.

ares_beneficial_owner
annotations: none low

Beneficial owners (skuteční majitelé) of a Czech company from the Register of Beneficial Owners (ESM) — both active and historical, with their position/share basis. The real ownership behind the legal entity, beyond the statutory body. Contains personal data — see the GDPR notice in the output.

ares_discover_holding
annotations: none low

Reveal a Czech company's holding/ownership tree: subsidiaries discovered via shared statutory bodies AND shareholders (akcionáři/společníci) — beyond a plain statutory chain. Backed by the IČO-vazby relationship index; each discovered company carries ownership signals (e.g. parent-is-shareholder, shared-statutory).

ares_get_res_classification
annotations: none low

Get statistical classification of a Czech company from RES (Registr ekonomických subjektů): headcount bracket (decoded into SME / large), institutional sector (ESA 2010), primary CZ-NACE, financial office (FÚ), and NUTS region. Useful for B2B segmentation, reporting and policy-style analysis.

ares_check_insolvenci
annotations: none low

Fast red-flag check: is a Czech entity currently in insolvency proceedings or marked as bankrupt? Reads the ARES `seznamRegistraci` for the Insolvency Register (IR) and Central Bankruptcy Register (CEÚ). Returns a clear true/false on `isInsolvent` plus the underlying state codes. Useful as a pre-contract sanity check.

ares_lookup_company
annotations: none low

Look up a Czech company by IČO. Returns aggregated data from ARES (basic identification, legal form, registered address, VAT status, CZ-NACE classification, registrations in VR/RES/RŽP).

ares_group_funding
annotations: none low

Total public money (state/EU subsidies + public contracts, from Hlídač státu) across a Czech company's ENTIRE ownership group (the company plus its holding), not just the single company. Returns group totals plus a per-company breakdown. Lower-bound estimate; the group is capped at 25 companies and the call may be slower (it walks the holding). Descriptive signal of group exposure, not proof of control.

ares_ownership_verdict
annotations: none low

Who really owns a Czech company. A one-line, sourced verdict reconciling three layers — registered shareholders (Obchodní rejstřík), the beneficial owner (UBO evidence), and the holding structure (GLEIF). Flags when the registered shareholder differs from the beneficial owner (held via a trust/nominee). Descriptive, not a legal determination of control.

ares_get_trade_licenses
annotations: none low

List trade licenses (živnostenská oprávnění) of a Czech entity from the Trade Register (RŽP). Returns each license's subject, type (volná / vázaná / koncesovaná / řemeslná), validity period, and fields of activity.

ares_public_funding
annotations: none low

Public money a Czech company has received or transacted: state/EU subsidies (dotace) and public contracts (veřejné zakázky/smlouvy), sourced from Hlídač státu. Returns totals, top providers/counterparties, year ranges. Useful for due diligence on state exposure and conflict-of-interest signals.

ares_get_statutory_bodies
annotations: none low

List statutory bodies (jednatelé, představenstvo, dozorčí rada) of a Czech company from the Public Register (VR). By default returns currently-active members only. Useful for due diligence, KYC, and verifying who is authorised to sign contracts.

ares_validate_ico
annotations: none low

Validate a Czech IČO via the ČSÚ Mod-11 checksum. Pure function — does not call ARES. Returns the normalized 8-digit IČO and whether the checksum is valid.

ares_standardize_address
annotations: none low

Standardize a free-form Czech address against the RÚIAN register. Returns canonical address text, RÚIAN address-point code, and confidence score for up to N suggestions.

ares_lookup_cz_nace
annotations: none low

Look up CZ-NACE (Czech industry classification) entries by code or partial name. Useful when filtering ares_search_companies by industry.

ares_full_due_diligence
annotations: none low

One-shot due-diligence report for a Czech company. Fetches the aggregate ARES profile, Public Register record (statutory bodies), Trade Register (licenses), evaluates insolvency status (IR + CEÚ) and dissolution date, and returns a structured report with a green/yellow/red risk flag plus a Markdown summary suitable for chat display. Replaces 4–5 individual lookups with a single call.

Permissions 3

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 69

low
Tool 'ares_search_companies' has no annotations annotation_checker · 100%
low
Tool 'ares_search_by_address' has no annotations annotation_checker · 100%
low
Tool 'ares_cross_company_persons' has no annotations annotation_checker · 100%
low
Tool 'ares_check_vat_payer' has no annotations annotation_checker · 100%
low
Tool 'ares_export_for_invoicing' has no annotations annotation_checker · 100%
low
Tool 'ares_beneficial_owner' has no annotations annotation_checker · 100%
low
Tool 'ares_discover_holding' has no annotations annotation_checker · 100%
low
Tool 'ares_get_res_classification' has no annotations annotation_checker · 100%
low
Tool 'ares_check_insolvenci' has no annotations annotation_checker · 100%
low
Tool 'ares_lookup_company' has no annotations annotation_checker · 100%
low
Tool 'ares_group_funding' has no annotations annotation_checker · 100%
low
Tool 'ares_ownership_verdict' has no annotations annotation_checker · 100%
low
Tool 'ares_get_trade_licenses' has no annotations annotation_checker · 100%
low
Tool 'ares_public_funding' has no annotations annotation_checker · 100%
low
Tool 'ares_get_statutory_bodies' has no annotations annotation_checker · 100%
low
Tool 'ares_validate_ico' has no annotations annotation_checker · 100%
low
Tool 'ares_standardize_address' has no annotations annotation_checker · 100%
low
Tool 'ares_lookup_cz_nace' has no annotations annotation_checker · 100%
low
Tool 'ares_full_due_diligence' has no annotations annotation_checker · 100%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.4 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-2mjp-6q6p-2qxm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-35p6-xmwp-9g52) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-4992-7rv2-5pvq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-c76h-2ccp-4975) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-cxrh-j4jr-qwg3) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-f269-vfmq-vjvj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-g8m3-5g58-fq7m) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-g9mf-h72j-4rw9) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-p88m-4jfj-68fv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-v9p9-hfj2-hcw8) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-vrm6-8vpv-qv8q) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@6.21.0 (GHSA-vxpw-j846-p89q) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.8 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.8 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Buffer.from base64 in milos106-ares-mcp-6f8a60f/src/provenance/keys.ts:85 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: ares_search_companies manifest_parser · 75%
info
Tool: ares_search_by_address manifest_parser · 75%
info
Tool: ares_cross_company_persons manifest_parser · 75%
info
Tool: ares_check_vat_payer manifest_parser · 75%
info
Tool: ares_export_for_invoicing manifest_parser · 75%
info
Tool: ares_beneficial_owner manifest_parser · 75%
info
Tool: ares_discover_holding manifest_parser · 75%
info
Tool: ares_get_res_classification manifest_parser · 75%
info
Tool: ares_check_insolvenci manifest_parser · 75%
info
Tool: ares_lookup_company manifest_parser · 75%
info
Tool: ares_group_funding manifest_parser · 75%
info
Tool: ares_ownership_verdict manifest_parser · 75%
info
Tool: ares_get_trade_licenses manifest_parser · 75%
info
Tool: ares_public_funding manifest_parser · 75%
info
Tool: ares_get_statutory_bodies manifest_parser · 75%
info
Tool: ares_validate_ico manifest_parser · 75%
info
Tool: ares_standardize_address manifest_parser · 75%
info
Tool: ares_lookup_cz_nace manifest_parser · 75%
info
Tool: ares_full_due_diligence manifest_parser · 75%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (9) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'ares_export_for_invoicing': System prompt override attempt poisoning · 90%
info
SBOM generated: 286 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%