← Back to search

io.github.matematicsolutions/hr-eli-mcp

matematicsolutions Scanned 28d ago

MCP server for Croatian legislation (Narodne novine) with European ELI and verifiable citations.

C
71.1 / 100

Versions

0.1.1latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 4

hr_list_issue
annotations: none low

List the documents published in a Narodne novine gazette issue. Args: year: e.g. ``2018``. issue: gazette issue number, e.g. ``42`` (from a citation like "NN 42/2018"). Returns: ``IssueListResult`` with ``items: list[IssueHit]`` (each carrying ``eli_uri``).

year int issue int
hr_get_act
annotations: none low

Fetch document metadata by ELI coordinate (year + issue + doc). Args: year: e.g. ``2018``. issue: gazette issue, e.g. ``42``. doc: document number within the issue, e.g. ``805``. Returns: ``Act`` with ``eli_uri``, ``human_readable_citation``, ``source_url``.

doc int year int issue int
hr_coverage
annotations: none low

Declare what this connector covers, how it is sourced, and what it does NOT cover. Call this before telling a user that the law "does not contain" something, and whenever a search comes back empty: the absence may be a gap in this connector rather than in the law. Every gap carries a fallback saying where to look instead. Returns: ``Coverage`` with families, an as-of note, and a non-empty list of known gaps.

hr_get_text
annotations: none low

Fetch the full official HTML text of a document by ELI coordinate. Args: year: e.g. ``2018``. issue: gazette issue, e.g. ``42``. doc: document number within the issue, e.g. ``805``. Returns: ``LawText`` with the citation contract and ``content`` (official HTML).

doc int year int issue int

Permissions 3

filesystem low
Server uses filesystem capabilities via: open(), os, pathlib
env_vars low
Server uses env_vars capabilities via: os.environ
network medium
Server uses network capabilities via: httpx, urllib

Scan Findings 36

medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
low
Tool 'hr_list_issue' has no annotations annotation_checker · 100%
low
Tool 'hr_get_act' has no annotations annotation_checker · 100%
low
Tool 'hr_coverage' has no annotations annotation_checker · 100%
low
Tool 'hr_get_text' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-5h2m-4q8j-pqpj) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-c2jp-c369-7pvx) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-mxxr-jv3v-6pgc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-rcfx-77hg-w2wv) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-rj5c-58rq-j5g5) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-1364) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-1365) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-2474) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@3.4,<4 (PYSEC-2026-338) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27,<1 (GHSA-h8pj-cxx2-jfg2) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27,<1 (PYSEC-2022-183) dependency_analyzer · 95%
medium
Vulnerable dependency: diskcache@5.6 (GHSA-w8v5-vhqr-4h9v) dependency_analyzer · 95%
medium
Vulnerable dependency: diskcache@5.6 (PYSEC-2026-2447) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: hr_list_issue manifest_parser · 90%
info
Tool: hr_get_act manifest_parser · 90%
info
Tool: hr_coverage manifest_parser · 90%
info
Tool: hr_get_text manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'hr_coverage': Cross-tool sequencing directive poisoning · 85%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%