Next free-source huntWe check for new free data every weekday.
OSINTMCP serverFirst audited Nov 13, 2026

com.radar-cnpj/radar-cnpj

Check if a Brazilian company is active and has public sanctions or debt. Start with free records.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 516 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things. Your AI client should ask you first.
Endpointhttps://radar-cnpj.com/mcp

Source code Website Streamable HTTP · protocol 2025-06-18 · server version 3272edf6

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Note: 13 tools are labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • reveal_cnpj
    • sintonia_seal
    • dossier_cnpj
    • avaliar
    • contact
    • add_watch
    • reactivate_watches
    • consulta_comprar
    • and 5 more
  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 29 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Note: Protocol version 2025-06-18.

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (29)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • search_constructionFind Brazilian CNO construction works by their 12-digit number, a company CNPJ, or a city and state. Filter by area in square meters, construction type, category and status. Only company-owned record…Read-only
  • api_indexThe API index: operations, formats, authentication and limits.Read-only
  • healthHealth of the company database. `import.dump_date` is the reference date of the data and `import.counts` has the record counts. It does not confirm real-time changes.Read-only
  • get_cnpjFree, no account: registration status, public sanctions and federal tax debt already joined by CNPJ. Set temas=dados,sancoes,divida; read data.situacao.label, data.sancoes.vigentes and data.dividaAti…Read-only
  • reveal_cnpjUnmask available partner names and contacts. Use a paid lookup pack or the per-company quote, without a free allowance. The same owner does not pay again for a company already revealed. GET /api/reve…Can change things
  • sintonia_sealChecks at the Receita Federal whether the company is on the public list of the Sintonia A+ seal. Uses one lookup from the paid package, with no free quota. Without balance: 402 with offers. `data.sel…Can change things
  • dossier_cnpjCompany dossier with unmasked details and risk signals. Set cnia_atual=true to require a CNIA source check during this request; failure returns 503 without charging or using an older record. Otherwis…Can change things
  • searchSearch Brazilian companies by a term (`q`) and/or filters (`f`, a JSON string). `tipo` picks what the term matches: `nome` (legal name), `fantasia` (trade name), `socio` (partner), `telefone` (phone…Read-only
  • suggestUp to eight Brazilian companies for a CNPJ, name, partner, phone or e-mail. It detects the kind of input, joins the names and removes duplicates. Text needs at least three characters and matches the…Read-only
  • refReference vocabularies for the filters: CNAE activity codes (`cnae`), municipalities (`municipio`) and legal natures (`natureza`). Search a vocabulary by text with `q`.Read-only
  • avaliarEvaluates a business idea in Brazil by how many companies are registered for it: the idea is mapped to a CNAE activity code and a place, and the answer counts the active, opened and closed companies…Can change things
  • localThe caller's approximate location (city and state) from the network edge. Never cached: a cached answer would give someone else's place.Read-only
  • contactWrite to the people behind the product: a question, or a sponsorship/partnership/advertising proposal. Free, no captcha and no payment; one message every 10 s per network (one that arrives sooner wai…Can change things
  • list_watchesThe CNPJs you watch, with the applied quota (free + purchased slots). The origin (`api.radar-cnpj.com`) checks the quota, inside the transaction; the app counts one free slot plus the purchased slots…Read-only
  • add_watchStarts watching a CNPJ. The first one is free; each extra slot is paid per 30 days, with no automatic renewal (the price is in `x-price-usd` and in `/api/pricing`). The service repeats the checks and…Can change things
  • reactivate_watchesReactivates the paused companies of your credit wallet (the ones past the quota; their alerts wait): one slot per company, US$ 0.10 each, for 30 days, no automatic renewal. With no paused company, no…Can change things
  • consulta_cadastroName, status, activity and address of a Brazilian company by CNPJ. It does not count against the daily free limit, does not show contacts or partners and runs no extra checks. The origin's protection…Read-only
  • consulta_enderecoAddresses and companies at a CEP (Brazilian postal code), without counting against the daily free limit. Up to 20 addresses and 20 companies; `pontos_total` has the total number of addresses. The ori…Read-only
  • consulta_cnpjAdditional CNPJ lookup with prepared public records and an attempted CNIA source check during the request. Set cnia_atual=true when that check is required: source failure returns 503 without charging…Read-only
  • consulta_planosThe CNPJ and address lookup service: today's free allowance, the single package, the three plans and your balance. Without a credential, it shows the free allowance and the offers. With an account, c…Read-only
  • consulta_comprarBuys the single package or one of the three plans, with credit or x402, also without an account. Without payment, it returns 402 with the price in dollars and reais. The body uses x402 v1; PAYMENT-RE…Can change things
  • consulta_loteSupplier screening report with source dates, evidence and federal tax debt states, one row per CNPJ. The service validates and deduplicates the list, joins the prepared records and formats the report…Can change things
  • api_accessDiscover the monthly data package or inspect a private purchase. Returns: { offer{id,price_usd,credits,days,auto_renew,unit,products,purchase,method,status,header,payment_methods,prepaid_credit,instr…Read-only
  • api_access_buyBuy 1000 basic data reads for US$0.10, valid for 30 days. Same pass in retries recovers the same purchase. No automatic renewal. OCR, AI, documents and delivery keep their own tariffs. Send X-API-Pas…Can change things
  • list_plansThe plans for sale and the authenticated account or wallet's active plan. Pix and USDC pay 30 days with no automatic renewal; the card subscribes monthly and renews until you cancel. Without an accou…Read-only
  • buy_planBuys a plan for the signed-in account. Pix and USDC pay 30 days with no automatic renewal; the card subscribes monthly and renews until you cancel. Without payment, the answer is 402 with the price.…Can change things
  • cancel_planCancels the active plan: nothing else is charged, and what you paid for stays active until the end of its period. Send `{ "accept_data_removal": true }`. The monthly card subscription stops. A purcha…Can change things
  • pricingCurrent public prices, free allowances and payment discovery; does not create a charge.Read-only
  • get_api_x402_cnpj_by_cnpjCNPJ lookup paid per call, without an account: the Federal Revenue record, the sanctions, the tax standing and the address on the map. The same record as `GET /api/consulta/cnpj/:cnpj`, for agents: n…Can change things

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200516 ms
initializedHTTP 202142 ms
tools/listHTTP 200400 ms
prompts/listHTTP 200156 ms
unknown-methodHTTP 200137 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.