Next free-source huntWe check for new free data every weekday.
OSINTMCP serverFirst audited Nov 13, 2026

cuisor.ro

Romanian company register: identity, filed financials, procurement, court records by name or CUI.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 12 of 12 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 289 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://cuisor.ro/mcp

Website Streamable HTTP · protocol 2025-11-25 · server version 1.29.1

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 12 of 12 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • search_companies
    • get_company
    • get_financials
    • get_procurement
    • get_officers
    • get_legal
    • resolve_caen
    • list_companies
    • and 4 more

Tools

  • Passed: 12 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (12)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • search_companiesResolve a company name or CUI to candidate companies. Use this first whenever the user names a company rather than giving its CUI. Returns at most 50 candidates, active companies first, largest turno…Doesn't say
  • get_companyIdentity, status, address, activity and headline figures for one company by CUI. Slim by default. Pass include=['financials','procurement','change_history','peers','same_address'] for more. Carries `…Doesn't say
  • get_financialsEvery filed financial year for one company: turnover, profit (signed — negative is a loss), employees, and the full balance sheet, all in lei. `latest_filed_year` says how recent the filings go, so a…Doesn't say
  • get_procurementPublic procurement (SEAP) awards for one company: contracts it won, and contracts it granted as a contracting authority. Bounded to the 200 most recent per side; `total` reports the true count, which…Doesn't say
  • get_officersLegal representatives and administrators of one company. This is personal data: it requires an API key, every call is recorded against that key, and it is never available anonymously. `sources_presen…Doesn't say
  • get_legalCourt dockets (portal.just.ro) and BPI publications for one company, by CUI. Covers roughly the last three years, not a complete litigation history — it answers whether a company is in court now or r…Doesn't say
  • resolve_caenResolve free text like 'coffee shops' or 'car repair' to CAEN activity codes. ALWAYS call this before filtering by activity — do not guess a CAEN code. More than half the official nomenclator is obso…Doesn't say
  • list_companiesList companies matching a filter, largest turnover first, at most 100 per page. Pass caen_query for free text ('coffee shops') or caen for explicit codes; judet accepts 'Bucharest', 'Bucuresti' or 'B…Doesn't say
  • company_statsCompute ONE number over a filtered population of companies — count, sum, avg, median, p25, p75, min or max. Prefer this over listing companies and doing the arithmetic yourself: it is one call instea…Doesn't say
  • get_metaHow old each dataset is, how many companies filed in each year, what fraction of the register carries an activity code, and the mapping from every financial field name to its Romanian label. Call thi…Doesn't say
  • searchChatGPT connector search: find Romanian companies by name or CUI, returned as {id, title, url}. Identical to search_companies — use that tool instead unless you are the ChatGPT Apps SDK connector, wh…Doesn't say
  • fetchChatGPT connector fetch: the full company document for one CUI `id`, as returned by a prior `search` call. Identical to get_company with no include= (administrators included; get_officers lists them…Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200289 ms
initializedHTTP 202434 ms
tools/listHTTP 200204 ms
resources/listHTTP 200516 ms
prompts/listHTTP 200182 ms
unknown-methodHTTP 200208 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.