com.victano/victano

MCPcomunidaden línea
v0.4.0com.victanoUnknownActualizado hace 1 m

EU tenders and grant calls, matched to your company and qualified, inside the AI you already use

Estado del endpointen línea
comprobado hace 8 días · 1080 ms
100 % de las últimas 6 comprobaciones llegaron a este endpoint
Funciona en
ClaudeCursorCopilotChatGPTGemini

Inferido de los transportes que declara este listado (streamable-http). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.

Indexado automáticamente desde fuentes públicas. Aún sin verificar por su desarrollador en Forge.Reclamar este listado →
hace 1 mÚltima actualización
Paquete
Autorcom.victano
LicenciaUnknown
Versión0.4.0
Fuentemcp-registry
Estado de confianza
B
60/100Bueno
Solo endpoint alojado: esta evaluación cubre quién lo publica y si responde, no el código que hay detrás. No se aplica análisis de CVE, dependencias ni código fuente, así que nada de lo que aparece aquí certifica que ese código esté limpio.
✓Listado en el índice de Forge+10/10
—Identidad del publicador verificada+0/30
→ Publicador: este listado no tiene ningún repositorio registrado, así que `forge publish` no puede verificar la propiedad de forma automática. Usa «Reclamar este listado» arriba — en Forge lo revisamos a mano.
—Verificación de dominio+0/10
→ Ahora mismo no está disponible para este tipo de listado: hoy la comprobación de dominio solo se ejecuta para paquetes publicados en npm, así que esta fila todavía no se puede conseguir aquí, sea lo que sea lo que haya alojado en el dominio.
✓Análisis de inyección de prompts · limpio+30/30
✓Análisis de ofuscación / exfiltración · limpio+20/20
EstadoIndexado por la comunidad
PublicadorSin verificar
FirmaSin firmar
Dominio—
Procedencia—
DependenciasSin auditar
Superficie de herramientas9 herramientas · ninguna privilegiada
Análisis de seguridad✓ Limpiovlive · hace 8 d¿Qué tan bien funciona este análisis?
EvaluacionesNinguna
Indexado25 ago 2026

La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.

Herramientas

9 herramientas · ninguna privilegiada
Observado en vivo desde el endpoint del proveedor8d ago

Leído de un handshake MCP real initialize → tools/list contra el endpoint declarado. No se invocó ninguna herramienta: tools/list es la llamada de introspección de solo lectura que el protocolo define para esto. Refleja lo que el servidor anunciaba en ese momento; un endpoint alojado no está fijado a ninguna versión y puede cambiar sin avisar.

  • https://mcp.victano.com/mcp9 herramientas · 1080 ms
connect_startBegin authentication. Send the user's work email and your conversation's language ('lt', 'en'…); Victano mails a confirm link and a code. Then call connect_verify(request_id) at once: it waits for the click. No card needed.

Begin authentication. Send the user's work email and your conversation's language ('lt', 'en'…); Victano mails a confirm link and a code. Then call connect_verify(request_id) at once: it waits for the click. No card needed.

ParámetroTipoDescripción
email*string—
language——
connect_verifyFinish signing in: call right after connect_start with no code; it waits for the Confirm click (if it returns waiting, call again; never ask the user). Or pass the code they read you. Returns an api_key (shown once) and, without a connection session, a `session` to pass on every later call.

Finish signing in: call right after connect_start with no code; it waits for the Confirm click (if it returns waiting, call again; never ask the user). Or pass the code they read you. Returns an api_key (shown once) and, without a connection session, a `session` to pass on every later call.

ParámetroTipoDescripción
request_id*string—
code——
whoamiThe connected account: tier, persona, corpus freshness, and every limit — what is left in the current window, and the caps that do not renew. Call it when a user asks about limits, when you are unsure whether you are authenticated, or to confirm a setting took.

The connected account: tier, persona, corpus freshness, and every limit — what is left in the current window, and the caps that do not renew. Call it when a user asks about limits, when you are unsure whether you are authenticated, or to confirm a setting took.

ParámetroTipoDescripción
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…
list_workflowsThe playbook library: how bid professionals actually run this work, from the weekly scan through qualification, eligibility screening, reading a specification, clarification questions, and the proposal skeleton. READ A WORKFLOW BEFORE IMPROVISING A PROCESS. Whole jobs (`jobs`) come first. Pass pers…

The playbook library: how bid professionals actually run this work, from the weekly scan through qualification, eligibility screening, reading a specification, clarification questions, and the proposal skeleton. READ A WORKFLOW BEFORE IMPROVISING A PROCESS. Whole jobs (`jobs`) come first. Pass pers…

ParámetroTipoDescripción
persona——
limit—How many playbooks to list (jobs always lead); default all.
detail—'compact' (default) or 'full'.
max_chars—Hard cap on the answer's size in characters (default 8000). Over it, cards shrink to the essentials, then rows are dropped from the end, and `truncated` says h…
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…
get_workflowThe complete step-by-step playbook for one workflow id, including the decision gates, the EU procurement specifics that decide eligibility, and the pitfalls that lose bids. Follow it rather than summarising it.

The complete step-by-step playbook for one workflow id, including the decision gates, the EU procurement specifics that decide eligibility, and the pitfalls that lose bids. Follow it rather than summarising it.

ParámetroTipoDescripción
workflow_id——
id——
name——
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…
search_opportunitiesSearch open public tenders and EU grant calls by subject, ranked by relevance, with filters for country, CPV, status, deadline, value and region. Use it to find notices worth a decision, then get_opportunity or read_document. Cards are compact (`summary_cut` marks a cut summary). Search in the noti…

Search open public tenders and EU grant calls by subject, ranked by relevance, with filters for country, CPV, status, deadline, value and region. Use it to find notices worth a decision, then get_opportunity or read_document. Cards are compact (`summary_cut` marks a cut summary). Search in the noti…

ParámetroTipoDescripción
query—What the user is looking for, as they typed it.
queries—The same question in the notices' own languages, one phrasing per country in scope; each is ADDED to `query` and fused as its own ranking. Translate the distin…
countries—ISO3 ('LTU') or ISO2 ('LT'). Scope by country when you can: EU-wide is ~10x slower.
nuts—NUTS2 regions below country level ('DE30', 'LT01'); notices without a NUTS code are excluded.
nuts_strictboolean—
kind——
cpv—Any CPV prefix: '45', '452' or a full code. Results show cpv_labels, not codes.
cpv_divisions——
cpv_strictbooleanSources that publish no CPV (Lithuanian CVP notices, EU grant calls) are INCLUDED and ranked by default; true excludes them.
source—'ted', 'cvp', 'ft', 'ee', 'lv', 'hun', … (research_guide lists them).
type—'tender' or 'grant' (use 'grant' when the user asks for grant calls).
contract_nature—'works', 'supplies', 'services'. Sources that publish none are included unless nature_strict=true.
nature_strictboolean—
lang——
exclude_resultsbooleantrue drops award notices for things already decided.
status—'open' (default), 'forthcoming' for not-yet-open, 'any' adds expired.
deadline_after—ISO date.
deadline_before—ISO date.
min_value—In EUR, converted from the buyer's currency; notices we cannot price in euros are excluded from a value filter rather than guessed at.
max_value—In EUR, converted from the buyer's currency; notices we cannot price in euros are excluded from a value filter rather than guessed at.
value_band——
criteria_stated—true returns only notices whose SELECTION CRITERIA the buyer published (about half of TED).
no_guarantee—true returns only notices that state no bid bond is required.
expand_languagesboolean—
get_opportunityFull normalised record plus the document inventory. Use before advising on a bid; a search card is not enough. Follow with read_document for eligibility text.

Full normalised record plus the document inventory. Use before advising on a bid; a search card is not enough. Follow with read_document for eligibility text.

ParámetroTipoDescripción
opportunity_id——
id——
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…
submit_feedbackSend feedback about Victano to the team that builds it: a bug, a wrong answer, missing data, a missing feature, a workflow idea, or praise. Every item is read by a person. When to offer it: an answer came back empty or wrong; the user corrected you or the result; a workflow was missing a step the u…

Send feedback about Victano to the team that builds it: a bug, a wrong answer, missing data, a missing feature, a workflow idea, or praise. Every item is read by a person. When to offer it: an answer came back empty or wrong; the user corrected you or the result; a workflow was missing a step the u…

ParámetroTipoDescripción
kind*stringOne of: bug (something failed or errored), wrong_answer (an answer was returned but it was wrong or misleading), missing_data (a document, record or source the…
what—The task and what went wrong or what is needed (3-2000 characters)
expected—For a wrong answer: what the right answer or result would have been
got—For a wrong answer: what came back instead
tool—The tool the feedback is about, if one (e.g. the tool that answered wrongly); several: comma-separated
query—The query or arguments that produced it; only with the user's OK
severity—low | normal | high | blocking (blocking: the user cannot do their work)
contact_email—Only if the user wants a reply: the address to reply to
authored_by—user (their words) | agent_drafted (you wrote it, they approved) | agent (your own observation)
confirmedbooleantrue once the user approved sending this; required for authored_by user or agent_drafted
message—Older name for `what`, kept so earlier callers still work; prefer `what`
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…
notificationsMessages from the Victano team to this person: replies to their feedback, questions about it, service notices and news about the tools they use. action='list' shows the inbox; 'read' with id opens one message and marks it read; 'reply' with id and body answers a message that invites a reply (it goe…

Messages from the Victano team to this person: replies to their feedback, questions about it, service notices and news about the tools they use. action='list' shows the inbox; 'read' with id opens one message and marks it read; 'reply' with id and body answers a message that invites a reply (it goe…

ParámetroTipoDescripción
action—list (default) | read | reply | dismiss | snooze | settings
id—The message id from list (for read, reply, dismiss, snooze)
body—For reply: the person's answer, in their words, only after they approved it (up to 2000 characters)
hours—For snooze: how long to put the message away (default 24, at most 720)
settings—For settings: the switches to change, e.g. {"email_feedback_replies": false}. Omit to read them. email_digest: a periodic email summary of unread messages (off…
confirmedbooleanFor reply: true once the person approved sending these words
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…

9 de 9 herramientas publicaron una descripción.

Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.

Acerca de

EU tenders and grant calls, matched to your company and qualified, inside the AI you already use

Palabras clave
mcp
Alternativas
Comparando superficies de herramientas…

Sin cobertura de dependencias

Esta entrada no publica ningún paquete de npm, así que Forge no tiene un árbol de dependencias para ella. Es una carencia de cobertura, no una afirmación de que no tenga dependencias.