# com.eckari/capabilities Deterministic company, entity and location lookups for agents - per call, x402 or API key. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 0.1.0 - **Author:** com.eckari - **License:** Unknown - **Endpoints:** streamable-http https://api.eckari.com/mcp - **Source:** https://eckari.com - **Endpoint health:** reachable (last checked 2026-09-30T05:59:27.999Z, 5 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 1 day ## Security scan - **Status:** clean - **Scanned:** 2026-09-30T05:59:27.999Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 24 declared. Observed from a live `tools/list` probe. - `company_uk_accounts` — Return the accounts filing status of a UK company from the Companies House register — the accounting reference date, the last accounts filed (type and period), - `company_uk_charges` — Charges registered against a UK company at Companies House — mortgages, debentures and other security — with dates, classification, particulars and the persons - `company_uk_directors` — Directors of a UK company from the Companies House officers register — the register of directors, secretaries and LLP members — including corporate and nominee - `company_uk_filings` — Return the filing history of a UK company from the Companies House register — accounts, confirmation statements, officer appointments, address and capital chang - `company_uk_owners` — An empty items list is never the same as "no owner": ownership_status and the filed PSC statements/exemptions explain why the register discloses none. Use when: - `company_uk_profile` — Return the core registered profile of a UK company from the Companies House register: name, status with derived is_active and is_striking_off, type, jurisdictio - `company_uk_registered_office` — Return the current registered office address of a UK company from the Companies House register as structured fields (premises, address lines, locality, region, - `company_uk_search` — Search the UK Companies House register by name or keyword and return matching companies with company number, register status and a derived is_active, type, inco - `company_uk_status` — Return the current legal status of a UK company from the Companies House register — active, dissolved, liquidation, administration, receivership, voluntary-arra - `company_us_filings` — Return the recent EDGAR filing history of a US company identified by stock ticker (AAPL) or CIK, optionally filtered by form type and filing date and paged. Use - `company_us_filings_latest` — Give a stock ticker (AAPL) or CIK and get the most recent EDGAR filing of each requested form — by default the latest 10-K, 10-Q and 8-K — with filing and repor - `company_us_profile` — Look up an SEC filer by stock ticker (AAPL) or CIK and return its registered profile — legal name, entity type, SIC industry code and description, EIN, filer ca - `company_us_resolve` — Turn a company-name fragment or stock ticker into the SEC EDGAR identifiers. Use when: Which SEC filer and CIK does the company name "Apple" belong to? Not for: - `domain_expiry` — Registry expiry date for a domain read live from the authoritative registry RDAP server, with whole days remaining, the registry status codes, the registrar nam - `domain_registration` — The WHOIS lookup for a domain, answered from the registry's own RDAP service - the structured successor to port-43 WHOIS, read live via the IANA bootstrap, neve - `entity_lei_profile` — Return the registry-authoritative GLEIF record for a Legal Entity Identifier — legal and previous names, legal and headquarters addresses, jurisdiction, legal f - `entity_lei_search` — Find Legal Entity Identifiers by company name in the global GLEIF register, optionally narrowed to one country. Returns the LEI, legal name, registration and en - `fx_reference_rate` — European Central Bank euro foreign exchange reference rate for a pair - the official daily fix used for accounting, invoicing and reporting - latest or any date - `location_us_geocode` — Convert a one-line US street address into coordinates using the US Census Bureau Geocoder. Returns the standardised matched address, latitude and longitude to 6 - `location_us_geographies` — Return the US Census Bureau geographies containing a latitude/longitude — state, county, census tract, block group, census block, incorporated place, congressio - `parcel_detect_carrier` — Identify which carrier issued a tracking number using a deterministic, versioned signature set - prefixes, lengths, carrier check digits and UPU S10 structure - - `weather_us_alerts` — Active National Weather Service watches, warnings and advisories for a US coordinate or a two-letter state or marine area code - event, severity, certainty, urg - `weather_us_forecast` — Official National Weather Service forecast for any US coordinate - six 12-hour day/night periods by default, or hourly - each with temperature in C and F, preci - `weather_us_observation` — Latest surface observation from the nearest National Weather Service station to a US coordinate, with the station identity, the observation time (observed_at), ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"capabilities\": {\n \"type\": \"http\",\n \"url\": \"https://api.eckari.com/mcp\"\n }\n }\n}" ``` ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/com.eckari%2Fcapabilities - Install plan: https://forgeregistry.com/api/v1/packages/com.eckari%2Fcapabilities/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/com.eckari%2Fcapabilities - HTML page: https://forgeregistry.com/registry/com.eckari%2Fcapabilities - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.