com.victano/victano

MCPcommunitylive
v0.4.0com.victanoUnknownUpdated 1mo ago

EU tenders and grant calls, matched to your company and qualified, inside the AI you already use

Endpoint healthlive
checked 8 days ago · 1080ms
100% of the last 6 checks reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
1mo agoLast update
Package
Authorcom.victano
LicenseUnknown
Version0.4.0
Sourcemcp-registry
Trust Status
B
60/100Good
Hosted endpoint only: this assessment covers who publishes it and whether it answers, not the code behind it. No CVE, dependency or source analysis applies, so nothing here is a clean bill for that code.
✓Listed in Forge index+10/10
—Publisher identity verified+0/30
→ Publisher: this listing has no repository on file, so `forge publish` cannot verify ownership automatically. Use "Claim this listing" above — Forge reviews these by hand.
—Domain verification+0/10
→ Not currently available for this listing type — the domain-verification check only runs for npm-backed packages today, so this row cannot be earned here yet regardless of what's hosted at the domain.
✓Prompt-injection scan · clean+30/30
✓Obfuscation / exfil scan · clean+20/20
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
DependenciesNot audited
Tool surface9 tools · none privileged
Security scan✓ Cleanvlive · 8d agoHow well does this scan work?
EvalsNone
IndexedAug 25, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

9 tools · none privileged
Observed live from the vendor's endpoint8d ago

Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.

  • https://mcp.victano.com/mcp9 tools · 1080ms
connect_startBegin authentication. Send the user's work email and your conversation's language ('lt', 'en'…); Victano mails a confirm link and a code. Then call connect_verify(request_id) at once: it waits for the click. No card needed.

Begin authentication. Send the user's work email and your conversation's language ('lt', 'en'…); Victano mails a confirm link and a code. Then call connect_verify(request_id) at once: it waits for the click. No card needed.

ParameterTypeDescription
email*string—
language——
connect_verifyFinish signing in: call right after connect_start with no code; it waits for the Confirm click (if it returns waiting, call again; never ask the user). Or pass the code they read you. Returns an api_key (shown once) and, without a connection session, a `session` to pass on every later call.

Finish signing in: call right after connect_start with no code; it waits for the Confirm click (if it returns waiting, call again; never ask the user). Or pass the code they read you. Returns an api_key (shown once) and, without a connection session, a `session` to pass on every later call.

ParameterTypeDescription
request_id*string—
code——
whoamiThe connected account: tier, persona, corpus freshness, and every limit — what is left in the current window, and the caps that do not renew. Call it when a user asks about limits, when you are unsure whether you are authenticated, or to confirm a setting took.

The connected account: tier, persona, corpus freshness, and every limit — what is left in the current window, and the caps that do not renew. Call it when a user asks about limits, when you are unsure whether you are authenticated, or to confirm a setting took.

ParameterTypeDescription
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…
list_workflowsThe playbook library: how bid professionals actually run this work, from the weekly scan through qualification, eligibility screening, reading a specification, clarification questions, and the proposal skeleton. READ A WORKFLOW BEFORE IMPROVISING A PROCESS. Whole jobs (`jobs`) come first. Pass pers…

The playbook library: how bid professionals actually run this work, from the weekly scan through qualification, eligibility screening, reading a specification, clarification questions, and the proposal skeleton. READ A WORKFLOW BEFORE IMPROVISING A PROCESS. Whole jobs (`jobs`) come first. Pass pers…

ParameterTypeDescription
persona——
limit—How many playbooks to list (jobs always lead); default all.
detail—'compact' (default) or 'full'.
max_chars—Hard cap on the answer's size in characters (default 8000). Over it, cards shrink to the essentials, then rows are dropped from the end, and `truncated` says h…
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…
get_workflowThe complete step-by-step playbook for one workflow id, including the decision gates, the EU procurement specifics that decide eligibility, and the pitfalls that lose bids. Follow it rather than summarising it.

The complete step-by-step playbook for one workflow id, including the decision gates, the EU procurement specifics that decide eligibility, and the pitfalls that lose bids. Follow it rather than summarising it.

ParameterTypeDescription
workflow_id——
id——
name——
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…
search_opportunitiesSearch open public tenders and EU grant calls by subject, ranked by relevance, with filters for country, CPV, status, deadline, value and region. Use it to find notices worth a decision, then get_opportunity or read_document. Cards are compact (`summary_cut` marks a cut summary). Search in the noti…

Search open public tenders and EU grant calls by subject, ranked by relevance, with filters for country, CPV, status, deadline, value and region. Use it to find notices worth a decision, then get_opportunity or read_document. Cards are compact (`summary_cut` marks a cut summary). Search in the noti…

ParameterTypeDescription
query—What the user is looking for, as they typed it.
queries—The same question in the notices' own languages, one phrasing per country in scope; each is ADDED to `query` and fused as its own ranking. Translate the distin…
countries—ISO3 ('LTU') or ISO2 ('LT'). Scope by country when you can: EU-wide is ~10x slower.
nuts—NUTS2 regions below country level ('DE30', 'LT01'); notices without a NUTS code are excluded.
nuts_strictboolean—
kind——
cpv—Any CPV prefix: '45', '452' or a full code. Results show cpv_labels, not codes.
cpv_divisions——
cpv_strictbooleanSources that publish no CPV (Lithuanian CVP notices, EU grant calls) are INCLUDED and ranked by default; true excludes them.
source—'ted', 'cvp', 'ft', 'ee', 'lv', 'hun', … (research_guide lists them).
type—'tender' or 'grant' (use 'grant' when the user asks for grant calls).
contract_nature—'works', 'supplies', 'services'. Sources that publish none are included unless nature_strict=true.
nature_strictboolean—
lang——
exclude_resultsbooleantrue drops award notices for things already decided.
status—'open' (default), 'forthcoming' for not-yet-open, 'any' adds expired.
deadline_after—ISO date.
deadline_before—ISO date.
min_value—In EUR, converted from the buyer's currency; notices we cannot price in euros are excluded from a value filter rather than guessed at.
max_value—In EUR, converted from the buyer's currency; notices we cannot price in euros are excluded from a value filter rather than guessed at.
value_band——
criteria_stated—true returns only notices whose SELECTION CRITERIA the buyer published (about half of TED).
no_guarantee—true returns only notices that state no bid bond is required.
expand_languagesboolean—
get_opportunityFull normalised record plus the document inventory. Use before advising on a bid; a search card is not enough. Follow with read_document for eligibility text.

Full normalised record plus the document inventory. Use before advising on a bid; a search card is not enough. Follow with read_document for eligibility text.

ParameterTypeDescription
opportunity_id——
id——
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…
submit_feedbackSend feedback about Victano to the team that builds it: a bug, a wrong answer, missing data, a missing feature, a workflow idea, or praise. Every item is read by a person. When to offer it: an answer came back empty or wrong; the user corrected you or the result; a workflow was missing a step the u…

Send feedback about Victano to the team that builds it: a bug, a wrong answer, missing data, a missing feature, a workflow idea, or praise. Every item is read by a person. When to offer it: an answer came back empty or wrong; the user corrected you or the result; a workflow was missing a step the u…

ParameterTypeDescription
kind*stringOne of: bug (something failed or errored), wrong_answer (an answer was returned but it was wrong or misleading), missing_data (a document, record or source the…
what—The task and what went wrong or what is needed (3-2000 characters)
expected—For a wrong answer: what the right answer or result would have been
got—For a wrong answer: what came back instead
tool—The tool the feedback is about, if one (e.g. the tool that answered wrongly); several: comma-separated
query—The query or arguments that produced it; only with the user's OK
severity—low | normal | high | blocking (blocking: the user cannot do their work)
contact_email—Only if the user wants a reply: the address to reply to
authored_by—user (their words) | agent_drafted (you wrote it, they approved) | agent (your own observation)
confirmedbooleantrue once the user approved sending this; required for authored_by user or agent_drafted
message—Older name for `what`, kept so earlier callers still work; prefer `what`
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…
notificationsMessages from the Victano team to this person: replies to their feedback, questions about it, service notices and news about the tools they use. action='list' shows the inbox; 'read' with id opens one message and marks it read; 'reply' with id and body answers a message that invites a reply (it goe…

Messages from the Victano team to this person: replies to their feedback, questions about it, service notices and news about the tools they use. action='list' shows the inbox; 'read' with id opens one message and marks it read; 'reply' with id and body answers a message that invites a reply (it goe…

ParameterTypeDescription
action—list (default) | read | reply | dismiss | snooze | settings
id—The message id from list (for read, reply, dismiss, snooze)
body—For reply: the person's answer, in their words, only after they approved it (up to 2000 characters)
hours—For snooze: how long to put the message away (default 24, at most 720)
settings—For settings: the switches to change, e.g. {"email_feedback_replies": false}. Omit to read them. email_digest: a periodic email summary of unread messages (off…
confirmedbooleanFor reply: true once the person approved sending these words
sessionstringThe `session` value the sign-in returned. Pass it on every call in this conversation, so the sign-in survives however this client handles connections; omit it…

9 of 9 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

EU tenders and grant calls, matched to your company and qualified, inside the AI you already use

Keywords
mcp
Alternatives
Comparing tool surfaces…

No dependency coverage

This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.