# io.github.ar-agents/mcp (npm · @ar-agents/mcp)

Argentine business automation: Mercado Pago, AFIP/ARCA, WhatsApp, banking, shipping (7 packages).

- Trust score: 76/100 (medium)
- Change this week: +35
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@ar-agents/mcp`: 76/100 (this document), [markdown](https://verifymcp.io/servers/ar-agents-mcp/ar-agents-mcp.md), [page](https://verifymcp.io/servers/ar-agents-mcp/ar-agents-mcp)

## Channel facts

- Registry: `npm`
- Package: `@ar-agents/mcp`
- Version: `0.4.11`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 88/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (131 of 135), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (131 of 135), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 97/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to ar-agents/ar-agents).
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 20 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 61/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 3777 tokens (~164/item across 23 items; 23 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 85/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 54% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add ar-agents-mcp -- npx -y @ar-agents/mcp
```

### Codex

```bash
codex mcp add ar-agents-mcp -- npx -y @ar-agents/mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ar-agents-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@ar-agents/mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ar-agents-mcp --command npx --arg -y --arg @ar-agents/mcp
```

### Hermes

```yaml
mcp_servers:
  ar-agents-mcp:
    command: "npx"
    args: ["-y", "@ar-agents/mcp"]
```

### Other

```json
{
  "mcpServers": {
    "ar-agents-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@ar-agents/mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 76, +4)

- [functional improvement] Stability: unverified → 0.27

### 2026-08-02 (score 72, +40)

- [security improvement] Provenance: unverified → pass
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [security] The attested source repository moved: ar-agents/ar-agents
- [functional regression] Tool coverage: 100 → unverified
- [functional improvement] License: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Schema quality: unverified → good
- [functional improvement] Dependency health: unverified → partial
- [functional] Licence: MIT

### 2026-08-01 (score 32, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-07-31 (score 17, −7)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 24, −17)

- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 41)

First indexed and scored.

## MCP tools (23)

### `validate_cuit` (~243 tokens)

Validate an Argentine CUIT/CUIL via the AFIP modulo-11 check digit algorithm. PURE FUNCTION: no API call, no environment dependencies, sub-millisecond latency, free. Returns whether the input is mathematically valid plus the inferred person type (persona física vs jurídica). USE THIS WHEN: the user pastes a CUIT/CUIL and you need to detect typos, infer person type from the prefix, or normalize formatting before downstream operations. DO NOT USE WHEN: the user wants the taxpayer's name, tax condition, or monotributo category — call `lookup_cuit_afip` for that. Always call `validate_cuit` first; if it returns invalid, do NOT call `lookup_cuit_afip` (you already know the answer is no, and you'd waste an AFIP request).

Input parameters:

- `cuit` (string, required): The CUIT/CUIL to validate. Accepts any format with or without separators: 20-41758101-5, 20.41758101.5, 20 41758101 5, 20417581015. The function normalizes by stripping non-digit characters before va…

### `lookup_cuit_afip` (~246 tokens)

Look up an Argentine CUIT/CUIL against AFIP's padron webservice. Returns taxpayer name, tax condition (Monotributo / Responsable Inscripto / etc.), monotributo category if applicable, and registered address. REQUIRES an `AfipPadronAdapter` configured at app boot — typically wired to AFIP's WSAA + WSCDC SOAP integration which itself requires an X.509 cert registered with AFIP. WHEN NOT CONFIGURED: this tool returns `{ available: false, error: <setup instructions> }` instead of crashing. SURFACE the error message verbatim to the user — it contains the actionable steps to enable the lookup. DO NOT make up taxpayer info if available is false. USE THIS WHEN: the user asks for the taxpayer's name, tax condition, monotributo category, registered address, or activities. ALWAYS call `validate_cuit` first to confirm the format is sound — there's no point hitting AFIP for a malformed CUIT.

Input parameters:

- `cuit` (string, required): The CUIT/CUIL to look up. Pass the validated/normalized form (output of `validate_cuit.normalized`).

### `validate_cbu` (~248 tokens)

Validate an Argentine CBU (Clave Bancaria Uniforme, traditional bank account) or CVU (Clave Virtual Uniforme, fintech wallet account) via the BCRA dual mod-10 check-digit algorithm. PURE FUNCTION: no API call, no environment dependencies, sub-millisecond latency, free. Returns whether the input is mathematically valid PLUS the bank/PSP identification (e.g., '007 → Banco Galicia', '0000031 → Mercado Pago'), the branch code, and the account number. USE THIS WHEN: the user pastes a CBU/CVU and you need to detect typos, identify the issuing bank/wallet, or extract the account components before submitting a transfer or alias setup. Always call this BEFORE any transfer-related action — invalid CBUs cause hard failures downstream and chargebacks. Distinguishes CBU vs CVU automatically via the entity-code prefix.

Input parameters:

- `cbu` (string, required): The CBU/CVU to validate. Accepts any format with or without separators: 0070055530005571000018, 00700555-30005571000018, with spaces, etc. The function normalizes by stripping non-digit characters be…

### `lookup_bank_by_code` (~242 tokens)

Look up the Argentine bank or PSP (payment service provider) by its 3-digit BCRA-assigned entity code. PURE FUNCTION: in-memory lookup, free, sub-millisecond. Returns the entity's full legal name, short brand name, and kind (cbu = traditional bank, cvu = fintech). USE THIS WHEN: you have a bank code (e.g., from a CBU you've already parsed, from a user's input dropdown, from a transaction record) and need its human-readable name. For CVU prefixes (0000031 etc.), pass the 7-digit prefix; for traditional banks pass the 3-digit code. Returns null when the code isn't in the lookup table — the table is BCRA-published but updated periodically, so newer fintechs may be missing.

Input parameters:

- `code` (string, required): The BCRA entity code. For traditional banks pass the 3-digit code (e.g., '007' for Galicia, '011' for Nación). For PSPs/fintechs pass the 7-digit prefix (e.g., '0000031' for Mercado Pago, '0000007' f…

### `list_banks` (~72 tokens)

Return the full list of known Argentine banks with their BCRA codes. USE THIS WHEN: you need to render a dropdown of banks for the user to pick from, or need to enumerate available entities for a workflow. Sorted by BCRA code. Returns array of `{ code, name, shortName, kind }`.

### `list_psps` (~110 tokens)

Return the full list of known Argentine PSPs (fintechs / digital wallets / virtual account issuers — Mercado Pago, Ualá, Naranja X, Personal Pay, etc.) with their CVU prefixes. USE THIS WHEN: you need to render a dropdown of fintech wallets for the user to pick from, or need to enumerate PSPs for a workflow. Returns array of `{ code, name, shortName, kind }` where `code` is the 7-digit CVU prefix.

### `lookup_credit_situation` (~285 tokens)

Look up the BCRA Central de Deudores credit situation for an Argentine CUIT. Returns the worst situation code (1=normal, 2=low risk <90 days, 3=medium risk 90-180 days, 4=high risk 180-365 days, 5=irrecoverable, 6=irrecoverable by admin disposition), total outstanding debt across all entities, and per-entity breakdown. USE THIS WHEN: the user is assessing counterparty risk before extending credit, factoring invoices, or onboarding a B2B supplier. DO NOT USE for routine billing decisions — Mercado Pago handles credit risk on the SaaS's behalf for normal subscription flows. REQUIRES: a `BcraDeudaAdapter` configured at app boot. The default `BcraPublicApiAdapter` hits BCRA's public REST API (no auth required). When NOT configured, returns `{ available: false, error: <setup instructions> }` instead of crashing — surface the error verbatim. ALWAYS call `validate_cuit` (from @ar-agents/identity) first to confirm format before hitting BCRA.

Input parameters:

- `cuit` (string, required): The CUIT to look up against BCRA Central de Deudores. Pass the 11-digit normalized form (output of validate_cuit.normalized from @ar-agents/identity).

### `emitir_factura` (~808 tokens)

Emitir una factura electrónica vía AFIP/ARCA WSFE. Solicita el CAE (Código de Autorización Electrónico) que valida la factura ante AFIP. RETURNS: el CAE (14 dígitos), su fecha de vencimiento, y el número de comprobante asignado, o errors/observaciones si AFIP rechazó. SIDE EFFECT: el CAE queda registrado en AFIP — NO se puede deshacer; para anular, emitir Nota de Crédito. PRE-FLIGHT: validate_cuit (del receptor) + consultar_ultimo_comprobante para obtener el próximo número. CONSTRAINTS: ImpTotal = ImpNeto + ImpIVA + ImpOpEx + ImpTrib + ImpTotConc (AFIP error 10048 si no). Para Factura C (monotributista), ImpIVA debe ser 0 y no incluir filas iva. Para Servicios, fchServDesde/Hasta/VtoPago obligatorios. Para Notas de Crédito/Débito, cbtesAsoc obligatorio referenciando el comprobante original. The lib pre-valida estas reglas localmente antes del round-trip a AFIP.

Input parameters:

- `cbteDesde` (integer, required): Número del comprobante a emitir. Obtenelo con consultar_ultimo_comprobante() + 1.
- `cbteFch` (string, required): Fecha del comprobante en formato YYYYMMDD (ej: "20260506"). Debe estar dentro de ±5 días de hoy (servicios: ±10).
- `cbteTipo` (required): Tipo de comprobante AFIP. Lista cerrada — debe coincidir con CbteTipo en catalogs.ts. Si AFIP agrega nuevos códigos, agregalos a CbteTipo y a este union juntos.
- `cbtesAsoc` (array): Comprobantes asociados (requerido para Notas de Crédito/Débito).
- `concepto` (required): 1 = Productos, 2 = Servicios, 3 = Productos y Servicios.
- `docNro` (required): Número de documento del receptor. Para Consumidor Final pasá 0.
- `docTipo` (required): Tipo de documento del receptor — lista cerrada AFIP. Debe coincidir con DocTipo en catalogs.ts.
- `fchServDesde` (string): Servicios: fecha de inicio del período (YYYYMMDD).
- `fchServHasta` (string): Servicios: fecha de fin del período (YYYYMMDD).
- `fchVtoPago` (string): Servicios: fecha de vencimiento del pago (YYYYMMDD).
- `impIVA` (number, required): Importe IVA. Para Factura C debe ser 0. Para A/B = sum(iva[].importe).
- `impNeto` (number, required): Importe neto gravado (subtotal antes de IVA).
- `impOpEx` (number): Importe operaciones exentas. Default 0.
- `impTotConc` (number): Importe neto no gravado. Default 0.
- `impTotal` (number, required): Importe total de la factura. Debe ser igual a impNeto + impIVA + impOpEx + impTrib + impTotConc.
- `impTrib` (number): Importe total de tributos (provinciales/municipales). Default 0.
- `iva` (array): Filas de discriminación IVA. Requerido para Factura A/B con impIVA > 0; vacío para Factura C.
- `monCotiz` (number): Cotización vs ARS. Default 1 para PES. Para otras monedas obtenelo con obtener_cotizacion().
- `monId` (string): Moneda. Default "PES". Otras: "DOL", "060" (Euro), "012" (Real).
- `ptoVta` (integer): Punto de venta (1-99999). Omitible si pasaste defaultPtoVta al construir las tools.

### `consultar_ultimo_comprobante` (~127 tokens)

Consultar el último número de comprobante autorizado para un (PtoVta, CbteTipo) — i.e. cuál fue el número del último Factura C emitido desde el punto de venta 1. USE BEFORE emitir_factura para obtener el próximo número (último + 1). Returns 0 si nunca se emitió un comprobante de ese tipo desde ese PtoVta — entonces el próximo es 1. PURE READ: no side effects.

Input parameters:

- `cbteTipo` (integer, required)
- `ptoVta` (integer)

### `consultar_factura_emitida` (~109 tokens)

Consultar los detalles completos de una factura ya emitida (CAE, fecha, importes, doc receptor). USE WHEN: necesitás verificar que un CAE es válido y matchea con tu base de datos, o estás migrando de otro sistema y querés re-cargar facturas históricas. PURE READ: no side effects.

Input parameters:

- `cbteNro` (integer, required)
- `cbteTipo` (integer, required)
- `ptoVta` (integer)

### `obtener_tipos_comprobante` (~109 tokens)

Listar los tipos de comprobante disponibles según AFIP (Factura A=1, B=6, C=11, Nota Crédito A=3, etc.). USE WHEN: necesitás mostrar al usuario la lista actualizada (puede haber tipos nuevos que no están en los catalogs hard-coded del lib). HEAVY: hace network round-trip a AFIP — para flujos comunes preferí los constants de `CbteTipo` en `@ar-agents/facturacion`.

### `obtener_tipos_documento` (~68 tokens)

Listar los tipos de documento que AFIP acepta (CUIT=80, DNI=96, Pasaporte=94, Consumidor Final=99, etc.). HEAVY: round-trip a AFIP. Preferí los constants de `DocTipo` para flujos comunes.

### `obtener_alicuotas_iva` (~92 tokens)

Listar las alícuotas de IVA disponibles según AFIP (21%=5, 10.5%=4, 27%=6, 0%=3, etc.). USE WHEN: el usuario necesita ver las opciones para construir una factura B o A. HEAVY: round-trip a AFIP. Preferí `AlicuotaIva` constants para flujos comunes.

### `obtener_tipos_concepto` (~51 tokens)

Listar los tipos de concepto: Productos (1), Servicios (2), Productos y Servicios (3). HEAVY: round-trip a AFIP. Preferí `Concepto` constants.

### `obtener_tipos_moneda` (~78 tokens)

Listar las monedas que WSFE acepta para emitir facturas (PES = Pesos, DOL = Dólar, 060 = Euro, 012 = Real, etc.). USE WHEN: el usuario quiere emitir Factura E (exportación) o multi-moneda. HEAVY: round-trip a AFIP.

### `obtener_cotizacion` (~99 tokens)

Obtener la cotización oficial AFIP de una moneda extranjera vs ARS. REQUIRED antes de emitir cualquier factura no-PES (AFIP rechaza si la cotización está desactualizada). Devuelve el monCotiz a usar en `emitir_factura`. PURE READ.

Input parameters:

- `monId` (string, required): Código de moneda. Ej: "DOL" (USD), "060" (Euro), "012" (Real).

### `health_check_afip` (~59 tokens)

Health check de AFIP WSFE — devuelve el status de los servidores app, db, y auth. Use as a /health endpoint o como pre-flight rápido antes de emitir muchas facturas. PURE READ, latencia < 200ms.

### `cotizar_envio` (~139 tokens)

Cotizar el costo de un envío vía un carrier específico (Andreani, OCA, o Correo Argentino). Pasá origen + destino + paquetes (peso + dimensiones + valor declarado) y servicio (standard, express, same_day). Returns { carrier, costArs, estimatedDaysMin, estimatedDaysMax, productId }. USE WHEN el usuario quiere el precio de UN carrier conocido. Para comparar entre carriers, usá cotizar_envio_todos.

Input parameters:

- `carrier` (string)
- `destination` (object, required)
- `origin` (object, required)
- `packages` (array, required)
- `service` (string)

### `cotizar_envio_todos` (~121 tokens)

Cotizar un envío en TODOS los carriers configurados en paralelo. Returns { quotes: QuoteOption[] } ordenado por costo (más barato primero). USE WHEN el usuario dice 'cuál es el envío más barato' o 'compará Andreani vs OCA vs Correo'. Si un carrier falla individualmente, los otros igual responden — el campo error en cada quote indica si falló.

Input parameters:

- `destination` (object, required)
- `origin` (object, required)
- `packages` (array, required)
- `service` (string)

### `crear_envio` (~140 tokens)

Crear un envío real con un carrier. RETURNS un trackingNumber + labelUrl + costo. SIDE EFFECT: el envío queda registrado en el sistema del carrier — confirma con el usuario antes si el monto es alto (>$10k declared value). Para Andreani, requiere productId del cotizador previo si querés bloquear el precio. Usá `externalReference` para reconciliar con tu order id.

Input parameters:

- `carrier` (string)
- `destination` (object, required)
- `external_reference` (string)
- `origin` (object, required)
- `packages` (array, required)
- `product_id` (string)
- `service` (string)

### `trackear_envio` (~106 tokens)

Consultar el estado actual de un envío vía su trackingNumber. Returns { currentStatus, events[], deliveredAt? }. currentStatus normalizado a uno de: label_created, in_transit, out_for_delivery, delivered, delivery_failed, returned, canceled, exception, unknown. SURFACE los `events` al usuario en orden cronológico — muestran el detalle del recorrido.

Input parameters:

- `carrier` (string)
- `tracking_number` (string, required): Tracking number from crear_envio.

### `cancelar_envio` (~106 tokens)

Cancelar un envío que aún no salió a reparto. Returns { canceled: bool, reason? }. Si canceled=false, surface reason verbatim al usuario (típicamente 'ya está en reparto' o 'el carrier no soporta cancelación post-pickup'). Para envíos ya entregados, NO se puede cancelar — el usuario tiene que coordinar una devolución manual.

Input parameters:

- `carrier` (string)
- `tracking_number` (string, required): Tracking number from crear_envio.

### `listar_sucursales` (~119 tokens)

Listar las sucursales / centros de despacho de un carrier cerca de un Código Postal Argentino (CPA). Returns array con id, name, address, openingHours, distanceKm cuando disponible. USE WHEN el usuario quiere despachar el envío en sucursal en lugar de retiro a domicilio, o cuando necesita un punto Pickup para que el destinatario retire.

Input parameters:

- `carrier` (string)
- `limit` (integer)
- `postal_code` (string, required): AR CPA — 4 digits or extended ('B1842ZAB').

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/ar-agents-mcp/ar-agents-mcp#diagnostics

## Score history

- 2026-08-03: 76
- 2026-08-02: 72
- 2026-08-01: 32
- 2026-07-31: 17
- 2026-07-30: 24
- 2026-07-28: 41
- 2026-07-27: 41

## Links

- npm package: https://www.npmjs.com/package/@ar-agents/mcp
- Socket report: https://socket.dev/npm/package/@ar-agents/mcp
- Repository: https://github.com/ar-agents/ar-agents
- Changelog RSS feed: https://verifymcp.io/servers/ar-agents-mcp/ar-agents-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/ar-agents-mcp/ar-agents-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/ar-agents-mcp/ar-agents-mcp