ccpcrate — Canadian CCPC corporate tax
REMOTE · CCPCRATE.CA · SCANNED SEP 20
Deterministic Canadian CCPC rate stack: small business deduction and grinds, Part IV, RDTOH.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability57
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2600 tokens (~650/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management40
- Stability observed for 12 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 97% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the ccpcrate — Canadian CCPC corporate tax MCP server?
ccpcrate — Canadian CCPC corporate tax is a hosted endpoint at https://ccpcrate.ca/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · ccpcrate.ca
claude mcp add --transport http ca-ccpcrate-ccpcrate 'https://ccpcrate.ca/mcp'
{
"mcpServers": {
"ca-ccpcrate-ccpcrate": {
"url": "https://ccpcrate.ca/mcp"
}
}
} {
"servers": {
"ca-ccpcrate-ccpcrate": {
"type": "http",
"url": "https://ccpcrate.ca/mcp"
}
}
} [mcp_servers.ca-ccpcrate-ccpcrate] url = "https://ccpcrate.ca/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ca-ccpcrate-ccpcrate": {
"type": "remote",
"url": "https://ccpcrate.ca/mcp",
"enabled": true
}
}
} openclaw mcp add ca-ccpcrate-ccpcrate --url 'https://ccpcrate.ca/mcp' --transport streamable-http
mcp_servers:
ca-ccpcrate-ccpcrate:
url: "https://ccpcrate.ca/mcp" {
"McpServers": {
"ca-ccpcrate-ccpcrate": {
"Transport": "http",
"Url": "https://ccpcrate.ca/mcp"
}
}
} assistant mcp add ca-ccpcrate-ccpcrate -t streamable-http -u 'https://ccpcrate.ca/mcp'
{
"mcpServers": {
"ca-ccpcrate-ccpcrate": {
"type": "http",
"url": "https://ccpcrate.ca/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 10 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 9 Sept 26 0
- Stability: unverified → 0.03 ▲ functional
- 8 Sept 26 57
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Probed https://ccpcrate.ca/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=ccpcrate.ca | CN=WE1,O=Google Trust Services,C=US | 3 Sept 2026 | 2 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | 90e78ee6d5d786b60e3737bc46ebc981 |
| SANs: ccpcrate.ca, www.ccpcrate.ca, *.www.ccpcrate.ca | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of ccpcrate.ca. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ca. | present | 26384 | 13 | Verified |
| ccpcrate.ca. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://ccpcrate.ca/mcp | Verified | 200 | |
| http (plaintext) | http://ccpcrate.ca/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
ccpcrate_explain Explain a resolution ~964
Free diagnostic pass over the same input as ccpcrate_resolve: which layers run, the defaults the engine would apply, every warning with its meaning (grind binding, provincial asymmetries, missing inputs), the rule rows in force for the year with sources and verification status, the open verifications, and what the paid computation would return. Contains no computed amounts — the numbers are in ccpcrate_resolve.
| Name | Type | Req | Description |
|---|---|---|---|
| activeBusinessIncome | number | – | T2 line 400: income from an active business carried on in Canada |
| aggregateInvestmentIncome | number | – | T2 line 440: aggregate investment income (s.129(4)) |
| allowableCapitalLosses | number | – | Sch 6: allowable capital losses of the year |
| businessLimitAllocated | number | – | Business limit allocated to this corporation (Sch 23 line 410 if associated, else the statutory limit). 0 = allocation zero |
| capitalGainsDividends | number | – | Capital-gains dividends received (full amount; half to CDA) |
| cdaOpening | number | – | Capital dividend account opening balance (returns cda_closing) |
| dividendsPaidEligible | number | – | Eligible dividends paid (designated) in the year |
| dividendsPaidNonEligible | number | – | Non-eligible taxable dividends paid in the year |
| dividendsPaidOfWhichConnected | number | – | How much OF the dividends paid above went to connected corporations — a portion of dividendsPaidEligible + dividendsPaidNonEligible, never an amount on top of them. Raises the cascade warning on the… |
| dividendsReceivedConnected | array | – | Dividends from connected corporations (s.186(4)) — Part IV only through the payer's refund |
| dividendsReceivedPortfolioEligible | number | – | Eligible taxable dividends from non-connected payers (Part IV → ERDTOH) |
| dividendsReceivedPortfolioNonEligible | number | – | Non-eligible taxable dividends from non-connected payers (Part IV → NERDTOH) |
| foreignBusinessTaxCredit | number | – | T2 line 636: foreign business income tax credit |
| foreignInvestmentIncome | number | – | T2 line 445: foreign investment income |
| foreignNonBusinessTaxCredit | number | – | T2 line 632: foreign non-business income tax credit |
| groupAaiiPriorYear | number | – | T2 line 417: Σ Sch 7 line 745 of the associated group for taxation years ending in the preceding calendar year. REQUIRED whenever a business limit is claimed |
| lossesByYearOfOrigin | object | – | Sch 4 Part 6: opening balances by year of origin, e.g. {"2011": 263564} |
| netIncomeAccounting | number | – | Holdco: net income per financial statements |
| netIncomeForTax | number | – | Holdco: net income for tax purposes (Sch 1 result) — overrides the derivation |
| nonCapitalLossesClaimedAgainstPartI | number | – | Non-capital losses claimed against Part I income |
| nonCapitalLossesClaimedAgainstPartIV | number | – | Non-capital / farm losses claimed against Part IV (s.186(1)(c),(d)) — the loss amount |
| nonCapitalLossesOpening | number | – | Sch 4: non-capital loss pool at the start of the year |
| otherPropertyIncome | number | – | Holdco: property income other than dividends and capital-gains dividends |
| propertyExpenses | number | – | Holdco: deductible property expenses of the year (total) |
| province | string | yes | Province of the permanent establishment (two-letter code) |
| provincialProportion | number | – | Share of taxable income allocated to the province (Reg. 402). Default 1 |
| qc | object | – | Québec inputs (CO-771) |
| rdtohOpening | object | – | Opening ERDTOH / NERDTOH in T2 terms. Omitted = 0 with a warning when it matters |
| taxYear | object | yes | – |
| taxableCapitalGains | number | – | Sch 6: taxable capital gains (the included half) |
| taxableCapitalGroupPriorYear | number | – | T2 line 415: taxable capital employed in Canada of the group, prior year. Omit when under 10 M |
| taxableIncome | number | – | Part I taxable income (T2 line 360). Omit for a holdco and supply the income lines instead; the engine derives it |
No output schema declared.
No examples provided.
ccpcrate_group Resolve an associated group ~270
Compute a whole associated group (s.256) in one call: federal line 417 as the sum of the members' prior-year adjusted investment income, the Schedule 23 allocation of the business limit, and every member's return in payer-before-recipient order so that a connected dividend's Part IV under s.186(1)(b) is filled in from the payer's own refund instead of being asked for. Returns each member's lines plus what the grind costs the group and which member causes it — the case a single-corporation computation cannot show. 0.25 USDC covers the group and its first 2 computed members, then 0.05 per additional member, never more than 1. Members that only contribute line 417 are free.
| Name | Type | Req | Description |
|---|---|---|---|
| groupAaiiPriorYear | number | – | Federal line 417 for the group, when the per-member figures are not available. A member's own input.groupAaiiPriorYear still wins |
| members | array | yes | The associated corporations (s.256). A member with no input still counts toward line 417. Order does not matter — the engine computes payers before recipients |
| taxYear | object | – | The group's taxation year, used to read the statutory business limit when no member computes |
No output schema declared.
No examples provided.
ccpcrate_resolve Resolve the CCPC rate stack for one taxation year ~1,007
Compute the federal Part I / Part IV / refundable / RDTOH / dividend-refund lines and the provincial layer for one CCPC and one taxation year. Returns a readable summary plus the structured result: lines (rounded, as printed), unrounded audit values, facts, warnings, layers, balances carried forward, the inputs still missing, engine and rules versions and a request hash. Deductions are negative, taxes positive. A missing required input is an error, not a default. Paid: 0.25 USD per call in USDC over x402 (Base); without a payment the call returns the x402 payment requirements.
| Name | Type | Req | Description |
|---|---|---|---|
| activeBusinessIncome | number | – | T2 line 400: income from an active business carried on in Canada |
| aggregateInvestmentIncome | number | – | T2 line 440: aggregate investment income (s.129(4)) |
| allowableCapitalLosses | number | – | Sch 6: allowable capital losses of the year |
| businessLimitAllocated | number | – | Business limit allocated to this corporation (Sch 23 line 410 if associated, else the statutory limit). 0 = allocation zero |
| capitalGainsDividends | number | – | Capital-gains dividends received (full amount; half to CDA) |
| cdaOpening | number | – | Capital dividend account opening balance (returns cda_closing) |
| dividendsPaidEligible | number | – | Eligible dividends paid (designated) in the year |
| dividendsPaidNonEligible | number | – | Non-eligible taxable dividends paid in the year |
| dividendsPaidOfWhichConnected | number | – | How much OF the dividends paid above went to connected corporations — a portion of dividendsPaidEligible + dividendsPaidNonEligible, never an amount on top of them. Raises the cascade warning on the… |
| dividendsReceivedConnected | array | – | Dividends from connected corporations (s.186(4)) — Part IV only through the payer's refund |
| dividendsReceivedPortfolioEligible | number | – | Eligible taxable dividends from non-connected payers (Part IV → ERDTOH) |
| dividendsReceivedPortfolioNonEligible | number | – | Non-eligible taxable dividends from non-connected payers (Part IV → NERDTOH) |
| foreignBusinessTaxCredit | number | – | T2 line 636: foreign business income tax credit |
| foreignInvestmentIncome | number | – | T2 line 445: foreign investment income |
| foreignNonBusinessTaxCredit | number | – | T2 line 632: foreign non-business income tax credit |
| groupAaiiPriorYear | number | – | T2 line 417: Σ Sch 7 line 745 of the associated group for taxation years ending in the preceding calendar year. REQUIRED whenever a business limit is claimed |
| lossesByYearOfOrigin | object | – | Sch 4 Part 6: opening balances by year of origin, e.g. {"2011": 263564} |
| netIncomeAccounting | number | – | Holdco: net income per financial statements |
| netIncomeForTax | number | – | Holdco: net income for tax purposes (Sch 1 result) — overrides the derivation |
| nonCapitalLossesClaimedAgainstPartI | number | – | Non-capital losses claimed against Part I income |
| nonCapitalLossesClaimedAgainstPartIV | number | – | Non-capital / farm losses claimed against Part IV (s.186(1)(c),(d)) — the loss amount |
| nonCapitalLossesOpening | number | – | Sch 4: non-capital loss pool at the start of the year |
| otherPropertyIncome | number | – | Holdco: property income other than dividends and capital-gains dividends |
| propertyExpenses | number | – | Holdco: deductible property expenses of the year (total) |
| province | string | yes | Province of the permanent establishment (two-letter code) |
| provincialProportion | number | – | Share of taxable income allocated to the province (Reg. 402). Default 1 |
| qc | object | – | Québec inputs (CO-771) |
| rdtohOpening | object | – | Opening ERDTOH / NERDTOH in T2 terms. Omitted = 0 with a warning when it matters |
| taxYear | object | yes | – |
| taxableCapitalGains | number | – | Sch 6: taxable capital gains (the included half) |
| taxableCapitalGroupPriorYear | number | – | T2 line 415: taxable capital employed in Canada of the group, prior year. Omit when under 10 M |
| taxableIncome | number | – | Part I taxable income (T2 line 360). Omit for a holdco and supply the income lines instead; the engine derives it |
No output schema declared.
No examples provided.
ccpcrate_rules Rules table ~109
The statutory rates and parameters the engine uses (14 jurisdictions, effective dates, application modes, sources, verification status), filterable by jurisdiction, key and date. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | Only the rows in force on this date (default: every row, all periods) |
| jurisdiction | string | – | Jurisdiction; omit for all |
| key | string | – | Row key (e.g. sbd_rate, business_limit, passive_income_grind); omit for all keys |
No output schema declared.
No examples provided.
What is the ccpcrate — Canadian CCPC corporate tax MCP server?
ccpcrate — Canadian CCPC corporate tax is an MCP server listed in the public MCP registry as ca.ccpcrate/ccpcrate. Deterministic Canadian CCPC rate stack: small business deduction and grinds, Part IV, RDTOH. This page covers its hosted endpoint (https://ccpcrate.ca/mcp).
Is the ccpcrate — Canadian CCPC corporate tax MCP server safe to use?
ccpcrate — Canadian CCPC corporate tax scores 62 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the ccpcrate — Canadian CCPC corporate tax MCP server expose?
ccpcrate — Canadian CCPC corporate tax exposes 4 tools: ccpcrate_resolve, ccpcrate_group, ccpcrate_explain, ccpcrate_rules. Their descriptions and schemas cost roughly 2,350 tokens of context every time the server is loaded.
Does the ccpcrate — Canadian CCPC corporate tax MCP server require authentication?
No. We connected to ccpcrate — Canadian CCPC corporate tax without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the ccpcrate — Canadian CCPC corporate tax MCP server still maintained?
ccpcrate — Canadian CCPC corporate tax is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.