com.datavrn/schedule-iii
REMOTE · APP.DATAVRN.COM · SCANNED AUG 13
Deterministic Schedule III statements for Indian companies: trial balance in, Excel workbook out.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security94
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability63
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 12828 tokens (~217/item across 59 items; 59 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management23
- Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage88
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 63% of tool parameters carry a description.Partial
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · app.datavrn.com
claude mcp add --transport http com-datavrn-schedule-iii https://app.datavrn.com/api/mcp
[mcp_servers.com-datavrn-schedule-iii] url = "https://app.datavrn.com/api/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-datavrn-schedule-iii": {
"type": "remote",
"url": "https://app.datavrn.com/api/mcp",
"enabled": true
}
}
} openclaw mcp add com-datavrn-schedule-iii --url https://app.datavrn.com/api/mcp --transport streamable-http
mcp_servers:
com-datavrn-schedule-iii:
url: "https://app.datavrn.com/api/mcp" {
"mcpServers": {
"com-datavrn-schedule-iii": {
"type": "http",
"url": "https://app.datavrn.com/api/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 13 Aug 26 0
- Tool “set_header_row” is now declared destructive security
- Tool “revoke_capture_declaration” is now declared destructive security
- Tool “save_asset_movements” is now declared destructive security
- Tool “save_disclosures” is now declared destructive security
- Tool “save_py_values” is now declared destructive security
- Tool “save_share_capital” is now declared destructive security
- Tool “save_statement_settings” is now declared destructive security
- Tool “confirm_column_mapping” is now declared destructive security
- Tool “finalise_statement” is now declared destructive security
- 12 Aug 26 0
- Tool “get_consolidated_statements” rewrote its description, which is the text the model reads security
- 11 Aug 26 +3
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 9 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 7 Aug 26 +1
- Stability: unverified → 0.03 ▲ functional
- 6 Aug 26 72
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 13 Aug 2026 · Probed https://app.datavrn.com/api/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=app.datavrn.com | CN=YR1,O=Let's Encrypt,C=US | 22 Jun 2026 | 20 Sept 2026 | RSA 2048 | SHA256-RSA | 5c88e9b147bd7ae4c8cf2dec2bf215ed780 |
| SANs: app.datavrn.com | ||||||
| CN=YR1,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | a20253f15f2691c05dc1ce13b9bcca4e |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
DNSSEC insecure
Validation of app.datavrn.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| datavrn.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer resource_metadata="https://app.datavrn.com/.well-known/oauth-protected-resource/api/mcp"
Bearer resource_metadata="https://app.datavrn.com/.well-known/oauth-protected-resource/api/mcp" | Header | Value |
|---|---|
| strict-transport-security | max-age=15552000; includeSubDomains; preload |
| content-security-policy | default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://api.razorpay.com; img-src 'self' data: blob: https://jmkgxtzscatvuqefbiyq.supabase.co https://*.razorpay.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://*.razorpay.com; connect-src 'self' https://jmkgxtzscatvuqefbiyq.supabase.co wss://jmkgxtzscatvuqefbiyq.supabase.co https://o4511541413740544.ingest.de.sentry.io https://*.razorpay.com; frame-src 'self' https://api.razorpay.com https://checkout.razorpay.com; worker-src 'self' blob:; manifest-src 'self' |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=(), payment=(), usb=(), browsing-topics=() |
Protected resource metadata
| Document | https://app.datavrn.com/.well-known/oauth-protected-resource/api/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://app.datavrn.com/api/mcp |
| Authorisation server | https://jmkgxtzscatvuqefbiyq.supabase.co/auth/v1 |
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://app.datavrn.com/api/mcp | Verified | 200 | |
| http (plaintext) | http://app.datavrn.com/api/mcp | HTTPS enforced | 308 | https://app.datavrn.com/api/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
save_provision_movements Save provision movements ~166
Upsert provision movements (additions, amounts utilised) per provision line. Omitted saved lines stay unchanged. To remove selected saved lines, pass remove_leaf_codes; to remove the entire saved set, pass clear_all (never both). An actual removal first returns an approval request; nothing changes then. Review current movements in the Schedule III workspace, then resend the unchanged request with the approval details to proceed.
| Name | Type | Req | Description |
|---|---|---|---|
| clear_all | boolean | – | – |
| client_id | string | yes | The entity (client) id — from list_clients. |
| movements | array | yes | – |
| period_id | string | yes | – |
| removal_count | integer | – | – |
| removal_token | string | – | – |
| remove_leaf_codes | array | – | – |
| template_id | string | yes | – |
No output schema declared.
No examples provided.
save_py_values Save prior-year comparatives ~133
Override the prior-year comparative for one or more statement lines with an audited figure. The prior-year column fills itself automatically from the previous year's Trial Balance read through the current groupings, so use this only when the audited financial statements differ from that figure (for example appropriations booked outside the ledger), or when there is no previous-year Trial Balance to derive from — ask your user for the audited figures in those cases.
| Name | Type | Req | Description |
|---|---|---|---|
| client_id | string | yes | The entity (client) id — from list_clients. |
| period_id | string | yes | – |
| template_id | string | yes | – |
| values | array | yes | – |
No output schema declared.
No examples provided.
save_regulatory_affirmations Save regulatory affirmations ~465
Save the CARO / Other Regulatory Information affirmations your user has confirmed, one per title. SEND THE COMPLETE SET EVERY TIME: this replaces the whole Other Regulatory Information note, so any title you leave out of this call is removed — including one someone answered in the Datavrn app. Call list_statement_policy_choices first and send back every title. If your call would drop a saved affirmation, Datavrn saves nothing and returns an approval request naming how many would be dropped — show your user, and send the approval back only if they mean to drop them. A complete resend drops nothing and saves straight away. Use the exact affirmation headings this statement format carries; a heading Datavrn does not recognise is refused and nothing is saved. Some statement formats — the ICAI formats for LLPs and non-corporate entities — carry no Other Regulatory Information note at all, and this tool refuses for them. Each affirmation is a REGULATORY REPRESENTATION made in the entity’s name — for example whether any proceedings for benami property are pending, or whether the entity has been declared a wilful defaulter. Put each one to your user individually and record their answer. Never affirm one because it is the usual answer, never infer one from a template default, and never confirm a batch of them in one go. If an affirmation differs from last year’s answer, tell your user — call list_statement_policy_choices to see what was answered last year. Saving here re-opens the disclosure review — after your last change, confirm the disclosure review again with confirm_capture_review before generating. Recorded as authorised by the member you name. Generate a fresh version after your last capture change — finalisation checks the version’s frozen capture state, not today’s.
| Name | Type | Req | Description |
|---|---|---|---|
| affirmations | object | – | – |
| client_id | string | yes | The entity (client) id — from list_clients. |
| on_behalf_of | string | yes | The email address your user signs in to Datavrn with. This records who authorised the change alongside the connection that made it. Ask them for it — do not guess. |
| period_id | string | yes | – |
| removal_count | integer | – | – |
| removal_token | string | – | – |
| template_id | string | yes | – |
No output schema declared.
No examples provided.
save_reserves_movements Save reserves movements ~173
Upsert reserves/equity movements (transfers in/out, dividends, other changes) per reserves line. Omitted saved lines stay unchanged. To remove selected saved lines, pass remove_leaf_codes; to remove the entire saved set, pass clear_all (never both). An actual removal first returns an approval request; nothing changes then. Review current movements in the Schedule III workspace, then resend the unchanged request with the approval details to proceed.
| Name | Type | Req | Description |
|---|---|---|---|
| clear_all | boolean | – | – |
| client_id | string | yes | The entity (client) id — from list_clients. |
| movements | array | yes | – |
| period_id | string | yes | – |
| removal_count | integer | – | – |
| removal_token | string | – | – |
| remove_leaf_codes | array | – | – |
| template_id | string | yes | – |
No output schema declared.
No examples provided.
save_share_capital Save share capital ~118
Save the share-capital reconciliation for the period: the opening share count, the shares issued and bought back during the year, and the amount issued and the amount bought back.
| Name | Type | Req | Description |
|---|---|---|---|
| amount_bought_back | – | yes | – |
| amount_issued | string | yes | – |
| client_id | string | yes | The entity (client) id — from list_clients. |
| opening_shares | – | yes | – |
| period_id | string | yes | – |
| shares_bought_back | – | yes | – |
| shares_issued | – | yes | – |
| template_id | string | yes | – |
No output schema declared.
No examples provided.
save_statement_settings Save statement settings ~247
Save statement settings (rounding unit, signatory details, company information used on the statement face).
| Name | Type | Req | Description |
|---|---|---|---|
| cin | – | yes | – |
| client_id | string | yes | The entity (client) id — from list_clients. |
| entity_class | – | – | – |
| entity_name_override | – | yes | – |
| equity_face_value | – | yes | – |
| font_name | string | – | – |
| include_cfs | boolean|null | – | – |
| period_id | string | yes | – |
| registered_office | – | yes | – |
| rounding_off | boolean | – | Whole-rupee value rounding. When true (the default), every figure is rounded to the nearest rupee and the net rounding difference is posted as a computed "Rounding off" line under Other expenses so t… |
| suppress_nil_lines | boolean | – | – |
| template_id | string | yes | – |
| unit_divisor | number | yes | – |
| unit_label | string | yes | – |
| weighted_equity_shares | – | yes | – |
| weighted_equity_shares_py | – | yes | – |
| weighted_potential_equity_shares | – | yes | – |
| weighted_potential_equity_shares_py | – | yes | – |
No output schema declared.
No examples provided.
set_header_row Set header row ~62
Correct the detected header row of a staged upload (1-based). Only needed when get_upload/upload_trial_balance shows the wrong row was detected.
| Name | Type | Req | Description |
|---|---|---|---|
| header_row | integer | yes | – |
| upload_id | string | yes | The upload session id returned by upload_trial_balance. |
No output schema declared.
No examples provided.
upload_trial_balance Upload trial balance ~300
Stage a Trial Balance spreadsheet (xlsx or csv, max 4 MB) for an entity by INLINING its bytes as base64. This path is ONLY for programmatic callers (a script, Claude Code, an automation) that already have the raw file on disk. If a HUMAN has the file — e.g. they attached it to this chat — do NOT use this tool and do NOT base64-encode the file: call create_upload_link instead and give them the link to upload it in their browser. File size does not change this: even a small attached file goes through create_upload_link — inlining a human-supplied file is unreliable and its bytes routinely truncate. Returns the upload session with detected columns and mapping SUGGESTIONS — nothing is ingested yet. Next: review the suggested column mapping with your user, then call confirm_column_mapping.
| Name | Type | Req | Description |
|---|---|---|---|
| client_id | string | yes | The entity (client) id — from list_clients. |
| file_base64 | string | yes | The file bytes, base64-encoded. |
| file_name | string | yes | The file's name, e.g. 'tb-2026-03.xlsx'. |
| format | string | – | Leave unset — the assistant handles Trial Balances only; any other format is refused (use the Datavrn web app). |
| source | string | – | Set 'tally_file' when the file is a Tally xlsx export; omit otherwise. |
No output schema declared.
No examples provided.
verify_connection Verify connection ~79
Confirm the Datavrn connection is working and report what it can do. Call this first — or whenever the user asks whether Datavrn is connected — to get back the organization, the access profile (what this connection may see and do), and the next step. Running it successfully also marks the connection healthy in the user’s Datavrn settings.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.