com.debitura/mcp-server
REMOTE · MCP.DEBITURA.COM · SCANNED SEP 20
Cross-border debt collection: submit and track cases handled by local partners in 183 countries.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security83
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token. See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability83
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3010 tokens (~158/item across 19 items; 16 tools + 3 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 18 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the com.debitura/mcp-server server?
com.debitura/mcp-server is a hosted endpoint at https://mcp.debitura.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.debitura.com
claude mcp add --transport http com-debitura-mcp-server 'https://mcp.debitura.com/mcp'
{
"mcpServers": {
"com-debitura-mcp-server": {
"url": "https://mcp.debitura.com/mcp"
}
}
} {
"servers": {
"com-debitura-mcp-server": {
"type": "http",
"url": "https://mcp.debitura.com/mcp"
}
}
} [mcp_servers.com-debitura-mcp-server] url = "https://mcp.debitura.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-debitura-mcp-server": {
"type": "remote",
"url": "https://mcp.debitura.com/mcp",
"enabled": true
}
}
} openclaw mcp add com-debitura-mcp-server --url 'https://mcp.debitura.com/mcp' --transport streamable-http
mcp_servers:
com-debitura-mcp-server:
url: "https://mcp.debitura.com/mcp" {
"McpServers": {
"com-debitura-mcp-server": {
"Transport": "http",
"Url": "https://mcp.debitura.com/mcp"
}
}
} assistant mcp add com-debitura-mcp-server -t streamable-http -u 'https://mcp.debitura.com/mcp'
{
"mcpServers": {
"com-debitura-mcp-server": {
"type": "http",
"url": "https://mcp.debitura.com/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 26 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Aug 26 +1
- Stability: 0.97 → pass security
- 23 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Aug 26 0
- “create_case” added an optional parameter “amountToRecoverOver12Months” cosmetic
- “create_case” added an optional parameter “amountToRecoverOver24Months” cosmetic
- “create_case” added an optional parameter “amountToRecoverOver6Months” cosmetic
- “create_case” added an optional parameter “claimLines” cosmetic
- “preview_case” added an optional parameter “amountToRecoverOver12Months” cosmetic
- “preview_case” added an optional parameter “amountToRecoverOver24Months” cosmetic
- “preview_case” added an optional parameter “amountToRecoverOver6Months” cosmetic
- “preview_case” added an optional parameter “claimLines” cosmetic
- “create_case” reworded the description of “amountToRecover” cosmetic
- “create_case” reworded the description of “dueDate” cosmetic
- “preview_case” reworded the description of “amountToRecover” cosmetic
- “create_case” made “amountToRecover” optional cosmetic
- “create_case” made “dueDate” optional cosmetic
- “preview_case” made “amountToRecover” optional cosmetic
14 cosmetic changes on this day. Switch on “Show cosmetic changes” to see them.
- 11 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 31 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 27 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Probed https://mcp.debitura.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=debitura.com | CN=WE1,O=Google Trust Services,C=US | 9 Aug 2026 | 7 Nov 2026 | ECDSA 256 | ECDSA-SHA256 | c66ecd0bfbda637613f911ed99a9dbfc |
| SANs: debitura.com, *.debitura.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.debitura.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| debitura.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Challenged, unverified
The endpoint asked for a token, but we could not retrieve and validate the RFC 9728 metadata that tells a client how to obtain one.
| Result | Challenged, unverified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
Protected resource metadata
| Retrieved | No |
|---|---|
| Problem | no_resource_metadata |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.debitura.com/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.debitura.com/mcp | HTTPS enforced | 301 | https://mcp.debitura.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
create_case Create Collection Case ~537
Submit a debt collection case to Debitura. This is a LEGAL AND FINANCIAL ACTION: a collection partner starts recovery against the debtor, and contractual fees apply on success. Required workflow — never skip it: 1. Call preview_case first and show the user the pricing, assigned partner, and any contracts that need signing. 2. Ask the user to explicitly confirm submission. 3. Only then call this tool. NEVER call it without the user's explicit confirmation in this conversation. Submission is idempotent: the server sends a unique Idempotency-Key and safely retries transient network failures without risk of duplicate cases. A 422 response is a business rejection — read its payload (it may contain signing URLs for required contracts, or duplicate-reference details).
| Name | Type | Req | Description |
|---|---|---|---|
| allowPendingContracts | boolean | – | Accept the case even if contracts (SDCA/POA) are unsigned — it waits in PendingContractSigning with signing URLs returned |
| amountToRecover | number | – | Total principal amount. Omit when sending claimLines |
| amountToRecoverOver12Months | number | – | Cumulative principal more than 365 days overdue |
| amountToRecoverOver24Months | number | – | Cumulative principal more than 730 days overdue |
| amountToRecoverOver6Months | number | – | Cumulative principal more than 180 days overdue |
| assignedUserEmail | string | – | Email of the team member to own the case (use list_team_members to find valid team members) |
| claimDescription | string | – | Description of the claim (what the debt is for) |
| claimLines | array | – | Unpaid invoices making up the claim. Use instead of amountToRecover and age buckets; Debitura derives the total and aging. |
| comments | string | – | Context for the collection partner, e.g. payment history or prior communication |
| creditorReference | string | – | RECOMMENDED: your own reference (e.g. invoice number). Helps avoid business duplicates and lets you look the case up later. |
| currencyCode | string | yes | ISO 4217 currency code, e.g. "EUR" |
| date | string | yes | Invoice date (ISO 8601, e.g. 2026-03-01) — required by the API |
| debtor | object | yes | The debtor the claim is against |
| dueDate | string | – | Case due date (ISO 8601). When omitted with claimLines, Debitura uses the oldest line due date. |
| isTest | boolean | – | Create as test data (persisted but excluded from production metrics) |
| tag | string | – | Optional tag for grouping test data |
No output schema declared.
No examples provided.
get_account_summary Get Account Summary ~94
Return a count of cases per lifecycle stage for the creditor's account. Useful for a quick portfolio overview without listing all cases. Stages: PendingContractSigning, PendingVerificationInternal, PendingVerification, NeedsAdditionalDetails, Leads, LeadsQuoteGiven, Active, Paused, Closed, Merged. Note: these counts include the creditor's own test cases; list_cases exposes the `isTestCase` flag that marks them.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_case Get Case ~109
Fetch one collection case in full detail. Look it up by Debitura case ID (GUID), by your own creditor reference (e.g. invoice number), or by the Debitura case reference shown in the portal. Provide exactly one of the three identifiers.
| Name | Type | Req | Description |
|---|---|---|---|
| caseReference | string | – | Debitura case reference as shown in the portal |
| creditorReference | string | – | Your own reference for the case (e.g. invoice number) |
| id | string | – | Debitura case ID (GUID) |
No output schema declared.
No examples provided.
get_case_activity Get Case Activity ~103
Fetch the chronological timeline of a case — what has happened so far: status changes, partner actions, communications, and payments. Returns an envelope `{ items, currentEngagementPhase }`: `items` is the chronological event list, and `currentEngagementPhase` is the case's current engagement phase ("Pre-legal", "Legal", or "Enforcement"; null when no active engagement exists).
| Name | Type | Req | Description |
|---|---|---|---|
| caseId | string | yes | Debitura case ID (GUID) |
No output schema declared.
No examples provided.
get_case_contract_status Get Case Contract Status ~55
Check which contracts (e.g. debt collection agreement, power of attorney) are signed or still blocking a case, including signing URLs for any outstanding documents.
| Name | Type | Req | Description |
|---|---|---|---|
| caseId | string | yes | Debitura case ID (GUID) |
No output schema declared.
No examples provided.
get_case_messages Get Case Messages ~82
Read the chat conversation on a case between you and the collection partner handling it. Each message includes: senderName, role (Creditor / Partner / Managed by partner), sentAt (UTC), message. See the debitura://glossary/chat-roles resource for what each role means.
| Name | Type | Req | Description |
|---|---|---|---|
| caseId | string | yes | Debitura case ID (GUID) |
No output schema declared.
No examples provided.
get_case_payments Get Case Payments ~37
List every payment recorded on a case — money recovered so far.
| Name | Type | Req | Description |
|---|---|---|---|
| caseId | string | yes | Debitura case ID (GUID) |
No output schema declared.
No examples provided.
get_case_tasks Get Case Tasks ~209
List the open tasks (action-items) attached to one specific case — same data as list_tasks, scoped to a single case. Use this when you're already working a specific case and want just its outstanding tasks. Note: account-level tasks that aren't tied to any one case (e.g. SignContract, AssignBankAccount — these block the whole account, not one case) never appear here; use list_tasks to see those. See list_tasks for the full task model (auto-resolve, solutionUrl, action).
| Name | Type | Req | Description |
|---|---|---|---|
| caseId | string | yes | Debitura case ID (GUID) |
| status | string | – | Filter by task status. "Open" (default) or "Solved". |
| type | array | – | Restrict to specific task types, e.g. ["ReplyToChat", "SignContract"]. Valid values: Generic, ReplyToChat, SelectQuoteWinner, ReviewPartner, ClientInputRequired, SignContract, MoreInfoNeeded, AssignB… |
No output schema declared.
No examples provided.
list_case_files List Case Files ~89
List all documents attached to a case: file name, document type, description, upload date, and a time-limited SAS download URL. Each file also carries downloadUrlExpiresAt (UTC) — when the download URL stops working, so a cached URL can be refreshed in time. Use upload_case_file to attach new documents.
| Name | Type | Req | Description |
|---|---|---|---|
| caseId | string | yes | Debitura case ID (GUID) |
No output schema declared.
No examples provided.
list_cases List Cases ~353
List the creditor's debt collection cases with pagination, status filtering, and sorting. Returns compact case summaries: reference, debtor name + country, amounts, lifecycle, partner, key dates. Use get_case for full detail on a specific case. Lifecycle values (statuses filter and output): `PendingContractSigning` · `PendingVerificationInternal` · `PendingVerification` · `NeedsAdditionalDetails` · `Leads` · `LeadsQuoteGiven` · `Active` · `Paused` · `Closed` · `Merged` Sortable fields: `DateCreated` · `DateUpdated` · `DateFinished` · `DateCollectionStarted` · `DueDate` · `Date` · `GrossAmount` · `Remainder` · `InterestFees` · `CollectionFees` Sort format: `Field:asc` or `Field:desc`, e.g. `GrossAmount:desc` Note: results include the creditor's own test cases; the `isTestCase` flag on each case marks them.
| Name | Type | Req | Description |
|---|---|---|---|
| page | integer | – | Page number, starting from 1 (default 1) |
| pageSize | integer | – | Results per page (default 10, max 100) |
| sort | string | – | Sort expression: Field:asc or Field:desc. Valid fields: DateCreated, DateUpdated, DateFinished, DateCollectionStarted, DueDate, Date, GrossAmount, Remainder, InterestFees, CollectionFees. Example: Gr… |
| statuses | array | – | Filter by lifecycle status. Values: PendingContractSigning, PendingVerificationInternal, PendingVerification, NeedsAdditionalDetails, Leads, LeadsQuoteGiven, Active, Paused, Closed, Merged |
No output schema declared.
No examples provided.
list_tasks List Tasks ~373
List every open task (action-item) across your whole account — things the platform needs you to do before a case (or your account) can proceed: reply to a chat, sign a contract, assign a bank account, and so on. Use get_case_tasks instead to scope this to one case. Tasks auto-resolve once the underlying condition clears — e.g. replying to a case's chat makes its ReplyToChat task disappear on its own. Treat this as a live work queue, not a log: a task seen on one call may no longer be open on the next. Every task carries a solutionUrl — an absolute link a human can open to resolve it in one click, whatever the type. Some types (today: ReplyToChat, ClientInputRequired, MoreInfoNeeded) additionally carry a non-null `action` pointing at the exact API call that resolves them — for those, call send_case_message with the task's caseId instead of sending a human to solutionUrl. Tasks without an action rely on solutionUrl alone. Task types: Generic, ReplyToChat, SelectQuoteWinner, ReviewPartner, ClientInputRequired, SignContract, MoreInfoNeeded, AssignBankAccount, CaseValidationNeedsInfo.
| Name | Type | Req | Description |
|---|---|---|---|
| page | integer | – | Page number, starting from 1 (default 1) |
| pageSize | integer | – | Results per page (default 10, max 100) |
| status | string | – | Filter by task status. "Open" (default) or "Solved". |
| type | array | – | Restrict to specific task types, e.g. ["ReplyToChat", "SignContract"]. Valid values: Generic, ReplyToChat, SelectQuoteWinner, ReviewPartner, ClientInputRequired, SignContract, MoreInfoNeeded, AssignB… |
No output schema declared.
No examples provided.
list_team_members List Team Members ~72
List the team members on the creditor's Debitura account. Use this to resolve a valid sender (userId or email) before calling send_case_message, or a case owner for create_case.
| Name | Type | Req | Description |
|---|---|---|---|
| page | integer | – | Page number (default 1) |
| pageSize | integer | – | Results per page |
No output schema declared.
No examples provided.
ping Test Connection ~36
Verify the connection to Debitura and show which creditor account the API key belongs to. Call this first to confirm the integration is set up correctly.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
preview_case Preview Case (Pricing & Eligibility) ~307
Dry-run a collection case BEFORE creating it: returns eligibility, the assigned collection partner, pricing (success fee), and any contracts that would need signing. Nothing is persisted. ALWAYS call this before create_case and show the user the pricing and requirements.
| Name | Type | Req | Description |
|---|---|---|---|
| amountToRecover | number | – | Total principal amount. Omit when sending claimLines |
| amountToRecoverOver12Months | number | – | Cumulative principal more than 365 days overdue |
| amountToRecoverOver24Months | number | – | Cumulative principal more than 730 days overdue |
| amountToRecoverOver6Months | number | – | Cumulative principal more than 180 days overdue |
| claimLines | array | – | Unpaid invoices making up the claim. Use instead of amountToRecover and age buckets; Debitura derives the total and aging. |
| currencyCode | string | yes | ISO 4217 currency code, e.g. "EUR", "USD", "DKK" |
| debtorCountryAlpha2 | string | yes | Debtor country, ISO 3166-1 alpha-2, e.g. "DE", "US" |
| debtorStateAlpha2 | string | – | US state code, e.g. "CA" — REQUIRED when the debtor is in the United States |
| debtorType | string | yes | Company (B2B) or Private individual (B2C) |
| dueDate | string | – | Invoice due date (ISO 8601) — used to compute debt age for pricing |
No output schema declared.
No examples provided.
send_case_message Send Case Message ~140
Send a chat message on a case to the collection partner handling it. The partner is notified by email. The message is attributed to a named team member, so a sender is REQUIRED: pass the sender's userId or email from list_team_members. Ask the user who the message should be sent as if it is not obvious.
| Name | Type | Req | Description |
|---|---|---|---|
| caseId | string | yes | Debitura case ID (GUID) |
| message | string | yes | The message to send |
| senderEmail | string | – | Team member email sending the message (alternative to senderUserId) |
| senderUserId | string | – | Team member ID sending the message (from list_team_members) |
No output schema declared.
No examples provided.
upload_case_file Upload Case File ~197
Attach a document to a case (invoice copy, contract, correspondence, proof of delivery). Max 25 MB. Allowed extensions: .pdf, .xls, .xlsx, .csv, .txt, .jpg, .jpeg, .png, .gif. Provide the file content base64-encoded.
| Name | Type | Req | Description |
|---|---|---|---|
| caseId | string | yes | Debitura case ID (GUID) |
| contentBase64 | string | yes | File content, base64-encoded |
| contentType | string | – | MIME type, e.g. "application/pdf" (inferred from extension if omitted) |
| description | string | – | Short description of the document |
| documentType | string | – | Document category (default: OriginalInvoice). Values: OriginalInvoice · DebtorDocuments · CreditorDocuments · PartnerDocuments · DemandLetter · Miscellaneous |
| fileName | string | yes | File name including extension, e.g. "invoice-1042.pdf" |
No output schema declared.
No examples provided.
What is the com.debitura/mcp-server server?
com.debitura/mcp-server is listed in the public MCP registry as com.debitura/mcp-server. Cross-border debt collection: submit and track cases handled by local partners in 183 countries. This page covers its hosted endpoint (https://mcp.debitura.com/mcp).
Is the com.debitura/mcp-server server safe to use?
com.debitura/mcp-server scores 90 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.debitura/mcp-server server expose?
com.debitura/mcp-server exposes 16 tools: ping, list_cases, get_case, get_case_activity, get_case_messages, and 11 more. Their descriptions and schemas cost roughly 2,793 tokens of context every time the server is loaded.
Does the com.debitura/mcp-server server require authentication?
Yes. com.debitura/mcp-server asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the com.debitura/mcp-server server still maintained?
com.debitura/mcp-server is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.