AICTIONBOT™ Werkbank
REMOTE · WWW.KULICADVISORY.COM
Procurement checks for SMBs: price increases vs Eurostat, sanctions, deadlines, discounts, invoices.
Available components
Last scanned (8 hours ago)
Scores higher than 57% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security74
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability62
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2840 tokens (~218/item across 13 items; 13 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management30
- Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage97
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 91% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 13 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 14 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- Schema quality: 1682 → 2840 ▼ functional
- Tool coverage: 86% → 91% ▲ functional
- Server version: 1.2.0 → 1.3.0 functional
- New tool “check_invoice” functional
- New tool “compare_offers” functional
- New tool “review_contract” functional
- New tool “werkbank_licence” functional
- New tool “write_meeting_minutes” functional
- New tool “write_scope_of_work” functional
- “check_approval_matrix” reworded the description of “people” cosmetic
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Nov 26 −1
- The server rewrote its instructions, which are the text every model session reads security
- Schema quality: 172 → 240 ▼ functional
- Schema quality: 172 → 190 ▼ functional
- Tool coverage: 83% → 93% ▲ functional
- Server version: 1.1.0 → 1.2.0 functional
- Server version: 1.0.0 → 1.1.0 functional
- New tool “check_approval_matrix” functional
- New tool “check_discount_window” functional
- New tool “check_invoice_payment” functional
- New tool “calculate_notice_deadline” functional
- New tool “screen_sanctions” functional
- 1 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 30 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 27 Oct 26 67
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://www.kulicadvisory.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=www.kulicadvisory.com | CN=WE1,O=Google Trust Services,C=US | 29 Sept 2026 | 29 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | 8ea80ae5b66e886c13a0320733c64c33 |
| SANs: www.kulicadvisory.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of www.kulicadvisory.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| kulicadvisory.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| x-content-type-options | nosniff |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://www.kulicadvisory.com/mcp | Verified | 200 | |
| http (plaintext) | http://www.kulicadvisory.com/mcp | HTTPS enforced | 301 | https://www.kulicadvisory.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
calculate_notice_deadline Calculate the last day to give notice on a contract ~221
AICTIONBOT™ deadline guard by KULIC Advisory. From contract start, initial term, automatic renewal and notice period it calculates the current term end, the last day notice must reach the other party, the days left and what happens if the date is missed. Deterministic, no AI. Not legal advice: the wording of the contract decides.
| Name | Type | Req | Description |
|---|---|---|---|
| contract_start | string | yes | First day of the contract, YYYY-MM-DD. |
| initial_term_months | integer | yes | Initial (minimum) term in months. |
| language | string | – | Language of the answer. Default de. |
| notice_period | string | yes | Notice period before the end of the term: number plus unit d (days), w (weeks) or m (months), e.g. 3m. |
| renewal_months | integer | – | Automatic renewal period in months after the initial term; 0 if the contract ends without renewal. Default 12. |
| today | string | – | Optional reference date, YYYY-MM-DD. Default today (Europe/Berlin). |
No output schema declared.
No examples provided.
check_approval_matrix Check an approval matrix against the people list: who approves although they left, lack a role or have no deputy ~323
AICTIONBOT™ Freigabematrix-Prüfer by KULIC Advisory. Checks an approval matrix (area, level, approver, limits, deputy, system) against a people list (status, leaving date, absence, system role) and optional open approvals, and returns the rows that need action: approvers who left, are absent without a cover, lack a system role, missing deputies, limit gaps and overlaps, plus open approvals stuck with those people. Deterministic, no AI, nothing stored. Findings are written in German. Keys may be German (bereich, stufe, freigeber, limit_von, limit_bis, waehrung, vertreter, system; person, status, austritt, abwesend_bis, systemrolle; beleg, bereich, betrag, wartet_bei, seit) or English (area, level, approver, limit_from, limit_to, currency, deputy, system; person, status, left_on, absent_until, system_role; document, area, amount, waiting_with, since).
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Reference date, YYYY-MM-DD. Default today. |
| language | string | – | – |
| matrix | array | yes | Approval matrix rows. |
| open_approvals | array | – | Optional open approvals: document, area, amount, waiting_with, since, system. |
| people | array | yes | People list. Each person: name, status (active, left, absent), left_on, absent_until, system_role (yes/no). |
No output schema declared.
No examples provided.
check_discount_window Find early-payment discounts (Skonto) that expire in the next days, and which payment run still catches them ~349
AICTIONBOT™ Skonto-Radar by KULIC Advisory. Takes an open-items list (invoices with discount terms) and optional clarification cases from other checks, and returns which discounts expire within the window, which are blocked by a payment hold or an open clarification, which are already lost, and the last payment run that still catches each one. Deterministic, no AI, nothing stored. Findings are written in German. Keys may be given in German (beleg, lieferant, bestellung, rechnungsdatum, eingang, betrag, skonto_pct, skonto_tage, netto_tage, skonto_bis, faellig, sperre) or English (document, supplier, order, invoice_date, received, amount, discount_percent, discount_days, net_days, discount_until, due, blocked).
| Name | Type | Req | Description |
|---|---|---|---|
| as_of | string | – | Reference date, YYYY-MM-DD. Default today. |
| clarifications | array | – | Optional open clarification cases from other checks: document, order, reason (grund), with (bei), result (ergebnis). |
| language | string | – | – |
| open_items | array | yes | Open invoices. Each item: document, supplier, order, invoice_date (YYYY-MM-DD or DD.MM.YYYY), received, amount (negative for credit notes), discount_percent, discount_days, net_days, discount_until,… |
| payment_run_weekdays | array | – | Weekdays of the payment runs, 1 = Monday. Default [2, 5] (Tuesday, Friday). |
| window_days | integer | – | Days ahead that count as 'expiring soon'. Default 10. |
No output schema declared.
No examples provided.
check_invoice Check a supplier invoice against order and goods receipt (AICTIONBOT™ invoice check) ~215
Needs the user's AICTIONBOT™ Werkbank licence; each call uses one AI analysis from the licence quota. Checks a supplier invoice like an accounts payable clerk doing a three-way match: line by line against the purchase order or contract and the goods receipt (price, quantity, new or missing items), totals and tax, payment term and early payment discount, and for German invoices the mandatory content under § 14 UStG. Returns the lines with status and notes, the mandatory content check and what to clarify before paying. Not tax advice. The texts are processed for this answer only and are not stored by KULIC Advisory.
| Name | Type | Req | Description |
|---|---|---|---|
| goods_receipt | string | – | Optional: what was actually received, e.g. quantities per item. |
| invoice_text | string | yes | Text of the invoice. |
| language | string | – | Language of the answer: de, en, fr, es, pt or zh. Default de. |
| reference_text | string | – | Optional: text of the purchase order or contract to compare against. |
No output schema declared.
No examples provided.
check_invoice_payment Check an invoice against the vendor master before paying: new bank account, unknown supplier, blocked vendor ~167
AICTIONBOT™ Zahlungsschutz by KULIC Advisory. Matches the supplier on an invoice to the vendor master by VAT ID, IBAN and name similarity, validates the IBAN checksum, and flags a changed or unknown bank account, a blocked vendor, a dormant vendor and a first payment. Returns a verdict (stop, check, ok) with the next step. Deterministic, no AI, nothing stored. Findings in German.
| Name | Type | Req | Description |
|---|---|---|---|
| invoice | object | yes | supplier (name), vat_id, iban, amount, currency, date (YYYY-MM-DD). |
| language | string | – | – |
| vendor_master | array | yes | Vendor master rows: no (vendor number), name, vat_id, iban, country, last_payment (YYYY-MM-DD or null), blocked (bool). |
No output schema declared.
No examples provided.
check_price_increase Check a supplier price increase against official market data (Germany) ~244
AICTIONBOT™ price increase check by KULIC Advisory. Compares a supplier's requested price increase with the official Eurostat producer price index (goods) or services producer price index plus labour cost index (services) for Germany since the last price agreement. Returns market change, gap in percentage points, a verdict (in line, slightly above, clearly above, market fell), an evidence-based counter-offer level and the source. Deterministic, no AI, no personal data. Not legal advice. Use list_categories to pick a category code.
| Name | Type | Req | Description |
|---|---|---|---|
| annual_volume_eur | number | – | Optional annual spend with this supplier in EUR, to express the gap in euros. |
| category | string | yes | Category code from list_categories (e.g. C17 for paper and packaging, N81 for cleaning) or its German or English name. |
| language | string | – | Language of the answer. Default de. |
| last_agreement | string | yes | Month of the last agreed price, YYYY-MM (2019-01 or later). |
| requested_increase_percent | number | yes | Increase the supplier requests, in percent (e.g. 9.5). |
No output schema declared.
No examples provided.
compare_offers Compare two or three supplier offers like a buyer (AICTIONBOT™ offer comparison) ~200
Needs the user's AICTIONBOT™ Werkbank licence; each call uses one AI analysis from the licence quota. Compares 2 or 3 supplier offers for the buyer: whether they are comparable, total price as stated, what is included, what is missing or unclear, extra and hidden costs, risks, a criterion-by-criterion comparison and questions to send to each supplier before deciding. Numbers are copied exactly from the offers, never invented. Pass the text of each offer (extract text from PDFs first). The texts are processed for this answer only and are not stored by KULIC Advisory.
| Name | Type | Req | Description |
|---|---|---|---|
| language | string | – | Language of the answer: de, en, fr, es, pt or zh. Default de. |
| offers | array | yes | The offer texts, one string per offer, labelled A, B, C in this order. |
| what_is_bought | string | – | Optional: what is being bought, in one sentence. |
No output schema declared.
No examples provided.
list_categories List goods and service categories for the price increase check ~42
Lists the categories the AICTIONBOT™ price increase check covers (Eurostat NACE codes for Germany), with German and English names.
| Name | Type | Req | Description |
|---|---|---|---|
| language | string | – | – |
No output schema declared.
No examples provided.
review_contract Review a contract or terms and conditions from the buyer side (AICTIONBOT™ clause radar) ~229
Needs the user's AICTIONBOT™ Werkbank licence; each call uses one AI analysis from the licence quota. Reviews a contract or general terms and conditions the buyer is asked to sign, clause by clause (term, renewal, notice, price adjustment, payment, liability, warranty, penalties, acceptance, exclusivity, data protection, jurisdiction). Returns a summary and, per clause, the exact reference, the plain-language meaning, a rating (ok, pruefen = check, kritisch = critical), why it matters for the buyer and a counter-proposal; deadline dates only when the start date is known. Pass the full contract text (extract text from PDFs or images first). Not legal advice. The text is processed for this answer only and is not stored by KULIC Advisory.
| Name | Type | Req | Description |
|---|---|---|---|
| contract_start | string | – | Optional contract start, YYYY-MM-DD, to compute notice dates. |
| contract_text | string | yes | Full text of the contract or the terms and conditions. |
| language | string | – | Language of the answer: de, en, fr, es, pt or zh. Default de. |
No output schema declared.
No examples provided.
screen_sanctions Screen a company or person against public sanctions lists ~160
AICTIONBOT™ supplier check by KULIC Advisory. Screens a name against the consolidated public sanctions lists of the EU, the UN, the US (OFAC SDN and non-SDN) and the UK, refreshed daily. Fuzzy matching on normalised name tokens, legal forms ignored. Returns possible matches with list, type, programme and similarity, and the list dates. A similar name is no proof, no hit is no clearance; this does not replace a legal sanctions screening. Deterministic, no AI, nothing is stored.
| Name | Type | Req | Description |
|---|---|---|---|
| language | string | – | Language of the answer. Default de. |
| name | string | yes | Company or person name to screen, e.g. as on the invoice or in the supplier master. |
No output schema declared.
No examples provided.
werkbank_licence Show my AICTIONBOT™ Werkbank licence: plan, period and remaining AI analyses ~85
Needs sign-in with the user's AICTIONBOT™ Werkbank licence (KULIC Advisory). Shows the plan, whether it is active, the quota of AI analyses for the current period, how many are used and how many remain. Read only: no payment data, no change to the subscription.
| Name | Type | Req | Description |
|---|---|---|---|
| language | string | – | Language of the answer. Default de. |
No output schema declared.
No examples provided.
write_meeting_minutes Write minutes and commitments from notes of a supplier meeting (AICTIONBOT™ minutes) ~176
Needs the user's AICTIONBOT™ Werkbank licence; each call uses one AI analysis from the licence quota. Turns notes or a transcript of a procurement conversation (for example with a supplier) into minutes for the buyer: summary, decisions, commitments with who, what and by when, open points, risks and a short follow-up email to the other party. Only what was said; no invented decisions, numbers or dates. The notes are processed for this answer only and are not stored by KULIC Advisory.
| Name | Type | Req | Description |
|---|---|---|---|
| language | string | – | Language of the answer: de, en, fr, es, pt or zh. Default de. |
| meeting_type | string | – | Optional: type of conversation, e.g. 'annual price negotiation with packaging supplier'. |
| notes | string | yes | Notes or transcript of the conversation. |
No output schema declared.
No examples provided.
write_scope_of_work Turn one sentence into a scope of work for a request for quotes (AICTIONBOT™ scope writer) ~188
Needs the user's AICTIONBOT™ Werkbank licence; each call uses one AI analysis from the licence quota. Turns a short description of what a business wants to buy into a structured scope of work for a tender or request for quotes: subject, work packages with deliverables, exclusions, supplier requirements, service levels, volume assumptions, questions to bidders, award criteria with weights and points to clarify internally. Placeholders where facts are missing; nothing is invented.
| Name | Type | Req | Description |
|---|---|---|---|
| details | string | – | Optional additional facts: places, quantities, dates, budget, special requirements. |
| language | string | – | Language of the answer: de, en, fr, es, pt or zh. Default de. |
| request | string | yes | What is to be bought, in one or two sentences, e.g. 'Office cleaning for 2 sites in Cologne, 5 days a week, from January'. |
No output schema declared.
No examples provided.
How do I install the AICTIONBOT™ Werkbank MCP server?
AICTIONBOT™ Werkbank is a hosted endpoint at https://www.kulicadvisory.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · www.kulicadvisory.com
claude mcp add --transport http com-kulicadvisory-aictionbot-werkbank 'https://www.kulicadvisory.com/mcp'
What is the AICTIONBOT™ Werkbank MCP server?
AICTIONBOT™ Werkbank is an MCP server listed in the public MCP registry as com.kulicadvisory/aictionbot-werkbank. Procurement checks for SMBs: price increases vs Eurostat, sanctions, deadlines, discounts, invoices. This page covers its hosted endpoint (https://www.kulicadvisory.com/mcp).
Is the AICTIONBOT™ Werkbank MCP server safe to use?
AICTIONBOT™ Werkbank scores 71 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the AICTIONBOT™ Werkbank MCP server expose?
AICTIONBOT™ Werkbank exposes 13 tools: check_price_increase, list_categories, screen_sanctions, calculate_notice_deadline, check_discount_window, and 8 more. Their descriptions and schemas cost roughly 2,599 tokens of context every time the server is loaded.
Does the AICTIONBOT™ Werkbank MCP server require authentication?
No. We connected to AICTIONBOT™ Werkbank without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the AICTIONBOT™ Werkbank MCP server still maintained?
AICTIONBOT™ Werkbank is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.