Oblio MCP by usefulapi
REMOTE · OBLIO.USEFULAPI.IO
Read Oblio clients, products and documents; create proformas, issue, collect and cancel invoices.
Available components
Last scanned (7 hours ago)
Scores higher than 46% of remote servers
Reachable. Last reached 17 Oct 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security78
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS enforcement could not be verified: the plaintext port redirected somewhere other than https, so enforcement is unproven. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability0
- Transport check failed: declared streamable-http, but the endpoint redirected instead of responding directly. See how to fix → View diagnostics → Fail
Schema Quality & AI Usability77
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 3363 tokens (~186/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management17
- Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 96% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 17 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Oct 26 +2
- The server rewrote its instructions, which are the text every model session reads security
- The server now declares the “prompts” capability functional
- First check of Schema quality: 100 functional
- Schema quality: excellent → good functional
- New prompt “getting_started” functional
- Server version: 1.0.0 → 1.1.0 functional
- 13 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 12 Oct 26 59
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 17 Oct 2026 · Probed https://oblio.usefulapi.io/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=usefulapi.io | CN=WE1,O=Google Trust Services,C=US | 13 Sept 2026 | 12 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | d9be3287b0fde9630e825ba1f79bff3f |
| SANs: usefulapi.io, *.usefulapi.io | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of oblio.usefulapi.io. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| io. | present | 57355 | 8 | Verified |
| usefulapi.io. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 302 |
WWW-Authenticate challenge Bearer realm="OAuth", resource_metadata="https://oblio.usefulapi.io/.well-known/oauth-protected-resource/mcp"
Bearer realm="OAuth", resource_metadata="https://oblio.usefulapi.io/.well-known/oauth-protected-resource/mcp"Protected resource metadata
| Document | https://oblio.usefulapi.io/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://oblio.usefulapi.io/mcp |
| Authorisation server | https://oblio.usefulapi.io |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://oblio.usefulapi.io/mcp | Redirected | 302 | https://usefulapi.io/oblio/ |
| http (plaintext) | http://oblio.usefulapi.io/mcp | Inconclusive | 302 | http://oblio.usefulapi.io/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
oblio_cancel_document Cancel a document (fiscal) ~196
CANCEL an invoice, proforma or notice. A cancelled invoice stays in the series but is void; if it was already sent to e-Factura / SPV, check the SPV side as well. Needs confirm: true and the user's approval. Not retried. PUT /api/docs/<type>/cancel.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
| confirm | boolean | – | Must be true. Set it only after the user has confirmed this exact action in this conversation. |
| number | string | yes | Document number within the series, digits only (0055 and 55 are the same). |
| series_name | string | yes | Document series name (from oblio_list_series), for example FCT. |
| type | string | yes | invoice (factura), proforma or notice (aviz de insotire). |
No output schema declared.
No examples provided.
oblio_collect_invoice Record an invoice payment (collect) ~170
Record that an issued invoice was paid (receipt, bank order, card...). Changes the invoice's paid status and is not reversible from the API. Needs confirm: true and the user's approval of the amount. Not retried. PUT /api/docs/invoice/collect.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
| collect | object | yes | – |
| confirm | boolean | – | Must be true. Set it only after the user has confirmed this exact action in this conversation. |
| number | string | yes | Document number within the series, digits only (0055 and 55 are the same). |
| series_name | string | yes | Document series name (from oblio_list_series), for example FCT. |
No output schema declared.
No examples provided.
oblio_create_proforma Create a proforma ~395
Create a PROFORMA (not a fiscal invoice; the preferred first step). It takes the next number of the series immediately, there is no draft state, and Oblio sends no e-mail. Check client, lines, VAT (oblio_list_vat_rates) and series (oblio_list_series) first. Returns the series, number and a PDF link. Not retried: if the reply is an error, look in Oblio before repeating. POST /api/docs/proforma.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
| client | object | yes | – |
| currency | string | – | Document currency (default "RON"). |
| due_date | string | – | Due date yyyy-mm-dd. |
| exchange_rate | number | – | Exchange rate for a foreign-currency document (default: the company's setting). |
| idempotency_key | string | – | Unique key so Oblio drops a duplicate of the same request. |
| internal_note | string | – | Internal note, not visible to the client. |
| issue_date | string | – | Issue date yyyy-mm-dd (default today). |
| issuer_name | string | – | Prepared by (intocmit de). |
| language | string | – | Document language code from oblio_list_languages (default "RO"). |
| mentions | string | – | Mentions printed on the document. |
| order_number | string | – | Order number (BT-13). |
| precision | integer | – | Decimals, 2 to 4 (default 2). |
| products | array | yes | 1-200 lines: products/services (name + price) or discounts (name + discount). |
| series_name | string | yes | Document series name (from oblio_list_series), for example FCT. |
| work_station | string | – | Work point (only with stock enabled; default "Sediu"). |
No output schema declared.
No examples provided.
oblio_create_webhook Create a webhook ~166
Subscribe an HTTPS endpoint to an Oblio event (stock changes, drafts/updates/cancellations of documents, collections). Oblio will POST account data to that URL, so only use an endpoint the user named and controls; it must answer 200 with the base64 of the X-Oblio-Request-Id header. Needs confirm: true. POST /api/webhooks.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
| confirm | boolean | – | Must be true. Set it only after the user has confirmed this exact action in this conversation. |
| endpoint | string | yes | HTTPS URL that receives the notifications. |
| topic | string | yes | The event to subscribe to. |
No output schema declared.
No examples provided.
oblio_delete_webhook Delete a webhook ~79
Delete a webhook subscription by id (from oblio_list_webhooks). Needs confirm: true. DELETE /api/webhooks/{id}.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Must be true. Set it only after the user has confirmed this exact action in this conversation. |
| id | string | yes | Webhook id from oblio_list_webhooks. |
No output schema declared.
No examples provided.
oblio_get_document Get a document ~144
One invoice, proforma or notice by series and number: type, series, number, link to the PDF and (invoices) the collections. GET /api/docs/<type>.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
| number | string | yes | Document number within the series, digits only (0055 and 55 are the same). |
| series_name | string | yes | Document series name (from oblio_list_series), for example FCT. |
| type | string | yes | invoice (factura), proforma or notice (aviz de insotire). |
No output schema declared.
No examples provided.
oblio_issue_invoice Issue an invoice (fiscal, irreversible) ~597
ISSUE a real INVOICE. This is a legal fiscal document: it takes the next number in the series at once, there is no draft state, it cannot be edited, and it can only be cancelled afterwards (it may also be sent to ANAF e-Factura / SPV, automatically if the account is set up so). Needs confirm: true, an idempotency_key, and the user's explicit approval of the exact client, lines, totals and series. Optionally base it on a proforma or notice (reference_document), record the payment at once (collect) or set the delivery date. Not retried: if the reply is an error, look in Oblio before repeating. Oblio never e-mails the client from this tool. POST /api/docs/invoice.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
| client | object | – | The client. Required unless reference_document is given (then Oblio takes it from the referenced document). |
| collect | object | – | Record the payment together with the invoice. |
| collect_date | string | – | Collection date yyyy-mm-dd. |
| confirm | boolean | – | Must be true. Set it only after the user has confirmed this exact action in this conversation. |
| currency | string | – | Document currency (default "RON"). |
| delivery_date | string | – | Delivery date yyyy-mm-dd. |
| due_date | string | – | Due date yyyy-mm-dd. |
| exchange_rate | number | – | Exchange rate for a foreign-currency document (default: the company's setting). |
| idempotency_key | string | yes | REQUIRED unique key for this invoice (for example a UUID) so Oblio drops a duplicate of the same request. |
| internal_note | string | – | Internal note, not visible to the client. |
| issue_date | string | – | Issue date yyyy-mm-dd (default today). |
| issuer_name | string | – | Prepared by (intocmit de). |
| language | string | – | Document language code from oblio_list_languages (default "RO"). |
| mentions | string | – | Mentions printed on the document. |
| order_number | string | – | Order number (BT-13). |
| precision | integer | – | Decimals, 2 to 4 (default 2). |
| products | array | – | 1-200 lines: products/services (name + price) or discounts (name + discount). Required unless reference_document is given. |
| reference_document | object | – | Base the invoice on a proforma or notice, or reverse an invoice. |
| series_name | string | yes | Document series name (from oblio_list_series), for example FCT. |
| use_stock | boolean | – | Take the goods out of stock (only with stock enabled). |
| work_station | string | – | Work point (only with stock enabled; default "Sediu"). |
No output schema declared.
No examples provided.
oblio_list_clients List or search clients ~129
Clients of a company, optionally filtered by name or client CIF. Up to 250 per page: pass next_offset as offset for the next page. GET /api/nomenclature/clients.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
| client_cif | string | – | CIF of the client to find. |
| name | string | – | Client name to search. |
| offset | integer | – | Start position, a multiple of 250 (0 default); use next_offset from the previous reply. |
No output schema declared.
No examples provided.
oblio_list_companies List companies ~53
The companies (CIF, name, your access level) linked to the connected Oblio account. Good first call: every other tool needs a CIF from here. GET /api/nomenclature/companies.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
oblio_list_invoices List invoices ~360
Invoices of a company with filters (series, number, dates, client, draft/canceled/collected), newest first by default. Optional products, collections and e-Factura (SPV) status per invoice. Pass next_offset as offset for the next page. GET /api/docs/invoice/list.
| Name | Type | Req | Description |
|---|---|---|---|
| canceled | boolean | – | true = only canceled, false = only not canceled. |
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
| client_cif | string | – | Only invoices of the client with this CIF. |
| client_code | string | – | Only invoices of the client with this code. |
| client_email | string | – | Only invoices of the client with this e-mail. |
| collected | boolean | – | true = only collected (paid), false = only not collected. |
| draft | boolean | – | true = only drafts, false = only issued. |
| issued_after | string | – | Issued on or after yyyy-mm-dd. |
| issued_before | string | – | Issued on or before yyyy-mm-dd. |
| limit_per_page | integer | – | Results per page, 1-100 (default 100). |
| number | string | – | Only this document number. |
| offset | integer | – | Start position (0 default); use next_offset from the previous reply. |
| order_by | string | – | – |
| order_dir | string | – | – |
| series_name | string | – | Only this series. |
| with_collects | boolean | – | Include the collections. |
| with_einvoice_status | boolean | – | Include the e-Factura (SPV) status. |
| with_products | boolean | – | Include the invoice lines. |
No output schema declared.
No examples provided.
oblio_list_languages List document languages ~60
Foreign languages a company can issue documents in (code, name). GET /api/nomenclature/languages.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
No output schema declared.
No examples provided.
oblio_list_management List stock managements ~72
Stock managements (gestiuni) of a company with their work point and type; works only when stock is enabled. GET /api/nomenclature/management.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
No output schema declared.
No examples provided.
oblio_list_products List or search products ~175
Products and services of a company with unit, price, VAT and (with stock) quantities. Up to 250 per page: pass next_offset as offset. GET /api/nomenclature/products.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
| code | string | – | Product code to find. |
| include_unsalable | boolean | – | true = include products marked as not for sale. |
| management | string | – | Stock management to search in (see oblio_list_management). |
| name | string | – | Product name to search. |
| offset | integer | – | Start position, a multiple of 250 (0 default); use next_offset from the previous reply. |
| work_station | string | – | Work point of that management. |
No output schema declared.
No examples provided.
oblio_list_series List document series ~79
Document series of a company (type Factura/Proforma/Aviz, name, start, next number, default). Use the name as series_name. GET /api/nomenclature/series.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
No output schema declared.
No examples provided.
oblio_list_vat_rates List VAT rates ~72
VAT rates (name, percent, default) of a company; use the name and percent on document lines. GET /api/nomenclature/vat_rates.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
No output schema declared.
No examples provided.
oblio_list_webhooks List webhooks ~32
The webhook subscriptions of the account (id, CIF, topic, endpoint). GET /api/webhooks.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
oblio_restore_document Restore a cancelled document (fiscal) ~166
Restore a previously CANCELLED invoice, proforma or notice. Needs confirm: true and the user's approval. Not retried. PUT /api/docs/<type>/restore.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
| confirm | boolean | – | Must be true. Set it only after the user has confirmed this exact action in this conversation. |
| number | string | yes | Document number within the series, digits only (0055 and 55 are the same). |
| series_name | string | yes | Document series name (from oblio_list_series), for example FCT. |
| type | string | yes | invoice (factura), proforma or notice (aviz de insotire). |
No output schema declared.
No examples provided.
oblio_send_einvoice_to_spv Send an invoice to e-Factura (SPV) ~207
SEND an issued invoice to ANAF e-Factura (SPV). Irreversible: a document accepted by ANAF cannot be withdrawn from this API. Needs confirm: true and the user's approval. Not retried: check the status with oblio_list_invoices (with_einvoice_status) before repeating. Returns text, sent and a code (-1 not sent, 2 errors, 0 processing, 1 sent). POST /api/docs/einvoice.
| Name | Type | Req | Description |
|---|---|---|---|
| cif | string | yes | CIF of YOUR company in Oblio (from oblio_list_companies), for example RO37311090. |
| confirm | boolean | – | Must be true. Set it only after the user has confirmed this exact action in this conversation. |
| number | string | yes | Document number within the series, digits only (0055 and 55 are the same). |
| series_name | string | yes | Document series name (from oblio_list_series), for example FCT. |
No output schema declared.
No examples provided.
How do I install the Oblio MCP by usefulapi server?
Oblio MCP by usefulapi is a hosted endpoint at https://oblio.usefulapi.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · oblio.usefulapi.io
claude mcp add --transport http io-usefulapi-oblio 'https://oblio.usefulapi.io/mcp'
What is the Oblio MCP by usefulapi server?
Oblio MCP by usefulapi is listed in the public MCP registry as io.usefulapi/oblio. Read Oblio clients, products and documents; create proformas, issue, collect and cancel invoices. This page covers its hosted endpoint (https://oblio.usefulapi.io/mcp).
Is the Oblio MCP by usefulapi server safe to use?
Oblio MCP by usefulapi scores 64 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Oblio MCP by usefulapi server expose?
Oblio MCP by usefulapi exposes 18 tools: oblio_list_companies, oblio_list_vat_rates, oblio_list_series, oblio_list_languages, oblio_list_management, and 13 more. Their descriptions and schemas cost roughly 3,152 tokens of context every time the server is loaded.
Does the Oblio MCP by usefulapi server require authentication?
Yes. Oblio MCP by usefulapi asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Oblio MCP by usefulapi server still maintained?
Oblio MCP by usefulapi is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.