# io.github.iorpaul3/date-firme (remote · date-firme.dev-box.ro)

Romanian company data (ONRC/ANAF): CUI lookup, KYB risk, financials. Pay per call via x402 USDC.

- Trust score: 70/100 (medium)
- Change this week: 0
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `date-firme.dev-box.ro`: 70/100 (this document), [markdown](https://verifymcp.io/servers/iorpaul3-date-firme/date-firme.md), [page](https://verifymcp.io/servers/iorpaul3-date-firme/date-firme)

## Channel facts

- Endpoint: `https://date-firme.dev-box.ro/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.2.3`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 74/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 67/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 2003 tokens (~250/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability check failed: schema churn in the 25 days we've observed: 6 tool removals, 0 breaking changes, 0 auth/transport breaks, 8 additions.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the io.github.iorpaul3/date-firme MCP server?

io.github.iorpaul3/date-firme is a hosted endpoint at https://date-firme.dev-box.ro/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http iorpaul3-date-firme 'https://date-firme.dev-box.ro/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "iorpaul3-date-firme": {
      "url": "https://date-firme.dev-box.ro/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "iorpaul3-date-firme": {
      "type": "http",
      "url": "https://date-firme.dev-box.ro/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.iorpaul3-date-firme]
url = "https://date-firme.dev-box.ro/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "iorpaul3-date-firme": {
      "type": "remote",
      "url": "https://date-firme.dev-box.ro/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add iorpaul3-date-firme --url 'https://date-firme.dev-box.ro/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  iorpaul3-date-firme:
    url: "https://date-firme.dev-box.ro/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "iorpaul3-date-firme": {
      "Transport": "http",
      "Url": "https://date-firme.dev-box.ro/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add iorpaul3-date-firme -t streamable-http -u 'https://date-firme.dev-box.ro/mcp'
```

### Other

```json
{
  "mcpServers": {
    "iorpaul3-date-firme": {
      "type": "http",
      "url": "https://date-firme.dev-box.ro/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-12 (score 70, 0)

- [security regression] Stability: unverified → fail
- [security regression] Tool “admin_companies” was removed
- [security regression] Tool “caen_comparison” was removed
- [security regression] Tool “company_financials” was removed
- [security regression] Tool “company_profile” was removed
- [security regression] Tool “company_risk” was removed
- [security regression] Tool “search_companies” was removed
- [security] The server rewrote its instructions, which are the text every model session reads
- [functional regression] Schema quality: 206 → 250
- [functional improvement] Stability: unverified → 0.03
- [functional] Server version: 0.2.0 → 0.2.3
- [functional] New tool “romania_company_financials”
- [functional] New tool “romania_company_full_report”
- [functional] New tool “romania_company_leads”
- [functional] New tool “romania_company_profile”
- [functional] New tool “romania_company_risk_kyb”
- [functional] New tool “romania_company_search”
- [functional] New tool “romania_industry_benchmark_caen”
- [functional] New tool “romania_person_companies”

### 2026-10-11 (score 70)

First indexed and scored.

## MCP tools (8)

### `romania_company_search` (~209 tokens)

Romania company search: name -> CUI/CIF lookup (ONRC)

$0.002 per call (x402, USDC on Base, no account). FREE: first 3 calls per IP per UTC day (MCP: automatic; HTTP: add &free=1), then paid. Use when you have a Romanian company name and need its CUI (cod fiscal) for the other tools, or to verify a CUI exists. Romanian company lookup / search in the Romania trade register (ONRC, Registrul Comertului) by company name (denumire firmă), CUI/CIF tax ID (RO prefix optional) or registration number (J40/123/2020). Returns up to 30 matches: cui, name, county, locality, ONRC status, activa (active companies first).

Input parameters:

- `q` (string, required): Company name (min 2 chars, diacritics optional), CUI/CIF with or without RO prefix, or trade-register number (e.g. J40/123/2020).

Output parameters:

- `results` (array)

### `romania_company_risk_kyb` (~194 tokens)

Romania company KYB risk check (insolvency, ANAF status, Altman Z)

$0.02 per call (x402, USDC on Base, no account). Use when onboarding a supplier/customer, extending credit or before paying an invoice. Get the CUI with romania_company_search. KYB, supplier verification and due diligence for a Romanian company by CUI: risk score 0-100, level low/medium/high and reasons: ONRC insolvency (insolvență), bankruptcy (faliment), dissolution, sequestration, criminal case; ANAF/ONRC inactive or deregistered (radiată); balance sheet red flags (missing bilanț, losses, negative equity, falling turnover) and Altman Z'.

Input parameters:

- `cui` (string, required): CUI / CIF (Romanian company tax ID, cod fiscal): digits with optional RO prefix, e.g. 2816464 or RO2816464. Get it with romania_company_search.

Output parameters:

- `an_bilant` (integer|null): year of the latest balance sheet used
- `checked` (array): What was and wasn't checked — absence of a flag only means "no evidence" for checked sources.
- `cui` (integer)
- `denumire` (string)
- `flags` (array)
- `level` (string): low (<25) | medium (25-54) | high (>=55)
- `not_checked` (array)
- `score` (integer): 0 (safe) .. 100 (critical)

### `romania_company_profile` (~169 tokens)

Romania company profile by CUI: VAT check, address, CAEN, administrators

$0.005 per call (x402, USDC on Base, no account). Use when you need invoicing data, VAT status, legal form or who runs a known Romanian company. Romanian company (firmă) profile and VAT check by CUI/CIF: legal name, address, county, ONRC status, registration date and number, legal form (SRL, SA...), main CAEN code, ANAF VAT payer (plătitor TVA) and VAT-on-cash flags, current administrators (ONRC) and Altman Z'.

Input parameters:

- `cui` (string, required): CUI / CIF (Romanian company tax ID, cod fiscal): digits with optional RO prefix, e.g. 2816464 or RO2816464. Get it with romania_company_search.

Output parameters:

- `administratori` (array)
- `adresa` (string|null)
- `altman_z`
- `cod_caen` (string|null)
- `cod_postal` (string|null)
- `cui` (integer)
- `data_inregistrare` (string|null)
- `denumire` (string)
- `denumire_caen` (string|null)
- `forma_juridica` (string|null)
- `judet` (string|null)
- `localitate` (string|null)
- `nr_reg_com` (string|null)
- `platitor_tva` (boolean|null)
- `stare` (string|null)
- `tva_la_incasare` (boolean|null)

### `romania_company_financials` (~192 tokens)

Romania company financial statements by year (bilant ANAF)

$0.01 per call (x402, USDC on Base, no account). Use when you need revenue, profit, debt or headcount trends or a solvency view over several years. Romanian company financial statements (bilanț ANAF) by CUI, per year, newest first, in RON: turnover (cifra de afaceri), revenue, expenses, gross/net profit, loss, employees, assets, stocks, receivables, cash, debts, equity, plus Altman Z' and ratios (liquidity, debt/equity, net margin, ROA, turnover per employee). Empty list if no filings.

Input parameters:

- `cui` (string, required): CUI / CIF (Romanian company tax ID, cod fiscal): digits with optional RO prefix, e.g. 2816464 or RO2816464. Get it with romania_company_search.

Output parameters:

- `years` (array)

### `romania_company_full_report` (~188 tokens)

Romania company full report: profile + financials + KYB risk in one call

$0.03 per call (x402, USDC on Base, no account). Use when you need the complete picture of a Romanian company (onboarding, credit, M&A screening) and would otherwise call profile, financials and risk. Romanian company full due-diligence report by CUI in one call (cheaper than three): profile (identity, address, ONRC status, VAT/TVA, CAEN, administrators), yearly financial statements (bilanț ANAF, Altman Z', ratios) and the KYB risk score 0-100 with reasons (insolvency, inactive/deregistered, losses).

Input parameters:

- `cui` (string, required): CUI / CIF (Romanian company tax ID, cod fiscal): digits with optional RO prefix, e.g. 2816464 or RO2816464. Get it with romania_company_search.

Output parameters:

- `cui` (integer)
- `financials` (array): newest first (may be empty)
- `profile` (object)
- `risk` (object)

### `romania_company_leads` (~452 tokens)

Romania B2B lead list: companies by CAEN, county, turnover, employees

$0.001 per returned company, min $0.05 per call (x402, USDC on Base, no account). Use when you need a list of Romanian companies matching criteria (sales prospecting, market sizing, supplier sourcing). Romanian B2B lead generation / prospect list (ONRC + ANAF): companies by CAEN code(s), county (judet), city, latest turnover, employees, net profit, founding year; sorted by turnover. Rows: CUI, name, legal form, address, CAEN, status, VAT flag, turnover/profit/employees. Public company data only, no personal emails/phones. The 402 shows 2 sample rows + match count.

Input parameters:

- `angajati_max` (integer): Maximum employees.
- `angajati_min` (integer): Minimum employees (latest balance sheet).
- `ca_max` (integer): Maximum latest-year turnover, RON.
- `ca_min` (integer): Minimum latest-year turnover (cifra de afaceri), RON.
- `caen` (string): Main CAEN code(s), 4 digits, comma-separated (max 10), e.g. 4752,4673. At least one of caen or judet is required.
- `doar_active` (boolean): Only active companies (default true).
- `infiintata_din` (integer): Founded in or after this year (registration date).
- `infiintata_pana` (integer): Founded in or before this year.
- `judet` (string): County (judet), diacritics optional, e.g. Brasov, Cluj, Bucuresti.
- `limit` (integer): Companies per page, 1-500 (default 100). Price = rows returned x per-company price, with a minimum per call.
- `localitate` (string): City / locality, exact name as in ONRC, diacritics optional, e.g. Brasov.
- `offset` (integer): Skip this many matches (0-9500) for the next page.
- `profit_min` (integer): Minimum latest-year net profit, RON (0 = profitable only).

Output parameters:

- `limit` (integer)
- `offset` (integer)
- `results` (array)
- `returned` (integer)
- `total_capped` (boolean)
- `total_matches` (integer): matches for the filters (counted up to 10000; see total_capped)

### `romania_industry_benchmark_caen` (~216 tokens)

Romania industry benchmark: top companies by CAEN code

$0.01 per call (x402, USDC on Base, no account). Use when you need market leaders or competitors in a Romanian industry, or to place a company against its peers. Romania industry benchmark: ranks active Romanian companies with a given main CAEN code (NACE-based activity code) by turnover (cifra de afaceri) from their latest balance sheet, with employees, net profit and year. Returns top N (5-20, default 15), total with data and, if cui is given and in the top N, its rank (rang_ref).

Input parameters:

- `code` (string, required): CAEN activity code (cod CAEN, 4 digits), e.g. 4752. A company's main CAEN is in romania_company_profile.cod_caen.
- `cui` (string): Optional CUI to highlight (is_ref) and rank within the list.
- `limit` (integer): Number of companies to return, 5-20 (default 15).

Output parameters:

- `caen` (string)
- `firme` (array)
- `rang_ref` (integer|null)
- `total` (integer)

### `romania_person_companies` (~158 tokens)

Romania: companies administered by a person (ONRC)

$0.01 per call (x402, USDC on Base, no account). Use when you need a person's other Romanian business affiliations: related parties, conflicts of interest or due diligence on a director. Romanian companies (up to 200) where a person is currently registered as administrator or legal representative in ONRC public data: related parties, director due diligence. Exact match on the full name, case- and diacritics-insensitive. Returns cui, company name (denumire), county and role (status_label).

Input parameters:

- `name` (string, required): Full name of the person as registered in ONRC (min 3 chars), e.g. POPESCU ION. URL-encode spaces in the HTTP path.

Output parameters:

- `query` (string): Normalized name that was matched (uppercase, no diacritics)
- `results` (array): Companies (max 200); `status_label` holds the person's role
- `total` (integer)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/iorpaul3-date-firme/date-firme#diagnostics

## Score history

- 2026-11-05: 70
- 2026-11-04: 70
- 2026-11-03: 70
- 2026-11-02: 70
- 2026-11-01: 70
- 2026-10-31: 70
- 2026-10-30: 70
- 2026-10-29: 70
- 2026-10-28: 70
- 2026-10-27: 70
- 2026-10-26: 70
- 2026-10-25: 70
- 2026-10-24: 70
- 2026-10-23: 70
- 2026-10-22: 70
- 2026-10-21: 70
- 2026-10-20: 70
- 2026-10-19: 70
- 2026-10-18: 70
- 2026-10-17: 70
- 2026-10-16: 70
- 2026-10-15: 70
- 2026-10-14: 70
- 2026-10-13: 70
- 2026-10-12: 70
- 2026-10-11: 70

## Common questions

### What is the io.github.iorpaul3/date-firme MCP server?

io.github.iorpaul3/date-firme is an MCP server listed in the public MCP registry as io.github.iorpaul3/date-firme. Romanian company data (ONRC/ANAF): CUI lookup, KYB risk, financials. Pay per call via x402 USDC. This page covers its hosted endpoint (https://date-firme.dev-box.ro/mcp).

### Is the io.github.iorpaul3/date-firme MCP server safe to use?

io.github.iorpaul3/date-firme scores 70 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the io.github.iorpaul3/date-firme MCP server expose?

io.github.iorpaul3/date-firme exposes 8 tools: romania_company_search, romania_company_risk_kyb, romania_company_profile, romania_company_financials, romania_company_full_report, and 3 more. Their descriptions and schemas cost roughly 1,778 tokens of context every time the server is loaded.

### Does the io.github.iorpaul3/date-firme MCP server require authentication?

No. We connected to io.github.iorpaul3/date-firme without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the io.github.iorpaul3/date-firme MCP server still maintained?

io.github.iorpaul3/date-firme is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://date-firme.dev-box.ro/mcp
- Changelog RSS feed: https://verifymcp.io/servers/iorpaul3-date-firme/date-firme.xml
- Changelog JSON feed: https://verifymcp.io/servers/iorpaul3-date-firme/date-firme.json
- HTML version of this page: https://verifymcp.io/servers/iorpaul3-date-firme/date-firme