Is io.github.DashankaNadeeshanDeSilva/kontor-mcp safe to use?

io.github.DashankaNadeeshanDeSilva/kontor-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.

How do I install io.github.DashankaNadeeshanDeSilva/kontor-mcp?

io.github.DashankaNadeeshanDeSilva/kontor-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.DashankaNadeeshanDeSilva/kontor-mcp do?

io.github.DashankaNadeeshanDeSilva/kontor-mcp provides 8 tools: Why, Tools, Architecture, Conformance, Packages and 3 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.DashankaNadeeshanDeSilva/kontor-mcp?

io.github.DashankaNadeeshanDeSilva/kontor-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.DashankaNadeeshanDeSilva/kontor-mcp actively maintained?

io.github.DashankaNadeeshanDeSilva/kontor-mcp is recently maintained - last commit was 79 days ago.

io.github.DashankaNadeeshanDeSilva/kontor-mcp

@kontor-mcp/server

Offline e-invoice tools for AI agents: validate, audit, convert and generate XRechnung/ZUGFeRD.

48/wk 8 tools GitHub npm

No known CVEs

Apache-2.0 license

Maintained

Last commit 79d ago

Works with most clients

Transport: stdio, http

8 tools · ~398 tok

Grade A · 0.2% of 200K ctx

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.DashankaNadeeshanDeSilva/kontor-mcp is an MCP server that offline e-invoice tools for AI agents: validate, audit, convert and generate XRechnung/ZUGFeRD. Its tool list has not been published yet over stdio and http, requires no API key, and scores 82/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML Finance

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "kontor": {
      "args": [
        "-y",
        "@kontor-mcp/server"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-dashankanadeeshandesilva-kontor-mcp)](https://mcppedia.org/s/io-github-dashankanadeeshandesilva-kontor-mcp)

Read me

What io.github.DashankaNadeeshanDeSilva/kontor-mcp does

Offline e-invoice tools for AI agents: validate, audit, convert and generate XRechnung/ZUGFeRD.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @kontor-mcp/server against OSV.dev.

Inventory

Tools (8)

Click any tool to inspect its schema.

~398 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.DashankaNadeeshanDeSilva/kontor-mcp safe to use?: io.github.DashankaNadeeshanDeSilva/kontor-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install io.github.DashankaNadeeshanDeSilva/kontor-mcp?: io.github.DashankaNadeeshanDeSilva/kontor-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.DashankaNadeeshanDeSilva/kontor-mcp do?: io.github.DashankaNadeeshanDeSilva/kontor-mcp provides 8 tools: Why, Tools, Architecture, Conformance, Packages and 3 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.DashankaNadeeshanDeSilva/kontor-mcp?: io.github.DashankaNadeeshanDeSilva/kontor-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.DashankaNadeeshanDeSilva/kontor-mcp actively maintained?: io.github.DashankaNadeeshanDeSilva/kontor-mcp is recently maintained - last commit was 79 days ago.

Similar servers

Others in ai-ml / finance

View all →

Vibe Assistant95

A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。

169 3

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

108.8k 8

Codebase Memory Mcp95

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

48.6k 6

Bla95

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.

5.5k 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.DashankaNadeeshanDeSilva/kontor-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML Finance

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "kontor": {
      "args": [
        "-y",
        "@kontor-mcp/server"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-dashankanadeeshandesilva-kontor-mcp)](https://mcppedia.org/s/io-github-dashankanadeeshandesilva-kontor-mcp)

Read me

What io.github.DashankaNadeeshanDeSilva/kontor-mcp does

Offline e-invoice tools for AI agents: validate, audit, convert and generate XRechnung/ZUGFeRD.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

Kontor MCP

The sovereign e-invoice toolkit for AI agents. Official XRechnung / EN 16931 validation, ZUGFeRD in and out, 100 % offline, zero API keys.

Kontor MCP is a local, offline toolbox that lets AI assistants (Claude Desktop, Claude Code, any MCP client) handle German/EU e-invoices: XRechnung and ZUGFeRD/Factur-X under EN 16931. It can read an invoice (bare XML or XML embedded in a PDF), check it against the official KoSIT / EN 16931 rulebooks, explain cryptic errors in German or English, create valid new invoices (XML or ZUGFeRD PDF/A-3), convert between formats, and tell a business which legal obligations apply. The key promise is sovereignty: no cloud, no API keys, no network calls, no Java at runtime — proven by tests.

Why it matters: since 2025 every German business must be able to receive e-invoices, and from 2027/2028 must issue them. An e-invoice is validated XML, not a PDF, and a failed rule can cost the input-VAT deduction. Invoices carry personal and bank data, so they should be checked where they live — on your machine — with the same rule sets the public-sector receivers use.

Claude Desktop with the kontor server: validate → BR-DE-15 (missing Leitweg-ID) with fix hint · parse a ZUGFeRD PDF · explain BR-DE-18. MP4

v1.0 — 8 tools · 4 resource families · 3 prompts · KoSIT conformance 89/89 enforced as a CI gate · ZUGFeRD PDF/A-3 output verified by veraPDF and Mustang · stdio and Streamable HTTP (bearer auth) · Docker image (amd64/arm64) · kontor-agent reference client · listed in the Official MCP Registry. Install with npx, Docker, or from source.

Why

Official rules, not approximations. The KoSIT XRechnung Schematron and the CEN EN 16931 rules run unmodified (compiled to XSLT/SEF, executed with Saxon-JS) with the KoSIT scenario model — the same verdicts the public-sector receivers produce, proven file-by-file against the official validator.
Sovereign by construction. Pure TypeScript/WASM, no Java at runtime, no network calls, nothing stored, nothing logged. Runs where the invoices are.
Agent-native. Every tool returns structured content and a readable summary; findings carry DE/EN explanations, affected business terms and fix hints; generation is fail-honest (valid is the real verdict, never assumed).
ZUGFeRD both ways. Read the embedded XML out of any ZUGFeRD/Factur-X PDF; write PDF/A-3 invoices with factur-x.xml that pass veraPDF and Mustang.

Five-minute quickstart

Requires Node ≥ 20. Everything — rules, schemas, code lists, fonts — ships inside the npm package; no do

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @kontor-mcp/server against OSV.dev.

Inventory

Tools (8)

Click any tool to inspect its schema.

~398 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.DashankaNadeeshanDeSilva/kontor-mcp safe to use?: io.github.DashankaNadeeshanDeSilva/kontor-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under Apache-2.0.
How do I install io.github.DashankaNadeeshanDeSilva/kontor-mcp?: io.github.DashankaNadeeshanDeSilva/kontor-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.DashankaNadeeshanDeSilva/kontor-mcp do?: io.github.DashankaNadeeshanDeSilva/kontor-mcp provides 8 tools: Why, Tools, Architecture, Conformance, Packages and 3 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.DashankaNadeeshanDeSilva/kontor-mcp?: io.github.DashankaNadeeshanDeSilva/kontor-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.DashankaNadeeshanDeSilva/kontor-mcp actively maintained?: io.github.DashankaNadeeshanDeSilva/kontor-mcp is recently maintained - last commit was 79 days ago.