Jithox EU Import Preflight

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-09-23T01:50:39.902222Z",
      "publishedAt": "2026-09-23T01:50:39.902222Z",
      "statusChangedAt": "2026-09-23T01:50:39.902222Z"
    }
  },
  "server": {
    "name": "com.jithox/eu-import-preflight",
    "_meta": {
      "io.modelcontextprotocol.registry/publisher-provided": {
        "links": {
          "llmsTxt": "https://import.mcp.jithox.com/llms.txt",
          "product": "https://jithox.com/mcp",
          "securityAndContact": "https://mcp.jithox.com/.well-known/security.txt",
          "oauthProtectedResource": "https://import.mcp.jithox.com/.well-known/oauth-protected-resource",
          "oauthAuthorizationServer": "https://import.mcp.jithox.com/.well-known/oauth-authorization-server"
        },
        "tools": [
          "validate_eori",
          "search_taric_codes",
          "check_eu_import_measures",
          "estimate_low_value_import_cost",
          "prepare_import_preflight_receipt"
        ],
        "scopes": {
          "validate_eori": "eori:validate",
          "search_taric_codes": "taric:search",
          "check_eu_import_measures": "measures:check",
          "estimate_low_value_import_cost": "cost:estimate",
          "prepare_import_preflight_receipt": "preflight:receipt"
        },
        "pricing": "EUR 0.25 per accepted chargeable call. Failed, refused, rate-limited and source-unavailable calls cost EUR 0.00. Free trial first; prepaid credit from EUR 10.",
        "readOnly": true,
        "transport": "streamable-http (remote); no local package.",
        "toolStatus": {
          "validate_eori": "live_proven_provider_opt_in_off",
          "search_taric_codes": "live_proven_taric_baseline_active",
          "check_eu_import_measures": "live_proven_taric_baseline_active",
          "estimate_low_value_import_cost": "live_proven",
          "prepare_import_preflight_receipt": "live_proven"
        },
        "accessModel": "OAuth 2.1 + PKCE S256; discover at https://import.mcp.jithox.com/.well-known/oauth-protected-resource. Or send the workspace access key per call as Authorization: Bearer <key> or X-Jithox-Api-Key — never both. A key in a config file is a password; rotate at jithox.com.",
        "doesNotSend": true,
        "lastVerified": "2026-08-07",
        "commercialStatus": "SELLABLE_SELF_SERVICE_EUR — public self-service; prepaid EUR credit; signed receipts on the product's own key. 0 paying Import Preflight developers at publication; no revenue claim.",
        "protocolVersions": [
          "2026-07-28",
          "2025-11-25",
          "2025-06-18",
          "2025-03-26"
        ],
        "remoteDeployment": "Live at https://import.mcp.jithox.com/mcp (serverInfo.version 0.2.0). All five read-only tools live-proven end-to-end over the money lane (reserve 25 → execute → capture on accepted answers; failed calls EUR 0.00; signed receipts; per-product fleet identity and store isolation; rate limits; kill switch; credential rotation incl. app-side authorization retirement). July-2026 TARIC baseline active; validate_eori runs with the EU EOS provider opt-in OFF (truthful unavailable). Immutable image digest recorded in the fleet repository's deployment evidence at each release. Not independently penetration-tested.",
        "toolDescriptions": {
          "validate_eori": "Structural EORI check + authoritative existence via the official EU EOS when enabled; provider outage/unknown → 'unavailable'/'needs_review', never a false 'invalid'.",
          "search_taric_codes": "Candidate TARIC/CN codes from a dated snapshot; 'needs_review' or 'unavailable' when no baseline; never an invented code.",
          "check_eu_import_measures": "EU import measures for a candidate code from a dated snapshot; compound/unknown → 'needs_review'; no baseline → 'unavailable'.",
          "estimate_low_value_import_cost": "Landed-cost estimate for ≤ EUR 150 consignments on the regime valid at the date; missing data returned as 'missing', never guessed.",
          "prepare_import_preflight_receipt": "One idempotent Ed25519 capability-bound receipt over the preflight inputs/sources/validity — attests the checks, not a clearance."
        },
        "publicationStatus": "PUBLIC SELF-SERVICE — generally available through the official MCP Registry (JX-179).",
        "taricBaselineActive": "The official CIRCABC July-2026 TARIC baseline (schema official-taric-xlsx-1, 22247 nomenclature / 145546 measures, publishedAt 2026-07-01) is ACTIVATED; search_taric_codes and check_eu_import_measures serve it live. Every answer carries the snapshot source, publishedAt and checksum; a future baseline gap makes them truthfully unavailable again, never a fabricated code.",
        "noComplianceGuarantee": true,
        "notBindingClassification": true,
        "notIndependentlyPenetrationTested": true
      }
    },
    "title": "Jithox EU Import Preflight",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://import.mcp.jithox.com/mcp",
        "type": "streamable-http",
        "headers": [
          {
            "name": "Authorization",
            "isSecret": true,
            "isRequired": true,
            "description": "OAuth 2.1 bearer. Discover the authorization server via /.well-known/oauth-protected-resource; PKCE S256 is mandatory; tokens are audience-bound to https://import.mcp.jithox.com/mcp with least-privilege per-tool scopes. A token issued for the Jithox E-Invoice server is rejected here (separate resource/audience). The workspace access key may also be sent directly per call (Authorization: Bearer <access key> or X-Jithox-Api-Key) when an OAuth browser callback is not possible."
          }
        ]
      }
    ],
    "version": "0.4.1",
    "websiteUrl": "https://jithox.com/mcp",
    "description": "Read-only EU import preflight: EORI, TARIC candidates, measures, low-value cost. Evidence only."
  }
}