Visit

EditalMD

Voting open

Brazilian public tenders (PNCP) as Markdown for agents

Currently #3

Votes 0

Launched Week 45, 2026 (2 to 8 November 2026)

Data & APIs MCP servers

From the maker

Search Brazilian public tenders (PNCP), read editais as Markdown, build requirement dossiers, deadlines and alerts.

How to connect

Streamable HTTP endpoint:

https://editalmd.com/mcp

What we found when we connected

Verified 2026-10-26 | 59 tools | responded in 1214ms

Protocol revision: 2025-06-18
Server identified itself as: EditalMD c68ad1e8
Tools exposed: 59
Tool descriptions: present
tools/list round trip: 1214ms
Tested: 2026-10-26 12:43 UTC

The 59 tools it exposed

Every name below came back from this server's own tools/list response on the date above. So did each description, parameter list and label like "read-only": they are the server describing itself. We did not call any of them.

evaluation_quota read-only

Individual allowance: one premium and 100 basic documents, with an expiry date.

Parameters: agent_pass (required)
evaluation_premium

Uses your only sponsored premium on a document of up to 50 pages. Keep evaluation.access_code as avaliacao_codigo and follow it with generation_status and… more Uses your only sponsored premium on a document of up to 50 pages. Keep evaluation.access_code as avaliacao_codigo and follow it with generation_status and agent_pass. A repeat returns the same access. Allowance per credential, until the earlier date of the agent's 30 days and the end of the pilot. Repeating the same document does not use another unit. Premium: keep evaluation.access_code and use X-Editalmd-Avaliacao together with X-Agent-Pass in the reads and in GET /geracao. Basic does not open premium content. The pilot depends on the global budget; no automatic renewal. less

Parameters: agent_pass (required), id (required)
evaluation_basic

Basic native or OCR text of a PDF of up to 50 pages / 32 MiB, without review or structured tables. Up to 100 documents per agent. It does not open premium… more Basic native or OCR text of a PDF of up to 50 pages / 32 MiB, without review or structured tables. Up to 100 documents per agent. It does not open premium. Allowance per credential, until the earlier date of the agent's 30 days and the end of the pilot. Repeating the same document does not use another unit. Premium: keep evaluation.access_code and use X-Editalmd-Avaliacao together with X-Agent-Pass in the reads and in GET /geracao. Basic does not open premium content. The pilot depends on the global budget; no automatic renewal. less

Parameters: agent_pass (required), id (required)
evaluation_basic_result read-only

Follows the basic reading after retry_after_s and returns the text per page with the hash of the source. Allowance per credential, until the earlier date of… more Follows the basic reading after retry_after_s and returns the text per page with the hash of the source. Allowance per credential, until the earlier date of the agent's 30 days and the end of the pilot. Repeating the same document does not use another unit. Premium: keep evaluation.access_code and use X-Editalmd-Avaliacao together with X-Agent-Pass in the reads and in GET /geracao. Basic does not open premium content. The pilot depends on the global budget; no automatic renewal. less

Parameters: agent_pass (required), id (required)
company_documents read-only

Lists the private PDFs of the company. Binary downloads use the authenticated HTTP GET /documentos/:arquivo.

Parameters: cnpj (required)

Show the other 54 tools

attach_company_document

Sends a PDF proof of the company. It does not start OCR. Requires a session; for large files, prefer HTTP. Returns 201. JSON up to 11,200,000 bytes; PDF up to… more Sends a PDF proof of the company. It does not start OCR. Requires a session; for large files, prefer HTTP. Returns 201. JSON up to 11,200,000 bytes; PDF up to 8 MiB; 20 documents, 80 MiB and 50 pages per company. An identical file is reused. The automatic reading happens only when you request the analysis. less

Parameters: cnpj (required), nome (required), tipo (required), arquivo_base64 (required)
remove_company_document destructive idempotent

Removes a proof from your own company; the analyses that used it become out of date.

Parameters: cnpj (required), arquivo (required)
analyze_participation

Starts or resumes the analysis with the company record, the attachments and the tender. Call it only when the user asks; follow it with get_participation… more Starts or resumes the analysis with the company record, the attachments and the tender. Call it only when the user asks; follow it with get_participation. Returns 202 after it accepts and keeps the request, and 200 when it reuses a finished analysis. It uses the profile and the attachments of this owner. Interrupted requests can resume; failures tell the reason and the next action. An explicit POST resumes a pause. Up to 2 thousand facts and 100 tenders per company, subject to the available capacity and budget. Follow-up only by GET. The analysis is a triage with evidence, not a final qualific [shortened] less

Parameters: cnpj (required), id (required), v (required)
get_participation read-only

Reads the state, the pending items and the met items, with reasons, actions and evidence. It never starts an analysis. Pending items group precisa_comprovar… more Reads the state, the pending items and the met items, with reasons, actions and evidence. It never starts an analysis. Pending items group precisa_comprovar (proof missing), divergente (incompatible evidence) and acompanhar (future obligation). A different company record, attachments or dossier return outdated without current results. The reference date stays when the analysis resumes; a previous day returns data_atual=false. Validated batches stay available during failures or processing, with parcial=true and processados/total; they never mean that the requirements not yet compared are done. [shortened] less

Parameters: cnpj (required), id (required), v (required), grupo, kind, after, limit
list_my_companies read-only

The companies are the account organizations with EditalMD; use the session or the organization key.
search_companies read-only

Searches the company registry by CNPJ or company name; requires an account or a guest.

Parameters: q (required)
add_company destructive idempotent

Imports the CNPJ into a new organization or into the organization of the organization key. Without X-Organization-Id, it creates the organization with the… more Imports the CNPJ into a new organization or into the organization of the organization key. Without X-Organization-Id, it creates the organization with the company name and EditalMD on, or returns the one that the person removed from the list (201). With X-Organization-Id or an organization key, the record goes to that organization if the caller manages it and it has no company. Returns 200 when the CNPJ is already in an organization of the caller. Up to 100 companies; no partners or contacts; no analysis starts. less

Parameters: cnpj (required)
select_company destructive idempotent

Selects a registered company; it does not run an analysis. Each person's choice is kept in the account. Repeating the current choice writes nothing.

Parameters: cnpj (required)
remove_company destructive idempotent

Removes the company from the list (owner or admin); the organization and the PDFs stay, and adding the CNPJ again brings it back.

Parameters: cnpj (required)
awarded_prices read-only

Awarded results for a similar item, as a free summary: how many results, the median and the range (p25/p75) of the same catalog product in the same unit… more Awarded results for a similar item, as a free summary: how many results, the median and the range (p25/p75) of the same catalog product in the same unit, without the extremes; the volume bought; the value for your quantity; and the other groups that the search found (ask for the product and the unit of one of them to switch). It searches awarded results by item description. It also accepts POST, PUT or PATCH with the same parameters in JSON or a form; `query`, `termo`, `busca` and `search` count as `q`, `estado` as `uf`, and `limit` as `limite`. Every 400 has `exemplo` and `doc`. less

Parameters: q (required), uf, meses, catmat, limite, produto, unidade, quantidade
framework_agreements read-only

The valid framework agreements (`ata de registro de preços`) on PNCP for the object, most relevant first: the managing agency, the validity, whether the… more The valid framework agreements (`ata de registro de preços`) on PNCP for the object, most relevant first: the managing agency, the validity, whether the agreement accepts joining (carona) and the link to the agreement. Free. Only the agreements that are not canceled and are valid today or later. `adesao=1` returns only the ones that accept joining. The procurement record (`/api/compra/:id`) has the agreements that it generated. `Accept: text/html` opens the Atas vigentes tab with the terms. less

Parameters: q (required), adesao, pagina
procurement_plans read-only

What agencies plan to procure (annual procurement plans, PCA, on PNCP), before the tender opens: item, agency, quantity, estimated value and desired date… more What agencies plan to procure (annual procurement plans, PCA, on PNCP), before the tender opens: item, agency, quantity, estimated value and desired date. Free. Only the current version of each plan; without `ano`, from the current year on. To know when the tender opens, create an alert with the same terms (`/api/alertas`). `Accept: text/html` opens the Planos de compras tab with the terms. less

Parameters: q (required), ano, pagina
my_account read-only

The identity and the private counters of the account session (cookie) sent in the MCP request. The global account is already the person in EditalMD: there is no activation per product.

Parameters: locais
my_documents read-only

The private collection of the account. Requires the account session (cookie and the browser CSRF).

Parameters: antes
my_procurements read-only

The private collection of the account. Requires the account session (cookie and the browser CSRF).

Parameters: antes
account_tracking read-only

Checks that the Salvas, Alertas and Vigias belong to the account of the session. The lists of a guest edm_… move to the account with `POST /api/auth/claim`; a… more Checks that the Salvas, Alertas and Vigias belong to the account of the session. The lists of a guest edm_… move to the account with `POST /api/auth/claim`; a POST to this route answers 410 with the path. less
claim_guest_tracking

Brings into the session account what the guest edm_… created (the SDK claim): the Salvas, Alertas and Vigias that the account does not have yet, and the… more Brings into the session account what the guest edm_… created (the SDK claim): the Salvas, Alertas and Vigias that the account does not have yet, and the documents that the guest bought. Requires the bootstrap/CSRF of this browser; the page does it right after sign-in. It moves only what the guest still has, in one transaction; what collides with what the account already has stays with the guest. A repeat does no harm (it moves zero). less

Parameters: guest_token (required)
lookup_reference read-only

Find city names and state codes, activities and other Radar CNPJ references. For tender filters, use the city name and state. Returned numeric codes belong to Receita, not IBGE.

Parameters: tipo (required), q, codigos, limit
preview_alert

A free sample of procurements by terms and filters, or editable suggestions by CNPJ. It does not create alerts.

Parameters: termos, uf, filtros, cnpj
update_alert destructive reaches outside services

Edits the interest, or pauses or turns on again an alert of the owner. The filters replace the whole filter.

Parameters: termos, uf, filtros, nome, organizacao_id, destinatarios, id (required), ativo, canal, destino
list_saved read-only

Lists up to 200 tenders saved by the owner, free.
save_procurement destructive idempotent

Saves the procurement, up to 200 per owner. Saving does not create a watch or a notification. The client sends only the ID; the snapshot comes from the collection.

Parameters: id (required)
remove_saved destructive idempotent

Removes the procurement from the personal list of the owner. Saving does not create a watch or a notification. The client sends only the ID; the snapshot comes from the collection.

Parameters: id (required)
generation_status read-only

Follows the real phases and the completion, free, without starting processing.

Parameters: id (required), acesso_codigo, agent_pass, avaliacao_codigo
original_status read-only

Reads the status of the original, free. It does not ask for a download or a generation. It returns only the file status: it does not deliver content, grant… more Reads the status of the original, free. It does not ask for a download or a generation. It returns only the file status: it does not deliver content, grant access, confirm pages or start a generation. No query. The response is no-store. less

Parameters: id (required)
request_original idempotent reaches outside services

When the person wants the document, downloads the pending original from PNCP now. Free and idempotent. It does not start OCR. Use it when the person opens the… more When the person wants the document, downloads the pending original from PNCP now. Free and idempotent. It does not start OCR. Use it when the person opens the document. The body is empty or {} (two bytes at most). A free collector downloads the original at once and the status becomes downloading; without a free collector, the request goes first into the queue. less

Parameters: id (required)
list_examples read-only

Lists five real free proofs to check the Markdown, the original PDF and the ZIP with images before you generate another document.
get_document read-only

A free lookup of the title, type, pages and the procurement linked to a document. Use `get_procurement` to list the related documents. It does not open content or start OCR.

Parameters: id (required)
get_document_dossier read-only

Items, requirements, attestations, deadlines and obligations, with conditions, exceptions and excerpts/pages. It uses the same acesso_codigo as the reading. It… more Items, requirements, attestations, deadlines and obligations, with conditions, exceptions and excerpts/pages. It uses the same acesso_codigo as the reading. It does not start AI. The dossier is included in the document access, with no new analysis when you read it. Partial data tells the coverage; an export requires a finished version. less

Parameters: id (required), v, after, limit, kind, acesso_codigo, agent_pass, avaliacao_codigo
list_document_files read-only

The catalog of the original files of the document, with download links and pages. Use /api/documento/{id}/original to download the full original.

Parameters: id (required), acesso_codigo, agent_pass, avaliacao_codigo
api_index read-only

The EditalMD API index, with the routes.
health read-only

Health of the origin and size of the collection (procurements and documents with text).
search_tenders read-only

Searches public procurements by term. Free. Returns the object, the agency, the state (UF), the modality and the procurement id.

Parameters: q (required), uf, abertas, limite, filtros
get_deadlines read-only

The deadlines of the procurement: the published end of proposals and the last day to challenge the tender (estimate: 3 business days before the session, Law… more The deadlines of the procurement: the published end of proposals and the last day to challenge the tender (estimate: 3 business days before the session, Law 14.133 art. 164, national holidays). Free. Served from the edge cache for up to 6 hours: the record rarely changes. `Cache-Control: no-cache` in the request reads the origin now. The `x-origem-cache` header says `hit`, `miss` or `bypass`. less

Parameters: id (required)
get_procurement read-only

The procurement record and its documents in the collection (up to 50), with titles, types, pages and availability. Free. Served from the edge cache for up to 6… more The procurement record and its documents in the collection (up to 50), with titles, types, pages and availability. Free. Served from the edge cache for up to 6 hours: the record rarely changes. `Cache-Control: no-cache` in the request reads the origin now. The `x-origem-cache` header says `hit`, `miss` or `bypass`. less

Parameters: id (required)
who_supplies read-only

The CNAEs (activity codes) that usually win procurements like this one, most likely first, with the official description and, per CNAE, how many items and how… more The CNAEs (activity codes) that usually win procurements like this one, most likely first, with the official description and, per CNAE, how many items and how much of the estimated value pointed to it. Free. Each item of the procurement (up to 99, the ones of highest value) points to the 3 most likely CNAEs, by a classifier trained on the activity of the companies that won similar items in the awarded PNCP results; the procurement adds the points (3, 2 and 1 by position). Without items in the collection, the object of the procurement counts, and the top 5 come without `itens` or `valor_estimad [shortened] less

Parameters: id (required)
open_tenders_in_field read-only

The tenders with an open proposal period published in the last 7 days, in the state (UF) and in the CNAEs of the companies that supply the same as this… more The tenders with an open proposal period published in the last 7 days, in the state (UF) and in the CNAEs of the companies that supply the same as this procurement, highest value first, and the alert body that delivers them (for `create_alert`). Useful when the procurement you looked up is already closed. Free. Without a CNAE, it uses the terms of the object. It is the same read as the alert preview (`POST /api/alertas/previa`), and `alerta` has the body that creates this alert in `POST /api/alertas` (add the `canal`). The result is per field and state and is kept for 30 minutes; when the serv [shortened] less

Parameters: id (required)
get_tender_markdown read-only

Reads the Markdown with the acesso_codigo of the document, or with avaliacao_codigo and agent_pass of the sponsored premium. Five examples are free.

Parameters: id (required), acesso_codigo, agent_pass, avaliacao_codigo
get_qualification

The qualification list of the tender, with literal excerpts: conditions, exceptions and evidence by page of the available analysis. The lookup does not start… more The qualification list of the tender, with literal excerpts: conditions, exceptions and evidence by page of the available analysis. The lookup does not start another analysis. Deadlines, proposals and the other obligations are in the dossier; this list covers qualification and the required attestations, and does not state what the company has. less

Parameters: id (required), acesso_codigo, agent_pass, avaliacao_codigo
get_reading_manifest read-only

The document manifest: pages, images, SHA-256 and version. Send acesso_codigo; the examples are free. It does not start OCR. The same authorization opens the… more The document manifest: pages, images, SHA-256 and version. Send acesso_codigo; the examples are free. It does not start OCR. The same authorization opens the ZIP and the images through the API. Only ready resources. `document_approved: false` marks the automatic extraction and does not block reading. less

Parameters: id (required), acesso_codigo, agent_pass, avaliacao_codigo
create_owner

Creates the guest (token edm_…, issued by the account library) that opens alerts and watches, and the secret whsec_… that signs the webhooks. No sign-up. The… more Creates the guest (token edm_…, issued by the account library) that opens alerts and watches, and the secret whsec_… that signs the webhooks. No sign-up. The token appears only once: keep it and send it in Authorization: Bearer in the alert and watch tools. The account library signs the token, with a limit per network and per hour, so the free allowance does not become infinite. The token has no recovery: sign in to the account and bring the lists into it (`POST /api/auth/claim`, which the account page does on sign-in) to stop depending on it. You can read `webhook_segredo` again in `GET /api/ [shortened] less
get_owner read-only

The owner state (requires the token edm_… or the account session): account or guest, the notice e-mail, the allowance and the secret whsec_… that signs each… more The owner state (requires the token edm_… or the account session): account or guest, the notice e-mail, the allowance and the secret whsec_… that signs each webhook (Standard Webhooks: webhook-id, webhook-timestamp, webhook-signature). Each webhook POST carries `webhook-id`, `webhook-timestamp` (Unix seconds) and `webhook-signature: v1,<base64>`: HMAC-SHA256 of `id.timestamp.body` with the key of your `whsec_…` (the base64 after the prefix). This is the Standard Webhooks pattern: any of its libraries can check it; reject a timestamp outside 5 minutes. After `POST /api/dono/segredo`, the previo [shortened] less
rotate_webhook_secret

Changes the secret that signs the webhooks (requires the token edm_…). The previous secret still signs for 24 h, so you can change it without a failure window… more Changes the secret that signs the webhooks (requires the token edm_…). The previous secret still signs for 24 h, so you can change it without a failure window. During the 24 h, the `webhook-signature` header has two `v1,…` parts: one with the new secret and one with the previous. The receiver only needs to accept any part that matches. less
create_alert reaches outside services

An alert for new procurements by object terms and state (UF). Use the account session or guest token. Channels: pull, signed webhook or email. Name… more An alert for new procurements by object terms and state (UF). Use the account session or guest token. Channels: pull, signed webhook or email. Name, organization and email recipients are optional. Two modes. By `termos`: a space requires all groups; `|` accepts alternatives within a group. By `cnpj`: known activity families produce alerts, up to `max_familias`. Unmapped activities remain in the response without an alert. The cron checks every 30 minutes. Email requires an account session and `EMAIL_ALERTAS=1`. It uses explicit recipients or the verified account email. less

Parameters: nome, organizacao_id, destinatarios, termos (required), uf, canal, filtros, destino
create_alerts_by_cnpj reaches outside services

Alerts for new procurements by the company CNPJ (requires the token edm_…): the activities (CNAE) become families of terms, and there is one alert per family… more Alerts for new procurements by the company CNPJ (requires the token edm_…): the activities (CNAE) become families of terms, and there is one alert per family, main first, up to max_familias. A CNAE outside the dictionary is listed in the response with a null family. Two modes. By `termos`: a space requires all groups; `|` accepts alternatives within a group. By `cnpj`: known activity families produce alerts, up to `max_familias`. Unmapped activities remain in the response without an alert. The cron checks every 30 minutes. Email requires an account session and `EMAIL_ALERTAS=1`. It uses explic [shortened] less

Parameters: nome, organizacao_id, destinatarios, cnpj (required), max_familias, uf, filtros, canal, destino
list_cnaes read-only

Search term suggestions by economic activity (CNAE), with the description, the family and coverage indicators. Free. Without `q`, it lists the activities with… more Search term suggestions by economic activity (CNAE), with the description, the family and coverage indicators. Free. Without `q`, it lists the activities with the most registered suppliers. With `q`, it searches by code prefix (`1412`, `1412-6/01`) or by a word of the description. A null `familia` or `termos` means that the CNAE is not in the dictionary yet: an alert by CNPJ does not use it. less

Parameters: q, limite
list_alert_matches read-only

The procurements that already matched an alert (pull channel), with deadlines and delivery status. Requires the token edm_….

Parameters: id (required), limite, antes_compra
watch_procurement reaches outside services

Watches a procurement (requires the token edm_…): takes a snapshot now and records the events of correction, new document, suspension, postponed deadline and… more Watches a procurement (requires the token edm_…): takes a snapshot now and records the events of correction, new document, suspension, postponed deadline and value, plus deadline notices. The checks are periodic; check the date of the last check in the watch. The notices `prazo_impugnacao` (on the day) and `prazo_proposta` (24 h before) go out once each. less

Parameters: compra_id (required), canal, destino
list_watch_events read-only

The events of a watched procurement (what changed, from what to what, and when) and the current snapshot. Requires the token edm_….

Parameters: id (required), limite
consulta_cadastro read-only

Name, status, activity and address of a Brazilian company by CNPJ. It does not count against the daily free limit, does not show contacts or partners and runs… more Name, status, activity and address of a Brazilian company by CNPJ. It does not count against the daily free limit, does not show contacts or partners and runs no extra checks. The origin's protection limit still applies. For sanctions, tax status and a live CNIA check, use consulta_cnpj. less

Parameters: cnpj (required)
consulta_endereco read-only

Addresses and companies at a CEP (Brazilian postal code), without counting against the daily free limit. Up to 20 addresses and 20 companies; `pontos_total`… more Addresses and companies at a CEP (Brazilian postal code), without counting against the daily free limit. Up to 20 addresses and 20 companies; `pontos_total` has the total number of addresses. The origin's protection limit still applies. less

Parameters: cep (required)
consulta_sugerir read-only

Suggests up to 8 Brazilian companies for a CNPJ, company name, partner, phone or e-mail, ordered by how well they match. It does not count against the daily… more Suggests up to 8 Brazilian companies for a CNPJ, company name, partner, phone or e-mail, ordered by how well they match. It does not count against the daily free limit and does not show contacts. `incompleto` means one of the sources did not answer. less

Parameters: q (required)
consulta_cnpj read-only reaches outside services

Brazilian company record by CNPJ from the Federal Revenue (Receita Federal), with the special status when there is one (bankruptcy, judicial recovery… more Brazilian company record by CNPJ from the Federal Revenue (Receita Federal), with the special status when there is one (bankruptcy, judicial recovery, liquidation); its sanctions (CEIS, CNEP, CEPIM, leniency agreements, TCU and the CNJ's CNIA, checked live); partners on the politically exposed persons list (CGU); tax status (federal tax debt, installment agreements, tax incentives and construction works); the Federal Revenue chronic tax debtor list (`devedorContumaz.consta`: barred from public tenders); environmental and labor risk (forced-labor list, Ibama embargoes and fines); government con [shortened] less

Parameters: cnpj (required), temas
consulta_cep read-only

Addresses at a CEP (Brazilian postal code) with coordinates (CNEFE/IBGE) and the companies registered there. Returns up to 20 addresses and up to 20 companies… more Addresses at a CEP (Brazilian postal code) with coordinates (CNEFE/IBGE) and the companies registered there. Returns up to 20 addresses and up to 20 companies; the total number of addresses is in `pontos_total`. 10 free lookups per day per network; after that, the tool answers `free_limit` with `resets_at`. less

Parameters: cep (required)

Anything above describes one moment on the date shown. We do not re-test on a schedule, so nothing here says what this server is doing now. We have not audited its code, its data handling or its permissions, and this is not a safety rating.

Launch your own MCP product See the rest of Week 45, 2026

Comments

What readers said about this product. Comments are people's own opinions and are not part of anything we checked.

Comments are written by readers, not by us, and we do not endorse them. Nothing here is held back or approved first: a comment goes up when it is posted, and you can edit or delete your own at any time. Report anything illegal or abusive with the link on each comment, or by email from our contact page if you do not have an account.