Name: Open data: clinical trials, EU tenders, companies, fuel
Author: duckdns

Open data: clinical trials, EU tenders, companies, fuel MCP

Official open data as JSON: clinical trials, EU tenders, papers, apps, French firms, fuel, domains.

Tool-list grade A Remote · Streamable HTTP API key 7 tools v1.0.20261027

No reviews yet by duckdns The publisher’s own endpoint — this marketplace is not in the path

96/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Official open data as JSON: clinical trials, EU tenders, papers, apps, French firms, fuel, domains.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http open-data-clinical-trials-eu-tenders-companie-mcp https://api.gregswarm.duckdns.org/mcp --header 'X-RapidAPI-Key: ${X_RAPIDAPI_KEY}'

# 2 — ask your agent for something these tools do
#   app-store-search, clinical-trials-monitor, domain-availability and 4 more

It needs X_RAPIDAPI_KEY (Your RapidAPI key for this API (https://rapidapi.com/IanGregory/api/clinical-trials-eu-tenders-open-data-api)): this sends it in the X-RapidAPI-Key header from your environment, so export it first — its endpoint answers 401 without it.

Open data: clinical trials, EU tenders, companies, fuel costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

duckdns3 servers

3 categories

All 3 servers

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Installation

Where are you running it?

Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.

Claude Codedeclared by this listing

This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it. Claude Code reads X_RAPIDAPI_KEY (Your RapidAPI key for this API (https://rapidapi.com/IanGregory/api/clinical-trials-eu-tenders-open-data-api)) from your environment each time it connects and sends it in the X-RapidAPI-Key header — its endpoint answers 401 without it — so the key stays out of its config: export it in your shell profile (macOS, Linux), or run setx X_RAPIDAPI_KEY … and open a new terminal (Windows).

claude mcp add --scope user --transport http open-data-clinical-trials-eu-tenders-companie-mcp https://api.gregswarm.duckdns.org/mcp --header 'X-RapidAPI-Key: ${X_RAPIDAPI_KEY}'

Reconnect, or start a new session, and the tools appear in the model’s tool list.

Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add — but its publisher asks for a key of their own on every call.

What it asks of you

It reaches a system of yours, so it needs your own credential rather than the publisher’s: X-RapidAPI-Key header — Your RapidAPI key for this API (https://rapidapi.com/IanGregory/api/clinical-trials-eu-tenders-open-data-api). You set it in your own client’s config, on your machine — this marketplace never holds it.

What it writes

One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.

What you approve

7 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Search Apple's App Store by keyword in any storefront country and get each app's developer, price, rating, version, release date, genre, size, minimum OS and store URL. Read from itunes.apple.com when called. Each result: app_id, name, developer, developer_id, bundle_id, price, formatted_price, currency, average_rating, rating_count, average_rating_current_version, rating_count_current_version, ve

Parameter	Type	Required	Notes
term	string	no	Keyword to search for in the App Store (for example budget, photo editor, meditation). Example: "budget".
country	string	no	Two-letter App Store country code, which sets the prices, currency and ratings returned. Example: "us".
limit	integer	no	How many apps to return (Apple allows up to 200 per search). Example: 50.

Studies from the official ClinicalTrials.gov API v2 for a condition, phase and status, returning only the studies whose status, phase, enrollment or last update changed since your last run. Read from clinicaltrials.gov when called. Each result: nct_id, title, sponsor, phase, status, enrollment, start_date, completion_date, last_update_date, conditions, lead_intervention, first_country. Needs a Rap

Parameter	Type	Required	Notes
condition	string	no	Disease or condition to follow (for example breast cancer, type 2 diabetes, Alzheimer). Example: "breast cancer".
phase	string	no	Study phase to follow. Example: "PHASE2".
status	string	no	Recruitment status to follow. Example: "RECRUITING".
updated_since	string	no	Only studies whose record was last updated on or after this date (YYYY-MM-DD). Example: "2025-01-01".
limit	integer	no	At most this many results (default 100).

Check a list of .com domains in bulk and get the registrar, creation and expiry dates, status codes and nameservers straight from the Verisign registry's public RDAP service. Read from rdap.verisign.com when called. Each result: domain, registered, registrar_id, registrar_name, created_at, expires_at, status, nameserver_1, nameserver_2. Needs a RapidAPI key for this API (https://rapidapi.com/IanGr

Parameter	Type	Required	Notes
domains	array	no	Registered .com domain names to look up, e.g. ["example.com", "google.com"]. A name the registry does not know (available) returns a 404 and no row. Example: ["example.com", "google.com", "apify.com"]
limit	integer	no	At most this many results (default 100).

Each run returns only the stations whose fuel prices changed since the last run, from the French and Spanish open government feeds, filtered by postcode prefix. Read from donnees.roulez-eco.fr, sedeaplicaciones.minetur.gob.es when called. Each result: country, station_id, postcode, address, city, lat, lon, diesel_eur_l, sp95_e5_eur_l, e10_eur_l, sp98_eur_l. Needs a RapidAPI key for this API (https

Parameter	Type	Required	Notes
country	array	no	Which national feeds to read (empty: all). Example: ["FR", "ES"].
postcode	string	no	Keep stations whose postcode starts with this (28 is Madrid in Spain, Eure-et-Loir in France; 75 Paris; empty keeps all). Example: "28".
limit	integer	no	At most this many results (default 100).

Search France's official company register by NAF activity code, département, headcount band and status, and get typed legal-entity records with head-office address, coordinates and company size. Read from recherche-entreprises.api.gouv.fr when called. Each result: siren, siret_head_office, name, legal_name, naf_code, legal_form_code, address, postcode, city, departement, lat, lon, creation_date, h

Parameter	Type	Required	Notes
activite_principale	string	no	Main activity code (NAF rev. 2) of the company, e.g. 62.01Z (computer programming), 56.10A (restaurants), 47.11D (supermarkets). Example: "62.01Z".
departement	string	no	Département code of the head office, e.g. 75 Paris, 69 Rhône, 2A Corse-du-Sud. Leave empty for all of France. Example: "75".
tranche_effectif_salarie	string	no	INSEE headcount band: 00 (0), 01 (1-2), 02 (3-5), 03 (6-9), 11 (10-19), 12 (20-49), 21 (50-99), 22 (100-199), 31 (200-249), 32 (250-499), 41 (500-999), 42 (1000-1999), 51 (2000-4999), 52 (5000-9999),
etat_administratif	string	no	A = active companies, C = ceased companies. Example: "A".
limit	integer	no	At most this many results (default 100).

Search the OpenAlex index of scholarly works by keyword, year range and open-access status, and get each paper's title, DOI, year, venue, type, citation count and open-access link. Read from api.openalex.org when called. Each result: openalex_id, title, doi, year, publication_date, venue, type, cited_by_count, is_open_access, oa_status, open_access_url, language. Needs a RapidAPI key for this API

Parameter	Type	Required	Notes
query	string	no	Keywords to search for in titles, abstracts and full text. Example: "graph neural networks".
year_from	integer	no	First publication year to include. Example: 2020.
year_to	integer	no	Last publication year to include. Example: 2026.
oa_status	string	no	Keep only works with this open-access status (empty: all works). Example: "green".
limit	integer	no	At most this many results (default 100).

New public procurement notices from the EU's official TED search API for a CPV code prefix, buyer country and keyword, returning only the notices that are new or changed since your last run. Read from api.ted.europa.eu when called. Each result: notice_id, publication_date, buyer, country_code, title, cpv_codes, procedure, deadline, estimated_value, currency, url. Needs a RapidAPI key for this API

Parameter	Type	Required	Notes
cpv_prefix	string	no	Start of the CPV code to follow (for example 72 for IT services, 45 for construction, 33 for medical equipment). Example: "72".
country	string	no	Country of the buying organisation, as a three-letter ISO code. Example: "FRA".
keyword	string	no	Optional word that the notice title must contain. Leave empty to keep all notices. Example: "services".
published_since	string	no	Only notices published on or after this date, written YYYYMMDD. Example: "20250101".
limit	integer	no	At most this many results (default 100).

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install Open data: clinical trials, EU tenders, companies, fuel or to call it, at any volume.

ATool-list grade · score 96 / 100

Release 1.0.20261027 · scanned 28 Oct 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score96

Findings0 threat · 0 capability

Capabilityminimal

Coveragemanifest

Verificationnot in this report

Surface digest843cf1b0141e4e44871b7c2966c715a846fbde1b5d08b80ef8790713401913a1

Score vectorthreat 100 → client 96

Term	Level	What it prices	Points
capability-exposure	minimal	capability blast radius (minimal) — client exposure if the model is manipulated	−0
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. minimal is the level these add up to.

Tool	Capability tags	Why the tag was assigned
app-store-search	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
clinical-trials-monitor	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
domain-availability	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
eu-fuel-monitor	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
fr-company-search	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
scholarly-search	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)
ted-tender-monitor	untrusted-input	untrusted-input: declares openWorldHint: true (interacts with entities outside the server)

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.

Supply chain and provenance

Integrityfirst-seen

Surface digest843cf1b0141e4e44

Scanned2026-10-28

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.