Back to Browse

Procureport MCP Server

Developer ToolsModerate5.6MCP RegistryLocal
Free

Server data from the Official MCP Registry

Korean public procurement: bids, awards, contracts, statistics, products and mall search.

About

Korean public procurement: bids, awards, contracts, statistics, products and mall search.

Security Report

5.6
Moderate5.6Moderate Risk

procureport is a straightforward Korean public-procurement data client with no malicious patterns, no shell or eval use, and no hardcoded secrets. Its only outbound traffic goes to the configured data.go.kr-style API base URL, and it reads the service key from NARAMARKET_SERVICE_KEY as the upstream requires. The main concerns are low-severity: the service key is placed in the query string, and NARAMARKET_API_URL can redirect that key to any host. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

NARAMARKET_SERVICE_KEYRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-procureport": {
      "env": {
        "NARAMARKET_SERVICE_KEY": "your-naramarket-service-key-here"
      },
      "args": [
        "-y",
        "@reneturcios/procureport"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

procureport

procureport opens up Korean public-procurement data — the Nara Market / data.go.kr API family — through one binary that serves a command-line interface and a stdio MCP server. It covers bid notices, successful bids (awards) and contracts, procurement statistics, the registered product catalogue, and the public shopping mall.

Configuration

API-calling tools need a service key:

export NARAMARKET_SERVICE_KEY=<your data.go.kr service key>

Calls go to data.go.kr-style endpoints under a base URL you can override with NARAMARKET_API_URL (default https://apis.data.go.kr). Requests are shaped as {base}/{service}/{operation}?serviceKey={key}&{params}.

Four tools are purely local — they answer from a built-in catalogue of the four API services and their operations, and work with nothing configured: server_info, get_all_api_services_info, get_api_operations, and get_data_exploration_guide. Every other tool checks for the service key first and fails with a clean error before any request is attempted when it is missing.

Install

npx @reneturcios/procureport server-info

Or run the container image:

docker run -i -e NARAMARKET_SERVICE_KEY=... ghcr.io/cloudcorprecords/procureport

The container defaults to the MCP server (see below). Pass CLI arguments to use it as a CLI instead.

CLI

procureport server-info
procureport services
procureport operations shopping_mall
procureport guide
procureport crawl chair --page 1 --page-size 20
procureport attributes PRD-42
procureport recent-bids --days 7 --business-type 물품
procureport successful-bids 공사
procureport statistics-year 2025
procureport search-mall monitor --company Acme

procureport --version

Exit codes: 0 on success, 1 when a call fails (including a missing service key or an upstream API error), 2 for usage errors.

MCP server

npx -y @reneturcios/procureport mcp

MCP client configuration:

{
  "mcpServers": {
    "procureport": {
      "command": "npx",
      "args": ["-y", "@reneturcios/procureport", "mcp"],
      "env": { "NARAMARKET_SERVICE_KEY": "<your data.go.kr service key>" }
    }
  }
}

Tools

Basic:

ToolInputWhat it returns
crawl_listquery (optional), page, page_size (optional)A page of the product list.
get_detailed_attributesproduct_id (required)The detailed attributes of one product.
server_info(none)Server identity, tool list, and service summary. Local.

Generic API access (each takes operation (required) and an optional params object):

ToolService
call_public_data_standard_apiBid notices, awards, and contracts.
call_procurement_statistics_apiProcurement statistics — 14 operations.
call_product_list_apiProduct catalogue — 12 operations.
call_shopping_mall_apiShopping mall — 9 operations.

Convenience:

ToolInputWhat it returns
get_recent_bid_announcementsdays, business_type (both optional)Bid notices over an automatically computed recent period.
get_successful_bids_by_business_typebusiness_type (required)Awards for a business type; a Korean name such as 물품, 용역, 공사 or 외자 is converted to its code automatically.
get_procurement_statistics_by_yearyear (required)Procurement statistics for one year.
search_shopping_mall_productsquery (required), company (optional)Shopping-mall products matching a name, optionally narrowed to one company.

Exploration:

ToolInputWhat it returns
get_all_api_services_info(none)All four services with their operations. Local.
get_api_operationsservice (required)The operations of one service. Local.
call_api_with_pagination_supportservice, operation (required), params, max_pages, page_size (optional)Items aggregated across pages until a short page or the page cap.
get_data_exploration_guide(none)A strategy guide for exploring the data. Local.

Argument schemas in this rebuild are documented reconstructions from the public README of the original server (tool names and descriptions are documented; the README does not publish full schemas). The built-in catalogue's service operation counts follow the public spec (statistics 14, product list 12, shopping mall 9); individual operation names within the catalogue are documented reconstructions too.

Development

npm install
npm run build   # tsc -> dist/
npm test        # node test runner over test/*.test.ts, no network (fake fetch fixtures)
npm run dev     # run the CLI from source via tsx

License

MIT — see LICENSE.

Reviews

No reviews yet

Be the first to review this server!