Back to Browse

Tolca MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Know who you are paying before you pay: Québec contractor and company checks, plus web search. x402.

About

Know who you are paying before you pay: Québec contractor and company checks, plus web search. x402.

Remote endpoints: streamable-http: https://tolca.tonbot.ca/mcp/public

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.

2 tools verified · Open access · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Tolca: know who you're paying before you pay

Check an x402 payment request before your agent pays it, plus Québec contractor checks, company verification and web search for AI agents. Official sources, deterministic JSON, pay per call.

Use Tolca in Claude / Utiliser Tolca dans Claude

Add Tolca to Claude / Ajouter Tolca à Claude (free, no account / gratuit, sans compte)

Then ask Claude / Puis demandez à Claude : "Is Gignac Construction's RBQ licence active?"

Agent skill

npx skills add yayabough/tolca

Tolca answers these questions in one call each:

QuestionTool / endpointWhat it checks
Is this x402 payment request safe to pay?payment_check / POST /v1/payment-checkSend the seller's 402 or just its URL. The payTo wallet against the crypto addresses on the US Treasury SDN list, official USDC on 13 networks (Base, Polygon, Arbitrum, Avalanche, Ethereum, Solana, Arc and more), the price and the wallet compared with the seller's live Coinbase x402 Bazaar listing, optional seller name screening. $0.01 per check
Is this Québec contractor safe to hire?qc_contractor_check / POST /v1/qc-contractor-checkRBQ active licence (Régie du bâtiment), RENA (barred from public contracts, Autorité des marchés publics), environmental penalties (MELCCFP), SEAO public contracts awarded in the last 12 months
Does this contractor hold an active RBQ licence right now?qc_licence / POST /v1/qc-licenceFast yes/no with licence number and status
Is this company real and clean?business_verification / POST /v1/verify-businessUS, UK, EU and Canadian sanctions lists, Canadian federal corporations, UK Companies House, GLEIF
Is this company on a sanctions list?POST /v1/sanctions-checkUS (OFAC/CSL), UK (FCDO), EU and Canada (Global Affairs Canada) sanctions lists only, $0.005 per check
Who is this company and how do I reach it?company_profile / POST /v1/company-enrichProfile read live from the company's own website (what it does, services, area, published phones and emails with their source page) plus official screening. $0.02 per profile
What does the web say, with sources?web_search / POST /v1/web-search10 results plus the clean text of the top pages (title, text, sha256, fetch time). French/Canada by default, official-sources mode (.gc.ca, .gouv.qc.ca, .gov, CanLII)

Checks are deterministic JSON (no LLM in the loop; only company_profile / company-enrich uses an AI model, to summarize the company's website): a verdict ok / review / blocking / not_found, reasons, sources with extraction dates, and a proof block (sha256 of the answer). Registry data is refreshed daily from Données Québec (CC-BY 4.0) and the federal and international sources listed below.

Drop-in for x402 agents: tolca-safe-pay

Already paying with @x402/fetch? Change one line and every first payment to a new seller wallet is checked by payment-check before anything is signed. allow pays, review and block do not.

npm i tolca-safe-pay
import { wrapFetchWithSafePay } from "tolca-safe-pay";

const fetchWithPay = wrapFetchWithSafePay(fetch, client); // was: wrapFetchWithPayment(fetch, client)

$0.01 per new seller wallet, verdict reused 24 h. Options, axios and the decision object: safe-pay/ and npm.

Use it in Claude, ChatGPT, Cursor or any MCP client

Server URL (streamable HTTP, stateless, no authentication):

https://tolca.tonbot.ca/mcp/public

Claude (web or desktop): Settings → Connectors → Add custom connector → paste the URL above.

Claude Code:

claude mcp add --transport http tolca https://tolca.tonbot.ca/mcp/public

Any MCP client that supports remote servers:

{
  "mcpServers": {
    "tolca": { "type": "http", "url": "https://tolca.tonbot.ca/mcp/public" }
  }
}

Then ask: "Is Construction ABC inc. licensed with the RBQ, listed in the RENA, and has it won public contracts recently?"

Free tools on /mcp/public

ToolWhat it doesFree limit
qc_contractor_checkRBQ licence + RENA + environmental penalties + SEAO public contracts, with a verdict10 per day
qc_licenceDoes this business hold an active RBQ licence right now?50 per day
company_profileCompany profile from its own website plus official registries and sanctions screening20 per day
sanctions_checkA company name against US, UK, EU and Canadian sanctions lists, with allow / review / block30 per day

Input for the Québec tools: one of neq (10 digits), licence (RBQ licence number) or name, plus optional lang (fr or en). company_profile takes domain or name; sanctions_check takes name. Both accept an optional country as a code (CA) or a name (Canada).

Server card: https://tolca.tonbot.ca/.well-known/mcp/server-card.json

Pay per call (x402, for agents)

No signup. Your agent gets a 402 Payment Required, pays in USDC on Base, and gets the JSON back. Zero results = HTTP 404 = not charged.

EndpointPrice (USDC)
POST /v1/sanctions-check0.005
POST /v1/web-search0.008
POST /v1/qc-licence0.01
POST /v1/payment-check0.01
POST /v1/company-enrich0.02
POST /v1/verify-business0.05
POST /v1/qc-contractor-check0.10

Current prices and schemas: https://tolca.tonbot.ca/openapi.json and https://tolca.tonbot.ca/.well-known/x402

See examples/check.mjs:

npm i @x402/fetch @x402/evm viem
PRIVATE_KEY=0x... node examples/check.mjs "Construction ABC inc."

Without a payment, the endpoint answers 402 Payment Required with the price in the PAYMENT-REQUIRED header:

curl -i -X POST https://tolca.tonbot.ca/v1/qc-contractor-check \
  -H "content-type: application/json" -d '{"name":"Neolect"}'

Check a seller's payment request before paying it (see examples/payment-check.mjs). Simplest: send just the seller's URL. Tolca asks the seller for its 402 without paying (GET, then POST) and checks it:

curl -i -X POST https://tolca.tonbot.ca/v1/payment-check \
  -H "content-type: application/json" \
  -d '{"url":"https://seller.example/api","network":"base"}'

network is optional: name the option you will pay with (base, solana, polygon, eip155:5042...) and Tolca checks that one. You can also send the 402 yourself:

curl -i -X POST https://tolca.tonbot.ca/v1/payment-check \
  -H "content-type: application/json" \
  -d '{"requirements":{"network":"eip155:8453","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x...","amount":"10000","resource":"https://seller.example/api"}}'

Web search example:

curl -i -X POST https://tolca.tonbot.ca/v1/web-search \
  -H "content-type: application/json" \
  -d '{"query":"subvention thermopompe Québec 2026","read":3,"freshness":"30d"}'

Example response (contractor check, trimmed; values illustrative)

{
  "verdict": "ok",
  "verdict_label": "OK",
  "reasons": [
    "Active RBQ licence, not listed in RENA, no environmental penalty found under this name.",
    "3 public contract(s) awarded on SEAO in the last 12 months (1.2 M$, e.g. Ville de Longueuil)"
  ],
  "rbq": {
    "licence": "8315-8105-31",
    "neq": "1166302126",
    "name": "Néolect inc.",
    "status": "Active",
    "bond_amount": "40000",
    "municipality": "Candiac",
    "subcategory_labels": ["1.2 Petits bâtiments", "16.0 Électricité"]
  },
  "rena": [],
  "environmental_penalties": [],
  "public_contracts": { "contracts": 3, "total_cad": 1200000, "buyers": ["Ville de Longueuil"], "window_months": 12 },
  "sources": [{ "id": "rbq", "extracted_at": "2026-10-17T05:00:00Z", "license": "CC-BY 4.0 (Québec)" }],
  "proof": { "generated_at": "2026-10-17T14:02:11Z", "sha256": "..." }
}

Who it is for

  • General contractors bidding on public contracts: a business listed in the RENA cannot obtain a public contract or a public subcontract. Check your whole subcontractor list before you bid.
  • Property and condo managers, insurers, quote platforms: vet every supplier at signup and re-check them over time, keep a dated PDF in the file.
  • AI agents and developers building procurement, compliance, home-renovation or research assistants: one call, cited answer, no account to manage.

Limits

Public data as of the extraction date shown in each answer. Name matching can return homonyms: confirm with the NEQ or licence number. Not a substitute for checking directly with the RBQ or the AMP. Insurance and CNESST status are not covered. Web search reads public pages only; pages that block robots are reported in pages_skipped.

Data attribution

Régie du bâtiment du Québec, Autorité des marchés publics, Ministère de l'Environnement, de la Lutte contre les changements climatiques, de la Faune et des Parcs, Système électronique d'appel d'offres (SEAO, OCDS). Données Québec, CC-BY 4.0. Corporations Canada, Companies House (UK), GLEIF, U.S. Consolidated Screening List, UK Sanctions List (FCDO, contains public sector information licensed under the Open Government Licence v3.0), EU Consolidated Financial Sanctions List (European Commission), Consolidated Canadian Autonomous Sanctions List (Global Affairs Canada). x402 listings from the Coinbase x402 Bazaar. Web search powered by Brave Search.


En français

Tolca vérifie un entrepreneur en construction du Québec en un seul appel: licence RBQ active, inscription au RENA (non admissible aux contrats et sous-contrats publics), sanctions environnementales et contrats publics octroyés au SEAO sur 12 mois. Verdict clair avec sources datées. Aussi: vérification d'entreprise (sanctions, registres fédéraux et internationaux) et recherche web qui lit les pages pour vous.

  • Vérifier une demande de paiement x402 avant que votre agent paie (portefeuille sur la liste SDN, faux jeton, prix gonflé, adresse remplacée), sur 13 réseaux, en envoyant juste l'URL du vendeur: 0,01 $ par vérification
  • Particuliers et entreprises, paiement par carte: https://tolca.tonbot.ca/verifier
  • Vérifier toute une liste de sous-traitants (jusqu'à 100, rapport PDF daté): https://tolca.tonbot.ca/entreprises
  • Serveur MCP public et gratuit, à ajouter dans Claude ou ChatGPT: https://tolca.tonbot.ca/mcp/public (entrepreneurs du Québec, fiche d'entreprise, listes de sanctions)
  • API x402 en USDC (Base), sans compte: de 0,008 $ (recherche web) à 0,10 $ (vérification complète) par appel

Contact: yasser@tonbot.ca

Reviews

No reviews yet

Be the first to review this server!