Atlas / MCP servers / indotender / indotender-hkcourt

indotender-hkcourtSAFE

mcp/indotender/hkcourt-mcp

Hong Kong court cases and read judgments via the Model Context Protocol.

Verdict
SAFE
Grade
B
Trust score
87 /100
Exposed tools
—
Transport
streamable-http
License
—
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Connect your AI assistant to Hong Kong CourtDB — search Hong Kong court cases and read judgments via the Model Context Protocol.

中文(簡介)

Hong Kong CourtDB MCP 是 Model Context Protocol (MCP) 伺服器,讓 AI assistant 搜尋香港法院案件:按案件類型、年份、標題或當事人(中英文)篩選,並讀取判決書純文字。

Connect

https://hk.courtdb.org/mcp

Add this URL as a custom MCP connector in Claude, Cursor, or any MCP-compatible client. No sign-in required.

Tools

Example prompts

  • "List Hong Kong cases with partiesContains set to HSBC"
  • "List cases with case_prefix hccl and year 2024"
  • "Get case details for id 12345/2024"
  • "Get the judgment document for file id 12345678"
  • 「搜尋當事人包含 匯豐 的案件」
  • 「讀取判決書 file id 12345678」

Setup — Claude

  1. Go to claude.ai/customize/connectors
  2. Click Add custom connector
  3. Name it Hong Kong CourtDB and paste https://hk.courtdb.org/mcp
  4. Save — no sign-in required

Setup — Cursor / other MCP clients

{
"mcpServers": {
"hkcourt": {
"url": "https://hk.courtdb.org/mcp"
}
}
}

Last updated: 2026-07-10

Read from source at commit e56c601ec336OBSERVED · 2026-10-12
02

Trust audit

SAFEgrade B · trust 87/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (3)

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
streamable-http
Why it matters. a network transport with no auth environment variable found
Fix. require a token
LOWInventory / provenance · inv.no_license · CWE-1104
Why it matters. no LICENSE file and no repo licence
Fix. add a licence
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-12 · audit v0.4.1 · source sha e56c601ec336full audit observations/trust-audit/mcp-server/indotender__hkcourt-mcp.json · Report an issue / request a re-scan
03

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-12e56c601ec336SAFEB87first audit
04

Questions

What is the indotender-hkcourt MCP server?

Hong Kong court cases and read judgments via the Model Context Protocol.

Is indotender-hkcourt safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (87/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does indotender-hkcourt need?

No credential environment variables were found in its source, so it appears to need none.

How does indotender-hkcourt run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (e56c601ec336), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement