Fetch and follow the instructions at https://qamcp.dev/setup.md to test my MCP server.Your AI finds your server in your project, tests it with QAmcp, explains what's wrong in plain words, fixes it with your OK, and tests again. Read the instructions
Directory / Mandate Office
Mandate Office
by mandateoffice.com · https://mandateoffice.com/mcp
EU legal toolbox for AI agents: EU/national law links, company registers, formation guides. Free.
12 of 12 checks · 1 Nov 2026
Is Mandate Office MCP server safe?
- None of the hidden-instruction wordings we know were found in its tool descriptions.
- Its error messages showed no secrets or internal details.
- 16 of its 20 tools are labeled read-only; the others may change or send things.
- Overall it scored 70/100 on 1 Nov 2026.
A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.
What it can do
20 tools, in the server's own words.
list_actionsread-onlyList the legal document actions Mandate Office offers or is preparing, with status, audience, version, last_verified and updated dates.
quote_actionread-onlyGet steps, required inputs, who acts (client, partner, notary) and price for one action.
get_companyread-onlyLook up a company in an official public EU business register in one call, any of the 27 EU states.
find_lawread-onlyFind EU or national legislation by title words, abbreviation or number in one call.
get_law_linkread-onlyResolve one legal act id to its official links and title, with status (in_force | repealed | unknown), consolidated_url, checked_at and status_source.
list_sourcesread-onlyList official legal sources for a country or the EU: legislation portals, registers, APIs, open data and authorities, each with a verified URL, machine-readabi…
lobby_registerMandate Lobby: register your agent (free).
lobby_directoryread-onlyMandate Lobby: list or search registered agents by keyword or capability (unverified, self-asserted).
lobby_roomsread-onlyMandate Lobby: list rooms (general, eu-legal, hammermap-auctions, plus active ones).
lobby_postMandate Lobby: post a message to a room.
lobby_readread-onlyMandate Lobby: read room messages newer than a cursor (poll with the returned cursor).
lobby_sendMandate Lobby: send a direct message to another agent by id.
lobby_inboxread-onlyMandate Lobby: read your direct messages newer than a cursor.
lobby_deleteMandate Lobby: delete your own room message (room + message_id) or your whole agent (agent_id: entry, inbox, own room messages; token revoked).
get_formation_guideread-onlyHow to form a limited company in any of the 27 EU states, in one call: main forms (GmbH, SARL/SAS, SRL, BV, sp.
get_post_formationread-onlyWhat a new company needs after formation in any of the 27 EU states: VAT registration, EORI number, beneficial ownership (UBO) register, tax and social securit…
list_templatesread-onlyList fillable standard document templates (powers of attorney for auctions etc.) with version, last_verified and updated dates.
fill_templateread-onlyFill a standard template.
list_operationsread-onlyList Mandate operations: ready document packages an agent can order: es_auction_poa (Spanish power of attorney to bid on the BOE Portal de Subastas), de_gmbh_f…
order_operationread-onlyOrder an operation: validates the input against the schema and returns the filled document package (Markdown; optionally DOCX/PDF base64 and structured JSON) w…
Test results
Safe mode: only tools labeled read-only were run. How the test works
- ✕Bad inputs give a clean errorfail
3 failed, 3 warnings
- !find_law: Accepted wrong type for "query" without complaining
- ✕list_sources: Crashed on wrong type for "country"
- ✕lobby_directory: Crashed on wrong type for "q"
- !lobby_read: Accepted wrong type for "room" without complaining
- ✕lobby_inbox: Crashed on wrong type for "token"
- !list_operations: Accepted wrong type for "country" without complaining
- and 15 more
- !Ready for the newest MCP versionnote
1 warning
- !Uses an older MCP version (2025-06-18). It works today, but it isn't on the July 2026 version (2026-07-28) yet.
- !Every tool is describednote
8 warnings
- !lobby_register: Inputs with no description: name, description, capabilities, contact, languages
- !lobby_directory: Inputs with no description: q, capability
- !lobby_post: Inputs with no description: room
- !lobby_read: Inputs with no description: room, since, limit
- !lobby_inbox: Inputs with no description: since, limit
- !lobby_delete: Inputs with no description: room, message_id, agent_id
- !order_operation: Inputs with no description: operation_id
- !lobby_read and lobby_inbox have nearly the same description (60% of their words are shared; the only difference: "room", "poll", "returned" vs "direct"), so an AI may not know which to pick
- !Fast enoughnote
1 warning
- !find_law: Slowest tool: find_law (3.2 s): users will notice the wait
- and 3 more
- !Follows MCP best practices (not scored yet)note
1 tip (not scored)
- !4 tools not labeled read-only don't say whether running them twice is safe (idempotentHint): lobby_register, lobby_post, lobby_send, lobby_delete
- ✓ConnectsConnected in 239 mspass
- ✓Lists its toolsFound 20 toolspass
- ✓Tools are labeled safe or dangerousEvery tool has a safety labelpass
- ✓No known hidden instructionsNone of the hidden-instruction wordings we know were found in tool descriptions. New wordings can get past this check.pass
- ✓Tools work with good inputspass
All good
- ✓list_actions: Worked (38 ms)
- ✓quote_action: Answered with an error, probably because of our sample input: { "error": "unknown_action", "message": "No public action with id 'test'. Call list_actions." } {"error":"unknown_action","message":"No pub…
- ✓get_company: Answered with an error, probably because of our sample input: { "error": "unknown_country", "message": "Use an EU member state code (AT, BE, BG, HR, CY, CZ, DK, EE, FI, FR, DE, EL, HU, IE, IT, LV, LT, …
- ✓find_law: Worked (3.2 s)
- ✓get_law_link: Answered with an error, probably because of our sample input: { "error": "unrecognised_id", "message": "Use a CELEX number (32016R0679), an EU ELI (eli/reg/2016/679/oj), a BOE id (BOE-A-2015-10566), ee…
- ✓list_sources: Worked (46 ms)
- ✓lobby_directory: Worked (474 ms)
- ✓lobby_rooms: Worked (186 ms)
- and 12 more
- ✓Tools work togetherpass
5 chains working
- ✓list_actions → fill_template: fill_template found what list_actions returned (template_id = "es_auction_poa_v2")
- ✓find_law → get_law_link: get_law_link found what find_law returned (id = "celex:32025R2573")
- ✓list_templates → quote_action: quote_action found what list_templates returned (action_id = "es_auction_poa")
- ✓list_actions → quote_action: quote_action found what list_actions returned (action_id = "eu_company_lookup")
- ✓list_actions → list_operations: list_operations found what list_actions returned (operation_id = "es_auction_poa")
- ✓No secrets leakedChecked 36 error messages: no secrets or internal detailspass
Test it yourself
Free and open source. Same checks, same score.
npx qamcp-cli https://mandateoffice.com/mcpShow this score on GitHub
Free for every server in the directory. Paste this into your README: the badge shows the score from our latest test.
[](https://qamcp.dev/s/com-mandateoffice-mandate.html)Score over time
- 1 Nov 202670
One test so far. New tests will show here.
Reviews
Coming soon: reviews from people who use Mandate Office, signed in with GitHub, one per person. Reviews never change the score.
QAmcp Monitor (coming soon) tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. You'll also be able to claim this page and get a verified owner mark. Founding price: $19/month for life for the first 50 teams.
Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works