
Blackbook Protocol Advisor MCP server
Purchaser-gated MCP for Vault, HMRC TRS, 95/5 equity, and Companies House PSC.
0 stars
Reviews
Write oneNobody has reviewed Blackbook Protocol Advisor yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Blackbook Protocol Advisor tools (25, 3 write)
write = sends, deletes, buys or postsconfirm_and_submitwrite actionFreeSubmit the current portal form only after the human provides a valid one-time confirmationToken from prepare_submit_confirmation. This can file on a government portal.
draft_form_answersFreeDraft preparation notes for TRS, IHT100, IHT400, and related professional-review questions from a completed intake. Label as a Protocol guide for solicitor execution.
end_browser_sessionFreeTear down the assisted browser session. No credentials are persisted. Safe to call more than once for the same id after expiry.
explain_current_screenFreeSummarise the current portal page: URL, text excerpt, fillable fields, Protocol hint, signedInLikely.
fill_fieldsFreeFill non-secret form fields (label/placeholder/name). Never passwords, OTPs, or Companies House auth codes.
generate_review_bundleFreeGenerate a cited professional-review bundle from a completed intake for the Owner to take to a solicitor or CTA.
get_companies_house_guidanceFreeRetrieve approved Companies House / PSC / WebFiling guidance. PSC filings name individuals (trustees), never the Trust itself.
get_hmrc_guidanceFreeRetrieve approved GOV.UK/HMRC trust and inheritance-tax guidance by topic. Returns a title, official URL, and short summary. Not a live scrape of GOV.UK.
get_legal_boundaryFreeReturn the mandatory educational / non-advice boundary statement. Call when the Owner asks if this is legal advice.
get_module_playbookFreeREQUIRED when coaching setup. Return the ordered Protocol checklist for a module. For 95/5 / share transfer into the Trust use equity_95_5 (not a freestyle solicitor checklist). Modules: vault, trs, equity_95_5, psc, banking, ip, philosophy, legacy, property.
get_self_serve_portalFreeSelf-serve path: return the official portal URL plus Protocol checklist for the Owner’s own browser. Present portalUrl as a clickable markdown link (MCP cannot launch local browsers). Do not start Browserbase.
get_skillFreeLoad a Protocol workflow skill as markdown. Names: establish-vault-trust, register-trust-trs, implement-95-5-equity-split, update-psc-companies-house, run-portal-copilot.
list_fillable_fieldsFreeInventory visible non-secret form controls (label/name/type) on the current portal page. Use to align prepare_portal_fill keys.
list_implementation_modesFreeList Owner choices: self_serve (own browser + guidance) vs assisted (Browserbase live view + optional fill). Ask before starting co-pilot.
list_modulesFreeList available Protocol advisor modules in coaching order.
list_risk_flagsFreeReturn legal, tax, and practical red flags detected from customer facts (settlor-as-beneficiary, lender consent, offshore, time pressure).
list_skillsFreeList Protocol Architect workflow skills (Vault, TRS, 95/5, PSC, portal co-pilot). Call when the Owner asks how to set something up; then get_skill for the matching workflow.
open_portalFreeNavigate the assisted session to an allowlisted portal: trs, trs_manage, companies_house_webfiling, or companies_house_psc.
prepare_portal_fillFreeMap intake facts to a fill_fields payload for TRS or Companies House PSC. Secrets (auth code) are listed but never filled. Call after Owner login; align labels with list_fillable_fields. Never maps the Trust as a PSC organisation.
prepare_submit_confirmationwrite actionFreeCreate a one-time confirmation token required before confirm_and_submit. Show the token to the human Owner; do not submit without it.
request_user_actionFreePause for Owner login, CAPTCHA, 2FA, or review in the Browserbase live view. Never ask the Owner to paste passwords into chat.
run_trust_intakewrite actionFreeValidate a structured trust setup intake and return missing facts, Protocol warnings, and next modules. Call before drafting forms or opening portals.
search_bookFreeREQUIRED before substantive Protocol answers. Search approved Blackbook Protocol passages and return cited excerpts. Prefer Protocol vocabulary from hits over generic UK legal advice. Returns ranked results plus the educational boundary.
start_browser_sessionFreeASSISTED mode only. Start a fresh ephemeral Browserbase (or mock) co-pilot session. Returns liveViewUrl — no purchaser email. If Owner prefers their own browser, use get_self_serve_portal instead.
wait_for_user_readyFreeAfter request_user_action(login|2fa), poll until the page leaves the sign-in surface (or timeout). Then continue fill.
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 568ms20/20
- Tool poisoning25 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
- Maintenancelast push 22 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
Install directly
claude mcp add --transport http blackbook-advisor https://theblackbook.pro
Blackbook Protocol Advisor: common questions
- Is Blackbook Protocol Advisor MCP server safe?
- Mostly: it is graded B (83/100). Read the Blackbook Protocol Advisor safety report
- How do I install Blackbook Protocol Advisor?
- It runs remotely at theblackbook.pro. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Blackbook Protocol Advisor need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Blackbook Protocol Advisor maintained?
- The last commit was 22 days ago (2026-08-29). The latest release is v1.0.3.
- Is Blackbook Protocol Advisor up?
- 100% of our last 5 checks got an answer. We check remote servers about four times a day.