# procureradar-mcp-server

[![npm version](https://img.shields.io/npm/v/procureradar-mcp-server.svg)](https://www.npmjs.com/package/procureradar-mcp-server)
[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](./LICENSE)

**MCP server for [ProcureRadar](https://www.procureradar.com) (智猫 / Zhimao)** — find verified global **B2B buyers** (importers & distributors) by product category and country, then enrich contacts and run deep company intelligence. Think of it as the *buyer-side* counterpart to Alibaba: we surface **buyers for sellers**, not suppliers for buyers.

> Operated by Acrometa Lifestyle Pte. Ltd., **listed on the Singapore Exchange (SGX)**. Neutral, PDPA-compliant data intermediary. Bilingual (English / 中文).

There are **two ways** to connect — pick one:

## Option A — Remote MCP endpoint (recommended, zero install)

The hosted MCP endpoint supports an **anonymous handshake** and a **free, rate-limited discovery tool** (`find_buyers`) — you can try it without any credentials. Paid tools use OAuth 2.1 or a `Bearer zk_` key.

**Cursor / Claude Desktop** (`~/.cursor/mcp.json` or Claude config):

```json
{
  "mcpServers": {
    "procureradar": {
      "url": "https://www.procureradar.com/api/mcp",
      "headers": { "Authorization": "Bearer zk_YOUR_TOKEN" }
    }
  }
}
```

**Gemini CLI** (note the `httpUrl` key):

```json
{
  "mcpServers": {
    "procureradar": {
      "httpUrl": "https://www.procureradar.com/api/mcp",
      "headers": { "Authorization": "Bearer zk_YOUR_TOKEN" }
    }
  }
}
```

> `find_buyers` works **without** a token (anonymous, free, rate-limited). Unlocking contact details / intelligence requires a `zk_` key or OAuth login.

## Option B — Local stdio server (this npm package)

Runs the published npm package over stdio with your own API key.

**Cursor** (`~/.cursor/mcp.json`):

```json
{
  "mcpServers": {
    "zhimao": {
      "command": "npx",
      "args": ["-y", "procureradar-mcp-server"],
      "env": {
        "ZHIMAO_API_KEY": "zk_YOUR_TOKEN",
        "ZHIMAO_BASE_URL": "https://www.procureradar.com"
      }
    }
  }
}
```

### Get an API key

Create a `zk_` key at **https://www.procureradar.com/enterprise/api-access** (shown once — store it safely).

## 🛠️ Tools

| Tool | Purpose | Cost |
|------|---------|------|
| `query_expansion` | Supply-chain expansion → buyer personas + Boolean query | per registry |
| `url_profile_extract` | URL → structured company profile (Readability + LLM) | 10 pts |
| `social_harvest_assisted` | Generate a harvest bookmarklet (FB / Xiaohongshu / LinkedIn) | 10 pts |
| `facebook_group_harvest` | FB group bulk bookmarklet | 10 pts |
| `seed_url_bulk_ingest` | Bulk-ingest seed URLs | free |
| `company_intelligence` | Company intelligence (registry / web / WHOIS / tax / map / logo / news) | 10 / 30 pts |
| `decision_maker_intel` | Decision-maker discovery (LinkedIn + email + WhatsApp) | 10 / 25 pts |
| `buyer_intent_intelligence` | Buyer-intent composite (customs + supply chain + region) | 20 / 40 pts |
| `signal_watch` | Subscribe to hiring / news / tender signals | free |

All calls are **BYOK + real billing** — the `zk_` token is tied to your ProcureRadar account and charges your balance.

## 💬 Example prompts

Once connected in your AI client, just ask in natural language:

1. **Find buyers (free, anonymous)** — *"Find verified flour importers and distributors in Malaysia."* → calls `find_buyers { category: "flour", country_iso: "MY" }`.
2. **Enrich contacts (paid)** — *"Get the email and WhatsApp for the importer example-importer.com."* → calls `enrich_buyer_contact { target_domain: "example-importer.com" }`.
3. **Company intelligence (paid)** — *"Run a company intelligence check on example-importer.com in Malaysia and give me a risk score."* → calls `analyze_buyer_intelligence { target_domain: "example-importer.com", country_iso: "MY" }`.

> `find_buyers` is free and works without any credentials, so you can try example 1 immediately.

## 🔒 Security

- `zk_` tokens are shown once at creation; the DB stores only `sha256(token + salt)`.
- Up to 10 active keys per user; revoke unused ones from your account.

## 🐛 Debug

```bash
ZHIMAO_API_KEY=zk_xxx ZHIMAO_BASE_URL=https://www.procureradar.com npx procureradar-mcp-server
```

Waits for MCP messages over stdio; `Ctrl+C` to exit.

## Build from source

```bash
npm install
npm run build      # outputs dist/
node dist/index.js
```

## Links

- Website: https://www.procureradar.com
- API access: https://www.procureradar.com/enterprise/api-access
- Remote MCP endpoint: https://www.procureradar.com/api/mcp
- npm: https://www.npmjs.com/package/procureradar-mcp-server

## 📜 License

[MIT](./LICENSE)