XBOSS
warningsapi.xdata.kr
Korean national tax and social insurance filings, invoices and payroll data as MCP tools.
https://api.xdata.kr/mcpWebsiteOAuthMCP 2025-11-25v1.0.0last checked 22 Sep 2026spoke MCP on 1 of 1 check (30 days)initialize in 515 msWill my client connect?
Decided from what the probe found at the endpoint, and from what each client's own documentation says it can complete. Every row carries the day that documentation was read.
✓Claude CodeConnects with setup
The registration flow this server advertises is not one Claude Code documents, so register a client with the issuer yourself and give Claude Code the client ID.
claude mcp add --transport http --client-id <your-client-id> --client-secret --callback-port 8080 xboss https://api.xdata.kr/mcpClaude Code docs · read on 2026-08-30
✓Claude (claude.ai & Desktop)Connects with setup
The registration flow this server advertises is not one Claude (claude.ai & Desktop) documents, so register a client with the issuer yourself and give Claude (claude.ai & Desktop) the client ID.
Settings → Connectors → Add custom connector, then paste https://api.xdata.kr/mcp. Under Advanced settings, enter the OAuth Client ID and Secret the issuer gave you.
Claude (claude.ai & Desktop) docs · read on 2026-08-30
✓ChatGPTConnects
The authorization server supports Client ID Metadata Documents, so ChatGPT identifies itself by URL with no registration step.
Settings → Apps → Advanced settings → Developer mode, then create a connector pointing at https://api.xdata.kr/mcp.
ChatGPT docs · read on 2026-08-30
✓CursorConnects with setup
The registration flow this server advertises is not one Cursor documents, so register a client with the issuer yourself and give Cursor the client ID.
{
"mcpServers": {
"xboss": {
"url": "https://api.xdata.kr/mcp"
}
}
}Cursor docs · read on 2026-08-30
✓VS Code (Copilot)Connects with setup
The registration flow this server advertises is not one VS Code (Copilot) documents, so register a client with the issuer yourself and give VS Code (Copilot) the client ID.
{
"servers": {
"xboss": {
"oauth": {
"clientId": "<your-client-id>"
},
"type": "http",
"url": "https://api.xdata.kr/mcp"
}
}
}VS Code (Copilot) docs · read on 2026-08-30
How to authenticate
Checked against the endpoint by our probe on 22 Sep 2026. These are the capabilities the server advertises, not a prediction about any particular client.
| Scheme | OAuth |
|---|---|
| Issuer | https://api.xdata.kr |
| Dynamic client registration | ✕Not advertised |
| Client ID Metadata Document | ✓Supported A client identifies itself by a URL to its own metadata, so no registration step is required. |
| PKCE | ✓S256 |
| Grant types | authorization_code, refresh_token |
| Scopes | mcp:tools:list, mcp:tools:call |
| Protected-resource metadata | ✓Published (RFC 9728) |
| Anonymous access | Handshake succeeds; 99 tools listable |
| Credentials demanded in prose | ✕hometax__certificate__list, hometax__certificate__apply__national_tax_payment, hometax__certificate__apply__tax_payment_record, hometax__certificate__apply__vat_standard, hometax__certificate__apply__business_registration, hometax__certificate__apply__financial_statement, hometax__certificate__apply__business_registration_reissue, hometax__etax__invoice__search_summary, hometax__etax__invoice__search_list, hometax__etax__invoice__search_statistics, hometax__etax__invoice__search_detail, hometax__etax__invoice__issue, hometax__etax__invoice__modify, hometax__tax__business_registration__search_status, hometax__tax__business_registration__search_info, hometax__tax__my_tax_agent__search, hometax__tax__return_history__search_vat, hometax__tax__payment_due__search_or_pay, hometax__tax__electronic_notice__check_status, hometax__tax__refund__search_detail, hometax__tax__unclaimed_refund__search, hometax__tax__notice__search_history, hometax__tax__overdue__search_history, hometax__tax__payment_statement__search, hometax__tax__payment_statement__search_submit_history, hometax__tax__trade_partner__search_list, hometax__tax__credit_card__search_sales_data, hometax__cash_receipt__sales__search_history, hometax__cash_receipt__sales__search_summary, hometax__cash_receipt__purchase__search_history, hometax__cash_receipt__daily_issue__search, hometax__certificate__apply_with_template, hometax__certificate__list_templates, hometax__certificate__apply_auto, hometax__certificate__download, hometax__etax__business_info__get, hometax__etax__client_info__get, nhis_edi__public__notices__list, nhis_edi__public__resources__list, work24__subsidy__application__init, work24__subsidy__application__requirements, work24__subsidy__application__workplace_save, work24__subsidy__application__target_init, work24__subsidy__application__draft_validate, work24__subsidy__application__submit, work24__subsidy__application__withdraw, work24__subsidy__application__delete, work24__subsidy__application__history, work24__subsidy__application__modify, work24__subsidy__application__target_search, work24__subsidy__application__target_save, opendata__nts__status, opendata__nts__validate, opendata__g2b__sanction, opendata__kiscon__sanction, opendata__env__waste_sanction, shinhan_easy__accounts__list, shinhan_easy__accounts__transaction_history__search, kb_biz_card__common__departments__select, kb_biz_card__common__cards__select, kb_biz_card__approvals__init, kb_biz_card__approvals__search, kb_biz_card__approvals__page, kb_biz_card__approvals__result, kb_biz_card__purchases__init, kb_biz_card__purchases__search, kb_biz_card__purchases__page, kb_biz_card__purchases__result, kb_biz_card__payments__init, kb_biz_card__payments__search, kb_biz_card__payments__page, kb_biz_card__payments__result, ibk_fast_account__accounts__quick_summary__get, kb_fast_account__accounts__transaction_history__search, comwel__info__premium_billing_notice__search, comwel__info__premium_billing_notice__detail, comwel__info__individual_billed_premium__worker_select, comwel__info__individual_billed_premium__detail, payroll_pack__smoke__generate, payroll_pack__premium_summary_v1__generate, payroll_pack__employment_insurance_summary_v1__generate, payroll_pack__insurance_deduction_material_v1__generate These tools are listed anonymously and their own descriptions ask for an account or key, but no challenge is issued — so a client has nothing to act on and the refusal arrives as a tool error. |
What the probe found
82 of the 99 tools listed anonymously say in their own descriptions that they need an account or a key (hometax__certificate__list, hometax__certificate__apply__national_tax_payment, hometax__certificate__apply__tax_payment_record, hometax__certificate__apply__vat_standard, hometax__certificate__apply__business_registration, hometax__certificate__apply__financial_statement, hometax__certificate__apply__business_registration_reissue, hometax__etax__invoice__search_summary, hometax__etax__invoice__search_list, hometax__etax__invoice__search_statistics, hometax__etax__invoice__search_detail, hometax__etax__invoice__issue, hometax__etax__invoice__modify, hometax__tax__business_registration__search_status, hometax__tax__business_registration__search_info, hometax__tax__my_tax_agent__search, hometax__tax__return_history__search_vat, hometax__tax__payment_due__search_or_pay, hometax__tax__electronic_notice__check_status, hometax__tax__refund__search_detail, hometax__tax__unclaimed_refund__search, hometax__tax__notice__search_history, hometax__tax__overdue__search_history, hometax__tax__payment_statement__search, hometax__tax__payment_statement__search_submit_history, hometax__tax__trade_partner__search_list, hometax__tax__credit_card__search_sales_data, hometax__cash_receipt__sales__search_history, hometax__cash_receipt__sales__search_summary, hometax__cash_receipt__purchase__search_history, hometax__cash_receipt__daily_issue__search, hometax__certificate__apply_with_template, hometax__certificate__list_templates, hometax__certificate__apply_auto, hometax__certificate__download, hometax__etax__business_info__get, hometax__etax__client_info__get, nhis_edi__public__notices__list, nhis_edi__public__resources__list, work24__subsidy__application__init, work24__subsidy__application__requirements, work24__subsidy__application__workplace_save, work24__subsidy__application__target_init, work24__subsidy__application__draft_validate, work24__subsidy__application__submit, work24__subsidy__application__withdraw, work24__subsidy__application__delete, work24__subsidy__application__history, work24__subsidy__application__modify, work24__subsidy__application__target_search, work24__subsidy__application__target_save, opendata__nts__status, opendata__nts__validate, opendata__g2b__sanction, opendata__kiscon__sanction, opendata__env__waste_sanction, shinhan_easy__accounts__list, shinhan_easy__accounts__transaction_history__search, kb_biz_card__common__departments__select, kb_biz_card__common__cards__select, kb_biz_card__approvals__init, kb_biz_card__approvals__search, kb_biz_card__approvals__page, kb_biz_card__approvals__result, kb_biz_card__purchases__init, kb_biz_card__purchases__search, kb_biz_card__purchases__page, kb_biz_card__purchases__result, kb_biz_card__payments__init, kb_biz_card__payments__search, kb_biz_card__payments__page, kb_biz_card__payments__result, ibk_fast_account__accounts__quick_summary__get, kb_fast_account__accounts__transaction_history__search, comwel__info__premium_billing_notice__search, comwel__info__premium_billing_notice__detail, comwel__info__individual_billed_premium__worker_select, comwel__info__individual_billed_premium__detail, payroll_pack__smoke__generate, payroll_pack__premium_summary_v1__generate, payroll_pack__employment_insurance_summary_v1__generate, payroll_pack__insurance_deduction_material_v1__generate), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.
A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.
The server exposes a public surface before authorization: hometax__session__login, hometax__session__user_info, hometax__certificate__list, hometax__certificate__apply__national_tax_payment, hometax__certificate__apply__tax_payment_record, hometax__certificate__apply__vat_standard, hometax__certificate__apply__business_registration, hometax__certificate__apply__financial_statement, hometax__certificate__apply__business_registration_reissue, hometax__etax__invoice__search_summary, hometax__etax__invoice__search_list, hometax__etax__invoice__search_statistics, hometax__etax__invoice__search_detail, hometax__etax__invoice__issue, hometax__etax__invoice__modify, hometax__tax__business_registration__search_status, hometax__tax__business_registration__search_info, hometax__tax__my_tax_agent__search, hometax__tax__return_history__search_vat, hometax__tax__payment_due__search_or_pay, hometax__tax__electronic_notice__check_status, hometax__tax__refund__search_detail, hometax__tax__unclaimed_refund__search, hometax__tax__notice__search_history, hometax__tax__overdue__search_history, hometax__tax__payment_statement__search, hometax__tax__payment_statement__search_submit_history, hometax__tax__trade_partner__search_list, hometax__tax__credit_card__search_sales_data, hometax__cash_receipt__sales__search_history, hometax__cash_receipt__sales__search_summary, hometax__cash_receipt__purchase__search_history, hometax__cash_receipt__daily_issue__search, hometax__certificate__apply_with_template, hometax__certificate__list_templates, hometax__certificate__apply_auto, hometax__certificate__download, hometax__etax__business_info__get, hometax__etax__client_info__get, nhis_edi__session__login, nhis_edi__session__status, nhis_edi__public__notices__list, nhis_edi__public__resources__list, nps_edi__auth__npki_session__login, nps_edi__auth__session__status, fourinsure__session__login, comwel__auth__npki_session__login, comwel__auth__session__status, work24__auth__npki_session__login, work24__auth__session__status, work24__subsidy__application__init, work24__subsidy__application__requirements, work24__subsidy__application__workplace_save, work24__subsidy__application__target_init, work24__subsidy__application__draft_validate, work24__subsidy__application__submit, work24__subsidy__application__withdraw, work24__subsidy__application__delete, work24__subsidy__application__history, work24__subsidy__application__modify, work24__subsidy__application__target_search, work24__subsidy__application__target_save, opendata__nts__status, opendata__nts__validate, opendata__g2b__sanction, opendata__kiscon__sanction, opendata__env__waste_sanction, payroll_artifact__register_xlsx, shinhan_easy__auth__id_password_session__login, payroll_artifact__payslip_xlsx, shinhan_easy__accounts__list, shinhan_easy__accounts__transaction_history__search, kb_biz_card__session__login, kb_biz_card__common__departments__select, kb_biz_card__common__cards__select, kb_biz_card__approvals__init, kb_biz_card__approvals__search, kb_biz_card__approvals__page, kb_biz_card__approvals__result, kb_biz_card__purchases__init, kb_biz_card__purchases__search, kb_biz_card__purchases__page, kb_biz_card__purchases__result, kb_biz_card__payments__init, kb_biz_card__payments__search, kb_biz_card__payments__page, kb_biz_card__payments__result, ibk_fast_account__session__login, ibk_fast_account__accounts__quick_summary__get, kb_fast_account__session__login, kb_fast_account__accounts__transaction_history__search, comwel__info__premium_billing_notice__search, comwel__info__premium_billing_notice__detail, comwel__info__individual_billed_premium__worker_select, comwel__info__individual_billed_premium__detail, payroll_pack__smoke__generate, payroll_pack__premium_summary_v1__generate, payroll_pack__employment_insurance_summary_v1__generate, payroll_pack__insurance_deduction_material_v1__generate.
Tools
Contract history
Watch this server
Save its public contract as a baseline and manage breaking-change email alerts.
Set up a watchOwn this server?
Sign in to claim this listing by proving control of its host.
Status badge
Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.
[](https://mcpi.app/servers/xboss)