Home / MCP registry index / io.github.BigRedCloud/red-mcp-server
Red by Big Red Cloud
io.github.BigRedCloud/red-mcp-server in the official MCP registry.
Endpoint https://red.bigredcloud.com/mcp. Source: github.com/BigRedCloud/red-mcp-server.
The registry describes it as: Secure MCP access to Big Red Cloud accounting data, workflows, help and training.
We read its 159 tools on 2026-10-26. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
brc_start_company_connection brc_confirm_company_connection brc_get_company_api_key_status brc_list_company_contexts brc_clear_company_api_key brc_clear_all_company_api_keys brc_list_accounts brc_list_customers brc_get_customer brc_list_customers_without_dormant brc_list_suppliers brc_get_supplier brc_list_products brc_list_product_types brc_list_products_without_dormant brc_list_sales_entries brc_get_sales_entry brc_list_sales_invoices brc_get_sales_invoice brc_list_purchases brc_get_purchase brc_list_analysis_categories brc_list_vat_rates brc_list_vat_analysis_types brc_list_vat_categories brc_list_vat_types brc_list_company_settings brc_list_category_types brc_list_owner_type_groups brc_list_owner_types brc_list_user_defined_fields brc_list_book_tran_types brc_list_nominal_accounts brc_get_nominal_account_ledger_by_id brc_list_quotes brc_get_quote brc_list_sales_credit_notes brc_get_sales_credit_note brc_list_sales_reps brc_get_sales_rep brc_get_company_setup_config brc_get_company_logo brc_get_financial_year brc_create_customer brc_update_customer brc_delete_customer brc_get_customer_opening_balance brc_list_customer_op_bal_trans brc_list_customer_account_trans brc_list_customer_quotes brc_create_supplier brc_update_supplier brc_delete_supplier brc_get_supplier_opening_balance brc_list_supplier_op_bal_trans brc_list_supplier_account_trans brc_create_purchase brc_create_purchase_gen_ref brc_update_purchase brc_delete_purchase and 99 more
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/io-github-bigredcloud-red-mcp-server)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.