MCP server for ProcureRadar (Zhimao) ? find verified global B2B buyers by category & country. Free anonymous discovery. SGX-listed.
SaferSkills independently audited Procureradar Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for [ProcureRadar](https://www.procureradar.com) (智猫 / Zhimao) — find verified global B2B buyers (importers & distributors) by product category and country, then enrich contacts and run deep company intelligence. Think of it as the buyer-side counterpart to Alibaba: we surface buyers for sellers, not suppliers for buyers.
Operated by Acrometa Lifestyle Pte. Ltd., listed on the Singapore Exchange (SGX). Neutral, PDPA-compliant data intermediary. Bilingual (English / 中文).
There are two ways to connect — pick one:
The hosted MCP endpoint supports an anonymous handshake and a free, rate-limited discovery tool (find_buyers) — you can try it without any credentials. Paid tools use OAuth 2.1 or a Bearer zk_ key.
Cursor / Claude Desktop (~/.cursor/mcp.json or Claude config):
{
"mcpServers": {
"procureradar": {
"url": "https://www.procureradar.com/api/mcp",
"headers": { "Authorization": "Bearer zk_YOUR_TOKEN" }
}
}
}Gemini CLI (note the httpUrl key):
{
"mcpServers": {
"procureradar": {
"httpUrl": "https://www.procureradar.com/api/mcp",
"headers": { "Authorization": "Bearer zk_YOUR_TOKEN" }
}
}
}find_buyersworks without a token (anonymous, free, rate-limited). Unlocking contact details / intelligence requires azk_key or OAuth login.
Runs the published npm package over stdio with your own API key.
Cursor (~/.cursor/mcp.json):
{
"mcpServers": {
"zhimao": {
"command": "npx",
"args": ["-y", "procureradar-mcp-server"],
"env": {
"ZHIMAO_API_KEY": "zk_YOUR_TOKEN",
"ZHIMAO_BASE_URL": "https://www.procureradar.com"
}
}
}
}Create a zk_ key at https://www.procureradar.com/enterprise/api-access (shown once — store it safely).
| Tool | Purpose | Cost |
|---|---|---|
query_expansion | Supply-chain expansion → buyer personas + Boolean query | per registry |
url_profile_extract | URL → structured company profile (Readability + LLM) | 10 pts |
social_harvest_assisted | Generate a harvest bookmarklet (FB / Xiaohongshu / LinkedIn) | 10 pts |
facebook_group_harvest | FB group bulk bookmarklet | 10 pts |
seed_url_bulk_ingest | Bulk-ingest seed URLs | free |
company_intelligence | Company intelligence (registry / web / WHOIS / tax / map / logo / news) | 10 / 30 pts |
decision_maker_intel | Decision-maker discovery (LinkedIn + email + WhatsApp) | 10 / 25 pts |
buyer_intent_intelligence | Buyer-intent composite (customs + supply chain + region) | 20 / 40 pts |
signal_watch | Subscribe to hiring / news / tender signals | free |
All calls are BYOK + real billing — the zk_ token is tied to your ProcureRadar account and charges your balance.
Once connected in your AI client, just ask in natural language:
find_buyers { category: "flour", country_iso: "MY" }.enrich_buyer_contact { target_domain: "example-importer.com" }.analyze_buyer_intelligence { target_domain: "example-importer.com", country_iso: "MY" }.find_buyers is free and works without any credentials, so you can try example 1 immediately.zk_ tokens are shown once at creation; the DB stores only sha256(token + salt).ZHIMAO_API_KEY=zk_xxx ZHIMAO_BASE_URL=https://www.procureradar.com npx procureradar-mcp-serverWaits for MCP messages over stdio; Ctrl+C to exit.
npm install
npm run build # outputs dist/
node dist/index.js~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.