MCP Server

Apier

no.apier/mcp
Business & Operations Legal & Compliance Public & reachable MCP 2026-07-28

What this MCP does

Connects agents to Norwegian company registries and government systems for compliance checks, obligations, filing calendars, authorizations, delegations, and audit records.

check_authorization
Authorisation snapshot
Return the authorisation snapshot for the calling consumer's delegation on a Norwegian organisation: the `status` enum (`full` / `partial` / `none`), `missing_scopes` (empty on `full`), `granted_scopes`, and the `delegation_chain` breadcrumbs. To check whether a SPECIFIC action is permitted, compare `granted_scopes` to the scopes it requires. Always runs against the calling consumer — no per-action or per-actor input at v1. Always a 200: with no delegation the verdict is `status: "none"`, never a 404. Input: { org_number } (9 digits, MOD-11). Failure modes: SCOPE_INSUFFICIENT (needs read:altinn), VALIDATION_FAILED. For a SPECIFIC person's actions, use list_acting_capacity instead. Before a live execute, use validate_action to preflight the same delegation rule at zero upstream cost. For the per-agent-principal breakdown, use check_fullmakt; for statutory signing authority, use get_company_authority. No sandbox mirror. Docs: https://www.apier.no/docs/fullmakt
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['org_number'], 'properties': {'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': "9-digit Norwegian organisasjonsnummer (passing MOD-11) the calling consumer's delegation is checked against."}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': "The authorisation snapshot for the calling consumer's delegation on the organisation: status enum, missing_scopes, granted_scopes, and the delegation_chain breadcrumbs."}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
check_fullmakt
Check your fullmakt state for a company
Check your fullmakt state for a Norwegian company BEFORE acting on its behalf — the read leg of the Fullmakt Rails. Per agent principal of yours holding a live delegation there it returns: the bound system_user_id, whether the delegation is `active` or still `pending` signaturrett approval, the scopes carried, and the scopes still missing. `overall_status`: `full` (act now), `partial` (`fix_steps` names the blocker), or `none` — a VALID answer, not an error: 200 with empty `principals[]`, never a 404. Reports the delegation state Apier RECORDED, not a live Altinn PDP decision. Input: { org_number } (plain 9 digits). Failure modes: SCOPE_INSUFFICIENT (needs read:altinn), VALIDATION_FAILED. To BROKER a fullmakt use request_fullmakt; to withdraw one use revoke_fullmakt; the CONSUMER-level snapshot is check_authorization. No sandbox mirror — a sandbox bearer gets SANDBOX_TOOL_UNAVAILABLE. Docs: https://www.apier.no/docs/fullmakt
Read only Idempotent
Input schema
{'type': 'object', 'required': ['org_number'], 'properties': {'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer of the customer company to check your fullmakt state for. Plain 9 digits (no MOD-11 check), matching the route contract.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The fullmakt state: `overall_status` (full/partial/none), `principals[]` (system_user_id, statuses, active/missing scopes, valid_until), Norwegian `fix_steps`, `last_checked`. LOCAL recorded state, not a live Altinn PDP decision.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
explain_compliance_error
Explain a compliance error
Resolve a structured Apier compliance error code into a Norwegian-bokmål Explanation envelope: summary, bokmål why, ordered fix_steps, optional documentation link + legal_basis, and an optional handover block (who / where / what / why) for errors a human must resolve (e.g. AUTH_INSUFFICIENT_ROLE, AUTH_NO_DELEGATION, SCOPE_MISSING) — agent-resolvable errors ship `handover: null`. Accepts any code from the closed EXPLAINER_ERROR_CODES catalogue — pass whatever code an Apier endpoint returned in an error envelope. Optional flat context_org_number / context_scope / context_role / context_field / context_upstream_system strings carry placeholder values interpolated into the bokmål text; missing values fall back to 'ukjent <noun>'. Failure modes: VALIDATION_FAILED on an unknown code; SCOPE_INSUFFICIENT (needs read:rulebook). For a company's live obligations rather than an error explanation, use get_company_obligations instead. No API key? Bearer apier_sandbox_test_<suffix> (fresh suffix) serves synthetic fixtures; org numbers: GET /api/v1/sandbox/fixtures. Docs: https://www.apier.no/docs/guides/error-handling
Read only Idempotent
Input schema
{'type': 'object', 'required': ['error_code'], 'properties': {'error_code': {'type': 'string', 'examples': ['VALIDATION_FAILED', 'AUTH_NO_DELEGATION'], 'minLength': 1, 'description': 'An Apier error code from an error envelope. Full list: apier://tools/explain_compliance_error/guide'}, 'context_role': {'type': 'string', 'maxLength': 64, 'minLength': 1, 'description': 'Role code interpolated into the explanation.'}, 'context_field': {'type': 'string', 'maxLength': 64, 'minLength': 1, 'description': 'Field name interpolated into the explanation.'}, 'context_scope': {'type': 'string', 'maxLength': 64, 'minLength': 1, 'description': 'Scope token interpolated into the bokmål explanation.'}, 'context_org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'description': 'Organisation the error relates to (9 digits).'}, 'context_upstream_system': {'type': 'string', 'maxLength': 64, 'minLength': 1, 'description': 'Upstream system name interpolated into the explanation.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The Explainer envelope: summary, bokmål why, ordered fix_steps, optional documentation link + legal_basis, and an optional human handover block.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_altinn_migration_guidance
Altinn 2 → Altinn 3 migration guidance
Discover the Altinn 3 equivalent of an Altinn 2 service or role code. The 19 June 2026 Altinn 2 deprecation deadline has passed, so this serves remediation for any integration still on Altinn 2. Pass { altinn2_code } (alphanumeric, 1–10 chars, e.g. A0208) for a single mapping, or omit it for the entire migration map. Every response carries the deprecation status computed in Europe/Oslo (deprecation_deadline, days_remaining — floored at 0, deadline_passed — now true). Each entry ships a `verified` flag: gate any production migration action on `verified === true`; unverified entries are hints, not instructions. Deterministic static map (DigDir-sourced) — no government system is contacted at call time. Failure modes: NOT_FOUND when a supplied code is not in the map (omit it to list every entry), VALIDATION_FAILED (INVALID_CODE), SCOPE_INSUFFICIENT (needs read:digdir). No sandbox mirror — a sandbox bearer gets SANDBOX_TOOL_UNAVAILABLE. Docs: https://www.apier.no/docs/guides/altinn-system-users
Read only Idempotent
Input schema
{'type': 'object', 'properties': {'altinn2_code': {'type': 'string', 'pattern': '^[A-Za-z0-9]+$', 'examples': ['A0208'], 'maxLength': 10, 'minLength': 1, 'description': 'An Altinn 2 service or role code to resolve (alphanumeric, 1–10 chars, e.g. A0208). Omit to get the entire migration map.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The migration lookup: `deprecation_deadline` (Oslo), `days_remaining`, `deadline_passed`, and either one `entry` or the full `mappings[]`. Gate production migration actions on `verified === true`.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_company_accounts
Company annual accounts snapshot
Current-snapshot read of a Norwegian company's annual accounts (årsregnskap) from the OPEN Regnskapsregisteret tier: `has_filed_annual_accounts` (tri-state — null means unknown, never a fabricated false), `last_accounts_year`, and that year's minimal `key_figures` (currency, presentation basis, totals). `currency` is always surfaced so figures are never silently read as NOK. Current-snapshot only — no multi-year history. A well-formed but unknown org_number returns 200 with `null`, not a 404. Input: { org_number } (9 digits, MOD-11). Failure modes: SCOPE_INSUFFICIENT (needs read:brreg), VALIDATION_FAILED. For the filing status as one input to a go/no-go verdict, use get_company_verification; for the registry identity, use get_company_context. No API key? Bearer apier_sandbox_test_<suffix> (fresh suffix) serves synthetic fixtures; org numbers: GET /api/v1/sandbox/fixtures. Cost: 50 øre (NOK 0.50) per call, prepaid (prices: the get_pricing tool or GET /api/v1/pricing; a shortfall returns INSUFFICIENT_CREDITS with top_up_url). Docs: https://www.apier.no/docs/guides/norwegian-company-annual-accounts
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['org_number'], 'properties': {'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer (Brønnøysund ID); MOD-11-checked up-front — a failing value is rejected as VALIDATION_FAILED, so correct the number rather than retrying it.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': "The /accounts snapshot: `has_filed_annual_accounts` (tri-state), `last_accounts_year`, and that year's minimal `key_figures` (currency always surfaced, presentation basis, totals). Current-snapshot only."}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_company_authority
Company signing-authority resolver
Answer "who can legally sign for this Norwegian company, and how?" before acting on its behalf. Given a 9-digit organisasjonsnummer it returns a deterministic signing-authority classification — `sole`, `joint`, `by_role`, `prokura_only`, `no_authority`, or `unknown` — from the open Fullmakttjenesten signing combinations plus the signaturrett / prokura role-holders. `kombinasjon_available: false` flags a degraded answer. `coded_authority` adds the coded model over the mirrored clauses with their verification stamps (per oppslag: `coded_verified`, `coded_unverified`, `free_text_uninterpreted`, `absent_verified`, `no_record_unverified`) — an absence is never collapsed into a no. No legal citation is asserted. Failure modes: NOT_FOUND, SCOPE_INSUFFICIENT (needs read:brreg), UPSTREAM_UNAVAILABLE, VALIDATION_FAILED. For a fast go/no-go verdict, use get_company_verification instead. This answers STATUTORY authority — no actor input, no Altinn delegations. For a SPECIFIC person's actions, use list_acting_capacity; for the consumer's own delegation, use check_authorization. No API key? Bearer apier_sandbox_test_<suffix> (fresh suffix) serves synthetic fixtures; org numbers: GET /api/v1/sandbox/fixtures. Cost: 50 øre (NOK 0.50) per call, prepaid (prices: the get_pricing tool or GET /api/v1/pricing; a shortfall returns INSUFFICIENT_CREDITS with top_up_url). Docs: https://www.apier.no/docs/guides/signature-rights-norwegian-company
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['org_number'], 'properties': {'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer (Brønnøysund ID); MOD-11-checked up-front — a failing value is rejected as VALIDATION_FAILED, so correct the number rather than retrying it.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The /authority answer: a deterministic `classification`, `combinations[]`, the `signaturrett_holders` / `prokura_holders` lists, `kombinasjon_available`, and the stamp-honest `coded_authority` model over the mirrored clauses. No legal citation is asserted.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_company_context
Company registry facts
Retrieve the structured Brønnøysund identity slice for a Norwegian organisation by its 9-digit organisasjonsnummer: legal name, organisasjonsform (AS / ENK / NUF / ASA …), NACE codes, addresses, incorporation/dissolution dates, and the signaturrett / prokura role-code summary (never personal identifiers). Cache window 24 h. Choose this for the identity slice ONLY, without the compliance verdict; pair with get_company_obligations or get_company_deadlines for the regulatory layer. Failure modes: NOT_FOUND, SCOPE_INSUFFICIENT (needs read:brreg), UPSTREAM_TIMEOUT, VALIDATION_FAILED. For a compliance verdict, use get_company_summary instead; for the plain registry profile with NACE descriptions, use get_company_profile instead. No API key? Bearer apier_sandbox_test_<suffix> (fresh suffix) serves synthetic fixtures; org numbers: GET /api/v1/sandbox/fixtures. Cost: 50 øre (NOK 0.50) per call, prepaid (prices: the get_pricing tool or GET /api/v1/pricing; a shortfall returns INSUFFICIENT_CREDITS with top_up_url). Docs: https://www.apier.no/docs/guides/company-snapshot
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['org_number'], 'properties': {'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer (Brønnøysund ID); MOD-11-checked up-front — a failing value is rejected as VALIDATION_FAILED, so correct the number rather than retrying it.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The Brønnøysund identity slice: legal name, organisasjonsform, NACE codes, addresses, incorporation/dissolution dates, and signaturrett/prokura role codes (never personal identifiers).'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_company_deadlines
Company filing calendar
Compute the upcoming Norwegian regulatory filing calendar for a specific organisation, looking horizon_months ahead. One entry per (obligation, period) pair: a stable obligation_id matching get_company_obligations, the due_date as ISO 8601 in Europe/Oslo (DST-aware), the legal_reference, and recurrence/adjustment flags. Choose this for the calendar view — when does the next MVA / A-melding / Årsregnskap filing land? Inputs: { org_number (9 digits, MOD-11), horizon_months? (1–60) }. Failure modes: NOT_FOUND, SCOPE_INSUFFICIENT (needs read:brreg), VALIDATION_FAILED. For the per-obligation compliance verdict, use get_company_obligations instead; for the entity-type-level calendar that needs no organisasjonsnummer (and no API key), use get_public_deadlines instead. No API key? Bearer apier_sandbox_test_<suffix> (fresh suffix) serves synthetic fixtures; org numbers: GET /api/v1/sandbox/fixtures. Cost: 50 øre (NOK 0.50) per call, prepaid (prices: the get_pricing tool or GET /api/v1/pricing; a shortfall returns INSUFFICIENT_CREDITS with top_up_url). Docs: https://www.apier.no/docs/guides/norway-corporate-tax-return-deadline
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['org_number'], 'properties': {'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer (Brønnøysund ID); MOD-11-checked up-front — a failing value is rejected as VALIDATION_FAILED, so correct the number rather than retrying it.'}, 'horizon_months': {'type': 'integer', 'maximum': 60, 'minimum': 1, 'examples': [12], 'description': "Look-ahead window in months (1–60). Omitted → the endpoint's default horizon (12)."}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The upcoming filing calendar: due_date (Europe/Oslo), legal_reference, recurring + business_day_adjusted per obligation×period.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_company_filing_history
Company filing history (Altinn) + Apier audit trail
Reconcile a Norwegian company's Altinn 3 filing history against the filings YOUR consumer submitted through Apier. Given a 9-digit organisasjonsnummer it returns the org's Altinn filing instances (Mva-melding, A-melding, Skattemelding, …), each paired with its Apier audit record where one exists (`filed_via_apier` + `apier_record`). Cursor-paginated via { cursor } (pass back `pagination.next_cursor`) + { limit } (1–100, default 20); legacy { offset } still accepted (deprecated); no filings → 200 with an empty list, never a 404. MOCK-GATED until the `altinn:instances.read` Maskinporten scope is approved. Failure modes: SCOPE_INSUFFICIENT (needs read:altinn), AUTH_NO_DELEGATION (live mode), VALIDATION_FAILED. For upcoming deadlines rather than past filings, use get_company_deadlines instead. No API key? Bearer apier_sandbox_test_<suffix> (fresh suffix) serves synthetic fixtures; org numbers: GET /api/v1/sandbox/fixtures. Cost: 50 øre (NOK 0.50) per call, prepaid (prices: the get_pricing tool or GET /api/v1/pricing; a shortfall returns INSUFFICIENT_CREDITS with top_up_url). Docs: https://www.apier.no/docs/guides/audit-inspection
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['org_number'], 'properties': {'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'examples': [20], 'description': 'Page size 1–100 (route default 20).'}, 'cursor': {'type': 'string', 'minLength': 1, 'description': "Opaque continuation token from the previous page's `pagination.next_cursor` - the canonical way to page."}, 'offset': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0, 'description': 'Zero-based offset (deprecated - use `cursor` instead).'}, 'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer (Brønnøysund ID); MOD-11-checked up-front — a failing value is rejected as VALIDATION_FAILED, so correct the number rather than retrying it.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The paired filing history: `data[]` Altinn instances (form code, title, agency, submitted_at, status, instance id) each with `filed_via_apier` + `apier_record` when Apier submitted it, plus a `pagination` block. No filings → empty `data[]`, not an error.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_company_obligations
Company regulatory obligations
Evaluate the Apier Rulebook for a Norwegian organisation and return every applicable regulatory obligation with its current state and legal reference. One entry per obligation: a stable obligation_id (e.g. `MVA_FILING_BIMONTHLY`), the lovdata legal_reference, the state enum (`filed` / `pending` / `in_progress` / `failed` / `overdue` / `unknown`), the bokmål description inherited byte-for-byte from the Rulebook (never re-translate it), and the freshness window. Deterministic, always against the current instant (no as_of at v1). Choose this for the full obligation menu. Failure modes: NOT_FOUND, SCOPE_INSUFFICIENT (needs read:brreg), VALIDATION_FAILED. For the calendar alone, use get_company_deadlines instead; for the entity-type-level set needing no organisasjonsnummer or key, use get_public_obligations instead. No API key? Bearer apier_sandbox_test_<suffix> (fresh suffix) serves synthetic fixtures; org numbers: GET /api/v1/sandbox/fixtures. Cost: 50 øre (NOK 0.50) per call, prepaid (prices: the get_pricing tool or GET /api/v1/pricing; a shortfall returns INSUFFICIENT_CREDITS with top_up_url). Docs: https://www.apier.no/docs/guides/norwegian-company-obligations
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['org_number'], 'properties': {'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer (Brønnøysund ID); MOD-11-checked up-front — a failing value is rejected as VALIDATION_FAILED, so correct the number rather than retrying it.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The full rule-engine evaluation: every applicable obligation with stable id, lovdata legal_reference, state enum, and bokmål description.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_company_profile
Company profile (Brønnøysund)
Resolve a Norwegian organisasjonsnummer (9 digits) into a structured company profile from Brønnøysund Enhetsregisteret: display name, organisational form (AS / ENK / ASA …), NACE codes with descriptions, addresses, registration/dissolution dates, the `active` / `dissolved` status enum, the MVA-registered flag, and deduplicated person role CODES — never personal identifiers. Note the backing REST route is POST /api/v1/brreg/company-profile (org number in the JSON body), unlike the GET company siblings. For an evaluated compliance verdict, use get_company_summary instead; for the signaturrett/prokura role-code summary, the distress flags, or the annual-accounts filing status, use get_company_context instead. No sandbox mirror. Failure modes: NOT_FOUND, SCOPE_INSUFFICIENT (needs read:brreg), VALIDATION_FAILED. Cost: 50 øre (NOK 0.50) per call, prepaid (prices: the get_pricing tool or GET /api/v1/pricing; a shortfall returns INSUFFICIENT_CREDITS with top_up_url). Docs: https://www.apier.no/docs/guides/norwegian-company-register-search
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['org_number'], 'properties': {'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer (Brønnøysund Enhetsregisteret ID). Unlike the get_company_* tools, this input schema does NOT run the MOD-11 control-digit check — MOD-11 is enforced by the backing route, which returns ORG_NUMBER_INVALID_CHECKSUM (HTTP 400) when a well-formed 9-digit value fails it; correct the number rather than retrying the same one.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The Brønnøysund company profile: display name, organisasjonsform, NACE codes + descriptions, addresses, registration/dissolution dates, MVA flag, and person role codes (never personal identifiers).'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_company_summary
Company compliance summary
Retrieve a one-shot compliance summary for a Norwegian organisation by its 9-digit organisasjonsnummer. Your FIRST call when orienting against a company: one round-trip composes entity_type, nace_codes, mva_registered, data_tier, the full obligations[] catalogue, and the rolling deadlines[] calendar, all from one rule version. obligations[] is byte-identical to get_company_obligations; deadlines[] matches get_company_deadlines (tier_2 adds filing_status). Only { org_number } is exposed, so call get_company_deadlines to control horizon_months. For drill-down call get_company_obligations; for identity without a verdict, use get_company_context instead. Failure modes: NOT_FOUND, SCOPE_INSUFFICIENT (needs read:brreg), UPSTREAM_TIMEOUT, VALIDATION_FAILED. No API key? Bearer apier_sandbox_test_<suffix> (fresh suffix) serves synthetic fixtures; org numbers: GET /api/v1/sandbox/fixtures. Cost: 50 øre (NOK 0.50) per call, prepaid (prices: the get_pricing tool or GET /api/v1/pricing; a shortfall returns INSUFFICIENT_CREDITS with top_up_url). Docs: https://www.apier.no/docs/guides/company-snapshot
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['org_number'], 'properties': {'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer (Brønnøysund ID); MOD-11-checked up-front — a failing value is rejected as VALIDATION_FAILED, so correct the number rather than retrying it.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The /summary composition: entity_type, nace_codes, mva_registered, data_tier, obligations[], deadlines[] (tier_2 adds filing_status), and (tier_1 only) upgrade_path. NOT the registry identity; call get_company_context for that.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_company_verification
Company verification verdict
Get the deterministic verification verdict for a Norwegian organisation by its 9-digit organisasjonsnummer — a fast go / no-go trust check before acting on a company's behalf. Keyed ONLY off entity activity plus visible signing authority (signaturrett, prokura, or an ENK innehaver). `verification_status`: `pass` (active AND visible signing authority), `fail` (not active — konkurs, under avvikling, or oppløst), `unknown` (indeterminate or none visible — never a claimed absence; `warn` reserved). Seven transparency signals never change the verdict. The breakdown is available from get_company_authority; call get_company_context for identity, get_company_summary for obligations-and-deadlines, or get_company_obligations for drill-down. Failure modes: NOT_FOUND, SCOPE_INSUFFICIENT (needs read:brreg), UPSTREAM_UNAVAILABLE, VALIDATION_FAILED. No API key? Bearer apier_sandbox_test_<suffix> (fresh suffix) serves synthetic fixtures; org numbers: GET /api/v1/sandbox/fixtures. Cost: 50 øre (NOK 0.50) per call, prepaid (prices: the get_pricing tool or GET /api/v1/pricing; a shortfall returns INSUFFICIENT_CREDITS with top_up_url). Docs: https://www.apier.no/docs/guides/norwegian-company-register-search
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['org_number'], 'properties': {'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer (Brønnøysund ID); MOD-11-checked up-front — a failing value is rejected as VALIDATION_FAILED, so correct the number rather than retrying it.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The verdict: `verification_status` (pass / fail / unknown; `warn` reserved), the seven signals, Norwegian `summary`, `signing_authority_summary`, `last_accounts_year`, and the registry identity echo.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_credit_balance
Own prepaid credit balance
Call this BEFORE a batch of metered calls to confirm the calling key's prepaid credit balance covers it, and AFTER a 402 INSUFFICIENT_CREDITS + human top-up to verify the funds landed. The balance is ALWAYS the authenticated key's own — no parameters, so reading another key's balance is structurally impossible. Returns api_key_id (non-secret UUID), balance_ore (whole øre, always an integer), currency (NOK), updated_at (null = never topped up = balance 0), and top_up_url (hand it to a human; agents cannot pay directly). For affordability, multiply cost_ore from get_pricing by the planned call count and compare against balance_ore. Free (unmetered), zero side effects. Failure modes: 401 without a key (NOT keyless — use get_pricing for keyless price discovery); SCOPE_INSUFFICIENT (needs read:credits or read:*); CREDIT_BALANCE_UNAVAILABLE (503, retryable — a money read is never fabricated). Under a sandbox bearer it returns SANDBOX_TOOL_UNAVAILABLE. Docs: https://www.apier.no/docs/guides/agent-payments
Read only Idempotent
Input schema
{'type': 'object', 'properties': {}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': "The authenticated key's own prepaid balance: api_key_id, balance_ore, currency, updated_at, top_up_url."}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_exchange_rate
Norges Bank exchange rate
Fetch the most recent Norges Bank exchange-rate reference for a currency against NOK — the canonical conversion benchmark Norwegian tax + accounting authorities accept for obligations in foreign currency (Årsregnskap, cross-border MVA, dividend reporting). The currency-of-record lookup; takes no Norwegian-company input. Returns the rate, the date it is valid for (weekday rates only; weekends / holidays return the prior business day's rate), and source attribution. Input: { base, quote, date? } — ISO 4217 codes, NOK-ANCHORED: exactly one side MUST be 'NOK'. A pair without a NOK side is rejected client-side as UNSUPPORTED_CURRENCY_PAIR — fetch both NOK legs and derive the cross rate yourself. Failure modes: VALIDATION_FAILED, UNSUPPORTED_CURRENCY_PAIR, INVALID_DATE, UPSTREAM_TIMEOUT, NO_RATE_AVAILABLE, SCOPE_INSUFFICIENT (needs read:norgesbank). For compliance obligations or filing deadlines rather than a currency rate, use get_company_summary instead. Docs: https://www.apier.no/docs/mcp
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['base', 'quote'], 'properties': {'base': {'type': 'string', 'pattern': '^[A-Za-z]{3}$', 'examples': ['EUR', 'USD'], 'description': "Base currency — ISO 4217 three-letter code (case-insensitive). Exactly one of base/quote must be 'NOK'."}, 'date': {'type': 'string', 'pattern': '^\\d{4}-\\d{2}-\\d{2}$', 'examples': ['2026-04-10'], 'description': 'Optional ISO 8601 date (YYYY-MM-DD); omit for the latest published rate. Non-business days fall back to the prior business day.'}, 'quote': {'type': 'string', 'pattern': '^[A-Za-z]{3}$', 'examples': ['NOK'], 'description': "Quote currency — ISO 4217 three-letter code (case-insensitive). Exactly one of base/quote must be 'NOK'."}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The Norges Bank NOK reference rate, the date it is valid for, and the source attribution.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_pricing
Apier price list (keyless)
Call this BEFORE metered work to check per-call cost and whether billing enforcement is live. Keyless: executes WITHOUT an API key, so an agent can price a workflow before it holds any credential. Returns the machine-readable price list: every credit-metered REST endpoint with its MCP tool name and cost in whole øre (always an integer), the enforcement.live flag (while false nothing is debited and a 402 is impossible), the 402 INSUFFICIENT_CREDITS recovery-contract field list, the top-up bounds with top_up_url, and the how_to_pay_guide URL. Prices derive from the SAME configuration the 402 meter debits, so this surface cannot drift from enforcement. Input: none — call with {}. Failure modes: per-IP rate limiting and transient errors only. For the calling key's own balance, use get_credit_balance (Bearer key required) instead. Docs: https://www.apier.no/docs/guides/billing
Read only Idempotent
Input schema
{'type': 'object', 'properties': {}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The machine-readable price list: per-endpoint/tool costs in whole øre, enforcement.live, the 402 recovery-contract shape, top-up bounds, and the how_to_pay_guide URL.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_public_deadlines
Norwegian filing calendar
Compute the universal Norwegian regulatory filing calendar — the deadlines that apply to every Norwegian business of the covered categories (MVA, A-melding, Årsregnskap), independent of any specific organisation. One entry per (obligation, period) pair for a single Europe/Oslo calendar year: a stable obligation_id (e.g. `MVA_FILING_BIMONTHLY`), the due_date as ISO 8601 in Europe/Oslo (DST-aware), the lovdata legal_reference, a recurring flag, and a business_day_adjusted flag. Choose this tool for questions like 'when is the next MVA filing deadline' that don't depend on a specific org_number — it requires no organisasjonsnummer. Deterministic: same input + same rulebook_version → byte-identical calendar. Input: optional `year` (integer 2020–2100; defaults to the current Oslo year). Failure modes: SCOPE_INSUFFICIENT (needs read:rulebook), VALIDATION_FAILED on year shape. For a specific company's filing calendar rather than the universal one, use get_company_deadlines instead. Docs: https://www.apier.no/docs/guides/norway-corporate-tax-return-deadline
Read only Idempotent
Input schema
{'type': 'object', 'properties': {'year': {'type': 'integer', 'maximum': 2100, 'minimum': 2020, 'examples': [2026], 'description': 'Europe/Oslo calendar year the calendar should cover (2020–2100). Omitted → the current Oslo year at the endpoint.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The universal Norwegian filing calendar for one Europe/Oslo year, independent of any specific organisation.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
get_public_obligations
Obligations by entity type
Retrieve the universal obligation set for a Norwegian entity type — every regulatory obligation that applies by virtue of an entity BEING that organisational form, BEFORE per-company Tier-2 data is layered on. Use this to answer 'what does an AS owe?' or 'what are the baseline filings for an Enkeltpersonforetak?' without naming a specific company. Each obligation carries a tier_2_required boolean — true means the rule engine needs commercial data to know whether it applies to a SPECIFIC company, false means it applies unconditionally. Input: { entity_type } from the closed enum AS / ENK / ANS / DA / NUF (no 'OTHER' fallback). Failure modes: VALIDATION_FAILED, SCOPE_INSUFFICIENT (needs read:rulebook), UPSTREAM_TIMEOUT. For per-company evaluation that DOES layer on commercial data, call get_company_obligations; for a specific company's evaluated obligations, use get_company_obligations instead. Docs: https://www.apier.no/docs/guides/norwegian-company-obligations
Read only Idempotent
Input schema
{'type': 'object', 'required': ['entity_type'], 'properties': {'entity_type': {'enum': ['AS', 'ENK', 'ANS', 'DA', 'NUF'], 'type': 'string', 'examples': ['AS'], 'description': 'Norwegian organisational form (closed enum): AS / ENK / ANS / DA / NUF.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The universal obligation set for the entity type, before per-company Tier-2 data is layered on.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
list_acting_capacity
Acting capacity for a person
Resolve every Norwegian regulatory action a person is currently authorised to perform on behalf of a specific organisation. Combines the actor's Altinn role assignments (DAGL, LEDE, MEDL, NESTL, INNH, REGN, REVI) with a conservative role-to-action map, returning the raw role list AND the derived action tokens an agent may pass to /v1/actions/execute (dry-run them first with the validate_action tool), each with a lovdata legal_reference. Inputs: an 11-digit fødselsnummer / D-nummer — HMAC-hashed; the raw value is never persisted, logged, or returned (only `actor.fnr_hmac` is echoed) — plus the 9-digit organisasjonsnummer. Failure modes: SCOPE_INSUFFICIENT (needs read:altinn), VALIDATION_FAILED. For your own consumer's delegation snapshot, use check_authorization instead; for the company-level statutory signing authority with no actor input, use get_company_authority. No sandbox-bearer mirror (SANDBOX_TOOL_UNAVAILABLE). Docs: https://www.apier.no/docs/guides/altinn-system-users
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['fnr', 'org_number'], 'properties': {'fnr': {'type': 'string', 'pattern': '^\\d{11}$', 'examples': ['12345678901'], 'description': '11-digit Norwegian fødselsnummer / D-nummer of the actor. HMAC-SHA-256 hashed before any storage — the raw value is never persisted, logged, or returned.'}, 'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer of the represented entity.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': "The actor's raw Altinn role list plus the derived action tokens they may pass to /v1/actions/execute (dry-run first with the validate_action tool), each with a lovdata legal_reference."}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
list_changes
Query the cross-source change archive
Read Apier's cross-source change archive — detected created / updated / deleted events across the upstreams Apier polls (Brønnøysund ingestion plus the Altinn-schema, DigDir-policy, and Norges Bank pollers) so agents drive incremental sync instead of re-fetching whole entities. `observation_kind` separates cache warm-up rows from genuine transitions. Filter by { source, entity_type, entity_id, change_type } and a { from }–{ to } detected_at range. Queries WITHOUT entity_id withhold personal-field rows by design (`personal_fields_withheld: true`); the org-scoped form returns everything. Keyset-paginated newest-first: pass { limit } (1–500, default 50) and carry `next_cursor` back verbatim — cursors are HMAC-signed; an edited one is rejected as CURSOR_INVALID - start over without a cursor. Failure modes: SCOPE_INSUFFICIENT (needs read:changes), VALIDATION_FAILED, CURSOR_INVALID. No sandbox mirror — a sandbox bearer gets SANDBOX_TOOL_UNAVAILABLE. Docs: https://www.apier.no/docs/guides/webhooks
Read only Idempotent
Input schema
{'type': 'object', 'properties': {'to': {'type': 'string', 'format': 'date-time', 'pattern': '^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$', 'description': 'Upper bound on detected_at; must be ≥ from.'}, 'from': {'type': 'string', 'format': 'date-time', 'pattern': '^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(?:\\.\\d+)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$', 'examples': ['2026-01-01T00:00:00Z'], 'description': 'Lower bound on detected_at (ISO 8601 with timezone offset).'}, 'limit': {'type': 'integer', 'maximum': 500, 'minimum': 1, 'examples': [50], 'description': 'Page size 1–500 (route default 50).'}, 'cursor': {'type': 'string', 'minLength': 1, 'description': 'Opaque signed cursor from a previous `next_cursor` — pass back verbatim.'}, 'source': {'enum': ['brreg', 'altinn', 'digdir', 'norges_bank', 'nav', 'skatteetaten'], 'type': 'string', 'description': 'Filter to one upstream source (e.g. brreg / altinn / digdir / norges_bank). Omit for all sources.'}, 'entity_id': {'type': 'string', 'examples': ['999999999'], 'maxLength': 100, 'minLength': 1, 'description': "Filter to one entity's change stream (e.g. a 9-digit org number)."}, 'change_type': {'enum': ['created', 'updated', 'deleted'], 'type': 'string', 'description': 'Filter to created / updated / deleted events.'}, 'entity_type': {'type': 'string', 'maxLength': 50, 'minLength': 1, 'description': 'Filter to one entity type (e.g. annual_accounts, company).'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The change page: `data[]` rows (source, entity_type, entity_id, change_type, detected_at, source_snapshot_id, observation_kind), a `pagination` block, and `personal_fields_withheld`. Ordered newest-first.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
redeem_issuance_token
Redeem an owner-issued key-issuance token (keyless)
Convert an owner-issued key-issuance token into your own API key — the headless onboarding step for an agent that holds no credential yet. Keyless: the one-time token IS the credential. Minting and revocation are dashboard-only by design, so an agent can never self-issue authority. Redemption is strictly SINGLE-USE and atomic: on success (201) the token is consumed and the result carries {id, name, scopes, created_at, plaintext_key} — returned EXACTLY ONCE; store it immediately. Failure modes: an expired / used / revoked / unknown token yields ONE uniform ISSUANCE_TOKEN_INVALID failure (ask the owner for a fresh token, never retry); MAX_KEYS_REACHED (409) means 3 active keys — the token was NOT consumed, retry with the SAME token after the owner revokes a key. After onboarding, use get_pricing (keyless) to price metered work and get_credit_balance (with your new key) for the balance. Docs: https://www.apier.no/docs/authentication
Input schema
{'type': 'object', 'required': ['token'], 'properties': {'token': {'type': 'string', 'examples': ['apr_issue_<token_from_the_account_owner>'], 'maxLength': 256, 'minLength': 1, 'description': 'The one-time key-issuance token the account owner minted in the Apier dashboard (Agent issuance tokens) and handed to you out-of-band. Single-use: it is consumed atomically on success. Never logged by Apier.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The freshly issued API key: id, fixed name, read:* scopes, creation time, and the one-time plaintext_key.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
request_fullmakt
Request a fullmakt (broker a systembruker delegation)
Broker a fullmakt — a legally-grounded, scoped, revocable company→agent authority delegated through an Altinn systembruker. The tool brokers the delegation, persists it, and binds the returned system_user_id write-once onto the principal (`pending` → `active`). The company's signing authority must approve the returned `delegation_url` before the delegation is usable. Non-empty `warnings[]` on a 201 means the delegation exists upstream but a local follow-up degraded - reconcile, never blind-retry. Identical retries are dedup-safe (deterministic Idempotency-Key). Inputs: { agent_principal_id (uuid, YOUR OWN), org_number (9 digits), scopes (non-empty string[]), validity_days?, label? }. Failure modes: FULLMAKT_PRINCIPAL_NOT_FOUND, FULLMAKT_PRINCIPAL_NOT_ELIGIBLE, FULLMAKT_UPSTREAM_FAILED, SCOPE_INSUFFICIENT (needs read:altinn), VALIDATION_FAILED. To inspect the recorded state per principal, use check_fullmakt instead; to withdraw the delegation and retire the principal, use revoke_fullmakt instead. No sandbox mirror. Docs: https://www.apier.no/docs/fullmakt
Open world Idempotent
Input schema
{'type': 'object', 'required': ['agent_principal_id', 'org_number', 'scopes'], 'properties': {'label': {'type': 'string', 'maxLength': 255, 'description': 'Optional consumer-supplied label for the delegation (dashboard display only; echoed back on the response).'}, 'scopes': {'type': 'array', 'items': {'type': 'string'}, 'examples': [['altinn:accessmanagement/authorizedparties.read']], 'maxItems': 100, 'minItems': 1, 'description': 'The Altinn scopes the delegation should carry (e.g. `altinn:accessmanagement/authorizedparties.read`); at least one, each non-whitespace.'}, 'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer of the customer company granting the delegation. Plain 9 digits (no MOD-11 check), matching the route contract.'}, 'validity_days': {'type': 'integer', 'maximum': 3650, 'description': "Optional delegation validity window in days (1–3650; the 10-year cap matches Altinn's longest supported term). Omit to use the adapter default.", 'exclusiveMinimum': 0}, 'agent_principal_id': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$', 'examples': ['11111111-1111-4111-8111-111111111111'], 'description': 'The agent principal (UUID) to bind this delegation to — one of YOUR OWN; an unknown or foreign id returns FULLMAKT_PRINCIPAL_NOT_FOUND.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The brokered delegation: `system_user_id`, `status`, `scopes`, `valid_until`, `delegation_url` (the approval link), the echoed `label`, the `agent_principal` snapshot, and `warnings[]` (empty on the clean path).'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
revoke_fullmakt
Revoke a fullmakt (retire a delegation + its principal)
Revoke a fullmakt — withdraw an agent's delegated authority for a Norwegian company and retire the agent principal (broker with request_fullmakt, inspect with check_fullmakt). Given ONLY the agent_principal_id (system_user_id and org_number resolve server-side from the write-once binding, so a client cannot redirect the revoke), Apier revokes the bound delegation and flips the principal to terminal `revoked` — never resurrected; create a new principal to act again. LOCAL revocation is authoritative and immediate. Idempotent: an already-revoked principal/delegation is a 200 no-op. `warnings[]` carries NAMED outcome tokens (principal_revoke_failed, delegation_not_found, upstream_revoke_unconfirmed) - read the specific token, not just array emptiness. Input: { agent_principal_id (uuid), reason? (audit-only) }. Failure modes: FULLMAKT_PRINCIPAL_NOT_FOUND, SCOPE_INSUFFICIENT (needs read:altinn), VALIDATION_FAILED. No sandbox mirror — a sandbox bearer gets SANDBOX_TOOL_UNAVAILABLE. Docs: https://www.apier.no/docs/fullmakt
Destructive Open world Idempotent
Input schema
{'type': 'object', 'required': ['agent_principal_id'], 'properties': {'reason': {'type': 'string', 'examples': ['Engagement ended'], 'maxLength': 500, 'minLength': 1, 'description': 'Optional operator-facing reason, recorded on the audit row only. Send content or omit — an empty string is rejected.'}, 'agent_principal_id': {'type': 'string', 'format': 'uuid', 'pattern': '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$', 'examples': ['11111111-1111-4111-8111-111111111111'], 'description': 'The agent principal (UUID) whose delegation to revoke — one of YOUR OWN; an unknown or foreign id returns FULLMAKT_PRINCIPAL_NOT_FOUND.'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The revocation outcome: `revoked: true`, the `agent_principal` snapshot, and `warnings[]` (empty on the clean path; NAMED tokens otherwise).'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
search_companies
Search companies by name
Resolve a Norwegian company NAME to its 9-digit organisasjonsnummer. Use this as your FIRST call whenever you have a company's name but NOT its org_number — every other company tool requires the 9-digit number, and guessing a MOD-11-valid number risks hitting the wrong company. Searches Brønnøysund's public Enhetsregisteret and returns a token-efficient candidate list: up to ten matches, five fields each (name, org_number, org_form, municipality, registry status). Then call get_company_summary or get_company_context with the chosen org_number (skip a deleted or bankrupt match unless you meant it). Input: { name } (2–100 chars, æ/ø/å supported). On NOT_FOUND, broaden the name and drop the legal form — never loop on the same name. Failure modes: VALIDATION_FAILED, NOT_FOUND, SCOPE_INSUFFICIENT (needs read:brreg), UPSTREAM_TIMEOUT / UPSTREAM_UNAVAILABLE. No sandbox mirror — the sandbox fixtures catalog already lists every synthetic org. Docs: https://www.apier.no/docs/guides/norwegian-company-register-search
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['name'], 'properties': {'name': {'type': 'string', 'examples': ['Nordic Widgets', 'Equinor'], 'maxLength': 100, 'minLength': 2, 'description': "Company name to search for (2–100 characters, trimmed). Free-text; matched against Brønnøysund's registered `navn` field. Omit the legal form for a broader match (search `Nordic Widgets`, not `Nordic Widgets AS`) — a too-specific or misspelled name returns a NOT_FOUND you must broaden. Norwegian characters (æ/ø/å) are supported."}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The /company/search projection: { query, count, candidates } — five fields per candidate (name, org_number, org_form, municipality, status). Pick an org_number, then call get_company_summary / get_company_context.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
validate_action
Validate a regulatory action (dry-run)
Run the Apier dry-run validator against a proposed regulatory action without producing ANY upstream side effect — no Maskinporten call, no Altinn / Skatteetaten / NAV submission. Use this BEFORE the live execute path to catch missing delegations and payload-shape errors at zero upstream cost. The verdict carries five prerequisite check slots (each pass / fail / skipped), the overall `valid` boolean, the DRY_RUN_DISCLAIMER (a pass is NOT a guarantee of upstream success), and the preview echo `would_be_payload` + `preview_notice`. Inputs match the /v1/actions/execute body: { org_number (9 digits, MOD-11), action_type (`mva_melding` | `a_melding`), period, payload }. The nested `payload` object is intentional - it mirrors the upstream government payload schema for the action, so it is not flattened. Failure modes: SCOPE_INSUFFICIENT (needs read:actions), VALIDATION_FAILED; the validator never throws. To actually file a (sandbox) VAT return, use submit_vat_return instead. No sandbox mirror — under a sandbox bearer call submit_vat_return instead. Docs: https://www.apier.no/docs/guides/mva-filing
Read only Open world Idempotent
Input schema
{'type': 'object', 'required': ['org_number', 'action_type', 'period', 'payload'], 'properties': {'period': {'type': 'string', 'examples': ['2026-T2'], 'maxLength': 20, 'minLength': 1, 'description': 'Reporting period. mva_melding: `YYYY-T1..T6` (bimonthly), `YYYY-A` (annual), or `YYYY-MM` (monthly). a_melding: `YYYY-MM`.'}, 'payload': {'type': 'object', 'description': "The upstream-shaped JSON payload for the action; the route's per-action discriminated Zod owns shape validation. Capped at 64 KiB UTF-8 here.", 'propertyNames': {'type': 'string'}, 'additionalProperties': {}}, 'org_number': {'type': 'string', 'pattern': '^\\d{9}$', 'examples': ['999999999'], 'description': '9-digit Norwegian organisasjonsnummer (passing MOD-11) the proposed action targets.'}, 'action_type': {'enum': ['mva_melding', 'a_melding'], 'type': 'string', 'examples': ['mva_melding'], 'description': 'The regulatory action to dry-run — `mva_melding` (VAT return) or `a_melding` (employer report).'}}, 'additionalProperties': False}
Output schema
{'type': 'object', 'required': ['result', 'justification', 'metadata'], 'properties': {'_meta': {}, 'result': {'type': 'object', 'description': 'The structured dry-run verdict: the overall `valid` boolean, the five check slots (each pass/fail/skipped with a reason), the DRY_RUN_DISCLAIMER, and the preview echo `would_be_payload` + `preview_notice`. No upstream side effect.'}, 'metadata': {}, 'justification': {}}, 'description': 'Rule 34 envelope; failures set result null + metadata.error_code / retryable / remediation. Contract: https://www.apier.no/docs/mcp'}
Changed
get_company_authority
Sept. 23, 2026, 2:50 a.m.
Added
redeem_issuance_token
Sept. 17, 2026, 12:54 p.m.
Added
get_credit_balance
Sept. 17, 2026, 12:54 p.m.
Added
get_pricing
Sept. 17, 2026, 12:54 p.m.
Added
revoke_fullmakt
Sept. 17, 2026, 12:54 p.m.
Added
check_fullmakt
Sept. 17, 2026, 12:54 p.m.
Added
request_fullmakt
Sept. 17, 2026, 12:54 p.m.
Added
get_altinn_migration_guidance
Sept. 17, 2026, 12:54 p.m.
Added
list_changes
Sept. 17, 2026, 12:54 p.m.
Added
get_company_filing_history
Sept. 17, 2026, 12:54 p.m.
Added
get_company_accounts
Sept. 17, 2026, 12:54 p.m.
Added
get_company_authority
Sept. 17, 2026, 12:54 p.m.
Added
get_company_verification
Sept. 17, 2026, 12:54 p.m.
Added
search_companies
Sept. 17, 2026, 12:54 p.m.
Added
explain_compliance_error
Sept. 17, 2026, 12:54 p.m.
Added
validate_action
Sept. 17, 2026, 12:54 p.m.
Added
get_public_deadlines
Sept. 17, 2026, 12:54 p.m.
Added
get_company_obligations
Sept. 17, 2026, 12:54 p.m.
Added
get_company_deadlines
Sept. 17, 2026, 12:54 p.m.
Added
get_company_context
Sept. 17, 2026, 12:54 p.m.
Added
check_authorization
Sept. 17, 2026, 12:54 p.m.
Added
get_company_profile
Sept. 17, 2026, 12:54 p.m.
Added
list_acting_capacity
Sept. 17, 2026, 12:54 p.m.
Added
get_exchange_rate
Sept. 17, 2026, 12:54 p.m.
Added
get_public_obligations
Sept. 17, 2026, 12:54 p.m.
Added
get_company_summary
Sept. 17, 2026, 12:54 p.m.