[pixelligue]

Plugin type

• UI Plugin
• Standard plugin — no MCP Apps interactive pages
• Not applicable

Affected manifest: mcptender (initial version 1.0.0).

What

Add MCPTender under external_plugins/mcptender and the productivity catalog. Users research public Russian procurement records and published 44-FZ contract suppliers, read available source documents with citations, and explicitly request bounded collection or private polling-based watches. The service does not submit bids, sign contracts, certify eligibility, initiate purchases or send notifications.

A bundled Node.js 22+ stdio adapter forwards to https://mcptender.ru/mcp using the personal API key inherited from the host environment (MCPTENDER_API_KEY). It has no runtime dependencies, shell execution, telemetry, credential-file reads or local writes; redirects are refused. EN/CN/RU documentation explains configuration, permissions, network access, limitations and licensing. MIT covers adapter code, manifests and workflow instructions; it does not relicense hosted services or third-party procurement content.

Source release: https://github.com/pixelligue/mcptender-plugins/releases/tag/v1.0.0

Validation

• pnpm install --frozen-lockfile: passed.
• python scripts/validate.py: passed, 52 plugins on this branch.
• This plugin's ZIP built successfully through the repository's build_dist.build_zip implementation; git diff --check passed.
• Live MCP initialize, 30-tool discovery, source lookup, bounded search and bundled stdio adapter passed. Temporary keys revoked; revoked keys rejected.
• Adapter checks cover JSON-RPC/notifications, missing credentials, auth-error redaction, redirect refusal and size limits.
• Full pnpm build was attempted on Windows and fails in the existing Excalidraw plugin: dist/ui/C:\...\dist\ui\main.js.LEGAL.txt is joined twice (ENOENT). Full scripts/build_dist.py consequently stops on Excalidraw's incomplete build. No unrelated build code was changed. The targeted ZIP passes independently.
• Full ZCode application/model workflow remains untested. This is explicitly recorded in VALIDATION.json; protocol checks are not claimed as model acceptance. No model requests or paid operations were performed.

Self-check

• Unique community plugin name, category and matching manifest/catalog version.
• Equivalent EN/CN READMEs and localized descriptions; RU guide also included.
• Credentials, private data, private endpoints and machine-specific paths excluded.
• Permissions, side effects, dependencies and licensing documented.
• Repository validator and targeted distribution passed.
• Full catalog build/distribution — upstream Windows Excalidraw failure documented above.

[panda920]

✅ Internal validation passed. A ZCode maintainer will review the change next; after acceptance, release checks run separately and this PR is closed automatically.