MCP server · CyberMax

Dutyfinch Tariff Lookup MCP server

US import duty and HTS codes from the official USITC schedule, plus Section 301 China status. Free.

Free: Free; fair-use rate limit

Connect

Streamable HTTP endpoint: https://gpt-dutyfinch.cybermaxtools.com/mcp (the original https://chatgpt-apps.cybermax-tools.workers.dev/dutyfinch/mcp keeps working). Add it to Claude Desktop, Cursor, Windsurf or VS Code:

{
  "mcpServers": {
    "dutyfinch-chatgpt": {
      "type": "http",
      "url": "https://gpt-dutyfinch.cybermaxtools.com/mcp"
    }
  }
}

No key needed for the free tier. For more calls, add your paid key as the x-api-key header. Server card (JSON): https://gpt-dutyfinch.cybermaxtools.com/.well-known/mcp.json · Product page: Dutyfinch Tariff Lookup

Tools

Tool	What it does	Effect	Inputs (* required)
`search_hts`	Use this when the user describes a product and wants its US HTS code, tariff classification or import duty ("HTS code for…", "tariff on … from China", "import duty for …"). Searches the official US Harmonized Tariff Schedule by keywords and returns the best matching codes with rates and Section 301 China status. Then use lookup_hts for full detail on one code.	read-only, answers from its own data, never destructive	`query`*, `limit`
`lookup_hts`	Use this when the user gives an HTS / HS tariff code (4, 6, 8 or 10 digits, e.g. 8516.60.40 or 9503000071) and wants the US duty rate, Section 301 China tariff status, units or the official description.	read-only, answers from its own data, never destructive	`code`*

Security and data handling

Your tool arguments are used only to answer that call. They are not saved to a database, shared, sold or used for training.
To make repeat lookups fast, some servers keep the public answer to a lookup in Cloudflare's edge cache for up to 7 days (most for 1 hour or less). It holds the public result, not who asked.
Free tier: a per-day counter keyed by a SHA-256 hash of your IP address and the date (in a Cloudflare Durable Object). The raw IP is not stored.
Paid key: the key is checked with the payment provider (Stripe; Polar for older keys) and the result is cached for 10 minutes; usage is counted per key per month.
No accounts, cookies or tracking on the MCP endpoint. Errors may appear in Cloudflare's short-lived Worker logs.
Every tool is read-only: it looks up public data and returns it. No tool writes, deletes, sends messages or spends money.

Registry and source

Official MCP Registry: dev.workers.cybermax-tools.cybermax/dutyfinch-chatgpt, version 1.0.1.
Public manifest, tool schemas and security notes (MIT): gitlab.com/CyberMax.tools/agent-tools/mcp/dutyfinch-chatgpt. The hosted service code is not public.
Report a vulnerability: security policy.

← All CyberMax MCP servers

Free: the Free API Starter Kit

Copy-paste calls for 4 APIs with free daily tiers (CVE priority, VIN recalls, US duty rates, email checks), then 5 short emails on KEV/EPSS, MCP and free data.