HeliosGroup/vendor-onboarding-l4
MCP Server
Active
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix

Browse Source
This commit is contained in:
rg4444
2026-03-21 21:05:18 +02:00
parent 5c152fcc2c
commit e9e55e7f97
5 changed files with 43 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
agent.chat.yaml
View File

@@ -24,7 +24,7 @@ ui:
llm:
provider: "anthropic"
model: "claude-sonnet-4-5"
model: "claude-sonnet-4-6"
api_key_ref: "ANTHROPIC_API_KEY"
max_tokens: 1500
temperature: 0.2

68
bpmn/vendor-onboarding.bpmn.xml
View File

@@ -85,84 +85,84 @@
</bpmn:laneSet>
<!-- ─── START ─── -->
<bpmn:startEvent id="Start_VendorRequest" name="Vendor Onboarding&#10;Request Received">
<bpmn:startEvent id="Start_VendorRequest" name="Vendor Onboarding Request Received">
<bpmn:outgoing>Flow_1</bpmn:outgoing>
<bpmn:messageEventDefinition messageRef="Msg_VendorSubmission"/>
</bpmn:startEvent>
<!-- ─── PROCUREMENT LANE ─── -->
<bpmn:userTask id="Task_ValidateSubmission" name="Validate Submission&#10;Completeness">
<bpmn:userTask id="Task_ValidateSubmission" name="Validate Submission Completeness">
<bpmn:incoming>Flow_1</bpmn:incoming>
<bpmn:outgoing>Flow_2</bpmn:outgoing>
</bpmn:userTask>
<bpmn:exclusiveGateway id="GW_SubmissionComplete" name="All Documents&#10;Submitted?">
<bpmn:exclusiveGateway id="GW_SubmissionComplete" name="All Documents Submitted?">
<bpmn:incoming>Flow_2</bpmn:incoming>
<bpmn:outgoing>Flow_3_Yes</bpmn:outgoing>
<bpmn:outgoing>Flow_3_No</bpmn:outgoing>
</bpmn:exclusiveGateway>
<bpmn:userTask id="Task_RequestMissingDocs" name="Request Missing&#10;Documents">
<bpmn:userTask id="Task_RequestMissingDocs" name="Request Missing Documents">
<bpmn:incoming>Flow_3_No</bpmn:incoming>
<bpmn:outgoing>Flow_RetryValidation</bpmn:outgoing>
</bpmn:userTask>
<bpmn:serviceTask id="Task_RegisterVendor" name="Register Vendor&#10;in Master Data">
<bpmn:serviceTask id="Task_RegisterVendor" name="Register Vendor in Master Data">
<bpmn:incoming>Flow_3_Yes</bpmn:incoming>
<bpmn:outgoing>Flow_4</bpmn:outgoing>
</bpmn:serviceTask>
<bpmn:parallelGateway id="GW_ForkCompliance" name="Start Parallel&#10;Compliance Checks">
<bpmn:parallelGateway id="GW_ForkCompliance" name="Start Parallel Compliance Checks">
<bpmn:incoming>Flow_4</bpmn:incoming>
<bpmn:outgoing>Flow_ToSanctions</bpmn:outgoing>
<bpmn:outgoing>Flow_ToRiskScoring</bpmn:outgoing>
<bpmn:outgoing>Flow_ToLegal</bpmn:outgoing>
</bpmn:parallelGateway>
<bpmn:parallelGateway id="GW_JoinCompliance" name="All Checks&#10;Complete">
<bpmn:parallelGateway id="GW_JoinCompliance" name="All Checks Complete">
<bpmn:incoming>Flow_SanctionsOK</bpmn:incoming>
<bpmn:incoming>Flow_RiskComplete</bpmn:incoming>
<bpmn:incoming>Flow_LegalComplete</bpmn:incoming>
<bpmn:outgoing>Flow_ToDecision</bpmn:outgoing>
</bpmn:parallelGateway>
<bpmn:exclusiveGateway id="GW_OverallDecision" name="Overall&#10;Approval?">
<bpmn:exclusiveGateway id="GW_OverallDecision" name="Overall Approval?">
<bpmn:incoming>Flow_ToDecision</bpmn:incoming>
<bpmn:outgoing>Flow_Approved</bpmn:outgoing>
<bpmn:outgoing>Flow_Rejected</bpmn:outgoing>
</bpmn:exclusiveGateway>
<bpmn:userTask id="Task_FinalApproval" name="Final Procurement&#10;Sign-Off">
<bpmn:userTask id="Task_FinalApproval" name="Final Procurement Sign-Off">
<bpmn:incoming>Flow_Approved</bpmn:incoming>
<bpmn:outgoing>Flow_ToIT</bpmn:outgoing>
</bpmn:userTask>
<bpmn:sendTask id="Task_NotifyVendorApproved" name="Notify Vendor:&#10;Approved">
<bpmn:sendTask id="Task_NotifyVendorApproved" name="Notify Vendor: Approved">
<bpmn:incoming>Flow_FromIT</bpmn:incoming>
<bpmn:outgoing>Flow_ToEnd_Approved</bpmn:outgoing>
</bpmn:sendTask>
<bpmn:sendTask id="Task_NotifyVendorRejected" name="Notify Vendor:&#10;Rejected">
<bpmn:sendTask id="Task_NotifyVendorRejected" name="Notify Vendor: Rejected">
<bpmn:incoming>Flow_Rejected</bpmn:incoming>
<bpmn:incoming>Flow_AutoRejected</bpmn:incoming>
<bpmn:outgoing>Flow_ToArchive</bpmn:outgoing>
</bpmn:sendTask>
<bpmn:serviceTask id="Task_ArchiveRejection" name="Archive Rejection&#10;with Audit Log">
<bpmn:serviceTask id="Task_ArchiveRejection" name="Archive Rejection with Audit Log">
<bpmn:incoming>Flow_ToArchive</bpmn:incoming>
<bpmn:outgoing>Flow_ToEnd_Rejected</bpmn:outgoing>
</bpmn:serviceTask>
<bpmn:endEvent id="End_Approved" name="Vendor Approved&#10;and Active">
<bpmn:endEvent id="End_Approved" name="Vendor Approved and Active">
<bpmn:incoming>Flow_ToEnd_Approved</bpmn:incoming>
</bpmn:endEvent>
<bpmn:endEvent id="End_Rejected" name="Vendor Rejected&#10;and Archived">
<bpmn:endEvent id="End_Rejected" name="Vendor Rejected and Archived">
<bpmn:incoming>Flow_ToEnd_Rejected</bpmn:incoming>
</bpmn:endEvent>
<!-- ─── AI COMPLIANCE LANE ─── -->
<bpmn:serviceTask id="Task_SanctionsScreening" name="AI: Sanctions and&#10;Watchlist Screening&#10;(OFAC / EU / UN)">
<bpmn:serviceTask id="Task_SanctionsScreening" name="AI: Sanctions and Watchlist Screening (OFAC / EU / UN)">
<bpmn:incoming>Flow_ToSanctions</bpmn:incoming>
<bpmn:outgoing>Flow_CheckSanctionsResult</bpmn:outgoing>
</bpmn:serviceTask>
@@ -174,58 +174,58 @@
</bpmn:timerEventDefinition>
</bpmn:boundaryEvent>
<bpmn:exclusiveGateway id="GW_SanctionsHit" name="Sanctions&#10;Match Found?">
<bpmn:exclusiveGateway id="GW_SanctionsHit" name="Sanctions Match Found?">
<bpmn:incoming>Flow_CheckSanctionsResult</bpmn:incoming>
<bpmn:incoming>Flow_SanctionsTimedOut</bpmn:incoming>
<bpmn:outgoing>Flow_SanctionsHit_Yes</bpmn:outgoing>
<bpmn:outgoing>Flow_SanctionsHit_No</bpmn:outgoing>
</bpmn:exclusiveGateway>
<bpmn:serviceTask id="Task_OwnershipCheck" name="AI: Beneficial&#10;Ownership and UBO&#10;Analysis">
<bpmn:serviceTask id="Task_OwnershipCheck" name="AI: Beneficial Ownership and UBO Analysis">
<bpmn:incoming>Flow_SanctionsHit_No</bpmn:incoming>
<bpmn:outgoing>Flow_SanctionsOK</bpmn:outgoing>
</bpmn:serviceTask>
<bpmn:serviceTask id="Task_AutoReject_Sanctions" name="AI: Auto-Flag&#10;Sanctions Match&#10;→ Escalate">
<bpmn:serviceTask id="Task_AutoReject_Sanctions" name="AI: Auto-Flag Sanctions Match → Escalate">
<bpmn:incoming>Flow_SanctionsHit_Yes</bpmn:incoming>
<bpmn:outgoing>Flow_ToSanctionsEscalation</bpmn:outgoing>
</bpmn:serviceTask>
<bpmn:serviceTask id="Task_GenerateRiskProfile" name="AI: Generate&#10;Vendor Risk Profile&#10;Report">
<bpmn:serviceTask id="Task_GenerateRiskProfile" name="AI: Generate Vendor Risk Profile Report">
<bpmn:incoming>Flow_EscalationApproved</bpmn:incoming>
<bpmn:outgoing>Flow_SanctionsOK_Escalated</bpmn:outgoing>
</bpmn:serviceTask>
<!-- ─── LEGAL LANE ─── -->
<bpmn:userTask id="Task_LegalReview" name="Legal: Review&#10;Vendor Documents&#10;and Certificates">
<bpmn:userTask id="Task_LegalReview" name="Legal: Review Vendor Documents and Certificates">
<bpmn:incoming>Flow_ToLegal</bpmn:incoming>
<bpmn:outgoing>Flow_LegalReviewDone</bpmn:outgoing>
</bpmn:userTask>
<bpmn:exclusiveGateway id="GW_LegalDecision" name="Legal&#10;Clearance?">
<bpmn:exclusiveGateway id="GW_LegalDecision" name="Legal Clearance?">
<bpmn:incoming>Flow_LegalReviewDone</bpmn:incoming>
<bpmn:outgoing>Flow_LegalOK</bpmn:outgoing>
<bpmn:outgoing>Flow_LegalFail</bpmn:outgoing>
</bpmn:exclusiveGateway>
<bpmn:userTask id="Task_ContractDrafting" name="Legal: Draft&#10;Vendor Agreement&#10;and NDA">
<bpmn:userTask id="Task_ContractDrafting" name="Legal: Draft Vendor Agreement and NDA">
<bpmn:incoming>Flow_LegalOK</bpmn:incoming>
<bpmn:outgoing>Flow_LegalComplete</bpmn:outgoing>
</bpmn:userTask>
<bpmn:userTask id="Task_SanctionsEscalation" name="Legal: Sanctions&#10;Escalation Review&#10;(Manual Override?)">
<bpmn:userTask id="Task_SanctionsEscalation" name="Legal: Sanctions Escalation Review (Manual Override?)">
<bpmn:incoming>Flow_ToSanctionsEscalation</bpmn:incoming>
<bpmn:outgoing>Flow_EscalationDecision</bpmn:outgoing>
</bpmn:userTask>
<bpmn:exclusiveGateway id="GW_EscalationDecision" name="Override&#10;Granted?">
<bpmn:exclusiveGateway id="GW_EscalationDecision" name="Override Granted?">
<bpmn:incoming>Flow_EscalationDecision</bpmn:incoming>
<bpmn:outgoing>Flow_EscalationApproved</bpmn:outgoing>
<bpmn:outgoing>Flow_EscalationDenied</bpmn:outgoing>
</bpmn:exclusiveGateway>
<!-- ─── FINANCE LANE ─── -->
<bpmn:businessRuleTask id="Task_RiskScoring" name="DMN: Vendor Risk&#10;Tier Calculation&#10;(Country + Financial)">
<bpmn:businessRuleTask id="Task_RiskScoring" name="DMN: Vendor Risk Tier Calculation (Country + Financial)">
<bpmn:incoming>Flow_ToRiskScoring</bpmn:incoming>
<bpmn:outgoing>Flow_RiskTierResult</bpmn:outgoing>
</bpmn:businessRuleTask>
@@ -236,53 +236,53 @@
<bpmn:outgoing>Flow_MediumLowRisk</bpmn:outgoing>
</bpmn:exclusiveGateway>
<bpmn:userTask id="Task_EnhancedDueDiligence" name="Finance: Enhanced&#10;Due Diligence&#10;(Tier 1 Vendors)">
<bpmn:userTask id="Task_EnhancedDueDiligence" name="Finance: Enhanced Due Diligence (Tier 1 Vendors)">
<bpmn:incoming>Flow_HighRisk</bpmn:incoming>
<bpmn:outgoing>Flow_EDD_Done</bpmn:outgoing>
</bpmn:userTask>
<bpmn:userTask id="Task_FinancialDueDiligence" name="Finance: Standard&#10;Financial Due&#10;Diligence">
<bpmn:userTask id="Task_FinancialDueDiligence" name="Finance: Standard Financial Due Diligence">
<bpmn:incoming>Flow_MediumLowRisk</bpmn:incoming>
<bpmn:outgoing>Flow_FDD_Done</bpmn:outgoing>
</bpmn:userTask>
<bpmn:serviceTask id="Task_TaxVerification" name="Finance: VAT and&#10;Tax ID Verification&#10;(VIES / local)">
<bpmn:serviceTask id="Task_TaxVerification" name="Finance: VAT and Tax ID Verification (VIES / local)">
<bpmn:incoming>Flow_EDD_Done</bpmn:incoming>
<bpmn:incoming>Flow_FDD_Done</bpmn:incoming>
<bpmn:outgoing>Flow_RiskComplete</bpmn:outgoing>
</bpmn:serviceTask>
<!-- ─── IT LANE ─── -->
<bpmn:parallelGateway id="GW_ForkIT" name="Provision in&#10;Parallel">
<bpmn:parallelGateway id="GW_ForkIT" name="Provision in Parallel">
<bpmn:incoming>Flow_ToIT</bpmn:incoming>
<bpmn:outgoing>Flow_IT_Profile</bpmn:outgoing>
<bpmn:outgoing>Flow_IT_Portal</bpmn:outgoing>
<bpmn:outgoing>Flow_IT_Payment</bpmn:outgoing>
</bpmn:parallelGateway>
<bpmn:serviceTask id="Task_CreateVendorProfile" name="IT: Create Vendor&#10;Profile in ERP">
<bpmn:serviceTask id="Task_CreateVendorProfile" name="IT: Create Vendor Profile in ERP">
<bpmn:incoming>Flow_IT_Profile</bpmn:incoming>
<bpmn:outgoing>Flow_IT_Profile_Done</bpmn:outgoing>
</bpmn:serviceTask>
<bpmn:serviceTask id="Task_ProvisionPortalAccess" name="IT: Provision&#10;Vendor Portal&#10;Access">
<bpmn:serviceTask id="Task_ProvisionPortalAccess" name="IT: Provision Vendor Portal Access">
<bpmn:incoming>Flow_IT_Portal</bpmn:incoming>
<bpmn:outgoing>Flow_IT_Portal_Done</bpmn:outgoing>
</bpmn:serviceTask>
<bpmn:serviceTask id="Task_SetupPaymentDetails" name="IT: Setup Payment&#10;Method and Banking&#10;Details">
<bpmn:serviceTask id="Task_SetupPaymentDetails" name="IT: Setup Payment Method and Banking Details">
<bpmn:incoming>Flow_IT_Payment</bpmn:incoming>
<bpmn:outgoing>Flow_IT_Payment_Done</bpmn:outgoing>
</bpmn:serviceTask>
<bpmn:parallelGateway id="GW_JoinIT" name="IT Setup&#10;Complete">
<bpmn:parallelGateway id="GW_JoinIT" name="IT Setup Complete">
<bpmn:incoming>Flow_IT_Profile_Done</bpmn:incoming>
<bpmn:incoming>Flow_IT_Portal_Done</bpmn:incoming>
<bpmn:incoming>Flow_IT_Payment_Done</bpmn:incoming>
<bpmn:outgoing>Flow_IT_Integrate</bpmn:outgoing>
</bpmn:parallelGateway>
<bpmn:serviceTask id="Task_IntegrateERP" name="IT: Integrate with&#10;SAP / ERP Systems&#10;and Activate Vendor">
<bpmn:serviceTask id="Task_IntegrateERP" name="IT: Integrate with SAP / ERP Systems and Activate Vendor">
<bpmn:incoming>Flow_IT_Integrate</bpmn:incoming>
<bpmn:outgoing>Flow_FromIT</bpmn:outgoing>
</bpmn:serviceTask>

26
processgit.mcp.yaml
View File

@@ -3,23 +3,23 @@ version: 1
server:
name: "HeliosGroup Vendor Onboarding MCP"
description: >
MCP server for the HeliosGroup Vendor Onboarding & Approval process package.
MCP server for the HeliosGroup Vendor Onboarding and Approval process package.
Provides AI agents with structured access to process definitions, risk scoring
rules, sanctions handling procedures, and compliance requirements.
instructions: >
This server exposes the complete Vendor Onboarding & Approval process at HeliosGroup.
This server exposes the complete Vendor Onboarding and Approval process at HeliosGroup.
Use 'search' to find process steps, compliance rules, or risk criteria by keyword.
Use 'get_entity' to retrieve full details of specific tasks, decisions, or cases.
Use 'list_entities' to browse by type (task, decision, case, resource).
Use 'generate_document' to produce a formatted process summary.
Key entities: vendor-onboarding-process (BPMN), vendor-risk-scoring (DMN),
sanctions-exception (CMMN), resource-mappings.
sanctions-exception (CMMN).
sources:
- path: "bpmn/vendor-onboarding.bpmn.xml"
type: "xml"
description: >
Main vendor onboarding BPMN process — 5 swim lanes covering Procurement,
Main vendor onboarding BPMN process. 5 swim lanes covering Procurement,
AI Compliance, Legal, Finance, and IT. Includes sanctions screening path,
parallel compliance checks, risk-tiered due diligence, and IT provisioning.
@@ -29,26 +29,12 @@ sources:
Vendor risk scoring DMN decision tables. Computes risk tier (1/2/3),
required due diligence level, approval authority, and review timeline
based on country risk, financial health, and ownership structure.
Includes country risk classification and FATF/sanctions list checks.
Includes country risk classification and FATF and sanctions list checks.
- path: "cmmn/sanctions-exception.cmmn.xml"
type: "xml"
description: >
Sanctions exception and escalation CMMN case. Activated when AI agent
detects a sanctions match. Covers initial assessment, legal investigation,
executive escalation (for direct matches or contracts > €500K),
executive escalation for direct matches or contracts over 500K EUR,
and formal resolution with audit trail.
- path: "resources/mappings.yaml"
type: "xml"
description: >
System and agent resource mappings — shows which AI agents, human roles,
and enterprise systems (SAP ERP, vendor portal, treasury) handle each task.
- path: "uapf.yaml"
type: "xml"
description: "UAPF package manifest with process metadata, owners, and tags."
- path: "README.md"
type: "xml"
description: "Process overview, stage summary table, compliance standards."

2
resources/mappings.yaml
View File

@@ -41,7 +41,7 @@ mappings:
- taskId: Task_LegalReview
type: human_role
resource: legal-counsel
role: Legal & Compliance Officer
role: Legal and Compliance Officer
- taskId: Task_ContractDrafting
type: human_role

2
uapf.yaml
View File

@@ -1,6 +1,6 @@
kind: uapf.package
id: uapf.heliosgroup.vendor-onboarding
name: Vendor Onboarding & Approval
name: Vendor Onboarding and Approval
description: >
End-to-end vendor onboarding process with AI-powered sanctions screening,
financial risk scoring, legal review, and IT provisioning.