Next free-source huntWe check for new free data every weekday.
OSINTMCP serverFirst audited Nov 13, 2026

Hong Kong Company Registry & Due Diligence (86hc.com)

Search 3.9M+ HK companies (CR, BRN, UBO, status) & order NAR1/NNC1 filings via Stripe. Free trial.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: The server answered with a protocol version we do not recognise.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 873 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things. Your AI client should ask you first.
Endpointhttps://www.86hc.com/wp-json/hkquery/v1/mcp/rpc

Source code Website Streamable HTTP · protocol 2026-07-28 · server version 1.2.4

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Note: 3 tools are labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • create_filing_order
    • manage_account_credits
    • submit_bank_account_application
  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 9 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Warning: The server answered with a protocol version we do not recognise.

    • 2026-07-28
  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (9)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • search_companiesSearch Hong Kong companies by Chinese/English name keyword, 7-digit CR number, or 8-digit Business Registration Number (BRN / UBI, mandatory for companies incorporated on or after 27 Dec 2023). Works…Read-only
  • batch_get_company_detailsBatch query holographic statutory profiles of 1 to 10 Hong Kong companies simultaneously. Works WITHOUT an API key (3 free companies/day per user/IP; 20 free companies/day with a free API key from ht…Read-only
  • get_company_filingsRetrieve the full catalog of official ICRIS statutory filed documents for a Hong Kong company (works without an API key), including authentic ICRIS barcodes, form codes (NAR1, NNC1, ND2A, A&A, etc.),…Read-only
  • create_filing_orderCreate a paid filing retrieval order for an official Hong Kong Companies Registry (Cap. 622) or Business Registration Office (Cap. 310) statutory document (ONLY call this when the user explicitly wan…Can change things
  • check_filing_order_statusCheck the payment and extraction status of a filing retrieval or credit purchase order. Once paid and extracted, returns the encrypted official PDF download URL.Read-only
  • manage_account_creditsCheck API account remaining free daily quota and permanent paid credits balance, or generate a HK$ 100 payment link (supporting Mainland Alipay, AlipayHK, and Stripe) to purchase 100 permanent compan…Can change things
  • assess_bank_account_eligibilityAssess corporate bank account opening eligibility, official bank tariff schedules (Tariff Guide), and tailored statutory KYC document checklists for HSBC Hong Kong (official API integration) and OCBC…Read-only
  • submit_bank_account_applicationSubmit an online Hong Kong corporate bank account opening pre-screening application (Stage 1 KYC dossier) for HSBC Hong Kong (hsbc) or OCBC Bank Hong Kong (ocbc). REQUIRES USER LOGIN (personal API Ke…Can change things
  • check_bank_application_statusCheck the live compliance pre-screening status, uploaded document count, compliance officer remarks, and Stage 2 secure upload URL for a submitted Hong Kong corporate bank account application (BK-YYY…Read-only

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200873 ms
initializedHTTP 204272 ms
tools/listHTTP 200737 ms
resources/listHTTP 200255 ms
prompts/listHTTP 200252 ms
unknown-methodHTTP 200270 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.