Next free-source huntWe check for new free data every weekday.
OSINTMCP serverFirst audited Nov 13, 2026

Plumbline: OFAC SDN sanctions screening, SEC financials and company checks from public registries

OFAC sanctions screening and company checks against public registries, every source named.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 510 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things. Your AI client should ask you first.
Endpointhttps://plumbline.forevenza.com/mcp

Website Streamable HTTP · protocol 2025-11-25 · server version 1.0.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Note: 16 tools are labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • submit_request
    • interpret_requirement
    • edit_requirement
    • send_requirement
    • accept_offer
    • decline_offer
    • release_payment
    • counter_offer
    • and 8 more

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 27 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (27)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • list_propositionsList Plumbline's services (Reported financial figures for US public companies; Legal entity verification by name, LEI or CIK; US federal contract awards by recipient, industry or place; Screen a name…Read-only
  • describe_propositionEverything about one Plumbline service, by the slug list_propositions gives: what happens to a request, what you receive, scope and limits, the request fields with examples, and the lookups it runs.Read-only
  • submit_requestSend a requirement to Plumbline (Reported financial figures for US public companies; Legal entity verification by name, LEI or CIK; US federal contract awards by recipient, industry or place; Screen…Can change things
  • screen_sanctionsScreen a person or company name against the US Treasury OFAC SDN list and its aliases (US OFAC SDN only: not the EU, UK or UN lists). Returns each match with its score, SDN entry number, type and pro…Read-only
  • company_financial_factsReported values of one XBRL concept for one SEC filer, by CIK or ticker, from its SEC filings (EDGAR): each value with its period, fiscal year, form, filing date and accession number, the latest 40.Read-only
  • federal_contract_awardsUS federal contract actions (awards and modifications) by vendor name, NAICS code, place-of-performance state and fiscal year, ten at a time, from FPDS, the government's contract reporting system.Read-only
  • interpret_requirementGive Plumbline the buyer's requirement, or a correction or addition to it, in their own words: it is read into a structured requirement (each value says which words it came from), conflicting or uncl…Can change things
  • get_requirementA Plumbline requirement as it stands: each value with where it came from, what it replaced, the open question, words not yet read, whether it was sent and any offer on it.Read-only
  • edit_requirementSet fields by name ({"op":"set","values":{...}}, an empty value clears) or change the list ({"op":"add"|"update"|"remove"|"replace", ...}), exactly as given: no reading. Use it to answer the open que…Can change things
  • send_requirementSend the requirement to Plumbline once the buyer says to: the first send records the request (its receipt token is the requirement's token, for request_status and offers); a later send of a changed r…Can change things
  • request_statusResume a requirement using the receipt credentials. Read the recorded requirement, any replies the business has published on it (messages: where it answers a buyer with no email, it answers here) and…Read-only
  • inspect_offerRead the exact authorized terms, terms hash, order state and processor payment links, and the thread the business published on the offer: its answers to counteroffers (thread.counteroffers), the purc…Read-only
  • accept_offerPlace an order on terms you have inspected and the buyer has authorized you to accept. Requires the exact terms hash and explicit acceptance. Follow inspect_offer later for payment links and verified…Can change things
  • decline_offerDecline an issued offer on its inspected terms.Can change things
  • release_paymentConfirm a payment condition only where the inspected order allows the customer to release it. This records approval; it does not pay the processor.Can change things
  • retrieve_deliverableRetrieve what a paid order delivers, where the business produces it itself (a report): the exact text, its SHA-256, version, sources and any shortfall. Before payment is confirmed it says it is not y…Read-only
  • counter_offerPropose a change to an issued offer on its inspected terms: other quantities (by item index in terms.items), another list of companies (where the items price companies), a delivery date, a total pric…Can change things
  • submit_purchase_orderSend the buyer's purchase order for an issued offer or a placed order: number, revision, lines, total, currency and payment terms. It is matched against the accepted terms; differences are recorded a…Can change things
  • state_purchasing_requirementsTell the business how the buyer's purchasing works for this offer: whether the seller must be an approved vendor, whether a purchase order is required, which documents are needed, the seller's vendor…Can change things
  • report_vendor_statusReport the seller's vendor standing with the buyer's organization (APPROVED, DOCUMENTS_REQUESTED or REJECTED) with the buyer's approval or case reference and any documents requested. Recorded as the…Can change things
  • inspect_deliveryRecord the buyer's inspection of a placed order: for each item (its index in terms.items) the quantity accepted and the quantity rejected, with a reason for a rejection, optionally for one portion of…Can change things
  • answer_remedyAccept or decline a remedy the business proposed on a placed order (inspect_offer thread.fulfilment.remedies with state PROPOSED). Recorded for the business, which applies it and shows the result the…Can change things
  • verify_suppliersOpen Plumbline's supplier verification workspace in the conversation, with the companies the buyer named. It starts an order draft the buyer and you work on together: they can add, correct and identi…Can change things
  • get_order_draftRead a Plumbline order draft as it stands: its fields and companies (with their keys), what it still needs before it can be sent, the indicative price, what changed since it was sent, the firm offer…Read-only
  • update_order_draftChange a Plumbline order draft the way the buyer asked: add, update, remove or replace companies (name an item by its key from the draft, or by match on its name), or clear the list (item fields: nam…Can change things
  • send_order_draftSend a Plumbline order draft once the buyer has said to: the first send records the request (the firm offer with its exact price and terms hash is emailed to the buyer and appears in the app when rea…Can change things
  • identify_companyWhich legal entities a company name may mean: GLEIF LEI records that match it (legal name, country, city, status) and, for a company listed in the US, its SEC filer CIK. For choosing the exact entity…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200510 ms
initializedHTTP 20293 ms
tools/listHTTP 200215 ms
resources/listHTTP 20092 ms
unknown-methodHTTP 20070 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.