Next free-source huntWe check for new free data every weekday.
FinancialOSINTMCP serverFirst audited Nov 13, 2026

Pyxmark

Vendor checks: sanctions lists, SEC filings, domain age and a due-diligence report with sources.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 908 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 7 tools say they only read.
Endpointhttps://mcp.pyxmark.com/mcp

Source code Website Streamable HTTP · protocol 2025-11-25 · server version 0.1.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 7 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (7)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • search_companyLook up which SEC-registered company a name, ticker or CIK refers to. Returns up to 10 candidates, each with its CIK, tickers and a match score, and nothing else. Use it to pick the right CIK when a…Read-only
  • company_profileFull SEC EDGAR record for one company, given its CIK, ticker or name (best match): legal name, industry (SIC), state of incorporation, business address, 3 fiscal years of revenue, net income, total a…Read-only
  • screen_sanctionsFuzzy-screen a person or organisation name against OFAC SDN + Consolidated, UN, EU, and UK sanctions lists. Returns up to 15 scored matches with source links; if more match, the summary says so and s…Read-only
  • check_exclusionsCheck a name against SAM.gov federal contracting exclusions (debarments/suspensions).Read-only
  • domain_ageDomain registration date, age, registrar (RDAP) and email-auth records (MX, SPF, DMARC), which are common fraud signals, plus first_archived: the date of the Wayback Machine's earliest snapshot (null…Read-only
  • state_registry_linkOfficial Secretary of State business-search link for a US state, to verify a private company's status, formation date, and registered agent.Read-only
  • due_diligence_reportOne-call due-diligence report: SEC profile (if public), sanctions screen, federal exclusions, domain signals (registration age, email records, Wayback Machine first-seen date), and state registry lin…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200908 ms
initializedHTTP 20241 ms
tools/listHTTP 200858 ms
unknown-methodHTTP 20055 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.