Next free-source huntWe check for new free data every weekday.
OSINTMCP serverFirst audited Nov 13, 2026

P0: sanctions, KYB and payee checks

Sanctions screening, LEI lookup and payee checks for AI agents, pay per call over x402 or MPPThe vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 603 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
No, read-onlyAll 11 tools say they only read.
Endpointhttps://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/sanctions-kyb-compliance

Website Streamable HTTP · protocol 2025-06-18 · server version 0.2.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 11 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Note: Protocol version 2025-06-18.

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (11)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • sanctions_screeningUse when you need to screen a wallet address or a person/company name against sanctions lists before paying or trading: OFAC SDN, UK, EU, Canada and US CSL in one call (UK and Canada: organisations a…Read-only
  • sanctions_screening_batchUse when you need to screen a list of wallet addresses against sanctions lists in one call: up to 25 per POST (0x, BTC, TRX, SOL and any other 20-128 character address). Returns the paid x402 request…Read-only
  • sanctions_changesUse when you run sanctions monitoring and need what changed since your last run: entries added, removed and amended on OFAC SDN, UK, EU, Canada and US CSL since a date, one format, with list. Returns…Read-only
  • check_counterpartyUse when you need to vet a counterparty before paying or onboarding it: one call screens a name (and an optional wallet address) against OFAC SDN, UK, EU, Canada and US CSL. Returns the paid x402 req…Read-only
  • check_payeeUse before an agent pays an address: one call screens the payee address against OFAC SDN, UK and EU wallet entries (sanctions lists), adds the rule-based wallet risk (EVM). Returns the paid x402 requ…Read-only
  • wallet_riskUse for a rule-based risk label on an EVM address before paying it: exact sanctions match (OFAC SDN, UK and EU), contract or plain account (Base, Ethereum), outgoing transactions. Returns the paid x4…Read-only
  • token_riskUse for a rule-based risk label on an ERC-20 token before you accept or route it: sanctions-list match (OFAC SDN, UK and EU), upgradeable proxy, owner with mint/pause/blacklist. Returns the paid x402…Read-only
  • company_leiUse when an agent needs to verify a company or find its LEI: by lei= the legal name, status, legal form, addresses, registration renewal date, direct and ultimate parent and BIC. Returns the paid x40…Read-only
  • company_lei_batchUse when you need to refresh or screen many companies by LEI (KYB, vendor or counterparty lists): up to 200 LEIs in one POST, read from GLEIF in one call: legal name, status, addresses. Returns the p…Read-only
  • lei_changesUse when you keep a KYB/LEI register and need what changed since your last run: legal-entity records created, lapsed. Returns the paid x402 request for your input (GET /lei/changes, $0.02 per call; s…Read-only
  • bank_usUse when an agent needs to identify or vet a US bank: by name or FDIC cert returns FDIC data: active or closed, charter class, regulator, city/state, website, total assets and report date. Returns th…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200603 ms
initializedHTTP 20253 ms
tools/listHTTP 20056 ms
unknown-methodHTTP 20042 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.