Next free-source huntWe check for new free data every weekday.
FinancialOSINTMCP serverFirst audited Nov 13, 2026

io.github.DarthSander/agentdata-nl

x402-paid tools: EU company & sanctions data, web search, LLM chat, crypto intel, x402 monitoring.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 53 of 53 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 163 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
Doesn't sayIts tools do not say whether they only read, so treat them as able to change things.
Endpointhttps://agentdata-api.sander-van-aard.workers.dev/mcp

Source code Streamable HTTP · protocol 2025-11-25 · server version 0.3.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 53 of 53 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • web_search
    • news_search
    • web_images
    • web_places
    • web_scholar
    • web_contents
    • web_search_read
    • web_crawl
    • and 45 more

Tools

  • Passed: 53 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (53)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • web_searchGoogle-quality web search for AI agents at $0.010 per search. Send a query, get back compact JSON built for LLM consumption: top organic results (position, title, url, snippet), the direct answer whe…Doesn't say
  • news_searchGoogle News search for AI agents at $0.010 per call, from the same Serper.dev source as /web/search. Send a query, get back compact JSON: top news results with position, title, url, snippet, publish…Doesn't say
  • web_imagesGoogle Images search for AI agents at $0.010 per call, from the same Serper.dev source as /web/search. Send a query, get back compact JSON: top image results with position, title, image URL, source p…Doesn't say
  • web_placesGoogle Places (local businesses with rating, address and phone number) for AI agents at $0.010 per call, from the same Serper.dev source as /web/search. Send a query, get back compact JSON: top place…Doesn't say
  • web_scholarGoogle Scholar search (papers with citation counts) for AI agents at $0.020 per call, from the same Serper.dev source as /web/search. Send a query, get back compact JSON: top papers with position, ti…Doesn't say
  • web_contentsRead any web page as clean LLM-ready markdown for $0.003 — the natural companion to /web/search. Send a URL, get back the readable core: title, headings, paragraphs, lists and links, stripped of scri…Doesn't say
  • web_search_readSearch and read in one call: a web search plus the full page text of the top results, for $0.030 — cheaper than a separate search and reads. Send a query, get back results (position, title, url, snip…Doesn't say
  • web_crawlCrawl one site in one paid call: start URL + max_pages (2-20); we follow same-host links breadth-first, returning each page as clean markdown (same extraction as /web/contents). Priced at $0.002 per…Doesn't say
  • llm_chatLLM chat completion per call — no account, no API key, no token math. Three flat-priced tiers: fast $0.002 (DeepSeek v4 Flash), smart $0.02 (GPT-5.4 mini), reasoning $0.03 (DeepSeek v4 Pro). Send Ope…Doesn't say
  • doc_to_markdownDocument to clean markdown for AI agents, $0.05 per file: PDF, DOCX, XLSX, ODT, ODS, CSV, HTML or XML in, LLM-ready markdown (or plain text) out. One call: send a url or the file as base64 (max 10 MB…Doesn't say
  • doc_ocrOCR for AI agents, $0.20 per image: scans, photos and screenshots (PNG, JPEG, WebP, GIF, max 5 MB) to exact text with line breaks and reading order preserved. One call: send a url or base64 — no uplo…Doesn't say
  • doc_extractStructured data from any document for AI agents, $0.25 per call: send a PDF, DOCX, XLSX, HTML, image or plain text plus a JSON Schema, get back one JSON object filled from the document — invoices, co…Doesn't say
  • media_transcribeSpeech to text for AI agents, $0.30 per file: MP3, WAV, M4A, OGG, FLAC or WebM audio (max 5 MB, about 5 minutes) to a transcript with timed segments, detected language and optional WebVTT subtitles.…Doesn't say
  • relay_crypto_newsReal-time crypto market news with sentiment analysis and top headlines ranked by importance, for $0.01 per call. One request, no parameters needed — get the latest market-moving stories as structured…Doesn't say
  • relay_edgar_filingsLatest SEC EDGAR filings for any US-listed company for $0.01 per call: 10-K annual reports, 10-Q quarterly reports and 8-K material events, by stock ticker or CIK, sourced live from data.sec.gov. Ret…Doesn't say
  • relay_reddit_searchKeyword-search all of Reddit (or one subreddit) for $0.05 per call — social listening for AI agents without login or API key. Returns matching posts with title, author, subreddit, score, comment coun…Doesn't say
  • preflight_x402_servicePreflight before paying an x402 service: is it working right now, and did it work the past 30 days? One live probe of the exact resource URL you intend to pay (status, latency, x402 validity, the pay…Doesn't say
  • x402_service_reportFull reliability report on one x402 service from our own availability monitoring (~2 probes/day per host): daily probe series over 30 days (probes, ok, avg/max latency), uptime 7d/30d, all observed c…Doesn't say
  • x402_network_reportDaily state-of-the-network report on the x402 ecosystem, built exclusively from our own probes (~2 per host per day): how many hosts we monitor, share of probes returning a valid 402 over 24h and 7d,…Doesn't say
  • x402_network_feed_subscribeSubscribe for 30 days to a change feed of the x402 network, from our own probes (~2 per host per day, 1500+ hosts). Returns a handle and a cursor; polling is then free and unlimited: /x402/network-fe…Doesn't say
  • x402_network_feed_sinceFree with a feed_handle from x402_network_feed_subscribe: everything that changed on the x402 network since your cursor (down/up, payTo drift, price drift, manifest). Send back next_cursor each time.Doesn't say
  • x402_network_feed_checkFree with a feed_handle: send up to 50 hosts you are about to pay and get their last observed status, payTo and price, plus anything that changed since your cursor. One call before a batch of payment…Doesn't say
  • check_x402_counterpartyTrust check before paying an unfamiliar x402 service, by pay_to address and/or service URL. Combines our own availability monitoring of the service's x402 endpoint (30-day uptime, last check, observe…Doesn't say
  • attest_settlementFor a seller receiving an agent payment: verify the settlement on-chain (tx confirmed, correct recipient and amount), report the payer wallet's on-chain history, screen the provided counterparty name…Doesn't say
  • request_capabilityFree: tell us what you tried to buy here and could not — a coin, a country, a host, a network, a service. Every coverage rejection you get from a paid tool already hands you the exact arguments to se…Doesn't say
  • file_agent_wantFile what you want to buy from an agent-facing API and cannot buy today. Optional kind is typically one of coin, country, vies_country, monitor_host, sms_service — free-form values possible. The $0.0…Doesn't say
  • x402_demand_reportWhat are agents asking for that they cannot buy yet, aggregated over 30 days. From our own measurements: calls we rejected on an uncovered value where the caller had already presented payment (kind i…Doesn't say
  • screen_eu_sanctionsScreen a company or organisation name against two official sanctions lists in one call: the EU consolidated financial sanctions list AND the UN Security Council consolidated list (entity sections onl…Doesn't say
  • check_token_registryIs this crypto-asset or its issuer MiCA-notified in the EU? Searches the official ESMA interim MiCA register token lists — e-money token (EMT) issuers, asset-referenced token (ART) issuers, and notif…Doesn't say
  • check_uk_companyOfficial UK company check from the Companies House register. Look up by company number (exact) or search by name (up to 5 candidates). Returns official name, status (active/dissolved/liquidation), ty…Doesn't say
  • check_fr_companyOfficial French company check from the INSEE Sirene register (French government open data). Look up by SIREN (exact) or search by name (up to 5 candidates). Returns official legal name, administrativ…Doesn't say
  • check_fr_insolvencyFrench insolvency check against BODACC, the official bulletin of civil and commercial announcements (DILA open data). Searches collective procedures (sauvegarde, redressement, liquidation judiciaire)…Doesn't say
  • check_no_companyOfficial Norwegian company check from the Enhetsregisteret (Brønnøysund Register Centre, open data). Look up by organisation number (exact) or search by name (up to 5 candidates). Returns official na…Doesn't say
  • check_cz_companyOfficial Czech company check from the ARES register (Ministry of Finance, open data). Look up by ICO (exact) or search by name (up to 5 candidates). Returns official name, legal form code, VAT number…Doesn't say
  • check_ch_companyOfficial Swiss company check from the Zefix register (Central Business Name Index, federal). Look up by UID (exact, e.g. CHE-105.909.036) or search by name (up to 5 candidates). Returns official name…Doesn't say
  • check_fi_companyOfficial Finnish company check from the YTJ register (PRH open data). Look up by Business ID (exact) or search by name (up to 5 candidates). Returns the current official name, company form, main busi…Doesn't say
  • check_pl_companyPolish VAT whitelist check (official Ministry of Finance register). Verifies a company's VAT status by NIP and — uniquely — whether a given bank account number (NRB) is registered to that company in…Doesn't say
  • eurc_pegEURC peg monitor — unique combined signal: the official ECB euro reference rate (USD/EUR) versus the live on-chain EURC/USDC price from the deepest Uniswap v3 pool on Base, returned as a deviation in…Doesn't say
  • crypto_verdictLive crypto trading verdict for a coin (e.g. BTC-EUR), resold from an upstream signal system. Two layers: 'long' (positional ALLOW_LONG/EXIT/HOLD with confidence, summary and primary risk) and 'daytr…Doesn't say
  • crypto_track_recordMeasured track record of the strategies behind /crypto/verdict, resold from the upstream signal system. Give a window in days (default 30, clamped 1..365); returns per strategy the number of trades,…Doesn't say
  • scan_crypto_marketMachine-readable crypto market intelligence: the currently published long opportunities from an upstream advice system, ranked by opportunity_score (0-100 heuristic, never a calibrated win probabilit…Doesn't say
  • get_crypto_signalOne complete crypto opportunity by signal_id (from /crypto/scan): classification, opportunity_score (0-100 heuristic, not a win probability), entry zone, stop-loss, take-profit, reward:risk, positive…Doesn't say
  • validate_crypto_signalIs this crypto opportunity still valid right now? Give a signal_id and receive its live status (ACTIVE/STALE/INVALIDATED), remaining entry window in seconds, current price versus the entry zone, spre…Doesn't say
  • get_crypto_evidenceHistorical evidence behind a crypto opportunity: for its strategy (and coin where enough samples exist) the measured populations — detected, blocked, published, expired without entry, completed, wins…Doesn't say
  • check_crypto_signalCheap polling for a crypto opportunity you already retrieved: send signal_id plus the known_version you hold and receive whether it changed, the current version, live status (ACTIVE/STALE/INVALIDATED…Doesn't say
  • crypto_feed_subscribeSubscribe for 30 days to the change feed behind /crypto/scan: one cursor over the upstream advice ledger, all coins at once. Returns a handle and a cursor; polling is then free and unlimited: /crypto…Doesn't say
  • crypto_feed_sinceFree with a feed_handle from crypto_feed_subscribe: every published advice change since your cursor, across all covered coins — new signals, classification flips (previous_classification vs classific…Doesn't say
  • check_crypto_firmIs this crypto firm authorised in the EU? One call checks the official ESMA interim MiCA register of authorised crypto-asset service providers (CASPs) AND the EU non-compliant entities warning list.…Doesn't say
  • lookup_leiLEI lookup (Legal Entity Identifier) from the official GLEIF register. Look up by LEI code or search by legal name (optional jurisdiction filter). Returns the official legal name, entity status, regi…Doesn't say
  • verify_eu_vatEU VAT number validation (VIES) with predictable behavior for agents. Validates any EU VAT number against the European Commission's VIES service. Two modes: fast validation (may serve a cached result…Doesn't say
  • check_dutch_insolvencyDutch bankruptcy and insolvency check against the official Central Insolvency Register of the Dutch judiciary (rechtspraak.nl). Detects published bankruptcy (faillissement), suspension of payments (s…Doesn't say
  • screen_eu_supplierEuropean supplier screening — one call, an honest per-country coverage matrix. Routes by country (NL, FR, UK, NO, CH, CZ, FI, PL) to the best available official open sources: register profile, insolv…Doesn't say
  • screen_dutch_supplierDutch supplier screening — pre-transaction check in one call: validates the EU VAT number (VIES), checks the official Dutch Central Insolvency Register for bankruptcy, suspension of payments or debt…Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200163 ms
initializedHTTP 20220 ms
tools/listHTTP 200160 ms
unknown-methodHTTP 20048 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.