Next free-source huntWe check for new free data every weekday.
OSINTMCP serverFirst audited Nov 13, 2026

Factline

Checks before an agent pays: payees, webshops, invoices, payment files, companies, sanctions, PEP.The vendor's description, from its MCP Registry listing.

Passed public checksAudited Nov 13, 2026

Every public check ran and passed. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 699 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things. Your AI client should ask you first.
Endpointhttps://factline.dev/mcp

Website Streamable HTTP · protocol 2025-11-25 · server version 0.15.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Note: 3 tools are labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • get_trial_key
    • buy_full_address_report
    • buy_full_vehicle_report
  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Passed: 19 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (19)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • nl_home_basicFree. Use when the user mentions a Dutch address or asks about a home in the Netherlands: year built, floor area, use, neighbourhood residents and average home value, liveability percentile, in Engli…Read-only
  • x402_pay_guardFree. Use right before paying an x402 seller: screens the payTo wallet against the OFAC list, checks that payTo is a wallet this seller lists in the x402 Bazaar or Circle catalogue (catches a swapped…Read-only
  • watch_alertsFree. Use at the start of a session or on a schedule when the user has Factline watches (from watch_30_days or a key): lists the watches and any alerts (a new sanctions match, a company status, name…Read-only
  • x402_sellersFree. Use when looking for an x402 API to pay for a task, or to see if a seller is used and up: sellers from the Coinbase x402 Bazaar ranked by unique payers (30 days), with Factline's daily check th…Read-only
  • get_trial_keyFree. Use when Factline's free calls for today are used up or the user wants more paid checks without a crypto wallet. Without an email it returns a starter key at once (100 credits, 14 days, no huma…Can change things
  • eu_exchange_ratesFree. Use when the user needs an official euro exchange rate or a conversion for an invoice, contract or report: ECB euro reference rates (about 30 currencies), today or any working day in the last 9…Read-only
  • eu_law_lookupFree. Use when the user cites an EU regulation, directive or decision and you need its official title, date, whether it is still in force, and the EUR-Lex link to cite: by CELEX number (e.g. 32016R06…Read-only
  • nl_vehicle_basicFree. Use when the user gives a Dutch licence plate or asks about a specific car in the Netherlands: make, model, age, fuel, Euro class, APK (MOT) expiry, insurance, open recall, RDW odometer verdict…Read-only
  • nl_neighbourhood_summaryFree. Use when the user asks what a Dutch neighbourhood or postcode area is like, or whether it is safe: headline facts for a postcode: residents, average home value (WOZ) and the municipality's aver…Read-only
  • nl_car_modelFree. Use when the user asks how reliable a car model is, or which used car to buy: facts for the model in the Netherlands from RDW data: APK (MOT) defect rate vs the average of all models, the 10 mo…Read-only
  • nl_schools_nearFree. Use when the user asks about schools near a Dutch address or postcode, or is moving with children: the nearest primary and secondary schools, with distance, denomination, pupils, the share of p…Read-only
  • buy_full_address_reportReturns a secure payment link (iDEAL or card, via Dodo Payments, EUR 2.95 incl. VAT) for the full English report on a Dutch address: crime vs national rate, noise and air quality, flood probability,…Can change things
  • buy_full_vehicle_reportReturns a secure payment link (iDEAL or card, via Dodo Payments, EUR 1.95 incl. VAT) for the full English vehicle report: APK inspection history with defects, recall details, import/taxi/export histo…Can change things
  • webshop_checkFree. Use before a shopping agent or the user pays an unfamiliar webshop: domain age, company and VAT number on the site (VAT checked in VIES), contact page, payment methods, prepayment-only or crypt…Read-only
  • firm_checkFree. Use when the user asks whether criminals can send mail as their firm or whether lookalike domains of it exist: DMARC and SPF status of the firm's domain and registered lookalike domains (typos,…Read-only
  • supplier_card_verifyFree. Use before onboarding or paying a supplier that has a website: reads https://<domain>/.well-known/supplier.json (spec factline.dev/supplier-json), checks its VAT number in VIES and company numb…Read-only
  • mcp_server_checkFree. Use before connecting to or installing an MCP server you have not used before, or to re-check one: connects once (no tool is called), scans tool descriptions for prompt-injection wording and in…Read-only
  • payment_run_checkFree. Use before a payment run is sent to the bank: give the payment file as text (SEPA pain.001 XML or CSV with payee name and IBAN) and, best, last run's file or a vendor list as previous. Each lin…Read-only
  • eudr_geo_checkFree. Use when the user has a supplier's EUDR plot file for a due diligence statement (from 30 Dec 2026): checks [longitude, latitude] order, at least 6 decimals, a point only for plots up to 4 ha, c…Read-only

Audit history

  1. Nov 13Passed

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200699 ms
initializedHTTP 20257 ms
tools/listHTTP 20048 ms
resources/listHTTP 20072 ms
unknown-methodHTTP 20071 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.