agosint
by shveik.dev · remote · no sign-in to list tools · v1.0.0 · published by dev.shveik
Company and domain due diligence for agents: registers, sanctions, VAT, domain. Pay per call.
10 tools: 9 change things and 1 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things9Claude Code: ask: see these tools
- Only reads1Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http agosint https://agosint.shveik.dev/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
10 tools
Changes things 9Claude Code: ask
companyBusiness registry lookup: company identity and legal entity enrichment as structured JSON, by registration number, name and country, VAT number, LEI or website.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Business registry lookup: company identity and legal entity enrichment as structured JSON, by registration number, name and country, VAT number, LEI or website. Registers of Czechia, Norway, the United Kingdom, France, Finland, US SEC filers and every LEI holder. Use when: you need the official identity of one company.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
company-deGerman commercial register (Handelsregister) record: register court and number, legal form, status, seat, capital, representation rules, officers and history.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it German commercial register (Handelsregister) record: register court and number, legal form, status, seat, capital, representation rules, officers and history. Slower (about a minute). Use when: the company is German. Not offered on Solana: pay on Base or Polygon.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
domainDomain intelligence and phishing-risk signals: domain age and expiry (RDAP/WHOIS), registrar, DNS (A, AAAA, MX, NS, TXT, CAA), SPF, DMARC and MTA-STS, DNSSEC, TLS certificate issue…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Domain intelligence and phishing-risk signals: domain age and expiry (RDAP/WHOIS), registrar, DNS (A, AAAA, MX, NS, TXT, CAA), SPF, DMARC and MTA-STS, DNSSEC, TLS certificate issuer and expiry, hosting network, and the company behind the site when it can be identified. Use when: deciding whether a domain, link or email sender is legitimate, or checking a domain's mail setup.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
due-diligenceCompany due diligence in one call (KYB, vendor and supplier checks).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Company due diligence in one call (KYB, vendor and supplier checks). Give a company name and country, a registry number, an EU VAT number, an LEI or a website domain. Returns the legal entity from the official register, LEI and parents, VAT validity, a sanctions screen (OFAC, EU, UK) of the company and officers, and the domain's age, mail and TLS, as signed pass/warn/fail checks with sources. Use when you must decide whether to trust an unknown company.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
feedbackFree.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Free. Tell the people who run this service what worked, what failed or what you miss: a bug, an idea or a thanks. A person reads it. No payment, no account; limited to a few messages an hour.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: false
networkIP address or AS number lookup: holder, announced prefixes, origin AS, country, RPKI status and abuse contact.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it IP address or AS number lookup: holder, announced prefixes, origin AS, country, RPKI status and abuse contact. Use when: you need to know who runs an IP address or network.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
sanctionsSanctions screening against the official OFAC SDN, EU consolidated and UK lists with fuzzy name matching, a score per hit, the programme and each list's publication date.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Sanctions screening against the official OFAC SDN, EU consolidated and UK lists with fuzzy name matching, a score per hit, the programme and each list's publication date. Screen a company or person name (optionally with country or birth date) or a crypto wallet address. Use when: screening a counterparty, supplier, customer or wallet before a payment or onboarding. A screening aid, not a compliance determination.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
vatEU VAT number validation against the official VIES service: valid or invalid, registered name and address, an optional check of the name you expect and, if you give your own VAT nu…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it EU VAT number validation against the official VIES service: valid or invalid, registered name and address, an optional check of the name you expect and, if you give your own VAT number, a VIES consultation number to keep as audit evidence. Norwegian numbers are checked against the Norwegian VAT register. Use when: onboarding an EU supplier or customer, or before paying an invoice.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: true
verifyFree: verify the signature and content hash of an agosint answer.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Free: verify the signature and content hash of an agosint answer.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: true
Only reads 1Claude Code: allow
previewFree check before you pay: whether a request can be answered and what it would return.No findings
Why it is in this group
- The name "preview" says "preview": a word for reading.
Description, as the server wrote it Free check before you pay: whether a request can be answered and what it would return. Up to three matching companies (name, number, country, status), whether a VAT number's format and check digit are valid, whether a domain resolves and has mail servers, and the price. Use when: you are not sure the paid call will find the right subject.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http agosint https://agosint.shveik.dev/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__agosint__preview"
],
"ask": [
"mcp__agosint__due-diligence",
"mcp__agosint__company",
"mcp__agosint__company-de",
"mcp__agosint__domain",
"mcp__agosint__network",
"mcp__agosint__sanctions",
"mcp__agosint__vat",
"mcp__agosint__verify",
"mcp__agosint__feedback"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as agosint. Review it before you use it.