# `io.github.paulieb89/uk-due-diligence-mcp` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/io.github.paulieb89/uk-due-diligence-mcp - JSON: https://anlyon.dev/api/v1/servers/io.github.paulieb89/uk-due-diligence-mcp - Version: 1.0.3 (active) - Publisher: io.github.paulieb89 (GitHub account) - Runs: remote (streamable-http), local (pypi) - Sign-in to list tools: none - Repository: https://github.com/paulieb89/uk-due-diligence-mcp - Metadata from the official MCP Registry, synced 2026-10-21T18:43:15.896Z Title and description, as the publisher wrote them: ```untrusted-server-text UK Due Diligence UK due diligence — Companies House, Charity Commission, Land Registry, Gazette, HMRC VAT ``` Scanned 2026-10-21T19:26:00.209Z over streamable-http. **18 tools: 1 do something that can't be undone, 1 change things and 16 only read.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 0 | deny | | Can't be undone | irreversible | 1 | ask | | Changes things | write | 1 | ask | | Only reads | read | 16 | allow | ## Findings - **warn** Annotations that disagree with the tool in `company_charges` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict)) ```untrusted-server-text The server marks "company_charges" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible". annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "company_charges" says "charge": a word that usually means money moves, which cannot be taken back. ``` ## Can't be undone (1) Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask. ### `company_charges` - The name "company_charges" says "charge": a word that usually means money moves, which cannot be taken back. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. - Findings: warn annotation-conflict Description, as the server wrote it: ```untrusted-server-text Fetch the complete Companies House charge history for a company. Returns every registered charge (secured debt) — current and historic — with status, dates, secured parties, and what each charge covers (fixed/floating/negative-pledge flags and any free-text particulars). Satisfaction is represented as satisfied_on plus a charge-satisfaction filing entry, not a separate 'release' record. company_profile.has_charges is a True/False/unknown summary derived from this same data; use this tool when the specific charges matter, not just whether any exist. ``` ## Changes things (1) Creates or changes something that can be changed back. Claude Code: ask. ### `sanctions_screen` - Nothing in its name or description says what it does, so it is counted as a write. - The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class. Description, as the server wrote it: ```untrusted-server-text Screen a name against the UK (OFSI), US (OFAC), EU and UN consolidated sanctions lists. Returns every list entry whose primary name or alias matches, with the regime, source reference and listing date. Use it to check whether a counterparty — or its officers / persons with significant control — appears on a sanctions list. MATCHING is deterministic: normalised exact + alias match (case-, accent- and punctuation-insensitive). A company/entity legal name matches reliably; PERSON names with transliteration variants may not (e.g. 'Mohammed' vs 'Muhamad'). An empty result is therefore NOT a guarantee of clearance, and a hit on a common name may be a false positive to disambiguate. This is a screening aid, not a compliance determination. `lists_screened` reports which of OFSI/OFAC/EU/UN were actually loaded — if any is missing the result is partial. `as_at` is when the lists were last refreshed on this server. ``` ## Only reads (16) Looks things up and changes nothing. Claude Code: allow. ### `charity_profile` - The description's first verb is "fetch": a word for reading. Description, as the server wrote it: ```untrusted-server-text Fetch the full Charity Commission profile for a charity number. Returns trustees, latest income/expenditure, insolvency flags, governing document type, classifications, and countries of operation. Use charity_search first to find the charity number. ``` ### `charity_search` - The name "charity_search" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Search the Charity Commission register of England and Wales by name or keyword. Returns matching charities with registration number, status, and registration date. Use charity_profile for full details once you have the charity number. The upstream `searchCharityName` endpoint returns the full list in one shot — pagination is applied client-side via offset/limit. A query that matches nothing is a successful empty result (`charities: []`), not an error — the upstream endpoint signals "no matches" with an HTTP 404, which is translated back into an empty result here rather than surfaced as a not-found failure. ``` ### `company_filing_document` - The description's first verb is "resolve": a word for reading. Description, as the server wrote it: ```untrusted-server-text Resolve a filing's document_metadata link to its authoritative source document. Returns a resource_link (never embedded bytes, never base64) pointing at a company-document:// MCP resource — fetch it via resources/read to get the actual PDF. This tool only reads metadata (category, pages, available content types, byte size); it never downloads the document itself. Use company_filing_history first to find a filing's document_metadata URL. Requires a resource-capable MCP client to retrieve the actual bytes — a tool-only client can see this result's metadata (company, category, page count, size) but cannot obtain the file through this tool call alone. ``` ### `company_filing_history` - The description's first verb is "fetch": a word for reading. Description, as the server wrote it: ```untrusted-server-text Fetch one page of a company's Companies House filing chronology. Returns the raw source facts for each filing — transaction ID, form type/category, dates, and the description_values CH uses to render its own text — as delivered upstream, not interpreted into DD conclusions. links.document_metadata on each filing is the identifier a future document-retrieval tool would need; no document content is fetched here. Unlike company_officers/company_psc/company_charges, this does NOT auto-fetch every page — a long-lived company's filing history is unbounded in practice (a decades-old PLC can carry thousands of filings). total_count/returned/has_more are always reported truthfully for whatever page and category filter was requested; nothing is silently truncated. Narrow with category= for a specific slice (e.g. category='mortgage' for charge-related filings, category='insolvency' for administration/liquidation filings) — a note is included when an unfiltered history is large. A company_number that doesn't resolve to any company returns a structured not_found error, distinct from a genuine zero-filing result — Companies House's filing-history endpoint alone cannot tell these apart, so existence is confirmed separately when the result would otherwise be empty. ``` ### `company_officers` - The description's first verb is "fetch": a word for reading. Description, as the server wrote it: ```untrusted-server-text Fetch officers for a Companies House company number. Returns directors, secretaries, and other officers with appointment dates, nationality, and country of residence. Resigned officers are excluded by default; set include_resigned=true for historical DD. Pagination is handled internally. ``` ### `company_profile` - The description's first verb is "fetch": a word for reading. Description, as the server wrote it: ```untrusted-server-text Fetch the full Companies House profile for a company number. Returns status, registered address, SIC codes, filing compliance (overdue accounts and confirmation statement flags), and whether the company has outstanding charges. Use company_search first to find the company number. ``` ### `company_psc` - The description's first verb is "fetch": a word for reading. Description, as the server wrote it: ```untrusted-server-text Fetch Persons with Significant Control (beneficial ownership) for a company. Returns PSC entries with natures of control, nationality, and country of residence. Flags overseas corporate PSC entries as a beneficial ownership risk signal. Returns an explanatory note for widely-held PLCs with no registrable PSC. ``` ### `company_search` - The name "company_search" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Search the Companies House register by company name or keyword. Returns a paginated list of matching companies with name, number, status, SIC codes, incorporation date, and registered address. Use company_profile for the full record once you have the company number. Re-call with start_index=start_index+items_per_page to fetch the next page. ``` ### `disqualified_profile` - The description's first verb is "fetch": a word for reading. Description, as the server wrote it: ```untrusted-server-text Fetch the full disqualification record for a director by officer ID. Returns all disqualification orders: reason, Act/section cited, disqualification period, and associated company names. Use disqualified_search first to find the officer ID. ``` ### `disqualified_search` - The name "disqualified_search" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Check whether a named individual is banned from acting as a UK company director. Use this tool when asked to check disqualified, banned, or barred directors. Query must be an individual's name (e.g. "Richard Howson") — NOT a company name, which always returns zero results. Returns names, dates of birth, disqualification period snippets, and officer IDs that can be used with disqualified_profile for full details. ``` ### `fetch` - The name "fetch" says "fetch": a word for reading. Description, as the server wrote it: ```untrusted-server-text Fetch the full record for an ID returned by search. Routes by prefix to the appropriate register: - company:{number} → Companies House full profile - charity:{number} → Charity Commission full profile - disqualification:{officer_id} → Disqualified director full record - notice:{notice_id} → Gazette notice full legal text ``` ### `gazette_insolvency` - The description's first verb is "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Search The Gazette's insolvency notice index by entity name. Searches The Gazette's corporate-insolvency notice index using the authoritative Gazette notice-code taxonomy. Results are sorted by an internal DD severity score; the notice label itself remains a source fact. Each result includes a notice_numeric_id. Read the full legal wording via the notice://{notice_numeric_id} resource. The Gazette is the official UK public record. A notice here means the event has been formally published and is legally effective. ``` ### `gazette_notice` - The description's first verb is "fetch": a word for reading. Description, as the server wrote it: ```untrusted-server-text Fetch the full legal wording of a Gazette notice by numeric notice ID. Returns the complete JSON-LD linked-data record for the notice: parties, legal basis, court, and full text. Use gazette_insolvency first to find notice_numeric_id values. ``` ### `land_title_search` - The name "land_title_search" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Search HM Land Registry Price Paid Index by postcode or address. Returns up to 10 recent sale transactions for the postcode: price, date, address, property type, and tenure (Freehold/Leasehold). Covers England and Wales only. Postcode gives the most reliable results — a full address is also accepted and the postcode is extracted automatically. ``` ### `officer_appointments` - The description's first verb is "fetch": a word for reading. Description, as the server wrote it: ```untrusted-server-text Fetch a person's full company appointment history by officer ID. Returns every appointment — current and historic — with each company's number, name, status, role, and appointment/resignation dates. Use company_officers first to find an officer_id, then this tool to discover other companies that person has been a director or secretary of, including dissolved or insolvent ones not mentioned anywhere else. Always returns full history; there is no current-only filter, since historical discovery is the point. ``` ### `search` - The name "search" says "search": a word for reading. Description, as the server wrote it: ```untrusted-server-text Search across all UK due diligence registers simultaneously. Searches Companies House, Charity Commission, disqualified directors, and Gazette insolvency notices in parallel. Returns a list of result IDs — use fetch with each ID to retrieve the full record. ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `uk-due-diligence`: ```json { "permissions": { "allow": [ "mcp__uk-due-diligence__company_search", "mcp__uk-due-diligence__company_profile", "mcp__uk-due-diligence__company_officers", "mcp__uk-due-diligence__company_psc", "mcp__uk-due-diligence__officer_appointments", "mcp__uk-due-diligence__company_filing_history", "mcp__uk-due-diligence__company_filing_document", "mcp__uk-due-diligence__charity_search", "mcp__uk-due-diligence__charity_profile", "mcp__uk-due-diligence__disqualified_search", "mcp__uk-due-diligence__disqualified_profile", "mcp__uk-due-diligence__land_title_search", "mcp__uk-due-diligence__gazette_notice", "mcp__uk-due-diligence__gazette_insolvency", "mcp__uk-due-diligence__search", "mcp__uk-due-diligence__fetch" ], "ask": [ "mcp__uk-due-diligence__company_charges", "mcp__uk-due-diligence__sanctions_screen" ], "deny": [] } } ```