Skip to content

Flipvo: licenses, entities, NPI, OFAC and OIG screens, carriers, OSHA, drive times

by stea4lth · remote · no sign-in to list tools · v1.30.0 · published by GitHub user stea4lth

Pay-per-call agent tools (x402, MPP): licenses, entities, NPI, OIG/OFAC screens, FMCSA, OSHA, drive

Changes · 10

13 tools: 10 change things and 3 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http flipvo-agent-tools https://api.flipvo.com/mcp

Findings

Matches of fixed checks, with the text they matched.

2 info
  • The description is 4,299 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...Up to 25 results, active first, with total_matches; empty results is a paid 200."

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...the NPI, as facts from the files: not a credential check and not a determination about the..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

13 tools

Changes things 10Claude Code: ask
  • airport_nearest$0.02 per call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    $0.02 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/airport/nearest. Up to 5 airports with scheduled service nearest a named place, ranked by real road drive time, with IATA codes.

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • drive_matrix$0.05 per call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    $0.05 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/matrix. Drive-time matrix, up to 100 origin x destination elements per call.

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • drive_time$0.01 per call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/drive. Driving time/distance between two named places.

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • exclusions_screen$0.01 per call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/exclusions/screen. Screens a person or business name, or an NPI, against the HHS-OIG exclusion list (LEIE, Medicare and Medicaid): potential matches only, each with name score, reasons, NPI, state, specialty, exclusion type and date. Not a determination: confirm a match on the OIG online search with the SSN or EIN. Empty candidates is a paid 200. Not for employment or credit decisions. List dates and code meanings: GET /v1/exclusions/lists (free).

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • license_verify$0.02 per call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    $0.02 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/license/verify. Contractor license status plus matching business-entity record. Served states: CA, CO, FL, LA, MN, NJ, OR, TN, TX, VA, WA. CA, CO, LA, MN, NJ and TN entity are always null. TX entity is always null: Texas sells its business-registry data. FL and TX also take `profession`; values at GET /v1/license/professions?state=FL|TX. Empty licenses is a paid 200.

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • nonprofit_verify$0.01 per call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/nonprofit/verify. IRS nonprofit status by EIN or exact organization name: BMF exemption subsection, deductibility and foundation codes, Pub 78 listing, and automatic revocations. Up to 10 records; empty organizations is a paid 200. No legal conclusion is computed.

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • npi_verify$0.01 per call.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...the NPI, as facts from the files: not a credential check and not a determination about the..."

      What this check looks for
    Description, as the server wrote it
    $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/npi/verify. For 1 to 10 NPIs, the CMS NPPES status of each (active or deactivated, with deactivation and reactivation dates), provider name or organization, practice city, state and ZIP and taxonomies, plus any HHS-OIG LEIE exclusion listed under the NPI, as facts from the files: not a credential check and not a determination about the provider.

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • osha_history$0.02 per call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    $0.02 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/osha/history. Returns the OSHA inspections, violations and penalties on file for an employer in a state (optional city and zip), matched by name in the US Department of Labor's inspection and violation files, as establishments with a penalty roll-up; OSHA inspections only, so an employer with none has no record and an empty result is a paid 200; it is not a determination about the employer and is not endorsed or certified by the U.S. Department of Labor.

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • pipe_check$0.001 per call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    $0.001 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]. Cheapest paid call: proves wallet, 402 and receipt work (x402 only).

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • sanctions_screen$0.01 per call.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/sanctions/screen. Screen a name against the US OFAC SDN and Consolidated lists: potential matches with list, programs, name score and reasons; optional type, date of birth and country re-rank. Fuzzy, folds accents, any script. Not a determination: an empty candidates list is a paid 200 and certifies nothing. Not UN, EU or UK.

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
Only reads 3Claude Code: allow
  • carrier_lookup$0.03 per call.No findings

    Why it is in this group

    • The name "carrier_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    $0.03 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/carrier/lookup. US motor carrier by USDOT, MC/MX/FF docket or exact company name (FMCSA): USDOT status, out-of-service order, operating authority per docket with grant date and source (Motus, else legacy frozen 2026-05-14), BI&PD, cargo and bond required vs on file, insurance policies, BOC-3, fleet size (power_units counts every power unit, trucks and others), safety rating. Up to 10 carriers; empty is a paid 200. Not a determination: verify with FMCSA before dispatch.

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true
  • entity_lookup$0.01 per call.No findings

    Why it is in this group

    • The name "entity_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    $0.01 per call. Pay with x402 (USDC on Base) in _meta["x402/payment"]; MPP (tempo) on the HTTP URL /v1/entity/lookup. State business-registry record (status, formation, registered agent; no officers, no street lines) by entity number or exact name. Served states: CO, CT, FL, NY, OR. Up to 10 entities; empty entities is a paid 200.

    Annotations the server declares

    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.30.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http flipvo-agent-tools https://api.flipvo.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__flipvo-agent-tools__entity_lookup",
      "mcp__flipvo-agent-tools__carrier_lookup",
      "mcp__flipvo-agent-tools__license_search"
    ],
    "ask": [
      "mcp__flipvo-agent-tools__pipe_check",
      "mcp__flipvo-agent-tools__drive_time",
      "mcp__flipvo-agent-tools__drive_matrix",
      "mcp__flipvo-agent-tools__license_verify",
      "mcp__flipvo-agent-tools__nonprofit_verify",
      "mcp__flipvo-agent-tools__sanctions_screen",
      "mcp__flipvo-agent-tools__exclusions_screen",
      "mcp__flipvo-agent-tools__airport_nearest",
      "mcp__flipvo-agent-tools__osha_history",
      "mcp__flipvo-agent-tools__npi_verify"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as flipvo-agent-tools. Review it before you use it.