MCP servers › io.github.bck-stack › sitecheck-company-records

MCP server · registry snapshot 2026-10-24 · last tested 2026-10-24

io.github.bck-stack/sitecheck-company-records

120 pay-per-call agent tools: company registry, government, legal and B2B data tools. x402 — the publisher's description

1 of 2 record checks metRead-only · tools listed 2026-10-24version 1.0.2streamable HTTP120 tools

Summary

io.github.bck-stack/sitecheck-company-records is a remote MCP server listed in the official MCP registry at version 1.0.2. On 2026-10-24 ProtocolProbe connected to it in read-only mode and read its inventory: 120 tools, 0 resources and 0 prompts.

Record checks

1 of 2 record checks met · 7 do not apply

met: Registry entry is active and says how to run it
not met: Source repository link opens
not applicable: Repository is not archived
not applicable: Code pushed to the repository in the 90 days before our check
not applicable: Repository publishes a security policy (SECURITY.md)
not applicable: Package names its licence with a standard (SPDX) identifier
not applicable: The version the registry lists can be installed and is not withdrawn
not applicable: npm package carries build provenance (attestation)
not applicable: No known critical or high advisory in the package or its dependencies

From public records, not a safety rating. Each check with its reason

Key facts

Runs: remote (hosted by the publisher)
Transport: streamable HTTP
Sign-in: none needed to open a session
Tools: 120
Last tested: 2026-10-24

Add to your client

How fresh this is

Live-tested

yes, a real session (not a text-only review)

Last tested

2026-10-24

Mode

read-only (no tool calls)

Latest version

1.0.2, published 2026-10-24 (registry, as of the 2026-10-24 snapshot)

First listed version

2026-10-23 (earliest version still in the registry; older removed versions would be earlier)

Version history

3 versions listed, 2026-10-23 to 2026-10-24; 3 in the 90 days before the 2026-10-24 snapshot.

Most recent 3 versions

1.0.2 · 2026-10-24
1.0.1 · 2026-10-24
1.0.0 · 2026-10-23

(versions still listed in the registry only)

Registry data

snapshot 2026-10-24

Package and repository

checked 2026-10-24

Engine

mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-23, listed on 2026-10-24 with version 1.0.2 (published 2026-10-24).

Source: the official MCP Registry list on 2026-10-23 and on 2026-10-24.

What it is

What does this server offer?

Observed inventory

120tools

0resources

0prompts

None of its 120 tools are described as changing anything. For 120 the reading was uncertain, so no mark is shown.

gov_fmcsa_carrier_safety
“FMCSA carrier census record by USDOT number from the public FMCSA Company Census File (data.transportation.gov): legal name, address, power units, drivers, status code and registration dates.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- dotstringrequired“USDOT number, digits only, 1 to 8 digits”
gov_sunbiz_florida_business
“Florida business entities from the Division of Corporations (Sunbiz): name search (document number, status, detail URL; 20 per page) or one record via a result URL: entity type, document number, FEI/…”
Publisher declares: read-only yes · open-world yes
2 inputs
- namestring“Entity name to search (alphabetical list starting at this name), e.g.”
- detailstring“The url of a search result (https://search.sunbiz.org/Inquiry/CorporationSearch/SearchResultDetail?...) to fetch that full record”
gov_governmentbids
“Open US/Canadian government bid solicitations (state, local, federal) listed on BidNet Direct's free public search: title, location, publication and closing dates, notice id and link.”
Publisher declares: read-only yes · open-world yes
2 inputs
- querystring“Keyword(s), e.g.”
- pageinteger“Result page, 1-40 (25 results per page)”
gov_dibbs_rfq
“Defense Logistics Agency (DLA) RFQs, solicitations, pre-solicitations, sources-sought and award notices as published on SAM.gov Contract Opportunities (official US federal source), searchable by keyw…”
Publisher declares: read-only yes · open-world yes
5 inputs
- querystring“Keyword, NSN (e.g.”
- typestring“Notice type filter (optional)”
- activeOnlyboolean“Only active notices (default true)”
- pageinteger“Page 1-100”
- limitinteger“Results per page 1-25 (default 10)”
gov_anvisa_brazil_medicines
“Brazil ANVISA registered medicines (official open-data file): search by product name, active ingredient or registration number.”
Publisher declares: read-only yes · open-world yes
4 inputs
- querystring“Product name or active ingredient (accents optional), e.g.”
- registrationstring“ANVISA registration number (NUMERO_REGISTRO_PRODUTO), e.g.”
- statusstring“Optional status filter”
- limitinteger“Max records 1-50 (default 10)”
gov_tmview_trademarks
“Trade mark search across TMview (EUIPO's TMDN network: EUIPO, WIPO and 70+ national offices incl.”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- querystringrequired“Trade mark name (contains search), e.g.”
- officesarray“Optional office codes, e.g.”
- pageinteger“Page 1-100”
- limitinteger“Results per page 1-50 (default 10)”
gov_krs_poland
“Polish business register (KRS) current extract by KRS number: company name, legal form, NIP tax number, registered seat and address, and register dates.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- krsstringrequired“KRS number, 10 digits, e.g.”
gov_court_records_ecourt_india
“Indian High Court judgments and final orders from the eCourts judgment portal (via the public 'Indian High Court Judgments' AWS Open Data mirror, 25 High Courts, 1950-2026): case title, judges, CNR, …”
Publisher declares: read-only yes · open-world yes
5 inputs
- courtstring“Court code (e.g.”
- yearinteger“Decision year, 1950-current (default current year)”
- cnrstring“Optional 16-character CNR, e.g.”
- limitinteger“1-20 judgments (default 10)”
- cursorstring“nextCursor from a previous answer, for the next page”
gov_findlaw
“Lawyers and law firms listed in the FindLaw directory for a practice area in a US city: name, firm or attorney, phone, street address, website, rating and review count, firm of an attorney, profile l…”
Publisher declares: read-only yes · open-world yes
3 inputs, 3 required
- practiceAreastringrequired“FindLaw practice slug, e.g.”
- statestringrequired“US state name, e.g.”
- citystringrequired“City, e.g.”
gov_tdlr_texas
“Texas TDLR licence holders from the 'TDLR - All Licenses' open data set: licence type, number, business name, county and expiry date.”
Publisher declares: read-only yes · open-world yes
3 inputs
- businessNamestring“Business name text, 3 to 60 characters (optional if licenseNumber is set)”
- licenseNumberstring“Licence number, digits only, up to 12 digits (optional)”
- limitstring“Records to return, 1 to 20 (default 5)”
gov_dupont_registry
“Luxury and exotic cars for sale on duPont REGISTRY (US/Canada dealer inventory): newest listings for a brand or brand+model with year, make, model, price (USD, null = call for price), mileage, VIN, s…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- brandstringrequired“Brand slug, e.g.”
- modelstring“Optional model slug as used on the site, e.g.”
gov_ted_eu_procurement
“EU public procurement notices from TED (Tenders Electronic Daily), filtered by buyer country (ISO 3-letter code) and publication date within the last 1 to 90 days.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- countrystringrequired“Buyer country, ISO 3-letter code, e.g.”
- daysstring“Look back 1 to 90 days (default 30)”
- limitstring“Notices to return, 1 to 20 (default 5)”

Show 88 more tools

gov_justia_case_law
“US court opinions (federal and state case law) by keyword: case name, court and citation string, docket number, date filed and argued, citations (official, neutral), how many later opinions cite it, …”
Publisher declares: read-only yes · open-world yes
6 inputs, 1 required
- qstringrequired“Search words; quotes for phrases, e.g.”
- courtstring“Optional CourtListener court IDs, space-separated, e.g.”
- filedAfterstring“Optional earliest filing date YYYY-MM-DD”
- filedBeforestring“Optional latest filing date YYYY-MM-DD”
- orderstring“relevance (default), newest, oldest or cited”
- cursorstring“Cursor from a previous answer's next field”
gov_delaware_business_search
“Businesses licensed to do business in Delaware, from the Division of Revenue's official open data (daily): business and trade name, license category, license number, current validity period and addre…”
Publisher declares: read-only yes · open-world yes
6 inputs
- namestring“Business or trade name contains, e.g.”
- licenseNumberstring“Delaware business license number”
- categorystring“License category contains, e.g.”
- citystring“City, e.g.”
- limitstring“Results, 1 to 100 (default 20)”
- offsetstring“Skip this many (paging)”
gov_faa_aircraft_registry
“US FAA aircraft registry record for an N-number: serial, status, manufacturer, model, year, certificate and expiry dates, registered owner and address.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- nNumberstringrequired“US registration N-number, e.g.”
gov_data_gov_uk
“UK government open datasets from the data.gov.uk catalogue (CKAN API): title, publisher, licence, last modified date, number of resources and dataset link, for a search term.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search text, 2 to 80 characters”
- rowsstring“Datasets to return, 1 to 10 (default 5)”
gov_sbir_government_grants
“US SBIR/STTR small-business R&D awards from SBIR.gov (official SBA database): keyword search (SBIR.gov result order), with award title, company, program and phase, agency, year, and for the top resul…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- querystringrequired“Keyword(s), e.g.”
- pageinteger“Page 1-100 (10 awards per page)”
- detailsinteger“How many of the results to enrich from their award pages, 0-10 (default 5)”
gov_fda_warning_letters
“Latest FDA warning letters from the FDA listing page: company, issuing FDA center or program, subject (violation category) and issue date, with a link to each letter.”
Publisher declares: read-only yes · open-world yes
2 inputs
- limitstring“Letters to return, 1 to 20 (default 10)”
- qstring“Optional company-name filter, 2 to 60 characters”
gov_india_supreme_court
“Indian Supreme Court judgments from the AWS Open Data dataset (CC-BY-4.0): for a judgment year, returns judgment IDs, neutral citation and the scrape date of up to 3 metadata records.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- yearstringrequired“Judgment year, 4 digits, 1950 to 2025”
- limitstring“Records to return, 1 to 3 (default 2)”
gov_healthcare_gov
“ACA Health Insurance Marketplace (HealthCare.gov) plans for a US ZIP code from CMS's QHP Landscape data: plan ID and name, issuer, metal level, plan type, monthly premium before subsidies for the nea…”
Publisher declares: read-only yes · open-world yes
8 inputs, 1 required
- zipstringrequired“5-digit US ZIP code”
- countystring“Optional 5-digit county FIPS when the ZIP spans several counties”
- agestring“Applicant age 0-120 (default 40); premiums are published for 0-14, 18, 21, 27, 30, 40, 50 and 60”
- metalstring“Optional: bronze, expanded bronze, silver, gold, platinum or catastrophic”
- planTypestring“Optional: HMO, PPO, EPO or POS”
- yearstring“Plan year (only the year CMS publishes now)”
- limitstring“Plans, 1 to 50 (default 10)”
- offsetstring“Skip this many plans”
gov_business_bankruptcy_filings
“US federal bankruptcy dockets matching your text from CourtListener (Free Law Project): case name, docket number, court, chapter, filing and termination dates, judge and a CourtListener docket link.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search text, 2 to 100 characters, e.g.”
- limitstring“Results to return, 1 to 10 (default 5)”
gov_harris_county_court_records
“Harris County (Houston, TX) District Court new filings from the District Clerk's free daily datasets.”
Publisher declares: read-only yes · open-world yes
5 inputs
- kindstring“civil (default) or criminal”
- datestring“Filing day YYYY-MM-DD among the published files (civil: last 7 days; criminal: latest day only).”
- caseTypestring“Optional text filter on case type (civil) or offense (criminal), e.g.”
- partystring“Optional text filter on a party / defendant name, e.g.”
- limitinteger“Max cases 1-200 (default 50)”
gov_govdeals
“Live US government surplus auctions on GovDeals for a keyword: asset ID, title, make, model, model year, category, current bid (USD), reserve-not-met flag, auction start and end (UTC and as shown), t…”
Publisher declares: read-only yes · open-world yes
4 inputs, 1 required
- qstringrequired“Keyword, e.g.”
- sortstring“relevance (default), ending, newest, price_high or price_low”
- limitstring“Results per page, 1 to 100 (default 24)”
- pagestring“Page number from 1 (default 1)”
gov_government_contract_awards
“US federal contract awards from USAspending.gov for a recipient name over the last 365 days: award ID, recipient, amount in USD, awarding agency and start date.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- recipientstringrequired“Recipient (company) name text, 3 to 100 characters”
- limitstring“Awards to return, 1 to 10 (default 5)”
gov_clinicaltrials
“ClinicalTrials.gov studies matching a condition, drug or keyword: NCT number, title, overall status, start date, conditions, lead sponsor and study page link.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Condition, drug or keyword, 2 to 100 characters”
- limitstring“Studies to return, 1 to 10 (default 5)”
gov_data_gov
“Search the Data.gov catalog (300,000+ US federal, state and local open datasets): title, publisher and organisation, description, keywords, themes, access level, last modified and issued dates, wheth…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- qstringrequired“Search words, e.g.”
- limitstring“Datasets per page, 1 to 50 (default 20)”
- afterstring“Cursor from a previous answer's next field, for the next page”
gov_energy_gov
“US Department of Energy public dataset catalogue (energy.gov Public Data Listing, DCAT data.json): dataset title, publisher, last modified date, access level, landing page and number of downloadable …”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Word or phrase in the dataset title or description, 3 to 60 characters”
- limitstring“Datasets to return, 1 to 10 (default 5)”
gov_usda_fooddata_central
“USDA FoodData Central food search: FDC ID, description, data type (Branded, Foundation, SR Legacy and others), brand owner and publication date, for a food name.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- querystringrequired“Food name, 2 to 60 characters”
- limitstring“Foods to return, 1 to 10 (default 5)”
gov_epa_aqs_air_quality
“US EPA Air Quality System certified monitor data for a county: daily values per monitor (mean, daily max, AQI, method, site) or annual summaries (mean, 98th/99th percentiles, exceedance counts) for P…”
Publisher declares: read-only yes · open-world yes
7 inputs, 2 required
- pollutantstring“pm25 (default), pm10, ozone, no2, so2, co, lead”
- statestringrequired“2-letter state, e.g.”
- countystringrequired“County name (Los Angeles) or 3-digit FIPS code (037)”
- fromstring“Daily mode start date YYYY-MM-DD (data lags ~6 months)”
- tostring“Daily mode end date YYYY-MM-DD, same calendar year, max 31 days after from”
- yearinteger“Annual mode: a year such as 2025 (returns annual summaries instead of daily values)”
- limitinteger“Max rows 1-500 (default 100)”
gov_openfda_drugsfda
“FDA Drugs@FDA approval records from openFDA for a generic drug name: application number, sponsor, brand name, active ingredients, marketing status and latest submission date.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- genericstringrequired“Generic (established) drug name, 3 to 60 characters”
- limitstring“Records to return, 1 to 10 (default 5)”
gov_ip_australia_trademarks
“IP Australia trade mark records by trade mark number from the IPGOD open data table on data.gov.au (2017 edition, marked superseded): status, live or dead, mark type, lodgement and registration dates…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- tmNumberstringrequired“Australian trade mark number, digits only, up to 9 digits”
gov_nrc_licenses
“US NRC operating nuclear power reactor licences: plant/unit name, docket number, operating licence number (e.g.”
Publisher declares: read-only yes · open-world yes
4 inputs
- statestring“Optional 2-letter state, e.g.”
- operatorstring“Optional words of the owner/operator, e.g.”
- typestring“Optional reactor type: PWR or BWR”
- namestring“Optional words of the plant name, e.g.”
gov_finland_prh
“Finnish company register (PRH / YTJ) record by Business ID: registration date, status code, company form, main business line, names with dates and addresses.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- businessIdstringrequired“Finnish Business ID, 7 digits, hyphen, check digit, e.g.”
gov_ares_czech
“Czech business register (ARES) record by IČO (8-digit company number): business name, VAT ID (DIČ), legal form code, registered address, incorporation and last-update dates, tax office code.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- icostringrequired“Czech company number (IČO), 8 digits, e.g.”
gov_govtrack_congress
“US Congress bill status from the official GPO GovInfo BILLSTATUS bulk XML (the GovTrack API it replaces has closed): title, sponsor, introduced date, latest action and official congress.gov link for …”
Publisher declares: read-only yes · open-world yes
3 inputs, 3 required
- congressstringrequired“Congress number, e.g.”
- typestringrequired“Bill type: hr, s, hres, sres, hjres, sjres, hconres or sconres”
- numberstringrequired“Bill number, digits, 1 to 5 digits”
gov_wikimedia_commons_license
“Wikimedia Commons license template names (Template namespace) that start with a prefix, e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs
- prefixstring“Template name prefix, 2 to 40 letters, digits, hyphens or dots, e.g.”
- limitstring“Templates to return, 1 to 20 (default 10)”
gov_dati_gov_it_italy_open_data
“Italian open government datasets from dati.gov.it (CKAN API): title, publisher, licence, last modified date, number of resources and dataset link, for a search term.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search text, 2 to 80 characters (Italian or English)”
- rowsstring“Datasets to return, 1 to 10 (default 5)”
gov_us_gov_contract_watch
“Largest US federal contract awards from USAspending.gov for one toptier awarding agency over the last 1 to 365 days: award ID, recipient, amount in USD, start date.”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- agencystringrequired“Toptier awarding agency name, e.g.”
- daysstring“Look back 1 to 365 days (default 30)”
- limitstring“Awards to return, 1 to 10 (default 5)”
gov_global_court_records_aggregator
“Court records from two official open sources in one answer: US federal dockets matching a term (CourtListener) and Indian Supreme Court judgment metadata for a year (AWS Open Data).”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
- qstringrequired“Term for US dockets, 2 to 100 characters”
- yearstringrequired“Indian Supreme Court judgment year, 1950 to 2025”
- limitstring“Items per source, 1 to 3 (default 2)”
gov_eu_compliance_pack
“EU counterparty check in one call: screens a person or company name against the official EU Consolidated Financial Sanctions List (all aliases, word match, accents ignored) and, with a VAT number, va…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- namestringrequired“Person or company name to screen, e.g.”
- vatstring“Optional EU VAT number with country prefix, e.g.”
- limitinteger“Max sanctioned entities returned, 1-25 (default 10)”
gov_california_dre_real_estate
“California DRE real estate licence lookup (official public licence records): by licence ID get licence type, name, mailing address, status, expiration and issue dates, former names, responsible broke…”
Publisher declares: read-only yes · open-world yes
3 inputs
- licenseIdstring“8-digit DRE licence ID, e.g.”
- namestring“Licensee or company name, 'Last, First' or company, e.g.”
- citystring“Optional mailing-address city for a name search”
gov_caselaw_access
“Caselaw Access Project volume metadata for one reporter (for example a2d = Atlantic Reporter, 2nd series): volume number, publisher, year, jurisdictions and volume ID.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- reporterstringrequired“Reporter slug as used on static.case.law, e.g.”
- limitstring“Volumes to return, 1 to 20 (default 5)”
gov_rfs_russia_business_registry
“Russia's official company and sole-trader register (EGRUL/EGRIP, Federal Tax Service): search by INN, OGRN/OGRNIP or name (Cyrillic).”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- querystringrequired“INN (10 or 12 digits), OGRN (13) / OGRNIP (15), or a company / person name in Russian, e.g.”
- regionstring“Optional 2-digit region code to narrow a name search, e.g.”
- pageinteger“Page 1-50 (default 1)”
gov_uk_gov_tenders
“Latest UK public sector tender notices from Find a Tender (OCDS release packages): notice ID, date, buyer, title, estimated value in GBP, tender deadline and status.”
Publisher declares: read-only yes · open-world yes
1 input
- limitstring“Notices to return, 1 to 20 (default 5)”
gov_grants_gov
“US federal grant opportunities from Grants.gov (search2 API): opportunity number, title, funding agency, open and close dates, status and CFDA numbers, for a keyword.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- keywordstringrequired“Keyword, 3 to 60 characters”
- limitstring“Opportunities to return, 1 to 10 (default 5)”
gov_royallepage_canada
“Royal LePage (Canada) homes for sale in a city: listing id, MLS number, price (CAD), street address, city/province, property type, bedrooms, bathrooms, latitude/longitude, new-listing flag, photo and…”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
- provincestringrequired“Province code: ab, bc, mb, nb, nl, ns, nt, nu, on, pe, qc, sk, yt”
- citystringrequired“City slug as on royallepage.ca, e.g.”
- pagenumber“Result page 1-20 (default 1)”
gov_fueleconomy_gov
“US EPA fuel economy ratings from FuelEconomy.gov for a model year, make and model: each matching vehicle's EPA combined, city and highway MPG, fuel type, drive type and CO2 tailpipe grams per mile.”
Publisher declares: read-only yes · open-world yes
3 inputs, 3 required
- yearstringrequired“Model year, 4 digits, e.g.”
- makestringrequired“Make, e.g.”
- modelstringrequired“Model, e.g.”
gov_sf_open_data
“San Francisco police incident reports from the city open data portal (data.sf.gov, dataset wg3w-h783): date and time, category, subcategory, description, resolution and police district.”
Publisher declares: read-only yes · open-world yes
2 inputs
- categorystring“Optional incident category, exact text, e.g.”
- limitstring“Reports to return, 1 to 20 (default 5)”
gov_fmcsa_household_goods_complaints
“US interstate movers and their household-goods complaint history from FMCSA's Protect Your Move search.”
Publisher declares: read-only yes · open-world yes
5 inputs
- dotstring“USDOT number for the full record with complaints”
- mcstring“MC docket number for the full record with complaints”
- namestring“Company name contains (list)”
- statestring“Two-letter state of headquarters (list)”
- limitstring“List rows, 1 to 200 (default 50)”
gov_sam_gov_wage_determinations
“US federal prevailing wage determinations from SAM.gov (Department of Labor).”
Publisher declares: read-only yes · open-world yes
6 inputs
- wdstring“One determination number: Davis-Bacon like TX20260253, SCA like 2015-5245.”
- typestring“Search: dba = Davis-Bacon construction (default), sca = Service Contract Act, cba = collective bargaining”
- statestring“Search: 2-letter state, e.g.”
- querystring“Search text, e.g.”
- occupationstring“With wd: keep only classifications containing this text, e.g.”
- limitinteger“Search results 1-50 (default 10)”
gov_govdata_germany
“German open government datasets from GovData.de (CKAN API): title, publisher, licence, last modified date, number of resources and dataset link, for a search term.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search text (German or English), 2 to 80 characters”
- rowsstring“Datasets to return, 1 to 10 (default 5)”
gov_anac_italy_procurement
“Italian public procurement datasets from ANAC open data (dati.anticorruzione.it, CKAN): dataset title, publisher, licence, last modified date, number of resources and dataset link, for a search term.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search text, 2 to 80 characters (Italian or English)”
- rowsstring“Datasets to return, 1 to 10 (default 5)”
gov_eu_funding_tenders
“EU Funding & Tenders Portal search results (SEDIA) for a keyword: reference, short title (summary), database, language and portal link.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Keyword, 3 to 60 characters”
- limitstring“Results to return, 1 to 10 (default 5)”
gov_ukcontracts_tenders
“UK awarded public contracts from Contracts Finder (OCDS search, stage=award): notice ID, date, buyer, contract title, awarded supplier and award value in GBP.”
Publisher declares: read-only yes · open-world yes
1 input
- limitstring“Notices to return, 1 to 10 (default 5)”
gov_canadabuys_tenders
“Open Government of Canada tender notices from the CanadaBuys open data CSV: reference number, English title, publication date, closing date, status, notice type, procurement method and category.”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Optional word or phrase in the English title, 3 to 60 characters”
- limitstring“Notices to return, 1 to 10 (default 5)”
gov_global_tender_funding_watch
“Latest public tender and contract items from three official sources in one answer: EU TED notices (last 30 days, buyer country optional), UK Find a Tender notices, and US federal contract awards (USA…”
Publisher declares: read-only yes · open-world yes
1 input
- limitstring“Items per source, 1 to 5 (default 3)”
gov_npi_registry
“US National Provider Identifier (NPI) records from the CMS NPPES NPI Registry, searched by last name and 2-letter state: NPI number, name, credential, primary taxonomy, practice city and state, and l…”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
- lastNamestringrequired“Provider last name, 2 to 40 letters”
- statestringrequired“2-letter US state code, e.g.”
- limitstring“Records to return, 1 to 20 (default 5)”
gov_healthdata
“HealthData.gov (HHS) dataset catalogue: dataset ID, name, short description, display type, last rows update and dataset link, for a search term.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search text, 2 to 80 characters”
- limitstring“Datasets to return, 1 to 10 (default 5)”
gov_npm_registry
“Public npm package record from the npm registry: latest version, license, description, homepage, repository and tarball URL.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- namestringrequired“Exact npm package name, e.g.”
gov_canada_open_data
“Canadian federal open datasets from open.canada.ca (CKAN API): title, publisher, licence, last modified date, number of resources and dataset link, for a search term.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search text, 2 to 80 characters”
- rowsstring“Datasets to return, 1 to 10 (default 5)”
gov_australia_data_gov_au
“Australian government open datasets from data.gov.au (CKAN API): title, publisher, licence, last modified date, number of resources and dataset link, for a search term.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Search text, 2 to 80 characters”
- rowsstring“Datasets to return, 1 to 10 (default 5)”
b2b_importyeti
“ImportYeti US import records: searches companies by name and returns shipment counts, most recent shipment date, address and profile URL from ImportYeti's public search.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- qstringrequired“Company name to search, 2 to 80 characters”
b2b_booksy
“Beauty, barber and wellness businesses listed on Booksy (US) for a category and region: name, address, coordinates, rating and review count, website/Instagram/Facebook, Booksy Pay, promoted flag and …”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- categorystringrequired“Booksy category slug: hair-salon, barber-shop, nail-salon, skin-care, brows-lashes, massage, makeup, wellness-day-spa, braids-locs, tattoo-shop, aesthetic-medi…”
- regionIdstring“Booksy region id from a search URL, e.g.”
- limitstring“Businesses to return, 1 to 20 (default 20)”
b2b_y_combinator
“Y Combinator startup directory: searches companies by name and returns batch, status, industry, team size, one-liner, website and YC profile URL.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- qstringrequired“Company name or slug, 2 to 80 characters”
b2b_skip_trace
“Owner of record for a New York City property: owner name, tax lot (BBL), building class, land use, year built, floors, units, lot and building area, assessed value and zoning, from NYC's public PLUTO…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- addressstringrequired“Street address in New York City, e.g.”
- boroughstring“Optional borough code: MN, BX, BK, QN or SI”
- limitstring“Matches to return, 1 to 10 (default 5)”
b2b_indiamart
“Indian wholesale suppliers and manufacturers on IndiaMART for a product keyword: supplier name, state, years exporting, nature of business, year established, verification badges (verified exporter, T…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Product keyword, e.g.”
- limitstring“Listings to return, 1 to 20 (default 10)”
b2b_goodfirms_companies
“IT service companies ranked on GoodFirms: for a category (software development, web design, digital marketing, app development; software development also by country) the ranked list with name, hourly…”
Publisher declares: read-only yes · open-world yes
4 inputs
- companystring“GoodFirms company slug for a dossier, e.g.”
- categorystring“List mode: software-development, web-design, digital-marketing, app-development (default software-development)”
- countrystring“Software development only: ae, au, ca, de, fr, gb, in, us, eg, sa”
- limitstring“Companies in list mode, 1 to 48 (default 20)”
b2b_linkedin_company_profiles
“Public LinkedIn company page facts: name, description, headquarters address, employee count band, website links and logo, from the schema.org data LinkedIn publishes on the public company page (no lo…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- companystringrequired“LinkedIn company slug (linkedin.com/company/<slug>) or the full company URL (required)”
b2b_thomasnet
“US and Canadian industrial suppliers from Thomasnet for a product or service term (valves, CNC machining...): top 25 suppliers with ID, name, type (manufacturer, distributor...), tier, verified flag,…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- qstringrequired“Product or service term, e.g.”
- statestring“Only suppliers in this US state / Canadian province code (filters the 25)”
- limitstring“Suppliers, 1 to 25 (default 25)”
b2b_doximity
“US clinician data from Doximity's public directory.”
Publisher declares: read-only yes · open-world yes
3 inputs
- profilestring“Profile slug (e.g.”
- locationstring“Directory location: state or state/city slug, e.g.”
- afterstring“Location mode: cursor from a previous page (nextAfter)”
b2b_pgatour_leaderboard
“PGA Tour current and upcoming events from ESPN's public scoreboard: tournament name, dates, status, and the player leaderboard when a tournament is running (empty list before the first round).”
Publisher declares: read-only yes · open-world yes
Takes no inputs.
b2b_spain_empresia
“Spanish company dossier from Empresia (data from the Mercantile Registry gazette BORME): status, CIF tax id, business purpose and CNAE code, share capital, sales band, registry, last filed accounts y…”
Publisher declares: read-only yes · open-world yes
3 inputs
- qstring“Company name to search, e.g.”
- slugstring“Empresia company slug (from www.empresia.es/empresa/<slug>/) to skip the search”
- officersstring“Max current officers to return, 0-100 (default 25)”
b2b_ny_business_entity
“New York Department of State active corporations: searches by entity name and returns entity type, county, initial filing date and service-of-process address.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Entity name part, letters, digits, spaces, .”
- limitstring“Rows to return, 1 to 25 (default 10)”
b2b_lead_formatter
“Lead formatter: cleans a list of contact records you supply (name, company, email, phone, website) into one consistent shape: trims spaces, fixes casing of names, lowercases emails and domains, keeps…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- recordsarrayrequired“Up to 50 objects with optional name, company, email, phone, website strings”
b2b_gsa_elibrary
“US federal GSA schedule contractor dossier from GSA's official CALC+ API: the contractor's GSA contracts (contract number, schedule, SINs, start and end dates, small-business status), its awarded lab…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- vendorstringrequired“Contractor name or keyword, e.g.”
- pagesstring“Rate rows to scan for contracts, 1-5 pages of 20 (default 3)”
b2b_bizquest
“Businesses for sale on BizQuest: listing title, short description, asking price when published, location text, image and listing URL, from the public search pages (all listings, or a US state).”
Publisher declares: read-only yes · open-world yes
2 inputs
- statestring“Optional US state name, e.g.”
- limitstring“Listings to return, 1 to 50 (default 20)”
b2b_texas_sos_business
“Texas active franchise taxpayers (Comptroller open data, data.texas.gov): searches by taxpayer name and returns SOS file number, charter date, status code, organisation type and address.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Taxpayer name part, letters, digits, spaces and .”
- limitstring“Rows to return, 1 to 25 (default 10)”
b2b_cslb_california
“California licensed contractors from the CSLB (Contractors State License Board) public Data Portal for one license classification (e.g.”
Publisher declares: read-only yes · open-world yes
5 inputs, 1 required
- classificationstringrequired“CSLB classification code, e.g.”
- countystring“California county name, e.g.”
- citystring“Keep only this city (exact, case-insensitive)”
- limitstring“Contractors to return, 1 to 200 (default 50)”
- offsetstring“Skip this many (paging)”
b2b_benchmark_international
“Recent M&A deals closed by Benchmark International, the mid-market sell-side adviser: target company, acquirer, deal summary (stake, location, sector as written) and announcement link, newest first, …”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Optional keyword, e.g.”
- limitstring“Deals to return, 1 to 18 (default 10)”
b2b_angies_list
“Angi (Angie's List) top-rated pros for a service in a US city: business name, rating, review count, recommend rate, sub-ratings (quality, value, punctuality...), years in business, city/state/ZIP, se…”
Publisher declares: read-only yes · open-world yes
3 inputs, 3 required
- servicestringrequired“Angi service slug, e.g.”
- citystringrequired“City name, e.g.”
- statestringrequired“Two-letter US state code, e.g.”
b2b_bbb
“Better Business Bureau search (bbb.org public search JSON): finds businesses by name and returns city, state, category, BBB rating, membership flag and profile URL.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Business name, 2 to 60 characters”
- limitstring“Rows to return, 1 to 15 (default 10)”
b2b_yellowpages
“Yellow Pages (US) business listings for a search term and location: name, phone, street address, city/state/ZIP, categories, star rating and review count (where shown), years in business, website and…”
Publisher declares: read-only yes · open-world yes
3 inputs, 2 required
- qstringrequired“What to search for, e.g.”
- locationstringrequired“City and state or ZIP, e.g.”
- pagestring“Results page 1 to 10 (default 1)”
b2b_israel_companies_registrar
“Israel Companies Registrar (Ministry of Justice open data, data.gov.il): searches companies by Hebrew or English name and returns company number, type, status, incorporation date, registered city and…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Company name in Hebrew or English, 2 to 60 characters”
- limitstring“Rows to return, 1 to 25 (default 10)”
b2b_bolagsverket_sweden_companies
“Swedish company register record by 10-digit organisation number (organisationsnummer) from Bolagsverket's and SCB's free weekly bulk files (EU high-value datasets): registered names, legal form, regi…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- orgNumberstringrequired“Swedish organisation number, 10 digits, e.g.”
b2b_clutch_reviews
“Clutch.co top B2B service providers in a category (web-developers, app-developers, agencies/seo, it-services...): name, rating and review count, verification badge, minimum project size, hourly rate,…”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- categorystringrequired“Directory path as on clutch.co/<path>, e.g.”
- pagestring“Results page 1 to 10 (default 1)”
b2b_ada_find_a_dentist
“American Dental Association member dentists near a US ZIP code, from ADA Find-a-Dentist: dentist name, specialties (general practice, orthodontics, endodontics…), practice name, practice address and …”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- addressstringrequired“US ZIP code (most reliable) or a street address with ZIP; a bare city name returns no cards”
- specialtystring“Optional filter on the specialty text, e.g.”
- limitstring“Dentists to return, 1 to 100 (default 20)”
b2b_similarweb
“Similarweb traffic overview for a domain (public page data, last full month): global, country and category rank, monthly visits and change, 3-month trend, bounce rate, pages per visit, visit duration…”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- domainstringrequired“Website domain, e.g.”
b2b_trustpilot_reviews
“Trustpilot reviews for a company website: business name, TrustScore, star rating, total reviews and reviews in the last 12 months, categories, plus 20 reviews per page (page 1 to 10, newest first; op…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- domainstringrequired“Company domain as on trustpilot.com/review/<domain>, e.g.”
- pagestring“Reviews page 1 to 10 (default 1)”
- starsstring“Optional: only reviews with these stars, 1 to 5”
b2b_webmd_healthcare_provider_directory
“WebMD Care doctor directory for a specialty in a US city: name, credentials, NPI, specialty, gender, graduation year, patient rating and review count, a review quote, nearest office (address, medical…”
Publisher declares: read-only yes · open-world yes
4 inputs, 3 required
- specialtystringrequired“WebMD specialty slug, e.g.”
- statestringrequired“Full state name, e.g.”
- citystringrequired“City name, e.g.”
- pagestring“Results page 1 to 20 (default 1)”
b2b_doabooks_directory_open_access
“Peer-reviewed open access books from DOAB, the Directory of Open Access Books: keyword search returning title, authors/editors, publication date, abstract and the DOAB record link (with handle), plus…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- querystringrequired“Keywords, e.g.”
- limitstring“Books per page, 1 to 50 (default 20)”
- pagestring“Page number (default 1)”
b2b_manta
“Manta US small-business directory search by keyword and city/state: business id, name, street, city and state, phone, website, claimed flag, description and Manta profile link, about 10 per page.”
Publisher declares: read-only yes · open-world yes
4 inputs, 3 required
- querystringrequired“Business type or name, e.g.”
- citystringrequired“US city, e.g.”
- statestringrequired“Two-letter US state, e.g.”
- pagenumber“Result page 1-10 (default 1)”
b2b_google_maps
“Google Places text search: finds businesses by text (e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Business type and place, 2 to 100 characters”
- limitstring“Rows to return, 1 to 20 (default 10)”
b2b_techstars_portfolio
“Techstars portfolio companies (5,600+): search by keyword and filter by region, country, first program year, exited or unicorn status.”
Publisher declares: read-only yes · open-world yes
8 inputs
- qstring“Keyword matched against name, description, city, programs and industry (default all)”
- countrystring“Optional country, as Techstars writes it, e.g.”
- regionstring“Optional region: Americas, Europe, Asia, Africa, Oceania”
- yearstring“Optional first program year, e.g.”
- exitedstring“true for exited companies only”
- unicornstring“true for $1B+ companies only”
- limitstring“Companies per page, 1 to 100 (default 25)”
- pagestring“Page number from 1 (default 1)”
b2b_nz_companies_register
“New Zealand Companies Register search (official NZ Companies Office): company name, company number, NZBN, status (Registered, Removed…), entity type, registered address and incorporation date for a n…”
Publisher declares: read-only yes · open-world yes
3 inputs, 1 required
- querystringrequired“Company name or keyword, e.g.”
- pagestring“Result page, 15 companies per page (default 1)”
- statusstring“all (default) or registered (drops removed/closed companies from the returned page)”
b2b_nyc_certified_business
“NYC Small Business Services certified business list (NYC Open Data): searches vendors by formal or trade name and returns certification, NAICS industry, city, website and renewal date.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Vendor name part, letters, digits, spaces and .”
- limitstring“Rows to return, 1 to 25 (default 10)”
b2b_finland_ytj_companies
“Finland YTJ business register (PRH open data): searches companies by name and returns business ID, registration date, company form, current name and address.”
Publisher declares: read-only yes · open-world yes
2 inputs, 1 required
- qstringrequired“Company name, 2 to 80 characters”
- limitstring“Rows to return, 1 to 25 (default 10)”
b2b_iceland_skatturinn_companies
“Icelandic company register (Fyrirtækjaskrá, Skatturinn): search companies by name (kennitala/ID number, name, address), or look up one company by its 10-digit kennitala for the full public record: na…”
Publisher declares: read-only yes · open-world yes
2 inputs
- namestring“Company name to search, e.g.”
- kennitalastring“10-digit company ID (kennitala), e.g.”
b2b_macvendors_lookup
“MAC address vendor lookup (IEEE OUI registry via macvendors.com): returns the registered hardware vendor for a MAC address or OUI prefix.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- macstringrequired“MAC address or OUI, e.g.”
b2b_g2_software_categories
“G2 software categories: name, slug and G2 URL for about 2,000 categories from G2's public category directory, optionally filtered by a word (e.g.”
Publisher declares: read-only yes · open-world yes
2 inputs
- qstring“Optional word to match in the category name or slug, e.g.”
- limitstring“Categories to return, 1 to 500 (default 100)”
b2b_slovakia_rpo_companies
“Slovakia RPO register (Statistical Office open API): looks up a legal entity by its 8-digit company ID (IČO) and returns registered names, establishment date, registry court and address.”
Publisher declares: read-only yes · open-world yes
1 input, 1 required
- icostringrequired“8-digit Slovak company ID (IČO)”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. The first 100 of 120 tools are listed. Read 2026-10-24.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

No AI reading was available for this server's tools (the two runs did not agree, or the listing was not reviewed).

Counted from the listing

Parameters with a description: 100% of 318
Tools with a description: 100% of 120
Typical description length: 415 characters

The tool set

Counted from the listing

Tools: 120
Size of the list: about 31,899 tokens for an agent to load (characters ÷ 4)
Naming: 120 of 120 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 0 of 120 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the remote endpoint (Streamable HTTP)

We connected to this URL on 2026-10-24 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.

Claude Desktop or claude.ai

Settings → Connectors → Add custom connector, then paste:
https://api.companyrecords-api.workers.dev/mcp

Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "sitecheck-company-records": {
      "url": "https://api.companyrecords-api.workers.dev/mcp"
    }
  }
}

VS Code · .vscode/mcp.json

{
  "servers": {
    "sitecheck-company-records": {
      "type": "http",
      "url": "https://api.companyrecords-api.workers.dev/mcp"
    }
  }
}

VS Code (command line) · Bash or zsh terminal (macOS, Linux)

code --add-mcp '{"name":"sitecheck-company-records","type":"http","url":"https://api.companyrecords-api.workers.dev/mcp"}'

Claude Code

claude mcp add --transport http sitecheck-company-records https://api.companyrecords-api.workers.dev/mcp

Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+

npx @modelcontextprotocol/inspector@2.11.0 --server-url https://api.companyrecords-api.workers.dev/mcp --transport http

The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry says	We found	Result	Source · date
Remote endpoint api.companyrecords-api.workers.dev/mcp	Session opened	matches	our test · 2026-10-24
No credential declared as required	Opened a session without any credential	matches	our test · 2026-10-24

Choosing

Record checks

Public records · not a safety rating

1 of 2 record checks met · 7 do not apply

MetRegistry entry is active and says how to run itActive, with a package or a remote address.
Not metSource repository link opensThe registry entry gives no repository link.
Does not applyRepository is not archivedNo public GitHub repository to read.
Does not applyCode pushed to the repository in the 90 days before our checkNo public GitHub repository to read.
Does not applyRepository publishes a security policy (SECURITY.md)No public GitHub repository to read.
Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-24. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about io.github.bck-stack/sitecheck-company-records

Answered from the data above

Does io.github.bck-stack/sitecheck-company-records need an API key or sign-in?

It opened a session without any credential on 2026-10-24. The registry entry declares no required credential; no declaration is not a guarantee.

Has io.github.bck-stack/sitecheck-company-records been security tested?

Partly. 2 of the 14 checks that apply to it were exercised. We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security verdict is published before verification.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Not probed (we call no server's tools)

We connected and read what the server declares, but did not call its tools: ProtocolProbe calls no server's tools for anything it publishes. This is our choice, not a block by the server. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-24

Inventory: exercised
Hidden instructions: exercised
Real execution: not run · our policy
Secret leak: not run · nothing to check it against
Internal addresses: not run · our policy
Unconfirmed changes: not run · our policy
Bad input: not run · our policy
Model requests: not run · nothing to check it against
Sensitive questions: not run · nothing to check it against
Folder boundary: not run · our policy
Log leaks: not run · nothing to check it against
Hidden content: not run · nothing to check it against
Fake assistant turns: not applicable
Token passthrough: not applicable
Token audience: not applicable
Sign-in redirect: not run · our policy
Consent handling: not testable from outside
Sign-in metadata: not applicable

2 exercised12 not run (reason given)4 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 14 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 2

1Inventory
tool-listReads the declared tools, resources and prompts.exercised
2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised

Not run, with the reason · 12

3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
12Hidden content
audience-hidingChecks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against
16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy
17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside

Does not apply to this server · 4

13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable
15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable
18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.No sign-in (OAuth) metadata is published, so there are no sign-in addresses to check.not applicable

Source: our own test, 2026-10-24, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

0 msStarted a read-only session with the server's remote endpoint
441 msConnected after 0 redirects. No credential was sent or needed.
Read the inventory: 120 tools, 0 resources, 0 prompts.
1,946 msFinished: 2 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified

pending: added in the weekly update

listed 2026-10-24; not classified yet

Pricing modelAI-classified

pending: added in the weekly update

the website is not read yet

Programming language

does not apply

no existing GitHub repository (server declares no repository link, so there is nothing to fetch)

Hosting type

remote (hosted by the publisher)

registry · 2026-10-24

MCP capability

tools

our test · 2026-10-24

Transport

streamable HTTP

registry · 2026-10-24

Required credentials

none declared

registry · no declaration is not a guarantee

Package registry

does not apply

remote-only server: no package is shipped, so there is no package registry

Freshness

0–30 days

registry updatedAt · 2026-10-24

Lifecycle status

active

registry · 2026-10-24

License class

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Integrity hash

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Signature / provenance

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Dependency advisories

does not apply

ships no package, so there are no dependencies to audit

Popularity

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Publisher signals

not stated

no readable GitHub owner to describe

Maintenance

does not apply

server declares no repository link, so there is nothing to fetch

Environment

the publisher's infrastructure

where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.bck-stack/sitecheck-company-records: MCP server record.” Data checked 2026-10-24. https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck-company-records

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.bck-stack/sitecheck-company-records)](https://protocolprobe.com/mcp/servers/io.github.bck-stack/sitecheck-company-records)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology