Hong Kong Company Registry & Due Diligence (86hc.com)
REMOTE · WWW.86HC.COM · 3 COMPONENTS
Search 3.9M+ HK companies (CR, BRN, UBO, status) & order NAR1/NNC1 filings via Stripe. Free trial.
Available components
Last scanned (3 hours ago)
Scores higher than 76% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability56
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 3157 tokens (~350/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management58
- Stability check failed: schema churn in the 20 days we've observed: 0 tool removals, 1 breaking changes, 0 auth/transport breaks, 3 additions. See how to fix → Fail
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 52 to 55.
- 2 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 45 to 48.
- 1 Nov 26 +2
- Stability: 0.50 → fail ▼ security
- “get_company_filings” made “identifier” required, so existing callers break ▼ functional
- MCP protocol: fail → pass ▲ functional
- MCP protocol version: 2024-11-05 → 2026-07-28 functional
- 31 Oct 26 +7
- Authorization: unverified → partial ▲ security
- 30 Oct 26 +1
- Tool “manage_account_credits” rewrote its description, which is the text the model reads security
- Tool “create_filing_order” rewrote its description, which is the text the model reads security
- “manage_account_credits” added an optional parameter “pay_method” cosmetic
- “create_filing_order” added an optional parameter “pay_method” cosmetic
- “manage_account_credits” reworded the description of “action” cosmetic
- 28 Oct 26 0
- Schema quality: 260 → 329 ▼ functional
- Server version: 1.2.0 → 1.2.4 functional
- New tool “assess_bank_account_eligibility” functional
- New tool “check_bank_application_status” functional
- New tool “submit_bank_account_application” functional
- 27 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 25 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc
TLS valid
Negotiated TLS 1.3 with TLS_AES_256_GCM_SHA384 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=86hc.com | CN=YE1,O=Let's Encrypt,C=US | 1 Nov 2026 | 30 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 5e0761760a3b85f36fde99de3b93d2d3405 |
| SANs: 86hc.com, www.86hc.com | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of www.86hc.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| 86hc.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline' https://st.86hc.com https://www.clarity.ms https://*.clarity.ms https://js.stripe.com https://b.stripecdn.com https://m.stripe.network https://pay.google.com https://checkout.stripe.com https://accounts.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://st.86hc.com https://www.clarity.ms https://*.clarity.ms https://c.bing.com https://api.stripe.com https://m.stripe.network https://r.stripe.com https://q.stripe.com https://js.stripe.com https://b.stripecdn.com https://hooks.stripe.com https://pay.google.com https://checkout.stripe.com https://accounts.google.com https://oauth2.googleapis.com https://www.googleapis.com; frame-src 'self' https://js.stripe.com https://b.stripecdn.com https://m.stripe.network https://hooks.stripe.com https://checkout.stripe.com https://pay.google.com https://accounts.google.com https://open.weixin.qq.com; worker-src 'self' blob:; object-src 'none'; |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | geolocation=(), microphone=(), camera=(), payment=*, usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=(), browsing-topics=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc | Verified | 200 | |
| http (plaintext) | http://www.86hc.com/wp-json/hkquery/v1/mcp/rpc | HTTPS enforced | 301 | https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
assess_bank_account_eligibility ~435
Assess corporate bank account opening eligibility, official bank tariff schedules (Tariff Guide), and tailored statutory KYC document checklists for HSBC Hong Kong (official API integration) and OCBC Bank Hong Kong (official brand authorization, 100% opening fee waived for eligible HC Business clients). Unlogged-in users (without api_key) are subject to the 3 free queries/day per IP limit; logged-in users with a free API key from https://www.86hc.com/user enjoy 20 free queries/day. Pass a Hong Kong company name, CR No., or 8-digit BRN to automatically check its statutory status, incorporation age (<1yr startup vs >=1yr established), and required filings (NNC1 vs NAR1).
| Name | Type | Req | Description |
|---|---|---|---|
| annual_turnover_usd | string | – | Estimated annual turnover tier (UNDER_1M, 1M_TO_3M, 3M_TO_5M, 5M_TO_10M, OVER_10M). |
| api_key | string | – | Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr… |
| bank_target | string | – | Target bank to evaluate: hsbc (HSBC Hong Kong), ocbc (OCBC Bank Hong Kong), or both. |
| has_mainland_entity | boolean | – | Whether the directors/shareholders have an affiliated Mainland China or overseas operating company. |
| identifier | string | – | Optional Hong Kong company name (Chinese/English), 7-digit CR No., or 8-digit BRN to automatically verify from the 3.9M+ corporate registry. |
| industry | string | – | Business industry code or description (e.g. EXPORT_TRADE, ECOMMERCE_2C, ECOMMERCE_2B, IT_SOFTWARE, CONSULTING_SVC, STARTUP_COMPANY, LOGISTICS_SUPPLY). |
No output schema declared.
No examples provided.
batch_get_company_details ~276
Batch query holographic statutory profiles of 1 to 10 Hong Kong companies simultaneously. Works WITHOUT an API key (3 free companies/day per IP; 20 free companies/day with a free API key from https://www.86hc.com/user). Returns Chinese/English legal names, 7-digit CR No., 8-digit Business Registration Number (BRN) & exemption status, live/dissolved status, incorporation date, annual return date (MM-DD), entity type, governing law (Cap. 622), registered office address, historical former names, and verified ICRIS statutory filings summary with authentic barcodes.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr… |
| companies | array | yes | Array of 1 to 10 company identifiers (7-digit CR number, 8-digit BRN, or exact Chinese/English company name). |
| identifiers | array | – | Alias for companies: array of 1 to 10 company identifiers (CR number, 8-digit BRN, or company name). |
No output schema declared.
No examples provided.
check_bank_application_status ~189
Check the live compliance pre-screening status, uploaded document count, compliance officer remarks, and Stage 2 secure upload URL for a submitted Hong Kong corporate bank account application (BK-YYYYMMDD-XXXXXX). REQUIRES USER LOGIN (personal API Key hkq_live_... obtained at https://www.86hc.com/user) plus order_id.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Personal 86hc.com API Key (hkq_live_xxxx) obtained after signing in at https://www.86hc.com/user (required if X-API-Key header is not configured). |
| contact_email | string | – | Applicant email address for identity verification. |
| contact_phone | string | – | Applicant phone number (or last 4+ digits) for identity verification. |
| order_id | string | yes | Bank account application reference ID (e.g. BK-20261028-XXXXXX). |
No output schema declared.
No examples provided.
check_filing_order_status ~140
Check the payment and extraction status of a filing retrieval or credit purchase order. Once paid and extracted, returns the encrypted official PDF download URL.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr… |
| order_sn | string | yes | Order serial number (e.g. HKQ20261018... or HKM20261018...). |
No output schema declared.
No examples provided.
create_filing_order ~453
Create a paid filing retrieval order for an official Hong Kong Companies Registry statutory document (ONLY call this when the user explicitly wants to purchase/retrieve an official PDF document). Works directly WITHOUT an API key! Returns both `web_cashier_url` (86hc.com 3-in-1 Web Cashier supporting Mainland Alipay 支付宝, AlipayHK 香港支付宝, and Stripe / Apple Pay) and `checkout_url` (direct Stripe / Alipay checkout link). Pass either an authentic ICRIS barcode OR pass identifier + doc_code (e.g. NAR1, NNC1, A&A) and the server will automatically select the latest verified ICRIS barcode. Upon payment completion, the user receives the official PDF download link and earns +10 bonus permanent company query credits.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr… |
| barcode | string | – | Authentic ICRIS document barcode obtained from get_company_filings or batch_get_company_details. If omitted, provide identifier + doc_code to auto-select the latest verified barcode. |
| company_name | string | – | Name or CR number of the company. |
| doc_code | string | – | Statutory form code (e.g. NAR1, NNC1, ND2A, A&A). Defaults to NAR1. |
| doc_name | string | – | Document title or form code (e.g. NAR1 Annual Return). |
| string | – | Optional user email address to receive the official PDF download link. | |
| identifier | string | – | Company CR number, 8-digit BRN, or company name. |
| pay_method | string | – | Preferred payment method: alipay (Mainland Alipay 支付宝), alipay_hk (AlipayHK 香港支付宝), or stripe (Visa / MasterCard / Apple Pay). Note: web_cashier_url always allows switching among all 3 methods. |
No output schema declared.
No examples provided.
get_company_filings ~258
Retrieve the full catalog of official ICRIS statutory filed documents for a Hong Kong company (works without an API key), including authentic ICRIS barcodes, form codes (NAR1, NNC1, ND2A, A&A, etc.), filing dates, official document titles, and retrieval fees. Barcodes can be passed to create_filing_order to retrieve official PDFs.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr… |
| company_name | string | – | Exact company name in English or Chinese. |
| cr_no | string | – | Hong Kong Company CR Number (1-7 digits). |
| form_code | string | – | Optional form code filter (e.g. NAR1, NNC1, ND2A, AA). Leave empty for all filings. |
| identifier | string | yes | Target Hong Kong company CR number (1-7 digits), 8-digit BRN, or exact company name. |
No output schema declared.
No examples provided.
manage_account_credits ~222
Check API account remaining free daily quota and permanent paid credits balance, or generate a HK$ 100 payment link (supporting Mainland Alipay, AlipayHK, and Stripe) to purchase 100 permanent company query credits. Only call buy_100_credits when the user confirms they want to top up credits.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | – | Use check_balance to view remaining free & paid credits, or buy_100_credits (after user confirmation) to generate a HK$ 100 top-up link for 100 permanent credits. |
| api_key | string | – | Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr… |
| pay_method | string | – | Optional preferred payment method when action="buy_100_credits" (alipay, alipay_hk, or stripe). |
No output schema declared.
No examples provided.
search_companies ~199
Search Hong Kong companies by Chinese/English name keyword or 7-digit CR number. Works WITHOUT an API key (15 free searches/day per IP; 50/day with free API key; 300/day for paid users). Returns matching list with legal names, CR number, active/dissolved status, incorporation date, and entity type.
| Name | Type | Req | Description |
|---|---|---|---|
| api_key | string | – | Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr… |
| limit | integer | – | Max number of results to return (1-20, default 5). |
| query | string | yes | Company name keyword (Chinese or English, min 2 chars) or CR number (1-7 digits). |
No output schema declared.
No examples provided.
submit_bank_account_application ~778
Submit an online Hong Kong corporate bank account opening pre-screening application (Stage 1 KYC dossier) for HSBC Hong Kong (hsbc) or OCBC Bank Hong Kong (ocbc). REQUIRES USER LOGIN (personal API Key hkq_live_... obtained after signing in at https://www.86hc.com/user, passed via X-API-Key header or api_key parameter). Automatically resolves the company from 86hc.com's 3.9M+ registry, binds the BK-YYYYMMDD-XXXXXX reference number to the user's account, notifies HC Business licensed TCSP (TC006431) compliance officers in real time, sends an official confirmation email, and returns a Stage 2 continuation URL where the logged-in user can upload statutory documents (CI, BRC, NNC1/NAR1, IDs) and complete Cap. 553 electronic signature.
| Name | Type | Req | Description |
|---|---|---|---|
| agent_platform | string | – | Optional name of the calling AI platform (e.g. ChatGPT, Claude, Coze, Doubao, Baidu Wenxin). |
| api_key | string | – | Personal 86hc.com API Key (hkq_live_xxxx) obtained after signing in at https://www.86hc.com/user (required if X-API-Key header is not configured). |
| applicant_role | string | – | Role of the applicant in the Hong Kong company. |
| bank_target | string | – | Target bank: hsbc (HSBC Hong Kong), ocbc (OCBC Bank Hong Kong), or both. |
| contact_email | string | – | Applicant email address to receive the official application receipt and compliance review updates. |
| contact_name | string | yes | Full name of the applicant / director / authorized handler. |
| contact_phone | string | yes | Contact mobile phone number with country/region code (e.g. +86 13800138000 or +852 91234567). |
| contact_wechat | string | – | Optional WeChat ID or WhatsApp number for 1-on-1 compliance officer liaison. |
| currencies | array | – | Required settlement currencies (e.g. ["USD", "HKD", "CNH", "EUR", "SGD"]). |
| directors_shareholders | string | – | Optional summary of directors and 25%+ Ultimate Beneficial Owners (UBO). |
| has_mainland_company | boolean | – | Whether there is an affiliated Mainland China operating company. |
| identifier | string | yes | Hong Kong company name (Chinese or English), 7-digit CR number, or 8-digit BRN. |
| industry | string | – | Industry sector (e.g. EXPORT_TRADE, ECOMMERCE_2C, ECOMMERCE_2B, IT_SOFTWARE, CONSULTING_SVC, STARTUP_COMPANY, LOGISTICS_SUPPLY). |
| mainland_company_name | string | – | Optional name of the affiliated Mainland China company. |
| products_services | string | – | Specific goods traded or services rendered (e.g. Consumer electronics export, cross-border SaaS subscription). |
| signing_location | string | – | Preferred signing mode (e.g. 赴港分行现场面签 or 内地指定城市分行视频见证). |
| top_clients | array | – | Optional names of top 1-5 customers/buyers. |
| top_suppliers | array | – | Optional names of top 1-5 suppliers/vendors. |
| trading_countries | array | – | Major counterparty countries or regions (e.g. ["China", "Hong Kong", "Singapore", "USA"]). |
| turnover | string | – | Estimated annual turnover (UNDER_1M, 1M_TO_3M, 3M_TO_5M, 5M_TO_10M, OVER_10M). |
| user_note | string | – | Optional additional notes or questions from the applicant. |
No output schema declared.
No examples provided.
How do I install the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server?
Hong Kong Company Registry & Due Diligence (86hc.com) is a hosted endpoint at https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · www.86hc.com
claude mcp add --transport http com-86hc-hongkong-company 'https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc'
What is the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server?
Hong Kong Company Registry & Due Diligence (86hc.com) is an MCP server listed in the public MCP registry as com.86hc/hongkong-company. Search 3.9M+ HK companies (CR, BRN, UBO, status) & order NAR1/NNC1 filings via Stripe. Free trial. This page covers its hosted endpoint (https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc).
Is the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server safe to use?
Hong Kong Company Registry & Due Diligence (86hc.com) scores 78 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server expose?
Hong Kong Company Registry & Due Diligence (86hc.com) exposes 9 tools: search_companies, batch_get_company_details, get_company_filings, create_filing_order, check_filing_order_status, and 4 more. Their descriptions and schemas cost roughly 2,950 tokens of context every time the server is loaded.
Does the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server require authentication?
No. We connected to Hong Kong Company Registry & Due Diligence (86hc.com) without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server still maintained?
Hong Kong Company Registry & Due Diligence (86hc.com) is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.