# Hong Kong Company Registry & Due Diligence (86hc.com) (remote · www.86hc.com)

Search 3.9M+ HK companies (CR, BRN, UBO, status) & order NAR1/NNC1 filings via Stripe. Free trial.

- Trust score: 78/100 (medium)
- Change this week: +12
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `www.86hc.com`: 78/100 (this document), [markdown](https://verifymcp.io/servers/com-86hc-hongkong-company/wp-json-hkquery-v1-mcp-rpc.md), [page](https://verifymcp.io/servers/com-86hc-hongkong-company/wp-json-hkquery-v1-mcp-rpc)
- npm · `hongkong-company-mcp`: 40/100, [markdown](https://verifymcp.io/servers/com-86hc-hongkong-company/hongkong-company-mcp.md), [page](https://verifymcp.io/servers/com-86hc-hongkong-company/hongkong-company-mcp)
- pypi · `hongkong-company-mcp`: 59/100, [markdown](https://verifymcp.io/servers/com-86hc-hongkong-company/hongkong-company-mcp-2.md), [page](https://verifymcp.io/servers/com-86hc-hongkong-company/hongkong-company-mcp-2)

## Channel facts

- Endpoint: `https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.2.4`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 80/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 56/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 3157 tokens (~350/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 58/100
  - Stability check failed: schema churn in the 20 days we've observed: 0 tool removals, 1 breaking changes, 0 auth/transport breaks, 3 additions.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server?

Hong Kong Company Registry & Due Diligence (86hc.com) is a hosted endpoint at https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-86hc-hongkong-company 'https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc'
```

### Cursor

```json
{
  "mcpServers": {
    "com-86hc-hongkong-company": {
      "url": "https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-86hc-hongkong-company": {
      "type": "http",
      "url": "https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-86hc-hongkong-company]
url = "https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-86hc-hongkong-company": {
      "type": "remote",
      "url": "https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-86hc-hongkong-company --url 'https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-86hc-hongkong-company:
    url: "https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc"
```

### Netclaw

```json
{
  "McpServers": {
    "com-86hc-hongkong-company": {
      "Transport": "http",
      "Url": "https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-86hc-hongkong-company -t streamable-http -u 'https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc'
```

### Other

```json
{
  "mcpServers": {
    "com-86hc-hongkong-company": {
      "type": "http",
      "url": "https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 52 to 55.

### 2026-11-02 (score 77, +1)

No change was recorded against any check on this day. Stability & Change Management went from 45 to 48.

### 2026-11-01 (score 76, +2)

- [security regression] Stability: 0.50 → fail
- [functional regression] “get_company_filings” made “identifier” required, so existing callers break
- [functional improvement] MCP protocol: fail → pass
- [functional] MCP protocol version: 2024-11-05 → 2026-07-28

### 2026-10-31 (score 74, +7)

- [security improvement] Authorization: unverified → partial

### 2026-10-30 (score 67, +1)

- [security] Tool “manage_account_credits” rewrote its description, which is the text the model reads
- [security] Tool “create_filing_order” rewrote its description, which is the text the model reads
- [cosmetic] “manage_account_credits” added an optional parameter “pay_method”
- [cosmetic] “create_filing_order” added an optional parameter “pay_method”
- [cosmetic] “manage_account_credits” reworded the description of “action”

### 2026-10-28 (score 66, 0)

- [functional regression] Schema quality: 260 → 329
- [functional] Server version: 1.2.0 → 1.2.4
- [functional] New tool “assess_bank_account_eligibility”
- [functional] New tool “check_bank_application_status”
- [functional] New tool “submit_bank_account_application”

### 2026-10-27 (score 66, +1)

No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-25 (score 65, +1)

No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

## MCP tools (9)

### `search_companies` (~199 tokens)

Search Hong Kong companies by Chinese/English name keyword or 7-digit CR number. Works WITHOUT an API key (15 free searches/day per IP; 50/day with free API key; 300/day for paid users). Returns matching list with legal names, CR number, active/dissolved status, incorporation date, and entity type.

Input parameters:

- `api_key` (string): Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr…
- `limit` (integer): Max number of results to return (1-20, default 5).
- `query` (string, required): Company name keyword (Chinese or English, min 2 chars) or CR number (1-7 digits).

### `batch_get_company_details` (~276 tokens)

Batch query holographic statutory profiles of 1 to 10 Hong Kong companies simultaneously. Works WITHOUT an API key (3 free companies/day per IP; 20 free companies/day with a free API key from https://www.86hc.com/user). Returns Chinese/English legal names, 7-digit CR No., 8-digit Business Registration Number (BRN) & exemption status, live/dissolved status, incorporation date, annual return date (MM-DD), entity type, governing law (Cap. 622), registered office address, historical former names, and verified ICRIS statutory filings summary with authentic barcodes.

Input parameters:

- `api_key` (string): Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr…
- `companies` (array, required): Array of 1 to 10 company identifiers (7-digit CR number, 8-digit BRN, or exact Chinese/English company name).
- `identifiers` (array): Alias for companies: array of 1 to 10 company identifiers (CR number, 8-digit BRN, or company name).

### `get_company_filings` (~258 tokens)

Retrieve the full catalog of official ICRIS statutory filed documents for a Hong Kong company (works without an API key), including authentic ICRIS barcodes, form codes (NAR1, NNC1, ND2A, A&A, etc.), filing dates, official document titles, and retrieval fees. Barcodes can be passed to create_filing_order to retrieve official PDFs.

Input parameters:

- `api_key` (string): Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr…
- `company_name` (string): Exact company name in English or Chinese.
- `cr_no` (string): Hong Kong Company CR Number (1-7 digits).
- `form_code` (string): Optional form code filter (e.g. NAR1, NNC1, ND2A, AA). Leave empty for all filings.
- `identifier` (string, required): Target Hong Kong company CR number (1-7 digits), 8-digit BRN, or exact company name.

### `create_filing_order` (~453 tokens)

Create a paid filing retrieval order for an official Hong Kong Companies Registry statutory document (ONLY call this when the user explicitly wants to purchase/retrieve an official PDF document). Works directly WITHOUT an API key! Returns both `web_cashier_url` (86hc.com 3-in-1 Web Cashier supporting Mainland Alipay 支付宝, AlipayHK 香港支付宝, and Stripe / Apple Pay) and `checkout_url` (direct Stripe / Alipay checkout link). Pass either an authentic ICRIS barcode OR pass identifier + doc_code (e.g. NAR1, NNC1, A&A) and the server will automatically select the latest verified ICRIS barcode. Upon payment completion, the user receives the official PDF download link and earns +10 bonus permanent company query credits.

Input parameters:

- `api_key` (string): Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr…
- `barcode` (string): Authentic ICRIS document barcode obtained from get_company_filings or batch_get_company_details. If omitted, provide identifier + doc_code to auto-select the latest verified barcode.
- `company_name` (string): Name or CR number of the company.
- `doc_code` (string): Statutory form code (e.g. NAR1, NNC1, ND2A, A&A). Defaults to NAR1.
- `doc_name` (string): Document title or form code (e.g. NAR1 Annual Return).
- `email` (string): Optional user email address to receive the official PDF download link.
- `identifier` (string): Company CR number, 8-digit BRN, or company name.
- `pay_method` (string): Preferred payment method: alipay (Mainland Alipay 支付宝), alipay_hk (AlipayHK 香港支付宝), or stripe (Visa / MasterCard / Apple Pay). Note: web_cashier_url always allows switching among all 3 methods.

### `check_filing_order_status` (~140 tokens)

Check the payment and extraction status of a filing retrieval or credit purchase order. Once paid and extracted, returns the encrypted official PDF download URL.

Input parameters:

- `api_key` (string): Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr…
- `order_sn` (string, required): Order serial number (e.g. HKQ20261018... or HKM20261018...).

### `manage_account_credits` (~222 tokens)

Check API account remaining free daily quota and permanent paid credits balance, or generate a HK$ 100 payment link (supporting Mainland Alipay, AlipayHK, and Stripe) to purchase 100 permanent company query credits. Only call buy_100_credits when the user confirms they want to top up credits.

Input parameters:

- `action` (string): Use check_balance to view remaining free & paid credits, or buy_100_credits (after user confirmation) to generate a HK$ 100 top-up link for 100 permanent credits.
- `api_key` (string): Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr…
- `pay_method` (string): Optional preferred payment method when action="buy_100_credits" (alipay, alipay_hk, or stripe).

### `assess_bank_account_eligibility` (~435 tokens)

Assess corporate bank account opening eligibility, official bank tariff schedules (Tariff Guide), and tailored statutory KYC document checklists for HSBC Hong Kong (official API integration) and OCBC Bank Hong Kong (official brand authorization, 100% opening fee waived for eligible HC Business clients). Unlogged-in users (without api_key) are subject to the 3 free queries/day per IP limit; logged-in users with a free API key from https://www.86hc.com/user enjoy 20 free queries/day. Pass a Hong Kong company name, CR No., or 8-digit BRN to automatically check its statutory status, incorporation age (<1yr startup vs >=1yr established), and required filings (NNC1 vs NAR1).

Input parameters:

- `annual_turnover_usd` (string): Estimated annual turnover tier (UNDER_1M, 1M_TO_3M, 3M_TO_5M, 5M_TO_10M, OVER_10M).
- `api_key` (string): Optional 86hc.com MCP API key (format: hkq_live_xxxx). Omit or leave empty to use the automatic Guest IP Trial Mode (3 free company detail queries/day + direct Stripe filing orders without a key). Fr…
- `bank_target` (string): Target bank to evaluate: hsbc (HSBC Hong Kong), ocbc (OCBC Bank Hong Kong), or both.
- `has_mainland_entity` (boolean): Whether the directors/shareholders have an affiliated Mainland China or overseas operating company.
- `identifier` (string): Optional Hong Kong company name (Chinese/English), 7-digit CR No., or 8-digit BRN to automatically verify from the 3.9M+ corporate registry.
- `industry` (string): Business industry code or description (e.g. EXPORT_TRADE, ECOMMERCE_2C, ECOMMERCE_2B, IT_SOFTWARE, CONSULTING_SVC, STARTUP_COMPANY, LOGISTICS_SUPPLY).

### `submit_bank_account_application` (~778 tokens)

Submit an online Hong Kong corporate bank account opening pre-screening application (Stage 1 KYC dossier) for HSBC Hong Kong (hsbc) or OCBC Bank Hong Kong (ocbc). REQUIRES USER LOGIN (personal API Key hkq_live_... obtained after signing in at https://www.86hc.com/user, passed via X-API-Key header or api_key parameter). Automatically resolves the company from 86hc.com's 3.9M+ registry, binds the BK-YYYYMMDD-XXXXXX reference number to the user's account, notifies HC Business licensed TCSP (TC006431) compliance officers in real time, sends an official confirmation email, and returns a Stage 2 continuation URL where the logged-in user can upload statutory documents (CI, BRC, NNC1/NAR1, IDs) and complete Cap. 553 electronic signature.

Input parameters:

- `agent_platform` (string): Optional name of the calling AI platform (e.g. ChatGPT, Claude, Coze, Doubao, Baidu Wenxin).
- `api_key` (string): Personal 86hc.com API Key (hkq_live_xxxx) obtained after signing in at https://www.86hc.com/user (required if X-API-Key header is not configured).
- `applicant_role` (string): Role of the applicant in the Hong Kong company.
- `bank_target` (string): Target bank: hsbc (HSBC Hong Kong), ocbc (OCBC Bank Hong Kong), or both.
- `contact_email` (string): Applicant email address to receive the official application receipt and compliance review updates.
- `contact_name` (string, required): Full name of the applicant / director / authorized handler.
- `contact_phone` (string, required): Contact mobile phone number with country/region code (e.g. +86 13800138000 or +852 91234567).
- `contact_wechat` (string): Optional WeChat ID or WhatsApp number for 1-on-1 compliance officer liaison.
- `currencies` (array): Required settlement currencies (e.g. ["USD", "HKD", "CNH", "EUR", "SGD"]).
- `directors_shareholders` (string): Optional summary of directors and 25%+ Ultimate Beneficial Owners (UBO).
- `has_mainland_company` (boolean): Whether there is an affiliated Mainland China operating company.
- `identifier` (string, required): Hong Kong company name (Chinese or English), 7-digit CR number, or 8-digit BRN.
- `industry` (string): Industry sector (e.g. EXPORT_TRADE, ECOMMERCE_2C, ECOMMERCE_2B, IT_SOFTWARE, CONSULTING_SVC, STARTUP_COMPANY, LOGISTICS_SUPPLY).
- `mainland_company_name` (string): Optional name of the affiliated Mainland China company.
- `products_services` (string): Specific goods traded or services rendered (e.g. Consumer electronics export, cross-border SaaS subscription).
- `signing_location` (string): Preferred signing mode (e.g. 赴港分行现场面签 or 内地指定城市分行视频见证).
- `top_clients` (array): Optional names of top 1-5 customers/buyers.
- `top_suppliers` (array): Optional names of top 1-5 suppliers/vendors.
- `trading_countries` (array): Major counterparty countries or regions (e.g. ["China", "Hong Kong", "Singapore", "USA"]).
- `turnover` (string): Estimated annual turnover (UNDER_1M, 1M_TO_3M, 3M_TO_5M, 5M_TO_10M, OVER_10M).
- `user_note` (string): Optional additional notes or questions from the applicant.

### `check_bank_application_status` (~189 tokens)

Check the live compliance pre-screening status, uploaded document count, compliance officer remarks, and Stage 2 secure upload URL for a submitted Hong Kong corporate bank account application (BK-YYYYMMDD-XXXXXX). REQUIRES USER LOGIN (personal API Key hkq_live_... obtained at https://www.86hc.com/user) plus order_id.

Input parameters:

- `api_key` (string): Personal 86hc.com API Key (hkq_live_xxxx) obtained after signing in at https://www.86hc.com/user (required if X-API-Key header is not configured).
- `contact_email` (string): Applicant email address for identity verification.
- `contact_phone` (string): Applicant phone number (or last 4+ digits) for identity verification.
- `order_id` (string, required): Bank account application reference ID (e.g. BK-20261028-XXXXXX).

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-86hc-hongkong-company/wp-json-hkquery-v1-mcp-rpc#diagnostics

## Score history

- 2026-11-05: 78
- 2026-11-04: 78
- 2026-11-03: 77
- 2026-11-02: 77
- 2026-11-01: 76
- 2026-10-31: 74
- 2026-10-30: 67
- 2026-10-29: 66
- 2026-10-28: 66
- 2026-10-27: 66
- 2026-10-26: 65
- 2026-10-25: 65
- 2026-10-24: 64
- 2026-10-23: 64
- 2026-10-22: 64
- 2026-10-21: 63
- 2026-10-20: 63
- 2026-10-19: 62
- 2026-10-18: 65
- 2026-10-17: 64
- 2026-10-16: 64

## Common questions

### What is the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server?

Hong Kong Company Registry & Due Diligence (86hc.com) is an MCP server listed in the public MCP registry as com.86hc/hongkong-company. Search 3.9M+ HK companies (CR, BRN, UBO, status) & order NAR1/NNC1 filings via Stripe. Free trial. This page covers its hosted endpoint (https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc).

### Is the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server safe to use?

Hong Kong Company Registry & Due Diligence (86hc.com) scores 78 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server expose?

Hong Kong Company Registry & Due Diligence (86hc.com) exposes 9 tools: search_companies, batch_get_company_details, get_company_filings, create_filing_order, check_filing_order_status, and 4 more. Their descriptions and schemas cost roughly 2,950 tokens of context every time the server is loaded.

### Does the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server require authentication?

No. We connected to Hong Kong Company Registry & Due Diligence (86hc.com) without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server still maintained?

Hong Kong Company Registry & Due Diligence (86hc.com) is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What did VerifyMCP test on the Hong Kong Company Registry & Due Diligence (86hc.com) MCP server?

VerifyMCP ran 13 checks on Hong Kong Company Registry & Due Diligence (86hc.com), covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.

## Links

- Remote endpoint: https://www.86hc.com/wp-json/hkquery/v1/mcp/rpc
- Repository: https://github.com/86hc-compliance/hongkong-company-mcp
- Website: https://www.86hc.com/
- Changelog RSS feed: https://verifymcp.io/servers/com-86hc-hongkong-company/wp-json-hkquery-v1-mcp-rpc.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-86hc-hongkong-company/wp-json-hkquery-v1-mcp-rpc/changelog.json
- Trust report (JSON): https://verifymcp.io/servers/com-86hc-hongkong-company/wp-json-hkquery-v1-mcp-rpc.json
- HTML version of this page: https://verifymcp.io/servers/com-86hc-hongkong-company/wp-json-hkquery-v1-mcp-rpc