Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

gankdat

REMOTE · GANKDAT.COM · SCANNED SEP 24

UK & EU tenders, awards, planning, companies, charities, schools, NHS, care, sponsors, trade marks.

Available components

−2 this week 79 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security77
Transport & Reachability100
Schema Quality & AI Usability50
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 3621 tokens (~201/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage67
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 0% of tool parameters carry a description.Fail
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 18 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 18 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the gankdat MCP server?

gankdat is a hosted endpoint at https://gankdat.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · gankdat.com

# add to Claude Code
claude mcp add --transport http com-gankdat-gankdat 'https://gankdat.com/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "com-gankdat-gankdat": {
      "url": "https://gankdat.com/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "com-gankdat-gankdat": {
      "type": "http",
      "url": "https://gankdat.com/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.com-gankdat-gankdat]
url = "https://gankdat.com/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-gankdat-gankdat": {
      "type": "remote",
      "url": "https://gankdat.com/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-gankdat-gankdat --url 'https://gankdat.com/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  com-gankdat-gankdat:
    url: "https://gankdat.com/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "com-gankdat-gankdat": {
      "Transport": "http",
      "Url": "https://gankdat.com/mcp"
    }
  }
}
# add to Vellum
assistant mcp add com-gankdat-gankdat -t streamable-http -u 'https://gankdat.com/mcp'
// mcp.json
{
  "mcpServers": {
    "com-gankdat-gankdat": {
      "type": "http",
      "url": "https://gankdat.com/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 23 Sept 26 0
    • Tool “get_changes” rewrote its description, which is the text the model reads security
    • Server version: 0.14.0 → 0.15.0 functional
    • New tool “query_uk_trademark_journal” functional
  • 22 Sept 26 0
    • Tool “get_changes” rewrote its description, which is the text the model reads security
    • Server version: 0.13.0 → 0.14.0 functional
    • New tool “query_nhs_ods” functional
  • 21 Sept 26 −1
    • Tool “get_changes” rewrote its description, which is the text the model reads security
    • Schema quality: 2316 → 2995 functional
    • Schema quality: 2316 → 2971 functional
    • Schema quality: 2316 → 2652 functional
    • Server version: 0.12.0 → 0.13.0 functional
    • Server version: 0.11.0 → 0.12.0 functional
    • Server version: 0.10.0 → 0.11.0 functional
    • New tool “query_uk_schools” functional
    • New tool “get_changes” functional
    • New tool “query_uk_contract_awards” functional
    • “query_uk_care_locations” added an optional parameter “website_present” cosmetic
    • “query_uk_charities” added an optional parameter “website_present” cosmetic
    • “query_uk_schools” added an optional parameter “website_present” cosmetic
  • 20 Sept 26 −1
    • Stability: pass → fail security
    • Tool “query_sam_exclusions” was removed security
    • Schema quality: 144 → 178 functional
    • Schema quality: 144 → 173 functional
    • Schema quality: 144 → 159 functional
    • Schema quality: 1299 → 1067 functional
    • Server version: 0.9.0 → 0.10.0 functional
    • Server version: 0.7.0 → 0.9.0 functional
    • Server version: 0.6.2 → 0.7.0 functional
    • Server version: 0.6.1 → 0.6.2 functional
    • Server version: 0.6.0 → 0.6.1 functional
    • New tool “query_uk_care_locations” functional
    • New tool “query_uk_charities” functional
    • New tool “query_uk_sponsors” functional
    • New tool “query_uk_food_hygiene” functional
    • New tool “query_sam_exclusions” functional
  • 26 Aug 26 81
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Aug 26 0
    • Stability: 0.97 → pass security
  • 11 Aug 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 31 Jul 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 24 Sept 2026 · Probed https://gankdat.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=gankdat.com CN=WE1,O=Google Trust Services,C=US 20 Sept 2026 19 Dec 2026 ECDSA 256 ECDSA-SHA256 9b37b6c5b0c84d830e44bd0e32bab628
SANs: gankdat.com, apps.gankdat.com, *.apps.gankdat.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of gankdat.com. Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
gankdat.com. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Challenged, unverified

The endpoint asked for a token, but we could not retrieve and validate the RFC 9728 metadata that tells a client how to obtain one.

Result Challenged, unverified
Enforced On tool calls
HTTP status 200

WWW-Authenticate challenge Bearer realm="gankdat"

Bearer realm="gankdat"
Header Value
strict-transport-security max-age=63072000; includeSubDomains
content-security-policy default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; form-action 'self'; base-uri 'none'; object-src 'none'; frame-ancestors 'none'
x-content-type-options nosniff
x-frame-options DENY
referrer-policy strict-origin-when-cross-origin

Protected resource metadata

Retrieved No
Problem no_resource_metadata

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://gankdat.com/mcp Verified 200
http (plaintext) http://gankdat.com/mcp Inconclusive 404
MCP tools · 18 exposed · ~3,621 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
get_changes ~120

Rows added, removed or changed between daily refreshes of a register dataset (sam-exclusions, uk-food-hygiene, uk-sponsors, uk-charities, uk-care-locations, uk-schools, nhs-ods, uk-trademark-journal), newest first, 90-day history. Poll this instead of re-reading a whole register. Costs 1 credit per call.

NameTypeReqDescription
changestring
pageinteger
per_pageinteger
since
sourcestringyes

No output schema declared.

No examples provided.

get_usage ~26

Plan, credits used/granted/remaining for the presented API key. Free to call.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_sources ~28

Datasets this API serves, with the tool name and filter params for each. Free to call.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

query_eu_ted ~217

Contract notices and awards from TED (Tenders Electronic Daily), the official EU procurement journal — buyer, country, CPV codes, values, and deadlines across all member states, normalized for bid intelligence. Blind Mode: only organisation-level fields are ingested. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
buyerstring
buyer_countrystring
contract_naturestring
cpv_codesstring
deadline_at_afterstring
deadline_at_beforestring
notice_typestring
pageinteger
per_pageinteger
places_of_performancestring
procedure_typestring
published_at_afterstring
published_at_beforestring
qstring
value_amount_maxnumber
value_amount_minnumber

No output schema declared.

No examples provided.

query_nhs_ods ~292

Every GP practice, NHS trust and trust site, pharmacy, dental practice and independent-sector healthcare provider on the NHS Organisation Data Service register for England — ODS code, name, organisation type, active/closed status, NHS England region and integrated care board codes, address and postcode, open and close dates, parent organisation (commissioner or trust) and, for GP practices, the prescribing setting. From the official nightly ODS extracts, keyed by the stable ODS code. Telephone numbers are dropped at ingest; the practitioner files (named GPs and dentists) are never ingested. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
close_date_afterstring
close_date_beforestring
health_geographystring
namestring
national_groupingstring
ods_codestring
open_date_afterstring
open_date_beforestring
org_typestring
outward_codestring
pageinteger
parent_codestring
per_pageinteger
postcodestring
prescribing_settingstring
qstring
statusstring
townstring

No output schema declared.

No examples provided.

query_sam_exclusions ~232

Every active exclusion (debarment) on the official US SAM.gov list — individuals, firms, special entities, and vessels barred from federal awards, with agency, program, and dates — normalized for supplier due diligence. Served as published by the US government for compliance purposes; all addresses, identifiers (SSN/TIN/NPI), and free-text comments are dropped at ingest. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
activation_date_afterstring
activation_date_beforestring
cage_codestring
classificationstring
excluding_agencystring
excluding_agency_namestring
exclusion_programstring
exclusion_typestring
namestring
pageinteger
per_pageinteger
qstring
termination_date_afterstring
termination_date_beforestring
uei_samstring

No output schema declared.

No examples provided.

query_uk_care_locations ~248

Every health and social care location regulated by the Care Quality Commission in England — hospitals, care homes, GP practices, dentists, homecare agencies, hospices, ambulance services — with service types, specialisms, provider, address and area, local authority, region, and the date of the latest CQC check. From the official weekly CQC care directory, keyed by the stable CQC location id. Phone numbers are dropped at ingest; registered-manager names are never ingested. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
latest_check_date_afterstring
latest_check_date_beforestring
local_authoritystring
namestring
outward_codestring
pageinteger
per_pageinteger
postcodestring
provider_idstring
provider_namestring
qstring
regionstring
service_typesstring
specialismsstring
website_presentstring

No output schema declared.

No examples provided.

query_uk_charities ~312

Every registered and removed charity on the Charity Commission register for England and Wales — name, charity and organisation numbers, type, registration status and dates, reporting status, latest income and expenditure, postcode area, company number, website, insolvency/administration/CIO flags, and the charity's own activities summary. From the official daily public extract; contact address lines, phone, email and trustee names are never ingested. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
charity_typestring
company_numberstring
date_of_registration_afterstring
date_of_registration_beforestring
date_of_removal_afterstring
date_of_removal_beforestring
gift_aidstring
in_administrationstring
insolventstring
is_ciostring
latest_income_maxnumber
latest_income_minnumber
namestring
organisation_numberinteger
outward_codestring
pageinteger
per_pageinteger
postcodestring
qstring
registered_charity_numberinteger
registration_statusstring
reporting_statusstring
website_presentstring

No output schema declared.

No examples provided.

query_uk_companies ~188

The newest companies on the UK register, from the official Companies House API — name, number, type, SIC codes, incorporation date, and registered-office area, refreshed daily. Blind Mode: company-level fields only; officer and PSC data are never ingested, and address lines are dropped in favour of locality/postcode. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
companystring
company_numberstring
company_typestring
incorporated_on_afterstring
incorporated_on_beforestring
localitystring
pageinteger
per_pageinteger
postal_codestring
qstring
sic_codesstring
statusstring

No output schema declared.

No examples provided.

query_uk_contract_awards ~231

Who won which UK public-sector contract, for how much: award notices from the official Contracts Finder OCDS feed flattened to one row per award and supplier — buyer, supplier and its company number, award value and date, contract period, CPV codes, category and procurement method. Rolling window of the last two weeks of awards, refreshed daily. Organisation-level data only. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
award_date_afterstring
award_date_beforestring
award_value_amount_maxnumber
award_value_amount_minnumber
buyerstring
categorystring
cpv_codesstring
pageinteger
per_pageinteger
procurement_methodstring
published_at_afterstring
published_at_beforestring
qstring
supplierstring
supplier_company_numberstring

No output schema declared.

No examples provided.

query_uk_food_hygiene ~297

Every food business rated under the UK Food Hygiene Rating Scheme (England, Wales, Northern Ireland; Scotland FHIS) from the official Food Standards Agency open-data file — business name, type, trading address and area, local authority, rating value and date, hygiene/structural/confidence sub-scores, new-rating-pending flag and coordinates, keyed by the stable FHRSID. Refreshed daily. Operator comments are dropped at ingest; rating artwork is not served. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
business_namestring
business_typestring
confidence_score_maxnumber
confidence_score_minnumber
hygiene_score_maxnumber
hygiene_score_minnumber
local_authoritystring
local_authority_codestring
new_rating_pendingstring
outward_codestring
pageinteger
per_pageinteger
postcodestring
qstring
rating_date_afterstring
rating_date_beforestring
rating_valuestring
scheme_typestring
structural_score_maxnumber
structural_score_minnumber

No output schema declared.

No examples provided.

query_uk_insolvency ~153

The latest corporate insolvency notices from The Gazette (official UK public record) — winding-up petitions and orders, administrator, receiver and liquidator appointments, moratoria, and creditor notices, company-level facts only. Blind Mode: person fields and notice text in the source are never ingested. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
companystring
notice_codestring
notice_typestring
pageinteger
per_pageinteger
published_at_afterstring
published_at_beforestring
qstring

No output schema declared.

No examples provided.

query_uk_planning ~109

Planning applications from the official planning.data.gov.uk feed, normalized to one schema. Blind Mode: no applicant personal data. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
authoritynumber
decision_date_afterstring
decision_date_beforestring
pageinteger
per_pageinteger
qstring
referencestring

No output schema declared.

No examples provided.

query_uk_sanctions ~197

Every designation on the official UK Sanctions List (FCDO) — individuals, entities, and ships, with regimes, aliases, and dates — normalized for supplier due diligence. Served as published by government for compliance purposes; dates of birth, identity documents, and contact details are dropped at ingest. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
countriesstring
date_designated_afterstring
date_designated_beforestring
designation_sourcestring
designation_typestring
last_updated_afterstring
last_updated_beforestring
namestring
pageinteger
per_pageinteger
qstring
regimestring
unique_idstring

No output schema declared.

No examples provided.

query_uk_schools ~323

Every school, academy, college and nursery on the Department for Education register (Get Information About Schools) — URN, name, type and phase, open/closed status, local authority and region, address and postcode, website, capacity and pupils on roll, age range, and the academy trust — joined by URN to the latest published Ofsted inspection outcome and inspection date. From the official daily GIAS extract and Ofsted’s monthly inspection management information. Head-teacher names and telephone numbers are dropped at ingest; the governors extract is never ingested. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
establishment_typestring
local_authoritystring
namestring
ofsted_last_inspection_afterstring
ofsted_last_inspection_beforestring
ofsted_ratingstring
open_date_afterstring
open_date_beforestring
outward_codestring
pageinteger
per_pageinteger
phasestring
postcodestring
pupils_maxnumber
pupils_minnumber
qstring
regionstring
statusstring
townstring
trust_namestring
urnstring
website_presentstring

No output schema declared.

No examples provided.

query_uk_sponsors ~176

Every organisation on the Home Office register of licensed sponsors for Worker and Temporary Worker visa routes — organisation name, town and county, sponsor type, licence rating, and the immigration route (Skilled Worker, Global Business Mobility, Creative Worker, and more). One row per organisation and route, from the official GOV.UK publication, refreshed on every republication (most working days). Organisation-level data only. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
countystring
organisationstring
pageinteger
per_pageinteger
qstring
ratingstring
routestring
sponsor_typestring
townstring

No output schema declared.

No examples provided.

query_uk_tenders ~149

Public procurement notices from the official Find a Tender OCDS feed, flattened to one queryable schema. Blind Mode: no contact or personal data. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
buyerstring
cpv_codesstring
pageinteger
per_pageinteger
procurement_methodstring
published_at_afterstring
published_at_beforestring
qstring
statusstring
value_amount_maxnumber
value_amount_minnumber

No output schema declared.

No examples provided.

query_uk_trademark_journal ~323

Every UK trade mark application and international registration designating the UK accepted and published in the Intellectual Property Office’s weekly Trade Marks Journal — application number, mark text and type, Nice classes and goods/services, applicant organisation and country, representative firm, filing and priority dates, journal issue, publication date and the two-month opposition deadline. Rolling 52 weekly issues (about a year); the change feed lists each week’s new publications. Applicant names are kept only for organisations; addresses reduced to country; mark images never stored. Filters combine with AND; q searches all text fields. Costs 1 credit(s) per call.

NameTypeReqDescription
applicantstring
applicant_countrystring
applicant_typestring
application_numberstring
class_count_maxnumber
class_count_minnumber
classesstring
filing_date_afterstring
filing_date_beforestring
goods_servicesstring
journal_numberstring
mark_textstring
mark_typestring
opposition_deadline_afterstring
opposition_deadline_beforestring
originstring
pageinteger
per_pageinteger
publication_date_afterstring
publication_date_beforestring
qstring
representativestring
sectionstring

No output schema declared.

No examples provided.

Common questions

What is the gankdat MCP server?

gankdat is an MCP server listed in the public MCP registry as com.gankdat/gankdat. UK & EU tenders, awards, planning, companies, charities, schools, NHS, care, sponsors, trade marks. This page covers its hosted endpoint (https://gankdat.com/mcp).

Is the gankdat MCP server safe to use?

gankdat scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the gankdat MCP server expose?

gankdat exposes 18 tools: list_sources, get_usage, query_uk_planning, query_uk_tenders, query_uk_contract_awards, and 13 more. Their descriptions and schemas cost roughly 3,621 tokens of context every time the server is loaded.

Does the gankdat MCP server require authentication?

Yes. gankdat asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the gankdat MCP server still maintained?

gankdat is still listed as active in the MCP registry. We last reached this channel on 24 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.