Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Reg Monitoring

REMOTE · MCP.REGMONITORING.COM

Financial regulatory updates, deadlines and enforcement actions from regulators worldwide.

69 Trust /100

Last scanned (9 hours ago)

Scores higher than 54% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Finance and Payments

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security74
  • The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
  • No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation. See how to fix → View diagnostics → Partial
  • HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
  • HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
  • DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
Schema Quality & AI Usability63
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2377 tokens (~339/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
  • Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage98
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 95% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
What we tested

Checks we ran (13)

  • TLS certificate
  • Authorization
  • HTTPS
  • HSTS header
  • DNSSEC
  • Transport
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

  • 2 Nov 26 +8
    • Authorization: unverified → partial ▲ security
    • Stability: unverified → 0.03 ▲ functional
    • Tool “regmonitoring_get_monthly_briefing” changed its title: Get monthly briefing cosmetic
    • Tool “regmonitoring_get_stats” changed its title: Get coverage statistics cosmetic
    • Tool “regmonitoring_get_taxonomy” changed its title: Get filter values cosmetic
    • Tool “regmonitoring_get_update” changed its title: Get update detail cosmetic
    • Tool “regmonitoring_list_deadlines” changed its title: List regulatory deadlines cosmetic
    • Tool “regmonitoring_search_enforcement” changed its title: Search enforcement actions cosmetic
    • Tool “regmonitoring_search_updates” changed its title: Search regulatory updates cosmetic
  • 1 Nov 26 60

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://mcp.regmonitoring.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=regmonitoring.com CN=WE1,O=Google Trust Services,C=US 15 Oct 2026 13 Jan 2027 ECDSA 256 ECDSA-SHA256 6ea8c403bd50fa27135286603aab1b85
SANs: regmonitoring.com, mcp.regmonitoring.com, *.mcp.regmonitoring.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of mcp.regmonitoring.com. — Not signed

Zone DS Keys Algorithms Outcome
. Trust anchor 20326, 38696 8, 8 Verified
com. DS published 19718 13 Verified
regmonitoring.com. No DS Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://mcp.regmonitoring.com/mcp Verified 200
http (plaintext) http://mcp.regmonitoring.com/mcp HTTPS enforced 301 https://mcp.regmonitoring.com/mcp
MCP tools · 7 exposed · ~1,891 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
regmonitoring_get_monthly_briefing ~165

The Reg Monitoring monthly briefing: an editor-written round-up of the most important financial services regulatory updates of one month, grouped by region (North America; UK and Europe; Asia-Pacific, Middle East and Africa), with a one-line overview per region and the deadlines in the 60 days after it was sent. Use for "what happened in regulation last month" or "catch me up", where a curated summary beats a raw search. Omit `month` for the latest issue. The response includes how to receive the briefing by email each month.

NameTypeReqDescription
monthstring–The month the issue covers, as YYYY-MM (e.g. "2026-10"). Omit for the latest issue. Each issue covers the previous calendar month.

No output schema declared.

No examples provided.

regmonitoring_get_stats ~101

Coverage statistics for the regmonitoring.com regulatory corpus: how many updates are indexed, the date range they span, how many regulators and jurisdictions are represented, and how many records carry AI analysis, a deadline, a penalty amount or an urgency rating. Call this before making claims about what the corpus does or does not contain — most records have no penalty amount, so an empty enforcement result usually means the data is absent rather than that no enforcement occurred.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

regmonitoring_get_taxonomy ~110

Every valid filter value with the number of records carrying it: jurisdiction and regulator codes with their full names, content types, topics, sectors, firm types, urgency levels and deadline types. CALL THIS FIRST if you are unsure of any filter value. Values are exact and case-sensitive — "uk" not "UK", "AML / Financial Crime" not "AML" — and a wrong value returns zero results rather than an error, which is indistinguishable from the data genuinely being empty.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

regmonitoring_get_update ~222

Full detail for one regulatory update, by id or slug: the AI analysis (executive summary, what changed, who is affected, actions required, key dates, compliance impact, citations), any deadline, any enforcement penalty data, and related records. Call this after regmonitoring_search_updates when you need to judge what an update actually requires. Check the analysis `depth` field: "deep" means real structured analysis, "rationale" means only a short classification note. Set include_source_text to read the original document text.

NameTypeReqDescription
idstring–Record id, as returned by regmonitoring_search_updates.
include_source_textboolean–Include the full scraped text of the source document. Off by default because it can run to tens of thousands of characters. Present on ~72% of records; ask for it when the analysis is not enough to j…
slugstring–URL slug, the last path segment of a regmonitoring.com/updates/... link. Use this or id; id is faster.

No output schema declared.

No examples provided.

regmonitoring_list_deadlines ~357

Regulatory deadlines with dates: consultation response dates, compliance deadlines, and rule effective dates, filterable by date range, status, firm type, jurisdiction and regulator. This is the tool for "what is coming up for my firm" and for building a compliance calendar. Status is derived at query time, never stored, so it is always current; buckets do not overlap (within_90 excludes anything already within 30 days). Set high_confidence_only when the answer will be planned against.

NameTypeReqDescription
content_typesarray–Kind of document the deadline came from.
deadline_typesarray–response_due = consultation closes; compliance_deadline = firms must have complied; effective_date = rule takes effect.
firm_typesarray–Records tagged "All Firms" are cross-cutting and match every firm-type filter.
fromstring–Earliest deadline date, YYYY-MM-DD, inclusive.
high_confidence_onlyboolean–Only deadlines extracted with high confidence. Worth setting when the answer will be planned against — a wrong date is worse than no date.
jurisdictionsarray–Lowercase jurisdiction codes. See regmonitoring_get_taxonomy.
limitinteger–Default 50, max 100.
offsetinteger––
regulatorsarray–Lowercase regulator codes. See regmonitoring_get_taxonomy.
statusarray–Derived from the date at query time, never stored. "within_90" means within 90 days but not within 30 — the buckets do not overlap. Omit this and pass from/to for a plain date range.
tostring–Latest deadline date, YYYY-MM-DD, inclusive.

No output schema declared.

No examples provided.

regmonitoring_search_enforcement ~394

Enforcement actions across regulators and jurisdictions, with structured penalty data where it has been parsed: entity penalised, amount, currency, breach categories, and whether the penalty is final. Use for "what has this regulator fined firms for", "has this firm been penalised", or precedent research on a breach type. IMPORTANT: only about a quarter of enforcement records have a parsed penalty amount — extraction requires full source text, which many records lack. Do NOT answer "what are the largest fines" from sort=largest_penalty alone: it ranks only the parsed subset. Check the `note` field, which reports how many actions were excluded. Amounts are never converted between currencies.

NameTypeReqDescription
currencystring–ISO code, e.g. "GBP", "USD", "EUR".
entitystring–Case-insensitive substring of the penalised firm or individual name.
final_onlyboolean–Only penalties recorded as final, excluding proposed or under appeal.
jurisdictionsarray–Lowercase jurisdiction codes.
limitinteger–Default 20, max 100.
min_penaltynumber–Minimum penalty amount, in the currency of the record — amounts are NOT converted between currencies, so combine this with `currency` if you need comparable figures.
offsetinteger––
published_afterstring–YYYY-MM-DD, inclusive.
published_beforestring–YYYY-MM-DD, inclusive.
regulatorsarray–Lowercase regulator codes.
sortstring–Default "newest". "largest_penalty" excludes records with no amount.
with_penalty_amount_onlyboolean–Only records carrying a structured penalty amount. IMPORTANT: this is a small minority of enforcement records — most enforcement actions are indexed without a parsed figure. Leaving this false return…

No output schema declared.

No examples provided.

regmonitoring_search_updates ~542

Search regulatory updates from financial regulators across 20 jurisdictions — news, enforcement actions, consultations, policy statements, guidance, final rules, speeches and warnings, from 2011 to today. Filter by regulator, jurisdiction, topic, sector, firm type, content type, urgency, importance and date. Use published_after to answer "what changed recently"; use significance_min (4+) to cut routine noise. Returns compact records with a canonical regmonitoring.com URL for each — cite it. Call regmonitoring_get_update for the full text and analysis of any single result.

NameTypeReqDescription
content_typesarray–Kind of document.
firm_typesarray–Types of firm affected. Records tagged "All Firms" are cross-cutting and match every firm-type filter, so filtering by "Asset Manager" also returns updates that apply to everyone.
has_analysisboolean–Only records carrying AI analysis (about 89% of the corpus).
jurisdictionsarray–Lowercase jurisdiction codes, e.g. ["uk","us","eu"]. Call regmonitoring_get_taxonomy for the valid list — guessing "UK" or "United Kingdom" returns nothing.
limitinteger–Results to return, default 20, max 100.
offsetinteger–Skip this many results, for paging.
published_afterstring–ISO date (YYYY-MM-DD), inclusive. This is how you answer "what changed this week" — no separate tool is needed.
published_beforestring–ISO date (YYYY-MM-DD), inclusive.
querystring–Free-text search over title and summary. All words must appear (case-insensitive). Omit to browse by filters alone.
regulatorsarray–Lowercase regulator codes, e.g. ["fca","sec","esma"]. See regmonitoring_get_taxonomy.
sectorsarray–Industry segments.
significance_mininteger–Minimum importance, 1 (routine) to 5 (major). Every record is scored, so this is the most reliable way to cut noise. 4+ is "worth a compliance officer's attention".
sortstring–Default "newest". "relevance" ranks by query match and falls back to newest when no query is given.
topicsarray–Regulatory themes. Values are exact, e.g. "AML / Financial Crime".
urgencyarray–Urgency. NOTE: about 35% of records have no urgency set, and filtering on this excludes all of them. Prefer significance_min unless urgency is specifically what you want.

No output schema declared.

No examples provided.

Install

How do I install the Reg Monitoring MCP server?

Reg Monitoring is a hosted endpoint at https://mcp.regmonitoring.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · mcp.regmonitoring.com

# add to Claude Code
claude mcp add --transport http com-regmonitoring-regulatory-updates 'https://mcp.regmonitoring.com/mcp'
Common questions

What is the Reg Monitoring MCP server?

Reg Monitoring is an MCP server listed in the public MCP registry as com.regmonitoring/regulatory-updates. Financial regulatory updates, deadlines and enforcement actions from regulators worldwide. This page covers its hosted endpoint (https://mcp.regmonitoring.com/mcp).

Is the Reg Monitoring MCP server safe to use?

Reg Monitoring scores 69 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Reg Monitoring MCP server expose?

Reg Monitoring exposes 7 tools: regmonitoring_search_updates, regmonitoring_get_update, regmonitoring_list_deadlines, regmonitoring_search_enforcement, regmonitoring_get_taxonomy, and 2 more. Their descriptions and schemas cost roughly 1,891 tokens of context every time the server is loaded.

Does the Reg Monitoring MCP server require authentication?

No. We connected to Reg Monitoring without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Reg Monitoring MCP server still maintained?

Reg Monitoring is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the Reg Monitoring MCP server?

VerifyMCP ran 13 checks on Reg Monitoring, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.