Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Company Intel

REMOTE · API.TIMZININ.COM

9 pay-per-call company intel tools over MCP. Free discovery, calls settle in USDC on Base (x402).

Available components

0 this week 84 Trust /100

Last scanned (2 hours ago)

Scores higher than 88% of remote servers

Reachable. Last reached 6 Nov 2026.

Category CRM and Sales

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security74
  • The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
  • No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation. See how to fix → View diagnostics → Partial
  • HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
  • HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
  • DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
Schema Quality & AI Usability67
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 4490 tokens (~224/item across 20 items; 20 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 20 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 21 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
What we tested

Checks we ran (13)

  • TLS certificate
  • Authorization
  • HTTPS
  • HSTS header
  • DNSSEC
  • Transport
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 6 Nov 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 5 Nov 26 0
    • HSTS header: unverified → fail ▼ security
    • Authorization: unverified → partial ▲ security
    • Injection markers: unverified → pass ▲ security
    • Stability: unverified → pass ▲ security
    • TLS certificate: unverified → pass ▲ security
    • Transport: fail → pass ▲ security
    • Endpoint reachability: unreachable → reachable ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
    • MCP protocol: unverified → pass ▲ functional
  • 4 Nov 26 0
    • Endpoint reachability: reachable → unreachable ▼ security
    • HSTS header: fail → unverified ▼ security
    • Stability: pass → unverified ▼ security
    • Authorization: partial → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • TLS certificate: pass → unverified ▼ security
    • Transport: pass → fail ▼ security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
    • First check of Schema quality: unverified functional
  • 17 Oct 26 +18
    • TLS certificate: unverified → pass ▲ security
  • 16 Oct 26 −18
    • TLS certificate: pass → unverified ▼ security
  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 26 Aug 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 6 Nov 2026 · Probed https://api.timzinin.com/mcp/company-intel

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=api.timzinin.com CN=YE2,O=Let's Encrypt,C=US 25 Sept 2026 24 Dec 2026 ECDSA 256 ECDSA-SHA384 6a81be6512ce92fb1cd3c146aae5613dac3
SANs: api.timzinin.com
CN=YE2,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 4df3b15dd6c0784c507cd37b58e6f115
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of api.timzinin.com. — Not signed

Zone DS Keys Algorithms Outcome
. Trust anchor 20326, 38696 8, 8 Verified
com. DS published 19718 13 Verified
timzinin.com. No DS Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://api.timzinin.com/mcp/company-intel Verified 200
http (plaintext) http://api.timzinin.com/mcp/company-intel HTTPS enforced 301 https://api.timzinin.com/mcp/company-intel
MCP tools · 20 exposed · ~4,307 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
company-hiring-radar ~243

Pull every open role a company is hiring for from its public job board (Greenhouse, Lever, Ashby) and turn it into a buying/expansion signal: role count, which functions are growing (sales, engineering, marketing), remote share and what's new. No login, no scraping, no proxies. — $0.01/call, x402 (USDC on base).

NameTypeReqDescription
companiesarrayyesOne entry per company. Best form is `provider:token` — e.g. `greenhouse:stripe`, `lever:spotify`, `ashby:ramp`. The token is the company's slug on its job board (the part in the careers URL). A bare…
keywordsarray–Highlight roles whose title, department or function contains any of these words (e.g. `sales`, `marketing`, `growth`). Matched roles are returned separately in `matchedRoles`.
maxConcurrencyinteger–How many companies to check in parallel.
newWindowDaysinteger–A role counts as new if it was first published within this many days.

No output schema declared.

No examples provided.

company-lookup ~184

Turn a domain or company name into one unified company card: website tech stack (CMS, ecommerce, key tech) for domains, plus a live GLEIF registry match (legal name, jurisdiction, status, LEI). Keyless, no login — built for AI agents and sales. — $0.01/call, x402 (USDC on base).

NameTypeReqDescription
companiesarrayyesCompany domains (e.g. "stripe.com"), legal names (e.g. "Monzo Bank Limited") or LEIs to look up. One row per entry. Add a country hint after a pipe — "stripe.com | US" — to keep the registry match in…
maxConcurrencyinteger–How many companies to look up in parallel.

No output schema declared.

No examples provided.

company-registry-enricher ~229

Turn a company name, LEI or UK company number into an official registry card: legal name, status, jurisdiction, registered address and LEI via GLEIF (free, no key). Optionally add UK directors and SIC codes with your own Companies House API key. — $0.01/call, x402 (USDC on base).

NameTypeReqDescription
companiesarrayyesLegal names, LEIs (20-char code) or UK company numbers to look up. One row per entry. A name can carry a country hint after a pipe — "Monzo Bank Limited | GB" — which is what separates same-named com…
companiesHouseApiKeystring–Your own free UK Companies House API key. When set, GB entities are enriched with directors and SIC codes. Get one at developer.company-information.service.gov.uk. Leave empty to get the GLEIF card o…
maxConcurrencyinteger–How many companies to look up in parallel.

No output schema declared.

No examples provided.

competitor-change-rollup ~216

One card per competitor summarising what changed across several signals in the past week. Partial cards are marked partial and list which signals are missing. — $0.08/call, x402 (USDC on base).

NameTypeReqDescription
baseline_keystring–A name for this watch, in case you want to run more than one watch on the same domain with different settings. Defaults to the domain itself.
company_name_overridestring–By default this Actor guesses the company's ATS token / name from the domain itself (e.g. "stripe.com" -> "stripe") for the hiring and funding checks — this is a best-effort heuristic, not a verified…
domainstringyesThe competitor's domain to watch, e.g. "stripe.com".
role_keywordsarray–Highlight when this competitor is hiring for roles matching these words (passed to our company-hiring-radar Actor).

No output schema declared.

No examples provided.

counterparty-risk-rollup ~295

Screen a counterparty in one call: OFAC + EU sanctions match, GLEIF legal-entity registry, litigation history (US/UK/PL) and a hiring signal from public ATS boards, combined into one row per company with a documented risk score. Keyless sources only. — $0.03/call, x402 (USDC on base).

NameTypeReqDescription
checksarray–Which of the four checks to run per company. Sanctions and registry are fast (shared cached list + one API call); litigation and hiring each add one more API call per company.
companiesarrayyesCompany legal names to assess, one per row (a Legal Entity Identifier is also accepted for the registry check). One dataset row comes out per company, combining every check you selected below.
jurisdictionHintstring–Optional ISO country code, e.g. "GB", "DE", "PL". Narrows the registry lookup to that country and picks which litigation source is queried (GB/UK -> UK case law, PL -> Poland SAOS, anything else -> U…
maxConcurrencyinteger–How many companies to assess in parallel.

No output schema declared.

No examples provided.

email-verifier ~85

Checks email addresses: syntax, domain, and whether the domain publishes mail exchangers. Where mailbox-level existence cannot be established, the field is null rather than a guess. — $0.02/call, x402 (USDC on base).

NameTypeReqDescription
emailsarrayyesEmail addresses to verify.
maxConcurrencyinteger–How many emails to check in parallel.

No output schema declared.

No examples provided.

funding-alert ~306

Watches funding announcements for a saved filter and returns only what changed since the previous check. The first run on a new filter creates the baseline and says so. — $0.05/call, x402 (USDC on base).

NameTypeReqDescription
baseline_keystring–A name for THIS watch, so you can run several independent filing watches from one Actor (e.g. "ai-startups", "biotech-seed") without one overwriting another's memory of what's already been seen. Each…
limitinteger–Max number of filings requested per query, per run.
max_itemsinteger–Caps how many NEW-filing rows a single run will deliver and charge for, even if more were found.
queriesarrayyesCompany names or sector keywords to watch for new SEC Form D filings (e.g. "artificial intelligence", "biotech", or a specific company name). Every scheduled run re-checks these same queries and repo…
sinceDaysinteger–Only consider filings from the last N days when checking for matches — keep this generous (well beyond your run schedule) so a filing near the edge of the window is never missed because of clock drif…

No output schema declared.

No examples provided.

funding-round-tracker ~171

Track recent SEC Form D filings by company name or sector keyword — the notice a company files when it raises private capital. Official SEC EDGAR full-text search, free, no API key or login. Get company, filing date and a direct document URL for every match. — $0.02/call, x402 (USDC on base).

NameTypeReqDescription
limitinteger–Max number of filings to return per query.
maxConcurrencyinteger–How many queries to process in parallel.
queriesarrayyesCompany names or sector keywords to watch for new Form D filings (e.g. `artificial intelligence`, `biotech`, or a specific company name). One or more filing rows per query.
sinceDaysinteger–Only include filings from the last N days.

No output schema declared.

No examples provided.

hiring-trend-index ~323

A cross-section of hiring demand by role and geography, assembled from several job sources in one call. Partial results are marked partial and list what is missing. — $0.05/call, x402 (USDC on base).

NameTypeReqDescription
new_window_daysinteger–For company slices, how many days back a posting still counts as "new" in the underlying company-hiring-radar signal. Has no effect on board slices.
slicesarrayyesWhat to snapshot and track. Two forms: "company:<ats-provider>:<token>" (e.g. "company:greenhouse:gitlab", "company:ashby:ramp") pulls a company's own public job board via this Actor's own live compa…
watch_keystring–A name for THIS set of watches, so you can run several independent hiring-trend watches from one Actor without one overwriting another's memory of what it last saw. Scoped to YOUR OWN Apify account.…

No output schema declared.

No examples provided.

intent-signal-aggregator ~165

Is this company in-market right now? Combines public hiring activity (Greenhouse, Lever, Ashby) and recent news (funding, launches, partnerships) into one intent score per company. No login, no API keys, no proxies. — $0.01/call, x402 (USDC on base).

NameTypeReqDescription
companiesarrayyesOne entry per company. Forms: `greenhouse:stripe` / `lever:x` / `ashby:y` (hiring signal from an ATS token), a plain company name like `Microsoft` (news signal only), or `Name|greenhouse:token` to ge…
maxConcurrencyinteger–How many companies to check in parallel.

No output schema declared.

No examples provided.

layoff-tracker ~155

Track recent tech layoffs by company name or sector (e.g. "fintech", "AI") straight from Google News — a demand and recruiting signal. No login, no scraping, no proxies. Returns matched headlines, mention count and a one-line summary per query. — $0.01/call, x402 (USDC on base).

NameTypeReqDescription
maxConcurrencyinteger–How many queries to check in parallel.
queriesarrayyesOne entry per company name (e.g. "Google") or sector (e.g. "tech", "fintech"). Each is searched as "{query} layoffs" in Google News.
sinceDaysinteger–Only count news published within this many days.

No output schema declared.

No examples provided.

lead-list-qualifier ~234

Scores domains for buying readiness from several of our own signal sources in one call. Identity confidence is reported honestly as guessed when no override is supplied. — $0.05/call, x402 (USDC on base).

NameTypeReqDescription
company_name_overridesobject–By default this Actor guesses each domain's ATS token / company name from the domain itself (e.g. "stripe.com" -> "stripe") for the hiring and funding checks — this is a best-effort heuristic, not a…
domainsarrayyesCompany domains to score (e.g. "stripe.com"). Each domain fires 4 parallel checks (tech stack, hiring, funding mentions, contact info), so this is capped at 25 per run.
role_keywordsarray–Highlight domains currently hiring for roles matching these words (passed to our company-hiring-radar Actor, e.g. "sales", "marketing"). Leave empty to skip role matching.

No output schema declared.

No examples provided.

litigation-check ~371

Screen a company for litigation history across US federal dockets (CourtListener), UK case law and Polish court judgments. Keyless, one row per company x jurisdiction, with the true case count and links to the source records. — $0.03/call, x402 (USDC on base).

NameTypeReqDescription
companiesarrayyesLegal names of companies / counterparties to screen for litigation history. One row is produced per company per selected jurisdiction, up to your run's maximum charge (maxTotalChargeUsd) — if that bu…
jurisdictionsarray–Which court systems to check: US, UK, PL. US = federal PACER dockets via CourtListener (structural party-name search). UK = England & Wales / UK Supreme Court case law (structural party-name search,…
maxCasesPerRowinteger–How many individual cases to list per company x jurisdiction row. caseCount reports the true total matched for US/PL (approximate above ~2000 matches — CourtListener's own count estimate), even when…
maxConcurrencyinteger–How many companies to check in parallel. Each company's selected jurisdictions are always fetched in parallel with each other regardless of this setting.

No output schema declared.

No examples provided.

new-company-detector ~151

Find newly-incorporated UK companies matching a keyword, read from Companies House's public advanced-search results (active companies incorporated in the last ~60 days by default). No API key, no login, no proxies. — $0.02/call, x402 (USDC on base).

NameTypeReqDescription
itemsarrayyesCompany-name keywords to search for (e.g. "capital", "ai", "consulting"). One entry per keyword; each returns every active company whose name contains it and that was incorporated within the search w…
maxConcurrencyinteger–How many keywords to search in parallel.
windowDaysinteger–Only return companies incorporated within this many days of today.

No output schema declared.

No examples provided.

patent-monitor ~241

Watch keywords or technologies for newly granted US patents. Bring your own free PatentsView API key — get patent id, title, grant date, assignee and a direct Google Patents link for every match, sorted by most recent. Official PatentsView Search API (USPTO-backed). — $0.02/call, x402 (USDC on base).

NameTypeReqDescription
limitinteger–How many patents to fetch per query, most recently granted first.
maxConcurrencyinteger–How many queries to process in parallel.
patentsviewApiKeystring–Optional. Leave empty to use the keyless Google Patents source (worldwide). Provide your own free PatentsView key (https://patentsview.org/query-builder) to use the official USPTO-backed source (US p…
queriesarrayyesTech keywords or technologies to watch (e.g. `quantum computing`, `mRNA vaccine`). One or more matching patent rows per query.
sinceDaysinteger–Only include patents granted within N days.

No output schema declared.

No examples provided.

pricing_info ~44

Free — list every paid tool in the 'company-intel' bundle with its price, payTo address and network. Call this first if you don't have a wallet ready yet.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

sanctions-screening ~179

Screen names against the live OFAC SDN and EU consolidated sanctions lists. Keyless, no login — flags potential hits with a match score so you can review before onboarding a client or counterparty. — $0.01/call, x402 (USDC on base).

NameTypeReqDescription
maxConcurrencyinteger–How many names to screen in parallel.
minScorenumber–Only report candidate matches scoring at or above this (0 = report everything, 1 = only a full token match). Kept soft on purpose — a missed hit is worse than a false one. At the default 0.5, a two-w…
namesarrayyesPerson or company names to screen against the OFAC SDN and EU consolidated sanctions lists, one per row.

No output schema declared.

No examples provided.

sanctions-update-alert ~298

Re-screens a saved watchlist against sanctions lists and returns only the entries whose status changed since the previous check. The first run creates the baseline and says so. — $0.05/call, x402 (USDC on base).

NameTypeReqDescription
baseline_keystring–A name for THIS watch, so you can run several independent screening watches from one Actor (e.g. "vendor-list", "new-hires") without one overwriting another's memory of what's already been seen. Each…
max_itemsinteger–Caps how many new-hit / changed-hit rows a single run will deliver and charge for, even if more were found.
minScorenumber–Only consider candidate matches scoring at or above this (0 = everything, 1 = only a full token match). Kept soft on purpose — a missed hit is worse than a false one.
namesarrayyesPerson or company names to watch against the OFAC SDN and EU consolidated sanctions lists, one per row. Every scheduled run re-screens these same names and reports ONLY what changed since a previous…

No output schema declared.

No examples provided.

taiwan-company-kyb-lookup ~214

Resolve Taiwan companies (統一編號 or legal name) to an evidence-backed KYB card from the official MOEA GCIS open-data registry. Free structural checks, free not-found/ambiguous/error outcomes; billed only for a complete, unambiguous company card. — $0.01/call, x402 (USDC on base).

NameTypeReqDescription
companiesarrayyesOne to 100 companies. Give either unifiedBusinessNumber or legalNameZhTw for each entry, never both.
includeBoardboolean–Whether to also fetch the company's board of directors/supervisors and shareholding from the registry. This is personal-data-bearing: names and shareholding of living people. Turn off to request only…
maxConcurrencyinteger–Companies processed concurrently only in local non-monetized runs. On-platform source work and paid delivery are sequential regardless of this value, and every request to the registry is paced conser…

No output schema declared.

No examples provided.

website-contact-extractor ~203

Extract public contacts a company posted on its own site: email, phone, social links — with an honesty check that flags third-party/placeholder addresses instead of selling them as the company's own. — $0.02/call, x402 (USDC on base).

NameTypeReqDescription
checkPagesarray–Override which subpages to visit per domain (each must start with `/`, or be empty for the homepage). Default: homepage, /contact, /contact-us, /about (+ /impressum automatically for .de/.at/.ch doma…
domainsarrayyesCompany domains or URLs to check (e.g. `example.com` or `https://example.com`). Path/query is ignored — the Actor visits its own fixed set of pages (home, contact, about).
maxConcurrencyinteger–How many domains to check in parallel.
maxPagesPerDomaininteger–How many pages to visit per domain at most.

No output schema declared.

No examples provided.

Install

How do I install the Company Intel MCP server?

Company Intel is a hosted endpoint at https://api.timzinin.com/mcp/company-intel, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · api.timzinin.com

# add to Claude Code
claude mcp add --transport http com-timzinin-api-company-intel 'https://api.timzinin.com/mcp/company-intel'
Common questions

What is the Company Intel MCP server?

Company Intel is an MCP server listed in the public MCP registry as com.timzinin.api/company-intel. 9 pay-per-call company intel tools over MCP. Free discovery, calls settle in USDC on Base (x402). This page covers its hosted endpoint (https://api.timzinin.com/mcp/company-intel).

Is the Company Intel MCP server safe to use?

Company Intel scores 84 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Company Intel MCP server expose?

Company Intel exposes 20 tools: pricing_info, company-hiring-radar, company-lookup, company-registry-enricher, competitor-change-rollup, and 15 more. Their descriptions and schemas cost roughly 4,307 tokens of context every time the server is loaded.

Does the Company Intel MCP server require authentication?

No. We connected to Company Intel without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Company Intel MCP server still maintained?

Company Intel is still listed as active in the MCP registry. We last reached this channel on 6 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the Company Intel MCP server?

VerifyMCP ran 13 checks on Company Intel, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.