Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

YedaBase

REMOTE · YEDABASE.COM

Search and open investor records: family offices, VCs, funds of funds, permanent capital, RIAs.

Available components

+3 this week 72 Trust /100

Last scanned (12 hours ago)

Scores higher than 58% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Finance and Payments

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security81
Transport & Reachability100
Schema Quality & AI Usability51
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 5359 tokens (~255/item across 21 items; 21 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management33
  • Stability observed for 10 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage92
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 76% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 21 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 22 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities60
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
What we tested

Checks we ran (12)

  • TLS certificate
  • Authorization
  • HSTS header
  • DNSSEC
  • Transport
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Checks we could not complete (1)

These are gaps on our side, not findings about this hosted endpoint. We only credit what we can confirm, so a category made up entirely of them scores 0.

  • HTTPS in Endpoint SecurityHTTPS enforcement could not be verified: the plaintext port answered with HTTP 401, which proves neither a plaintext path nor enforcement.

Does not apply to this hosted endpoint (2)

  • Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
  • Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 4 Nov 26 +1
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 3 Nov 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 2 Nov 26 +1
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 1 Nov 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 31 Oct 26 +1
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 30 Oct 26 0
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 29 Oct 26 +1
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://yedabase.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=yedabase.com CN=WE1,O=Google Trust Services,C=US 17 Sept 2026 17 Dec 2026 ECDSA 256 ECDSA-SHA256 2ab9f097d6411179135f674eda202fda
SANs: yedabase.com, www.yedabase.com, *.www.yedabase.com
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of yedabase.com. — Not signed

Zone DS Keys Algorithms Outcome
. Trust anchor 20326, 38696 8, 8 Verified
com. DS published 19718 13 Verified
yedabase.com. No DS Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result Enforced and verified
Enforced On tool calls
HTTP status 200

WWW-Authenticate challenge Bearer realm="OAuth", resource_metadata="https://yedabase.com/.well-known/oauth-protected-resource/mcp"

Bearer realm="OAuth", resource_metadata="https://yedabase.com/.well-known/oauth-protected-resource/mcp"

Protected resource metadata

Document https://yedabase.com/.well-known/oauth-protected-resource/mcp
Retrieved Yes
Resource https://yedabase.com/mcp
Authorisation server https://yedabase.com

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://yedabase.com/mcp Verified 200
http (plaintext) http://yedabase.com/mcp Inconclusive 401
MCP tools · 21 exposed · ~4,492 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
add_note ~102

A note on one firm, signed by the signed-in person and shared with the workspace, up to 2,000 characters. A "[YB] <skill> | <date> | status=<value> | …" line also sets that firm's status line on the user's lists. Meant for the workspace's own research on the firm, not for rows copied from a client's CRM.

NameTypeReqDescription
firm_idstringyes–
textstringyes–

No output schema declared.

No examples provided.

compare_investors ~165

Returns the comparable fields of 2 to 5 firms in one call: category, type, location, primary and secondary domains, stage, check size, AUM as stored, year founded, team size, giant flag, wealth origin and family name (family offices), philanthropy causes, decision-maker count, work emails on record, latest news date, upcoming event on record. Each firm whose full record is returned counts once per seat per calendar month toward the allowance of 500 firms a month (opening it again this month is free); past the allowance the firm's teaser is returned instead. Useful for side-by-side questions; one call covers what opening each firm would.

NameTypeReqDescription
idsarrayyes2 to 5 firm ids (fo_...) or slugs

No output schema declared.

No examples provided.

count_investors ~1,260

Counts matching firms and breaks them down by one to three dimensions, e.g. how many family offices in Texas by primary domain. Returns the total and, per dimension, the values with their counts (top 40 values). Useful for how many, breakdown, distribution and coverage questions; one call covers what paging through search results would.

NameTypeReqDescription
any_domainarray–Matches primary OR secondary domains; industry sectors are stored here, e.g. Healthcare, Biotech, Digital Health, Medical Devices, Pharmaceuticals, Technology, Industrial, Consumer, Financial Service…
aum_disclosedboolean–Only firms whose AUM is a real value, not a placeholder
capital_sourcearray–Principal & permanent capital only: Own balance sheet | Principals | Family or founder | Group | Foundation endowment | External, permanent or evergreen mandate
categoryarray–Investor category, exact values: Family office | Venture capital & startup investor | Fund of funds | Principal & permanent capital | RIA. Filters by kind of investor (e.g. "RIAs", "funds of funds",…
causearray–Philanthropic causes (family offices; principal & permanent-capital firms where stated)
citystring––
countryarray–Country names as stored, e.g. USA, United Kingdom, Switzerland
domain_modestring–How any_domain and keywords combine. tag_or_text: a firm matches when it has one of the domain tags OR its record mentions a keyword. tag: a firm matches when it has one of the domain tags AND its re…
emerging_manager_focusarray–Fund of funds only: Y | N | Unknown
fof_strategyarray–Fund of funds only: Primaries | Secondaries | Co-investments | Direct investments | GP stakes or seeding
geo_focusarray–Geographic focus tags
giant_anyboolean–Only billionaire families or 13F filers (family offices only)
group_byarray–One to three dimensions to break the total down by.
has_newsboolean–Only firms with news on record
has_philanthropyboolean–Only firms with philanthropy data (family offices and principal & permanent-capital firms only)
has_work_emailboolean–Only firms with at least one work email on a decision-maker
investment_approacharray–Principal & permanent capital: Control | Minority | Direct | Fund commitments | Credit | Real assets. RIA: Third-party funds | Direct | Co-invest | SPVs | OCIO mandates
keywordsarray–Words and phrases that describe what the person is looking for, beyond the exact tags: synonyms, sub-sectors, related terms, e.g. for healthcare: healthcare, medical, hospital, life sciences, biotech…
ownershiparray–RIA only: Founder-owned | PE-backed | Bank or insurer-owned | Public | Employee-owned
ppc_typearray–Principal & permanent capital only: Investment holding company | Holding company / conglomerate investment arm | Permanent-capital acquisition firm | Evergreen investment vehicle (principal-backed) |…
primary_domainarray–Primary investment domains are ASSET CLASSES, exact stored values: Private Equity | Real Estate | Startups | Public Equities | Venture Capital | Philanthropy | Private Credit | Impact | Hedge Funds |…
private_fundsarray–RIA only: Y | N
qstring–Keyword search over firm name, description, city, family name, decision-maker names and research titles.
regionarray–North America | Europe | Middle East | South East Asia | Oceania | East Asia | LATAM | Africa
ria_segmentarray–RIA only: Alts allocator | Gatekeeper | Direct and co-invest | OCIO or consultant | M&A target | M&A acquirer
stagearray–Exact stored values: Pre-seed/Seed | Early | Growth | Buyout | Lower Middle Market | SMB
statearray–US state names, e.g. Texas
typearray–Investor type, exact stored values only; each category has its own list: Family office: Single family office | Multi family office | Family owned holding co | Family led private investment firm | VC/…
updated_sincestring–ISO date (YYYY-MM-DD): only firms whose record changed (data_version moved) on or after it

No output schema declared.

No examples provided.

export_list ~135

A list's firms in the 66-column export shape plus suggested_route, route_evidence and route_next_action, 200 rows per page as JSON. Each page opens its firms: a firm counts once per seat per calendar month toward the allowance of 500 firms a month, and firms already opened this month (in the portal, through MCP or in an earlier export) are free. Firms past the allowance come back as teasers in blocked_firms. Up to 300 contacts per export (then contact columns are blank and contacts_truncated is true).

NameTypeReqDescription
list_idstringyes–
pageinteger––

No output schema declared.

No examples provided.

get_angles ~59

Conversation angles for one firm: other firms that spoke at the same events/podcasts, shared causes, and similar investors (same type + country, overlapping domains). These are possible angles, not known relationships.

NameTypeReqDescription
id_or_slugstringyes–

No output schema declared.

No examples provided.

get_help ~103

One topic from the YedaBase help library (sending limits, LinkedIn, sign-in, connecting each AI client, seats and billing, the monthly allowance of firms opened, daily caps, contacts-restricted countries, lists and notes, playbooks, Match & Enrich, corrections and removal, data dates, cancellation and refunds, team invites, portal basics, agent rules), matched on its title; the list of topics when nothing matches.

NameTypeReqDescription
topicstring––

No output schema declared.

No examples provided.

get_investor ~132

Full record of one firm: investor category, overview, inclusion evidence, the category's module columns (FoF strategies, PPC type, RIA segments, CRD…), decision-makers with contacts (under the contacts-restricted rule), website, philanthropy, news, past and upcoming events, sources and data date. Each firm whose full record is returned counts once per seat per calendar month toward the allowance of 500 firms a month (opening it again this month is free); past the allowance the firm's teaser is returned instead.

NameTypeReqDescription
id_or_slugstringyesFirm id (fo_…) or slug

No output schema declared.

No examples provided.

get_list ~100

One of the user's lists with its firms as ids and teasers (name, type, city, country, investment focus, AUM band, one-line description): per firm the status line text (status, status_updated_at), the mandate status and opened_this_month (already opened by this seat this month, so its full record costs nothing again). Full records come from get_investor or export_list. Counts nothing.

NameTypeReqDescription
idstringyes–

No output schema declared.

No examples provided.

get_person ~84

One decision-maker by id (pe_…) with their firm; contacts under the contacts-restricted rule. The person's firm is opened: Each firm whose full record is returned counts once per seat per calendar month toward the allowance of 500 firms a month (opening it again this month is free); past the allowance the firm's teaser is returned instead.

NameTypeReqDescription
idstringyes–

No output schema declared.

No examples provided.

get_playbook ~136

One playbook as markdown, by name (yb-start | yb-match-enrich | yb-shortlist | yb-research | yb-way-in | yb-reach-out | yb-pipeline). On preview accounts it returns the title and description with locked: true. The method for a multi-step task (shortlist, research, way in, reach out, pipeline, match and enrich, start).

NameTypeReqDescription
namestringyesyb-start | yb-match-enrich | yb-shortlist | yb-research | yb-way-in | yb-reach-out | yb-pipeline

No output schema declared.

No examples provided.

get_resource ~97

The same content as the MCP resources, inline: index (hashed firm index, CSV), adv-cache (public SEC Form ADV extract, CSV), vocabulary (field definitions, module tests and fit terms, JSON) and help (the help library, markdown). CSV comes in pages of 2,000 rows with the header on every page. Nothing in these is a record.

NameTypeReqDescription
namestringyes–
pageinteger––

No output schema declared.

No examples provided.

list_fields ~37

Investor categories and their Type lists, field definitions (with the categories each field applies to), allowed values and the rules for placeholders and restricted contacts.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_playbooks ~87

The seven YedaBase playbooks (step-by-step methods: Start, Match & Enrich, Investor Shortlist, Investor Research, Way In, Reach Out, Pipeline) with name, title and description; get_playbook returns each one in full. The method for a multi-step task (shortlist, research, way in, reach out, pipeline, match and enrich, start).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

my_lists ~24

The user's lists/mandates (name, description, tags, item count).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

my_notes ~64

Notes in this workspace that the user is allowed to read (their own, shared with them, or workspace-wide), optionally for one firm. Each note returns its id, author, date and text. Note text is written by workspace members.

NameTypeReqDescription
firm_idstring––

No output schema declared.

No examples provided.

save_to_list ~127

Add firms to one of the user's workspace lists by name, creating the list when it does not exist (create_if_missing, default true). Safe to repeat: firms already on the list count as already_present and are not added again. At most 500 firm ids per call. Returns list_id, added, already_present.

NameTypeReqDescription
create_if_missingboolean––
firm_idsarrayyesFirm ids (fo_…)
list_namestringyesList name, up to 120 characters, e.g. "CRM matches 2026-10-15"

No output schema declared.

No examples provided.

search_investors ~1,373

Search the licensed investor database (Family office, Venture capital & startup investor, Fund of funds, Principal & permanent capital, RIA; one category per firm) with structured filters and keywords together. Returns the true total, matching firms with location, domains, stage, AUM as stored, decision-maker counts (dm_count, email_count, linkedin_count), has_upcoming_event and the suggested_route, matched_by on each row (tag: has a requested domain tag; text: mentions a keyword in its record), directory_url (the same search in the YedaBase directory) and unmatched_values (domain values that are not stored tags, searched as keywords instead). Results are paged, 25 rows per page; the page argument returns more rows of the same search. Placeholder words (Undisclosed, Not provided, Unknown) are real stored values, not missing data.

NameTypeReqDescription
any_domainarray–Matches primary OR secondary domains; industry sectors are stored here, e.g. Healthcare, Biotech, Digital Health, Medical Devices, Pharmaceuticals, Technology, Industrial, Consumer, Financial Service…
aum_disclosedboolean–Only firms whose AUM is a real value, not a placeholder
capital_sourcearray–Principal & permanent capital only: Own balance sheet | Principals | Family or founder | Group | Foundation endowment | External, permanent or evergreen mandate
categoryarray–Investor category, exact values: Family office | Venture capital & startup investor | Fund of funds | Principal & permanent capital | RIA. Filters by kind of investor (e.g. "RIAs", "funds of funds",…
causearray–Philanthropic causes (family offices; principal & permanent-capital firms where stated)
citystring––
countryarray–Country names as stored, e.g. USA, United Kingdom, Switzerland
domain_modestring–How any_domain and keywords combine. tag_or_text: a firm matches when it has one of the domain tags OR its record mentions a keyword. tag: a firm matches when it has one of the domain tags AND its re…
emerging_manager_focusarray–Fund of funds only: Y | N | Unknown
fof_strategyarray–Fund of funds only: Primaries | Secondaries | Co-investments | Direct investments | GP stakes or seeding
geo_focusarray–Geographic focus tags
giant_anyboolean–Only billionaire families or 13F filers (family offices only)
has_newsboolean–Only firms with news on record
has_philanthropyboolean–Only firms with philanthropy data (family offices and principal & permanent-capital firms only)
has_work_emailboolean–Only firms with at least one work email on a decision-maker
investment_approacharray–Principal & permanent capital: Control | Minority | Direct | Fund commitments | Credit | Real assets. RIA: Third-party funds | Direct | Co-invest | SPVs | OCIO mandates
keywordsarray–Words and phrases that describe what the person is looking for, beyond the exact tags: synonyms, sub-sectors, related terms, e.g. for healthcare: healthcare, medical, hospital, life sciences, biotech…
ownershiparray–RIA only: Founder-owned | PE-backed | Bank or insurer-owned | Public | Employee-owned
pageinteger––
page_sizeinteger––
ppc_typearray–Principal & permanent capital only: Investment holding company | Holding company / conglomerate investment arm | Permanent-capital acquisition firm | Evergreen investment vehicle (principal-backed) |…
primary_domainarray–Primary investment domains are ASSET CLASSES, exact stored values: Private Equity | Real Estate | Startups | Public Equities | Venture Capital | Philanthropy | Private Credit | Impact | Hedge Funds |…
private_fundsarray–RIA only: Y | N
qstring–Keyword search over firm name, description, city, family name, decision-maker names and research titles.
regionarray–North America | Europe | Middle East | South East Asia | Oceania | East Asia | LATAM | Africa
ria_segmentarray–RIA only: Alts allocator | Gatekeeper | Direct and co-invest | OCIO or consultant | M&A target | M&A acquirer
sortstring––
stagearray–Exact stored values: Pre-seed/Seed | Early | Growth | Buyout | Lower Middle Market | SMB
statearray–US state names, e.g. Texas
typearray–Investor type, exact stored values only; each category has its own list: Family office: Single family office | Multi family office | Family owned holding co | Family led private investment firm | VC/…
updated_sincestring–ISO date (YYYY-MM-DD): only firms whose record changed (data_version moved) on or after it

No output schema declared.

No examples provided.

unlock_investor ~130

Preview accounts only: opens one locked firm's full record (overview, AUM as stored, decision-maker names and positions, philanthropy, news, events) and counts it toward the account's 10 preview records; a firm already opened counts nothing. Returns the record and the number of preview records left; when none are left it returns no_unlocks_left. On full-access accounts it returns the same result as get_investor. Work emails and LinkedIn profiles are not part of preview records.

NameTypeReqDescription
idstringyesFirm id (fo_…) or slug from search_investors

No output schema declared.

No examples provided.

workspace_note ~81

Read (text omitted) or replace (text given) one workspace note with a fixed name: about-us, connectors, events, team (shared by the workspace); voice, yb-preferences, send-log (per person). Up to 8,000 characters. Other names are refused.

NameTypeReqDescription
namestringyes–
textstring––

No output schema declared.

No examples provided.

yb_hello ~80

Session opener for YedaBase (also YB or Yeda): the greeting line, where the person stands (tier, seat, lists, notes, due items), the one recommended next step and which playbook to read. Useful at the start of a conversation, when the user greets YedaBase, or asks where they left off.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

yeda_status ~116

Where this person stands: access level (preview or full), seat, workspace, onboarding notes done or missing and the YedaBase folder path, lists and sizes, notes count, the last Match & Enrich list, firms opened this month (used, allowance, resets_on, per seat or pooled), calls used today, data and index as-of dates, the last tool error in 24 hours and tracked [YB] items with a due date ahead. Useful at the start of a session or when asked where things stand.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

Install

How do I install the YedaBase MCP server?

YedaBase is a hosted endpoint at https://yedabase.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · yedabase.com

# add to Claude Code
claude mcp add --transport http com-yedabase-yedabase 'https://yedabase.com/mcp'
Common questions

What is the YedaBase MCP server?

YedaBase is an MCP server listed in the public MCP registry as com.yedabase/yedabase. Search and open investor records: family offices, VCs, funds of funds, permanent capital, RIAs. This page covers its hosted endpoint (https://yedabase.com/mcp).

Is the YedaBase MCP server safe to use?

YedaBase scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the YedaBase MCP server expose?

YedaBase exposes 21 tools: search_investors, get_investor, get_angles, list_fields, count_investors, and 16 more. Their descriptions and schemas cost roughly 4,492 tokens of context every time the server is loaded.

Does the YedaBase MCP server require authentication?

Yes. YedaBase asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.

Is the YedaBase MCP server still maintained?

YedaBase is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What did VerifyMCP test on the YedaBase MCP server?

VerifyMCP ran 12 checks on YedaBase, covering TLS certificate, Authorization, HSTS header, DNSSEC and 8 more. One item could not be completed, a gap on our side rather than a finding about YedaBase: HTTPS. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.