Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Company Facts

REMOTE · COMPANYFACTS.DEV · 2 COMPONENTS

Company data from official sources: new US businesses, registers, tech stack, open jobs, SEC.

67 Trust /100

Last scanned (6 hours ago)

Scores higher than 53% of remote servers

Reachable. Last reached 5 Nov 2026.

Category CRM and Sales

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability100
Schema Quality & AI Usability62
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 5028 tokens (~239/item across 21 items; 21 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management17
  • Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 21 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 22 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.

  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

  • 1 Nov 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “read_page” rewrote its description, which is the text the model reads security
    • Stability: unverified → 0.03 ▲ functional
    • New tool “find_x402_api” functional
  • 31 Oct 26 65

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://companyfacts.dev/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=companyfacts.dev CN=WE1,O=Google Trust Services,C=US 30 Oct 2026 28 Jan 2027 ECDSA 256 ECDSA-SHA256 fc9b544fc393173a13cd998182b370d1
SANs: companyfacts.dev, *.companyfacts.dev
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of companyfacts.dev. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
dev. present 60074 8 Verified
companyfacts.dev. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://companyfacts.dev/mcp Verified 200
http (plaintext) http://companyfacts.dev/mcp Inconclusive 405
MCP tools · 21 exposed · ~4,716 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
app_store_lookup ~337

Search the Apple App Store, look apps up by id or bundle id, read customer reviews, or get the top free, paid and grossing charts, per country. Returns name, developer, price, rating, rating count, version, genres and the App Store link.

NameTypeReqDescription
bundle_idstring–lookup and reviews: bundle ids such as net.whatsapp.WhatsApp, up to 5 for lookup
categorystring–top_charts: all (default) or a category such as games, finance, productivity, health-and-fitness
chartstring–top_charts: top-free (default), top-paid or top-grossing
countrystring–Two letter App Store storefront code (default us)
idsstring–lookup and reviews: App Store ids (or apps.apple.com links), up to 50 for lookup, comma separated
include_descriptionstring–true to add the description and release notes to app records
max_resultsstring–How many results, 1 to 50 (search 10, charts 25, reviews 50 by default)
modestring–search, lookup, reviews or top_charts. Defaults to search when term is given, lookup when ids or bundle_id is given, top_charts when chart is given
pagestring–reviews: page of 50 reviews, 1 to 10 (default 1)
review_sortstring–reviews: mostrecent (default) or mosthelpful
termstring–search mode: keywords

No output schema declared.

No examples provided.

check_email ~80

Is this address worth sending to: syntax, whether the domain exists and has mail servers, and whether it is a throwaway, role (info@, sales@) or free-provider address. It never contacts the mailbox, so a missing mailbox at a real domain still passes, and the answer says so.

NameTypeReqDescription
emailstringyesOne email address.

No output schema declared.

No examples provided.

company_lookup ~199

One company in one call, from its domain: registrar, DNS and email provider, the website's tech stack, and hiring from its own job board (open roles by department and place, salary ranges, roles opened or closed lately). Add name and country for the official register entry, or ticker for SEC figures. Each part links to its source; a part with nothing to report says why.

NameTypeReqDescription
countrystring–Register for the name: gb, no, fr, fi, cz, sk, ie, au, us (US entities with an LEI, any state), or global (LEI). Needs name.
domainstringyesThe company's website domain, URL or an email address at it.
namestring–Company name. Improves the hiring match, and with country adds the official register entry.
tickerstring–Stock ticker or SEC CIK, to add reported revenue from SEC filings.

No output schema declared.

No examples provided.

company_search ~313

Finds companies across everything we track: newly formed New York, Colorado, Oregon, Connecticut and Pennsylvania businesses with a website found with proof, and every FDIC-insured bank in any state. Filter by state, source, city, name, formation date, technology on their site (for example Shopify or WordPress), whether they publish a phone, role inbox or contact page, and hiring. Returns register details, website, technologies and job board, newest first. No match is never charged.

NameTypeReqDescription
citystring–City as the register gives it, not case sensitive.
formed_sincestring–Formed on or after, YYYY-MM-DD.
formed_untilstring–Formed on or before, YYYY-MM-DD.
hasstring–Keep companies whose site publishes these: any of phone, role_email, contact_page.
hiringstring–true for companies with open roles on a job board we read, false for none.
limitinteger–Companies per page, 1 to 100. Default 25.
namestring–Part of the legal name.
offsetinteger–Skip this many, for the next page.
sourcestring–Where the company came from: state_register (new businesses) or fdic (banks), comma separated.
statestring–Two-letter US state codes, comma separated.
techstring–Technology names on the home page, comma separated; all must be present.

No output schema declared.

No examples provided.

compare_companies ~93

Open jobs across several companies at once, in one schema. This is the thing no single applicant-tracking system can do: each vendor only knows about its own customers. Companies on different systems come back with the same field names. One company failing does not lose the others.

NameTypeReqDescription
companiesarrayyesUp to 20 company board names or careers URLs.
per_companyinteger–Maximum postings per company.

No output schema declared.

No examples provided.

detect_tech_stack ~114

Fetch one web page and report the technologies behind it (CMS, ecommerce platform, analytics, CDN, web server, frameworks, payment processors, email provider) with a confidence and the evidence for each. Reads HTML, headers, cookies and DNS from one page load; it cannot see what only a running browser reveals.

NameTypeReqDescription
min_confidencestring–Hide detections below this confidence, 0 to 100. Default 50.
urlstringyesA domain or a full web address to analyze.

No output schema declared.

No examples provided.

domain_lookup ~101

For one domain: whether it is registered, its registrar, created, updated and expiry dates, status codes and nameservers (from the registry's RDAP server), plus its A, AAAA, MX, NS and TXT records, the email provider behind its MX, and whether it publishes SPF and DMARC. No registrant names or contact details are returned.

NameTypeReqDescription
domainstringyesA domain, URL or email address; the registered domain is used.

No output schema declared.

No examples provided.

extract_page ~158

Read a web page and return the named fields as JSON, using only what the page states; a value the page does not give comes back empty rather than guessed. Name fields, or pass a JSON Schema, or neither for a title, summary and key points. Needs an API key (5 calls from its balance); a failed extraction is refunded.

NameTypeReqDescription
fieldsarray–Field names to fill, e.g. ['price', 'founded', 'ceo']. Letters, digits and underscores.
instructionsstring–Optional guidance, up to 500 characters.
schemaobject–A JSON Schema with type 'object', instead of fields.
urlstringyesFull address, starting http:// or https://.

No output schema declared.

No examples provided.

federal_contracts ~362

Searches awarded US federal contracts on USAspending.gov by agency, keyword and dollar amount, largest first. Recompete mode instead lists contracts expiring soonest within a window (set min_amount to keep the search narrow), with the incumbent and days until expiry. Every record links to the official award page.

NameTypeReqDescription
agencystring–Awarding top-tier agency name. Several names separated by a semicolon.
award_typesstring–Codes separated by commas, from one group (contracts A,B,C,D by default; 02 to 11 are grants and loans).
end_datestring–YYYY-MM-DD. Default today.
expiring_after_daysstring–Recompete mode: skip contracts ending sooner than this, for bid lead time. Default 0.
expiring_within_daysstring–Recompete mode: contracts ending within this many days, 1 to 1825. Default 365.
keywordstring–Free text across award descriptions and recipient names. Up to 500 characters.
limitstring–Awards to return, 1 to 100. Default 25.
min_amountstring–Only awards at or above this many dollars. Recompete mode usually needs this, or an agency or keyword, to be narrow enough.
modestring–search lists awards, largest first; recompete lists contracts about to expire, soonest first. Defaults to recompete when an expiring_ field is set.
start_datestring–YYYY-MM-DD, awards with activity from this date. Default 2024-10-01 (the past year in recompete mode). Not before 2007-10-01.

No output schema declared.

No examples provided.

find_company_board ~131

Find which applicant-tracking system a company's careers page runs on. Greenhouse, Ashby, Lever and Workable all publish open job board APIs, and all of them are unusable unless you already know the company's board name. None publishes a directory of its customers, and none could, since no vendor knows about the others. Use this first when you have a company name rather than a careers URL.

NameTypeReqDescription
companystringyesCompany name or board name, for example 'anthropic' or '1Password'. Case and punctuation do not matter.
limitinteger–Maximum matches to return.

No output schema declared.

No examples provided.

find_x402_api ~281

Say what you need in plain words ('verify an email', 'read a web page', 'company record for a domain') and get the x402 endpoints that do it, best first, ranked only on public facts: wallets that paid it more than once in the last 30 days (Coinbase's CDP catalog), whether it answered our unpaid request with a 402 last night, its price, and PayAI's uptime. Each result has the price, networks, method, and links to re-check every number. No match is never charged.

NameTypeReqDescription
include_downstring–true to also list endpoints that did not answer our last unpaid request with a 402. Default false.
limitinteger–How many endpoints, 1 to 10. Default 5.
max_price_usdnumber–Only endpoints whose catalog price is at most this, in USD.
needstringyesWhat the endpoint should do, in plain words, up to 300 characters.
networkstring–Only endpoints that take payment on this network: base, solana, polygon, arbitrum, optimism, avalanche, algorand, or a CAIP-2 id.
sortstring–proven (default: most returning paying wallets first), cheapest, or fastest (our probe's response time).

No output schema declared.

No examples provided.

hiring_summary ~140

One company's hiring at a glance: open roles counted by department and by location, remote share, salary ranges per currency where the job board publishes pay, and which roles opened or closed in the last 7 or 30 days from a daily record of every board. Reads the company's live Greenhouse, Ashby, Lever or Workable board. Give a company name, board name or careers URL.

NameTypeReqDescription
companystringyesCompany or board name (e.g. stripe), or a careers URL on Greenhouse, Ashby, Lever or Workable.
daysstring–Change window: 7 or 30 days. Default 30.

No output schema declared.

No examples provided.

job_changes ~202

What changed in hiring, day by day: jobs newly posted, taken down, reopened, or edited (title, location or salary), read daily from every job board in the directory. Call it each day with since set to the last day you saw, rather than re-reading every board. Omit companies for the whole market, or filter by kind and title words.

NameTypeReqDescription
companiesarray–Company or board names. Omit for every company in the directory.
kindsarray–Only these kinds of change.
limitinteger–Maximum changes to return.
offsetinteger–Skip this many, to page through a long day.
qstring–Only jobs whose title contains this, e.g. 'engineer'.
sincestring–First day, YYYY-MM-DD. Default: the latest published day.
untilstring–Last day, YYYY-MM-DD. Default: the latest published day.

No output schema declared.

No examples provided.

list_open_jobs ~171

Every open job at one company, read from its own careers system. Returns title, department, location, employment type, workplace type, posted date, a parsed salary range where the employer publishes one, and a verify_url pointing at the employer's own advert. Salaries are refused rather than guessed: an hourly rate, an ambiguous currency, or bands in two currencies all yield no figure, and salary_text keeps whatever the employer wrote.

NameTypeReqDescription
companystringyesA board name ('stripe'), a careers URL ('https://jobs.ashbyhq.com/ramp'), or system:name ('ashby:ramp').
include_descriptionboolean–Include the full job description. Off by default because descriptions are long; contact details are removed either way.
limitinteger–Maximum postings to return.

No output schema declared.

No examples provided.

new_businesses ~538

Searches the official Secretary of State business registers of New York, Colorado, Oregon, Connecticut and Pennsylvania, in one record format. mode new is a feed of entities formed in a date window, newest first: use it for new-business leads (LLCs and corporations that just registered) and prospecting. mode search finds entities by legal name and mode lookup by the state's own entity number: use them for KYB (know your business) checks on a supplier or counterparty, to confirm it exists, its type, status (active, delinquent, inactive) and formation date. Every record links to the state's own data row. Never returns officers, directors, individual registered agents, emails, phones or street addresses: business city, state and ZIP only. Each record carries the company's website when one was found with proof (its own pages show the exact legal name and the same city or state), else 'no website found'. New York, Oregon and Pennsylvania publish active entities only, so a missing entity there may be inactive or unregistered. Pennsylvania publishes monthly, so its newest entities are weeks old. If one state fails the others still return and the failure is listed in missing.

NameTypeReqDescription
entity_numbersstring–The state's own entity numbers, digits only, comma separated, up to 200. Required for mode lookup. Numbers are not unique across states, so pick the state too.
entity_typestring–Keep only one kind of entity: llc, corporation (for profit), nonprofit or partnership. Default any.
limitinteger–Most entities to return across all states, newest first, 1 to 200. Default 50.
modestring–new lists entities formed between since and until, newest first (the default). search finds entities whose legal name contains name. lookup fetches entities by entity_numbers.
namestring–Part of a legal business name, not case sensitive. Required for mode search; in mode new it narrows the feed.
sincestring–Earliest formation date, YYYY-MM-DD. In mode new it defaults to 7 days ago. In other modes it applies only when given.
statesstring–Registers to read: any of NY, CO, OR, CT, PA, comma separated (an array also works). Default all five.
statusstring–Keep only active, active_or_delinquent or inactive entities. Default any. New York, Oregon and Pennsylvania are skipped for inactive.
untilstring–Latest formation date, YYYY-MM-DD, inclusive. In mode new it defaults to today.

No output schema declared.

No examples provided.

read_page ~102

Any public web page or PDF as clean markdown, with its title and final URL after redirects, plus the page's schema.org data (prices, dates) when it has any. robots.txt is honored. Some sites refuse automated readers; those calls fail with the reason and cost nothing.

NameTypeReqDescription
max_charsinteger–Cut the markdown at this length; truncated says whether it was cut.
urlstringyesFull address, starting http:// or https://.

No output schema declared.

No examples provided.

search_company_registry ~203

Searches one country's official company register by name and returns registered companies in one consistent shape: number, legal name, status, legal form, dates, town and postcode, and a link to the register entry. Covers GB, NO, FR, FI, CZ, SK, IE, AU, the worldwide LEI register, and US entities in any state that hold an LEI (with their state filing number). Companies only, no directors or contact details.

NameTypeReqDescription
countrystringyesRegister to search: gb, no, fr, fi, cz, sk, ie, au, us, or global for the LEI register.
limitstring–Most companies to return, 1 to 100. Default 20.
namestringyesCompany name to search for.
statestring–With country us only: the US state the entity was formed in, two letters (de, ny, tx). Default: any state.

No output schema declared.

No examples provided.

search_hacker_news ~347

Search Hacker News stories and comments with date, points and comment-count filters, read the live front page and the top, best, new, ask and show lists in rank order, or read whole comment threads. Every item links back to news.ycombinator.com.

NameTypeReqDescription
content_typestring–search mode: stories (default), comments or both
date_fromstring–Only items from this day on (UTC), YYYY-MM-DD
date_tostring–Only items up to the end of this day (UTC), YYYY-MM-DD
include_storystring–story_comments mode: false to leave the story itself out (default true)
max_itemsstring–How many items, 1 to 50 (default 20; 50 for story_comments; front_page stops at 30)
min_commentsstring–Stories with at least this many comments
min_pointsstring–Stories with at least this many points
modestring–search (default), front_page, top, best, new, ask, show or story_comments
querystring–search mode: keywords. Empty matches everything the filters allow
search_instring–search mode: all (default), title, url or text
sort_bystring–search mode: relevance (default) or date (newest first)
story_idsstring–story_comments mode: up to 5 item ids or news.ycombinator.com links, separated by commas
story_tagstring–any (default), show_hn, ask_hn or poll

No output schema declared.

No examples provided.

search_papers ~424

Search the OpenAlex catalogue of scholarly papers by keyword, look papers up by DOI, list the papers that cite one work, or list a university's or journal's papers. Returns title, authors, year, citation count, DOI, abstract and a free full-text link when one exists.

NameTypeReqDescription
cited_workstring–cited_by mode: a DOI or OpenAlex id; returns the papers that cite it
doisstring–doi mode: up to 25 DOIs or OpenAlex ids, separated by commas
exclude_retractedstring–true to drop retracted papers
from_yearstring–Only papers published this year or later
include_abstractstring–false to leave abstracts out (default true)
institutionstring–institution mode: a name, a ROR id or an OpenAlex id; the best name match is used and echoed in matched_entity
max_resultsstring–How many papers, 1 to 50 (default 10)
min_citationsstring–Only papers cited at least this many times
modestring–search (default when query is given), doi (default when dois is given), cited_by, institution or source
open_access_onlystring–true to keep only papers with a free full text
querystring–Keywords, for example graph neural networks. Double quotes match a phrase. Required for search; narrows institution and source results
search_scopestring–title_and_abstract (default) or full_text
sortstring–relevance (needs query), citations, newest or oldest
sourcestring–source mode: a journal name, an ISSN or an OpenAlex id
to_yearstring–Only papers published this year or earlier
work_typesstring–Comma separated: article, preprint, review, book, book-chapter, dissertation, dataset, report, letter, editorial, standard, other

No output schema declared.

No examples provided.

sec_financials ~316

Reads US public company financials from SEC EDGAR XBRL. Company mode returns one company's reported history of a metric (revenue, net income, assets and 20 more, or any us-gaap tag) by ticker or CIK. Screen mode ranks every filer on one metric for one calendar period. Every figure carries period_type and a link to its filing. Reports figures, not advice.

NameTypeReqDescription
companystring–Company mode: ticker or CIK number.
limitstring–Records to return, 1 to 100. Default 50.
max_valuestring–Highest value to keep.
metricstring–A name such as revenue, net_income, gross_profit, operating_income, rd_expense, sga_expense, interest_expense, income_tax, or a raw us-gaap tag like Revenues. Default revenue.
min_valuestring–Lowest value to keep. Negatives are legal.
modestring–screen ranks all companies for one period; company gives one company's history. Defaults to company when company is set, else screen.
orderstring–desc by default: largest value first in screen mode, newest period first in company mode.
periodstring–Screen mode: CY2023 or CY2023Q1 (calendar year, optional quarter). Default CY2024.
period_typestring–Keep only quarterly, half_year, nine_month, annual or instant figures. Default any.

No output schema declared.

No examples provided.

validate_vat ~104

Checks one VAT number against the European Commission's VIES service and returns whether it is a live registration and, where the member state shares it, the registered name. Covers the 27 EU states and Northern Ireland (XI). A busy or down member state is reported as an error, never as an invalid number.

NameTypeReqDescription
vatstringyesVAT number starting with its two-letter country code. Spaces, dots and hyphens are ignored; GR is read as EL.

No output schema declared.

No examples provided.

Install

How do I install the Company Facts MCP server?

Company Facts is a hosted endpoint at https://companyfacts.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · companyfacts.dev

# add to Claude Code
claude mcp add --transport http groundtruthtools-ats-jobs-mcp 'https://companyfacts.dev/mcp'
Common questions

What is the Company Facts MCP server?

Company Facts is an MCP server listed in the public MCP registry as io.github.groundtruthtools/ats-jobs-mcp. Company data from official sources: new US businesses, registers, tech stack, open jobs, SEC. This page covers its hosted endpoint (https://companyfacts.dev/mcp).

Is the Company Facts MCP server safe to use?

Company Facts scores 67 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Company Facts MCP server expose?

Company Facts exposes 21 tools: find_company_board, list_open_jobs, compare_companies, job_changes, read_page, and 16 more. Their descriptions and schemas cost roughly 4,716 tokens of context every time the server is loaded.

Does the Company Facts MCP server require authentication?

No. We connected to Company Facts without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Company Facts MCP server still maintained?

Company Facts is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.