Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Factline KYC, KYB and agent payments

REMOTE · FACTLINE.DEV

Supplier, company, sanctions, PEP, VAT and IBAN checks for agents. 5 checks a day free, no key.

Available components

+3 this week 84 Trust /100

Last scanned (19 hours ago)

Scores higher than 89% of remote servers

Reachable. Last reached 4 Nov 2026.

Category Security

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security83
Transport & Reachability100
Schema Quality & AI Usability78
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 8836 tokens (~169/item across 52 items; 42 tools + 10 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management77
  • Stability observed for 23 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage96
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 85% of tool parameters carry a description.Partial
  • Structured output schemas are declared (5% of tools); any adoption earns full credit.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "x402_pay_guard" implies "pay" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Fail
  • An AI judge read all 44 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
  • Supports UI / widget rendering.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 70 to 73. That category is still filling its 30-day observation window: 21 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.

  • 2 Nov 26 0
    • Schema quality: 7272 → 8836 ▼ functional
    • New resource “skill-bank-details-changed” functional
    • New resource “skill-before-paying-a-new-payee” functional
    • New resource “skill-eudr-geolocation-file” functional
    • New resource “skill-is-this-supplier-real” functional
    • Server version: 0.13.0 → 0.15.0 functional
    • New tool “bank_change_check” functional
    • New tool “eudr_geo_check” functional
    • New tool “kyp_check” functional
    • New tool “mcp_server_check” functional
    • New tool “payment_run_check” functional
    • New tool “supplier_card_verify” functional
    • New tool “supplier_real_check” functional
    • New tool “webshop_check” functional
  • 1 Nov 26 +1
    • Tool “x402_sellers” rewrote its description, which is the text the model reads security
    • Tool “eu_exchange_rates” now declares an output schema ▲ functional
    • Tool “eu_law_lookup” now declares an output schema ▲ functional
    • First check of Tool coverage: 6 functional
    • New tool “china_licence_check” functional
    • New tool “eu_import_rules” functional
    • “china_supplier_check” reworded the description of “name” cosmetic
  • 31 Oct 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “get_trial_key” rewrote its description, which is the text the model reads security
    • Schema quality: 151 → 179 ▼ functional
    • Tool coverage: 76% → 81% ▲ functional
    • Schema quality: excellent → good functional
    • Server version: 0.11.0 → 0.13.0 functional
    • New tool “watch_alerts” functional
    • “china_supplier_check” added an optional parameter “api_key” cosmetic
    • “company_dossier” added an optional parameter “api_key” cosmetic
    • “company_health” added an optional parameter “api_key” cosmetic
    • “company_lookup” added an optional parameter “api_key” cosmetic
    • “domain_check” added an optional parameter “api_key” cosmetic
    • “email_verify” added an optional parameter “api_key” cosmetic
    • “eu_company_check” added an optional parameter “api_key” cosmetic
    • “eu_eori_check” added an optional parameter “api_key” cosmetic
    • “eu_sanctions_batch” added an optional parameter “api_key” cosmetic
    • “eu_sanctions_screen” added an optional parameter “api_key” cosmetic
    • “eu_sanctions_wallet” added an optional parameter “api_key” cosmetic
    • “eu_tenders_search” added an optional parameter “api_key” cosmetic
    • “eu_vat_check” added an optional parameter “api_key” cosmetic
    • “get_trial_key” added an optional parameter “api_key” cosmetic
    • “iban_check” added an optional parameter “api_key” cosmetic
    • “kyc_check” added an optional parameter “api_key” cosmetic
    • “nl_insolvency_check” added an optional parameter “api_key” cosmetic
    • “pep_batch” added an optional parameter “api_key” cosmetic
    • “pep_screen” added an optional parameter “api_key” cosmetic
    • “peppol_lookup” added an optional parameter “api_key” cosmetic
    • “phone_verify” added an optional parameter “api_key” cosmetic
    • “self_hosted_wallet_evidence” added an optional parameter “api_key” cosmetic
    • “supplier_invoice_check” added an optional parameter “api_key” cosmetic
    • “us_company_lookup” added an optional parameter “api_key” cosmetic
    • “us_trade_screen” added an optional parameter “api_key” cosmetic
    • “watch_30_days” added an optional parameter “api_key” cosmetic
    • “x402_payee_check” added an optional parameter “api_key” cosmetic
    • “get_trial_key” reworded the description of “email” cosmetic
    • “get_trial_key” made “email” optional cosmetic
    • Tool “get_trial_key” changed its title: Get a free Factline trial key → Get a free Factline key cosmetic
  • 30 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.

  • 29 Oct 26 0
    • Tool “china_supplier_check” rewrote its description, which is the text the model reads security
    • Tool “company_dossier” rewrote its description, which is the text the model reads security
    • Tool “company_lookup” rewrote its description, which is the text the model reads security
    • Tool “kyc_check” rewrote its description, which is the text the model reads security
    • New resource “skill-check-a-chinese-supplier” functional
  • 28 Oct 26 +1
    • Tool “watch_30_days” rewrote its description, which is the text the model reads security
    • Schema quality: good → excellent functional
    • New resource “skill-before-an-x402-payment” functional
    • New resource “skill-check-a-counterparty” functional
    • New resource “skill-dutch-address-and-vehicle-facts” functional
    • New resource “skill-verify-before-paying” functional
    • Server version: 0.10.0 → 0.11.0 functional
  • 26 Oct 26 +1
    • Tool “china_supplier_check” rewrote its description, which is the text the model reads security
    • Tool “company_dossier” rewrote its description, which is the text the model reads security
    • Tool “company_health” rewrote its description, which is the text the model reads security
    • Tool “company_lookup” rewrote its description, which is the text the model reads security
    • Tool “domain_check” rewrote its description, which is the text the model reads security
    • Tool “email_verify” rewrote its description, which is the text the model reads security
    • Tool “eu_company_check” rewrote its description, which is the text the model reads security
    • Tool “eu_eori_check” rewrote its description, which is the text the model reads security
    • Tool “eu_sanctions_batch” rewrote its description, which is the text the model reads security
    • Tool “eu_sanctions_screen” rewrote its description, which is the text the model reads security
    • Tool “eu_sanctions_wallet” rewrote its description, which is the text the model reads security
    • Tool “eu_tenders_search” rewrote its description, which is the text the model reads security
    • Tool “eu_vat_check” rewrote its description, which is the text the model reads security
    • Tool “iban_check” rewrote its description, which is the text the model reads security
    • Tool “kyc_check” rewrote its description, which is the text the model reads security
    • Tool “nl_insolvency_check” rewrote its description, which is the text the model reads security
    • Tool “pep_batch” rewrote its description, which is the text the model reads security
    • Tool “pep_screen” rewrote its description, which is the text the model reads security
    • Tool “peppol_lookup” rewrote its description, which is the text the model reads security
    • Tool “phone_verify” rewrote its description, which is the text the model reads security
    • Tool “self_hosted_wallet_evidence” rewrote its description, which is the text the model reads security
    • Tool “supplier_invoice_check” rewrote its description, which is the text the model reads security
    • Tool “us_company_lookup” rewrote its description, which is the text the model reads security
    • Tool “us_trade_screen” rewrote its description, which is the text the model reads security
    • Tool “watch_30_days” rewrote its description, which is the text the model reads security
    • Tool “x402_payee_check” rewrote its description, which is the text the model reads security
    • Server version: 0.9.0 → 0.10.0 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Nov 2026 · Probed https://factline.dev/mcp/kyc

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=factline.dev CN=WE1,O=Google Trust Services,C=US 5 Oct 2026 3 Jan 2027 ECDSA 256 ECDSA-SHA256 be39c6ca6e0ad624130bd40b6f3570ef
SANs: factline.dev, www.factline.dev, *.www.factline.dev
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC secure

Validation of factline.dev. — Secure

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
dev. present 60074 8 Verified
factline.dev. present 2371 13 Verified
factline.dev. Verified address RRset verified with the apex keys
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' blob:; connect-src 'self' https://cloudflareinsights.com; form-action 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'
x-content-type-options nosniff
x-frame-options DENY
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=(), payment=(), usb=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://factline.dev/mcp/kyc Verified 200
http (plaintext) http://factline.dev/mcp/kyc HTTPS enforced 301 https://factline.dev/mcp/kyc
MCP tools · 42 exposed · ~8,442 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
bank_change_check ~278

Use when a supplier (or someone posing as one) asks to change bank details or pay to a new account, the biggest single loss in accounts payable. Send text (the whole email with its From: line), or sender and iban; add website (the supplier's real domain), known_iban (the account you pay now) and name plus country to also run the supplier invoice check. The text is not stored. Input: text, or sender + iban; website, known_iban, name, country. Costs 0.06 USDC via x402, or 30 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–Supplier ISO country
ibanstring–The new IBAN
known_ibanstring–The account you pay now
namestring–Supplier name: also runs the invoice check
senderstring–Or the sender's email address
textstring–The whole email, with its From: line
websitestring–The supplier's real website

No output schema declared.

No examples provided.

china_licence_check ~208

Use when a Chinese supplier sends a photo of its business licence (营业执照), e.g. on Alibaba or 1688: reads the fields, validates the USCC checksum, flags an address province that differs from the code (edited licence) or a name that differs from your invoice, then screens the Chinese and English names against sanctions, the Entity List and UFLPA. Image not stored. Input: image_url, optional invoice_name. Costs 0.06 USDC via x402, or 30 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
image_urlstringyesPublic https link to the licence photo or scan
invoice_namestring–Supplier name on your invoice, to compare

No output schema declared.

No examples provided.

china_supplier_check ~221

Use this when the counterparty is a Chinese supplier you are about to pay or import from: checks the 18-character Unified Social Credit Code (checksum, authority, entity type, province; Xinjiang flagged) and screens the company against EU, UN, UK and US OFAC sanctions, BIS Entity List, Military End User list and DHS UFLPA list. Verdict pass, review or block_review with reasons. Does not query the Chinese register (GSXT). Input: name, uscc. Costs 0.03 USDC via x402, or 15 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
namestringyesSupplier name as on the invoice, Latin letters or Chinese characters
usccstring–18-character Unified Social Credit Code from the business licence

No output schema declared.

No examples provided.

company_dossier ~280

Use this when you need full due diligence on a European company before a deal or large payment, beyond an existence check: registers in 10 countries plus GLEIF, directors, owners and parents screened for sanctions and PEP, VAT, Peppol, website, plus financial health (accounts on time, size, turnover, insolvency in GB, FR, NO, FI, NL). One verdict and a cite_as line. Input: name or id, best with country. Costs 0.15 USDC via x402, or 75 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–ISO country, e.g. NO, GB, FR, NL
domainstring–Company website
idstring–Or a company number: LEI, UK company number, SIREN, Norwegian org number, etc.
kvkstring–Dutch KvK number: adds a bankruptcy check
namestring–Company name, e.g. Equinor
vatstring–EU VAT number

No output schema declared.

No examples provided.

company_health ~238

Use to check if a European company is healthy before you deal with it: UK accounts overdue, size band and insolvency history; French headcount, turnover, net result and BODACC insolvency; Norwegian employees, bankruptcy, winding-up and filed accounts; Finnish bankruptcy and restructuring; Dutch insolvency with a KvK number. Verdict healthy, watch, distressed or limited_data. Costs 0.02 USDC via x402, or 10 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–ISO country: GB, FR, NO and FI have full signals; NL with kvk
idstring–Or a company number, e.g. SIREN 552032534
kvkstring–Dutch KvK number: adds the insolvency register
namestring–Company name, e.g. Danone

No output schema declared.

No examples provided.

company_lookup ~245

Use this when you only need to confirm a company exists and is active (the cheap first step before a dossier): registers GLEIF (worldwide), UK Companies House, Ireland CRO, Estonia, Belgium KBO, France SIRENE, Norway, Finland, Czechia, Slovakia and Poland (with bank accounts). Returns legal name, status, registry id, legal form, address, founding date and parent companies (GLEIF). Search by name or id. Costs 0.008 USDC via x402, or 4 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–ISO country, e.g. GB, IE, EE, FR, NO, NL
idstring–LEI, SIREN, Norwegian organisation number, UK company number, Irish CRO number or Estonian registry code
namestring–Company name, e.g. ASML Holding

No output schema declared.

No examples provided.

domain_check ~180

Use when you need to judge whether a website or email domain is trustworthy: registration date and domain age (RDAP), expiry, registrar, nameservers, email setup (MX, SPF, DMARC), disposable-email domains, and a low/medium/high risk with flags such as 'registered 4 days ago', a common sign of scam shops. Accepts a domain, URL or email. Costs 0.003 USDC via x402, or 2 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
domainstringyesDomain, URL or email address, e.g. example.nl

No output schema declared.

No examples provided.

email_verify ~169

Use when you need to know if an email address is real and deliverable before signup, outreach or onboarding: syntax, live MX routing, 9,000+ disposable domains, role addresses, free providers, typo suggestions (gmial.com to gmail.com) and SPF/DMARC. One verdict: deliverable, risky or undeliverable. Costs 0.002 USDC via x402, or 1 credit of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
emailstringyesEmail address, e.g. jan@example.nl

No output schema declared.

No examples provided.

eu_company_check ~304

Use before onboarding, paying or contracting a European company: finds it in 10 official registers (GLEIF, UK, IE, FR, NO, FI, CZ, SK, EE, PL), screens it, its directors, owners and parent companies against EU, UN, UK and US sanctions and PEP, checks VAT and Peppol, flags new websites and Dutch bankruptcies. One verdict: pass, review, block_review or incomplete. Input: name or id, best with country; optional vat, domain, kvk. Costs 0.05 USDC via x402, or 25 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–ISO country, e.g. NL, GB, IE, FR
domainstring–Company website or email domain
idstring–Or a company number: LEI, UK company number, Irish CRO, SIREN, etc.
kvkstring–Dutch KvK number: adds a bankruptcy check
namestring–Company name, e.g. ASML Holding
vatstring–EU VAT number: checked in VIES and matched to the registered name

No output schema declared.

No examples provided.

eu_eori_check ~155

Use when you need to check an EU EORI customs number: live validation in the European Commission's EORI service, registered and valid or not, with the trader's name and address when published. All EU member states; GB numbers are not covered. Costs 0.003 USDC via x402, or 2 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
eoristringyesEORI number, e.g. IE6388047V

No output schema declared.

No examples provided.

eu_exchange_rates ~110

Free. Use when the user needs an official euro exchange rate or a conversion for an invoice, contract or report: ECB euro reference rates (about 30 currencies), today or any working day in the last 90 days, with cross rates. Input: base (default EUR), symbols (e.g. USD,GBP), optional date YYYY-MM-DD and amount.

NameTypeReqDescription
amountstring––
basestring––
datestring––
symbolsstring––
NameTypeReqDescription
base––Base currency
date––ECB reference date
rates––Rates per currency
source––Sources to cite

No examples provided.

eu_import_rules ~246

Use before importing a product into the EU: checks the HS/CN code against CBAM Annex I and EUDR Annex I and says which applies, from when, and what the importer must do (CBAM declarant status and emissions data; EUDR due diligence statement with plot geolocation). No code? Send product and the likely 6-digit HS code is suggested (and marked as a suggestion). Input: hs or product, optional origin (ISO country) and tonnes_per_year. Costs 0.01 USDC via x402, or 5 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
hsstring–HS or CN code, e.g. 720839
originstring–ISO country of origin, e.g. CN
productstring–Or a product description
tonnes_per_yearstring–Yearly tonnes of CBAM goods you import

No output schema declared.

No examples provided.

eu_law_lookup ~113

Free. Use when the user cites an EU regulation, directive or decision and you need its official title, date, whether it is still in force, and the EUR-Lex link to cite: by CELEX number (e.g. 32016R0679) or citation (e.g. Regulation (EU) 2016/679, Directive 2015/849).

NameTypeReqDescription
celexstringyesCELEX number or a citation like 'Regulation (EU) 2016/679'
NameTypeReqDescription
celex––CELEX number
in_force––Whether it is in force
source––Sources to cite
title––Official title
url––EUR-Lex link

No examples provided.

eu_sanctions_batch ~195

Use when screening a list of people or companies at once (up to 25 per call, 0.0012 USDC per name) against the EU, UN, UK and US OFAC sanctions lists. Fuzzy matching; per name a possible-match flag, top score and up to 3 scored matches with their lists. For customer bases, payouts and vendor lists. Costs 0.03 USDC via x402, or 15 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
namesstringyes1 to 25 names separated by ';', e.g. 'Vladimir Putin; Factline'
typestring––

No output schema declared.

No examples provided.

eu_sanctions_screen ~193

Use when you must check whether a person or company is under sanctions: screens the name against the EU, UN, UK and US OFAC lists (25,000+ persons, companies and vessels with aliases, refreshed weekly). Fuzzy matching handles spelling, transliteration and word order; returns scored possible matches with lists, references and birth dates. Costs 0.005 USDC via x402, or 3 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
birth_yearstring–4-digit birth year
namestringyesPerson or organisation name, e.g. 'Vladimir Putin'
typestring––

No output schema declared.

No examples provided.

eu_sanctions_wallet ~188

Use before sending crypto to an address, or when asked if a wallet is sanctioned: checks Bitcoin, Ethereum/EVM, Tron, USDT, Litecoin, Monero and other addresses against the wallets on the US OFAC SDN list, refreshed weekly. Returns sanctioned true/false, currency, listed entity and programme. Costs 0.003 USDC via x402, or 2 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
addressstringyesCrypto wallet address, e.g. 0x0330070fd38ec3bb94f58fa55d40368271e9e54a
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed

No output schema declared.

No examples provided.

eu_tenders_search ~222

Use when the user looks for public contracts to bid on: open tenders from TED, the EU's official journal, by country, CPV code, keywords, deadline and minimum value, with English titles, buyer, deadline and value. For the Netherlands it adds national below-threshold tenders from TenderNed, which TED does not have. Costs 0.005 USDC via x402, or 3 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystringyesCountry code, e.g. NL, DE, or EU
cpvstring–CPV codes, e.g. 72
deadline_withinstring––
limitstring––
min_valuestring––
qstring–Keywords

No output schema declared.

No examples provided.

eu_vat_check ~172

Use when the user gives an EU VAT number and you need to know if it is valid: live check in the European Commission's VIES service for all 27 member states plus Northern Ireland, with the registered company name and address where shared. Input: VAT number with country prefix, e.g. IE6388047V. Costs 0.003 USDC via x402, or 2 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
vatstringyesEU VAT number with country prefix, e.g. IE6388047V

No output schema declared.

No examples provided.

eudr_geo_check ~162

Free. Use when the user has a supplier's EUDR plot file for a due diligence statement (from 30 Dec 2026): checks [longitude, latitude] order, at least 6 decimals, a point only for plots up to 4 ha, closed and non-crossing polygons, plots inside the country of production, area per plot. Returns looks_valid, check_warnings or fix_needed. Input: geojson (the file as text), optional country (ISO) and commodity.

NameTypeReqDescription
commoditystring–e.g. cocoa, wood, cattle
countrystring–ISO country of production, e.g. CI
geojsonstringyesGeoJSON FeatureCollection, Feature or geometry, as text

No output schema declared.

No examples provided.

get_trial_key ~164

Free. Use when Factline's free calls for today are used up or the user wants more paid checks without a crypto wallet. Without an email it returns a starter key at once (100 credits, 14 days, no human step). With the user's work email it returns a trial key (2,000 credits a month, one per email); send email plus api_key to upgrade a starter key. Ask the user for the email; never invent one.

NameTypeReqDescription
api_keystring–A starter key to upgrade: send it with the email
emailstring–The user's work email (ask them; never invent one). Leave out for a starter key
namestring–Person or company name
use_casestring––

No output schema declared.

No examples provided.

iban_check ~165

Use when you need to check an IBAN before a payout or invoice: length per country, mod-97 checksum (catches typos), SEPA membership, and for Dutch IBANs the bank (ING, ABN AMRO, Rabobank, bunq...). Does not confirm the account holder. Costs 0.001 USDC via x402, or 1 credit of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
ibanstringyesIBAN, e.g. NL91ABNA0417164300

No output schema declared.

No examples provided.

kyc_check ~291

Use this when onboarding a new customer, seller or business and you want one pass/review answer on the name plus their email, phone and VAT, not a company deep-dive: screens the name against EU, UN, UK and US sanctions and the PEP list, verifies email and phone, and checks an EU VAT number in VIES, all in parallel, with one verdict: pass, review, block_review or incomplete. Send any of name, email, phone, vat. Costs 0.01 USDC via x402, or 5 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
birth_yearstring––
companystring–Company name to verify
company_countrystring––
countrystring––
emailstring––
kvkstring–Dutch KvK number: adds a bankruptcy check
namestring–Person or company name
pepstring–PEP check of a person name, default true
phonestring––
typestring––
vatstring–EU VAT number

No output schema declared.

No examples provided.

kyp_check ~232

Use right before an agent pays a payee it has not paid before: the reverse of the know-your-agent checks merchants run on agents. Send url (webshop or x402 endpoint), wallet (x402 payTo) or iban with name and country (a company); kind=shop|x402|company forces the route. Input: url, wallet or iban + name + country. Costs 0.03 USDC via x402, or 15 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–ISO country (with iban)
ibanstring–IBAN of a company payee
kindstring––
namestring–Company name (with iban)
urlstring–Webshop or x402 endpoint
walletstring–x402 payTo wallet

No output schema declared.

No examples provided.

mcp_server_check ~133

Free. Use before connecting to or installing an MCP server you have not used before, or to re-check one: connects once (no tool is called), scans tool descriptions for prompt-injection wording and invisible characters, lists tools that write, send, pay or run commands, checks the domain and publisher, and returns tools_sha256 (send it next time to catch a changed tool list). Decision allow, review or deny. Input: url, optional tools_sha256.

NameTypeReqDescription
tools_sha256string–Hash from an earlier check
urlstringyesThe MCP server's streamable HTTP endpoint

No output schema declared.

No examples provided.

nl_insolvency_check ~173

Use when you need to know if a Dutch company is bankrupt or in suspension of payments: live check in the Centraal Insolventieregister (Rechtspraak) with active and ended cases, court, case number, dates, administrator and claims deadline. Legal entities only. Input: KvK number or company name. Costs 0.01 USDC via x402, or 5 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
kvkstring–8-digit KvK number
namestring–Company name

No output schema declared.

No examples provided.

payment_run_check ~157

Free. Use before a payment run is sent to the bank: give the payment file as text (SEPA pain.001 XML or CSV with payee name and IBAN) and, best, last run's file or a vendor list as previous. Each line gets release, review or hold: invalid or changed IBAN, a payee name that imitates a known supplier, one IBAN under two names, new payee, duplicate, possible sanctions match. Up to 25 payments here; 100 with an API key over HTTP.

NameTypeReqDescription
filestringyesThe payment file content: pain.001 XML or CSV
previousstring–Last run's file or a vendor list (name, IBAN)

No output schema declared.

No examples provided.

pep_batch ~142

Use when screening a list of up to 25 names for politically exposed persons in one call (0.0012 USDC per name): top 3 possible matches per name with positions and status. For customer-base and CRM re-screening. Costs 0.03 USDC via x402, or 15 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
namesstringyesNames separated by ';'

No output schema declared.

No examples provided.

pep_screen ~210

Use when you must check whether a person is a politically exposed person (PEP) for AML/KYC: heads of state and government, ministers of every country, central bank governors, MEPs and national MPs of the EU, EEA, UK, US and Switzerland, current or former (default 5 years). Fuzzy matching with positions, country and dates. Pairs with sanctions screening. Costs 0.005 USDC via x402, or 3 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
birth_yearstring–Birth year, e.g. 1967
countrystring–ISO country, e.g. NL
namestringyesFull name, e.g. Mark Rutte

No output schema declared.

No examples provided.

peppol_lookup ~280

Use when you need to send an e-invoice or check if a company can receive one: looks the company up in the Peppol Directory by VAT number, company number (Belgian KBO, French SIREN, Dutch KvK...) or name, and returns its Peppol participant ids and accepted documents (invoice, credit note, self-billing, orders). Belgium requires Peppol B2B e-invoicing since 2026; France requires e-invoice receipt from 2026-09. Costs 0.003 USDC via x402, or 2 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–ISO country, e.g. BE, FR
idstring–Or a company number (Belgian KBO, French SIREN, Dutch KvK) or Peppol id such as 0208:0400378485
namestring–Or a company name (with country)
vatstring–EU VAT number, e.g. BE0400378485

No output schema declared.

No examples provided.

phone_verify ~189

Use when you need to check a phone number from any country: valid and possible against allocated ranges, E.164 and national format, country, and line type (mobile, landline, VoIP, toll-free, premium) with an SMS-capable hint. National numbers need a country, e.g. 0612345678 with country=NL. Costs 0.003 USDC via x402, or 2 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–ISO country for national numbers, e.g. NL
phonestringyesPhone number, e.g. +31612345678

No output schema declared.

No examples provided.

self_hosted_wallet_evidence ~223

Use when a crypto service sends to or receives from a self-hosted wallet and must document its checks (EU AMLR, Travel Rule files): screens the wallet against OFAC-listed addresses, the claimed owner against EU, UN, UK and US sanctions and PEP, and checks the company register for businesses. Returns no_hits, review or block_review with list versions and a signed receipt. Input: wallet, owner, optional owner_type, birth_year, country. Costs 0.02 USDC via x402, or 10 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
birth_yearstring––
countrystring––
ownerstringyesPerson or company that claims the wallet
owner_typestring––
walletstringyes–

No output schema declared.

No examples provided.

supplier_card_verify ~134

Free. Use before onboarding or paying a supplier that has a website: reads https://<domain>/.well-known/supplier.json (spec factline.dev/supplier-json), checks its VAT number in VIES and company number in the register against the name, and with iban says whether that IBAN is one of the supplier's own hashed accounts. Returns verified, review, invalid_card or no_card. Input: domain, optional iban.

NameTypeReqDescription
domainstringyesThe supplier's website, e.g. example-trading.nl
ibanstring–IBAN from an invoice, to match against the card

No output schema declared.

No examples provided.

supplier_invoice_check ~323

Use before an agent pays a supplier invoice: supplier in official registers; company, directors, owners and parents screened (EU, UN, UK, US sanctions, PEP); VAT match; IBAN valid, same country, on the Polish whitelist; sender email; Dutch bankruptcy; Peppol. With known_iban, a different bank account than the one on file puts it on hold. Verdict: pass, review or hold. Costs 0.08 USDC via x402, or 40 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–Supplier's ISO country, e.g. BE, NL, GB, PL
domainstring–Supplier website
emailstring–Email address the invoice came from
ibanstring–IBAN the invoice asks you to pay
idstring–Or the supplier's company number
known_ibanstring–The supplier's IBAN in your vendor master: a different IBAN on the invoice puts it on hold (changed bank details)
kvkstring–Dutch KvK number: adds a bankruptcy check
namestring–Supplier company name, e.g. Colruyt Group
vatstring–VAT number on the invoice

No output schema declared.

No examples provided.

supplier_real_check ~232

Use before onboarding or paying a new supplier that may be fake (real registration, good website). Compares company and website age, tests the sender domain for a lookalike of the website, checks UK director identity verification and virtual-office addresses, and runs the company check (sanctions, PEP, VAT). Input: name or id with country, domain (website), email (sender). Costs 0.06 USDC via x402, or 30 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–ISO country, e.g. GB, NL
domainstring–The supplier's website
emailstring–The email address it writes from
idstring–Or its company number
namestring–Supplier company name
vatstring–VAT number

No output schema declared.

No examples provided.

us_company_lookup ~203

Use to verify a US listed company or SEC registrant: finds it by name, ticker or CIK and returns its SEC record (legal name, former names, tickers and exchanges, EIN, state of incorporation, industry code, business address, latest 10-K/20-F and 10-Q dates). Private US companies are not in EDGAR. Input: name, ticker or cik. Costs 0.01 USDC via x402, or 5 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
cikstring–SEC CIK number
namestring–Company name, e.g. Apple
tickerstring–Ticker, e.g. AAPL

No output schema declared.

No examples provided.

us_trade_screen ~203

Use before buying from, selling to or shipping to a company, above all a Chinese or Russian one: screens the name against the US Consolidated Screening List (Commerce, State and Treasury export-control lists, without the SDN list, which the sanctions screen covers) and the DHS UFLPA Entity List (forced-labour import ban). These restrict trade, they are not asset freezes. Input: name, optional type (entity or person), threshold. Costs 0.005 USDC via x402, or 3 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
namestringyesCompany or person name, e.g. 'Hoshine Silicon Industry'
typestring––

No output schema declared.

No examples provided.

watch_30_days ~236

Use for ongoing monitoring: the user wants to be told later or must show screening keeps running. Watches one item for 30 days, paid once, no account. kind=sanctions (a name, re-screened when EU, UN, UK or US lists change), company (COUNTRY:name or number, register checked daily) or apk (Dutch plate, daily). Alerts go to the webhook and /v1/watch/alerts with the returned token. Input: kind, value, optional webhook, label. Costs 0.05 USDC via x402, or 25 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
kindstringyes–
labelstring––
valuestringyesName, COUNTRY:company (e.g. IE:Ryanair) or Dutch plate
webhookstring–https URL for alerts

No output schema declared.

No examples provided.

watch_alerts ~141

Free. Use at the start of a session or on a schedule when the user has Factline watches (from watch_30_days or a key): lists the watches and any alerts (a new sanctions match, a company status, name or address change, APK or recall change). Input: token (wt_..., returned by watch_30_days) or api_key, optional since (YYYY-MM-DD).

NameTypeReqDescription
api_keystring–Or a Factline API key (fl_live_...)
sincestring–Only alerts after this date, YYYY-MM-DD
tokenstring–Watch token wt_... from watch_30_days

No output schema declared.

No examples provided.

webshop_check ~102

Free. Use before a shopping agent or the user pays an unfamiliar webshop: domain age, company and VAT number on the site (VAT checked in VIES), contact page, payment methods, prepayment-only or crypto-only, 70-99% discount lures. Returns looks_ok, caution or avoid and decision allow, review or deny. Input: url.

NameTypeReqDescription
urlstringyesThe shop's address, e.g. https://www.example-shop.nl

No output schema declared.

No examples provided.

x402_pay_guard ~260

Free. Use right before paying an x402 seller: screens the payTo wallet against the OFAC list, checks that payTo is a wallet this seller lists in the x402 Bazaar or Circle catalogue (catches a swapped or injected payTo), looks up the seller's payer history, age and uptime, and checks the amount against the seller's listed price and your budget. Returns allow, review or deny with reasons and a signed verdict. Input: url of the resource, pay_to from its 402, optional amount_usd, max_usd, network, mode (strict: deny instead of review on a wallet mismatch or missing pay_to).

NameTypeReqDescription
amount_usdstring–Amount you are about to pay in USD, e.g. 0.05
max_usdstring–Your budget per call in USD
modestring–strict: deny on a payTo the seller does not list or a missing pay_to
networkstring–Network from the 402, e.g. eip155:8453
pay_tostring–payTo address from the 402 challenge
urlstringyesThe x402 resource URL you are about to pay

No output schema declared.

No examples provided.

x402_payee_check ~232

Use before an agent pays an x402 endpoint it has not used before: reads the seller's own 402 challenge, screens every payTo wallet against the OFAC list, checks the domain (age, setup), Factline's daily uptime probes and, with company, the register record and EU/UN/UK/US sanctions. Returns allow, review or deny, plus a trust-provider block (decision, score, evidence, ttl). Input: url, optional wallet, company, country. Costs 0.01 USDC via x402, or 5 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
companystring–Company behind the seller
countrystring––
urlstring–The x402 endpoint or origin you are about to pay
walletstring–payTo wallet to screen

No output schema declared.

No examples provided.

x402_sellers ~138

Free. Use when looking for an x402 API to pay for a task, or to see if a seller is used and up: sellers from the Coinbase x402 Bazaar ranked by unique payers (30 days), with Factline's daily check that their endpoints answer a valid 402, speed and networks. q is one word to filter (sanctions, weather) or plain words for what you need (an API for flight prices).

NameTypeReqDescription
limitstring––
networkstring–e.g. solana or eip155:8453
qstring–Search text, e.g. sanctions

No output schema declared.

No examples provided.

Install

How do I install the Factline KYC, KYB and agent payments MCP server?

Factline KYC, KYB and agent payments is a hosted endpoint at https://factline.dev/mcp/kyc, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · factline.dev

# add to Claude Code
claude mcp add --transport http snefhew-factline-kyc 'https://factline.dev/mcp/kyc'
Common questions

What is the Factline KYC, KYB and agent payments MCP server?

Factline KYC, KYB and agent payments is an MCP server listed in the public MCP registry as io.github.snefhew/factline-kyc. Supplier, company, sanctions, PEP, VAT and IBAN checks for agents. 5 checks a day free, no key. This page covers its hosted endpoint (https://factline.dev/mcp/kyc).

Is the Factline KYC, KYB and agent payments MCP server safe to use?

Factline KYC, KYB and agent payments scores 84 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Factline KYC, KYB and agent payments MCP server expose?

Factline KYC, KYB and agent payments exposes 42 tools: x402_pay_guard, watch_alerts, x402_sellers, get_trial_key, eu_exchange_rates, and 37 more. Their descriptions and schemas cost roughly 8,442 tokens of context every time the server is loaded.

Does the Factline KYC, KYB and agent payments MCP server require authentication?

No. We connected to Factline KYC, KYB and agent payments without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Factline KYC, KYB and agent payments MCP server still maintained?

Factline KYC, KYB and agent payments is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.