Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Factline

REMOTE · FACTLINE.DEV

Checks before an agent pays: payees, webshops, invoices, payment files, companies, sanctions, PEP.

Available components

+3 this week 88 Trust /100

Last scanned (11 hours ago)

Scores higher than 96% of remote servers

Reachable. Last reached 5 Nov 2026.

Category Security

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security83
Transport & Reachability100
Schema Quality & AI Usability79
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 12959 tokens (~172/item across 75 items; 65 tools + 10 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage97
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 90% of tool parameters carry a description.Partial
  • Structured output schemas are declared (11% of tools); any adoption earns full credit.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "x402_pay_guard" implies "pay" and declares readOnlyHint instead, contradicting what its own name says it does. See how to fix → Fail
  • An AI judge read all 67 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
  • Supports UI / widget rendering.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 0
    • New tool “firm_check” functional
  • 4 Nov 26 +1
    • Stability: 0.97 → pass security
  • 2 Nov 26 +1
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “x402_sellers” rewrote its description, which is the text the model reads security
    • Schema quality: 10800 → 12884 ▼ functional
    • Schema quality: 10800 → 12594 ▼ functional
    • New resource “skill-bank-details-changed” functional
    • New resource “skill-before-paying-a-new-payee” functional
    • New resource “skill-eudr-geolocation-file” functional
    • New resource “skill-is-this-supplier-real” functional
    • Server version: 0.14.0 → 0.15.0 functional
    • Server version: 0.13.0 → 0.14.0 functional
    • New tool “mcp_server_check” functional
    • New tool “payment_run_check” functional
    • New tool “bank_change_check” functional
    • New tool “china_licence_check” functional
    • New tool “eu_import_rules” functional
    • New tool “eudr_geo_check” functional
    • New tool “kyp_check” functional
    • New tool “supplier_card_verify” functional
    • New tool “supplier_real_check” functional
    • New tool “webshop_check” functional
    • “china_supplier_check” reworded the description of “name” cosmetic
  • 1 Nov 26 0
    • Tool “eu_exchange_rates” now declares an output schema ▲ functional
    • Tool “eu_law_lookup” now declares an output schema ▲ functional
    • Tool “nl_car_model” now declares an output schema ▲ functional
    • Tool “nl_home_basic” now declares an output schema ▲ functional
    • Tool “nl_neighbourhood_summary” now declares an output schema ▲ functional
    • Tool “nl_schools_near” now declares an output schema ▲ functional
    • Tool “nl_vehicle_basic” now declares an output schema ▲ functional
    • First check of Tool coverage: 13 functional
  • 31 Oct 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “get_trial_key” rewrote its description, which is the text the model reads security
    • Schema quality: 154 → 180 ▼ functional
    • Server version: 0.11.0 → 0.13.0 functional
    • New tool “watch_alerts” functional
    • “china_supplier_check” added an optional parameter “api_key” cosmetic
    • “company_dossier” added an optional parameter “api_key” cosmetic
    • “company_health” added an optional parameter “api_key” cosmetic
    • “company_lookup” added an optional parameter “api_key” cosmetic
    • “domain_check” added an optional parameter “api_key” cosmetic
    • “email_verify” added an optional parameter “api_key” cosmetic
    • “eu_company_check” added an optional parameter “api_key” cosmetic
    • “eu_eori_check” added an optional parameter “api_key” cosmetic
    • “eu_sanctions_batch” added an optional parameter “api_key” cosmetic
    • “eu_sanctions_screen” added an optional parameter “api_key” cosmetic
    • “eu_sanctions_wallet” added an optional parameter “api_key” cosmetic
    • “eu_tenders_search” added an optional parameter “api_key” cosmetic
    • “eu_vat_check” added an optional parameter “api_key” cosmetic
    • “get_trial_key” added an optional parameter “api_key” cosmetic
    • “iban_check” added an optional parameter “api_key” cosmetic
    • “kyc_check” added an optional parameter “api_key” cosmetic
    • “nl_address_batch” added an optional parameter “api_key” cosmetic
    • “nl_address_lookup” added an optional parameter “api_key” cosmetic
    • “nl_address_reverse” added an optional parameter “api_key” cosmetic
    • “nl_apk_alert” added an optional parameter “api_key” cosmetic
    • “nl_crime” added an optional parameter “api_key” cosmetic
    • “nl_energy_label” added an optional parameter “api_key” cosmetic
    • “nl_flood_risk” added an optional parameter “api_key” cosmetic
    • “nl_home_compare” added an optional parameter “api_key” cosmetic
    • “nl_home_report” added an optional parameter “api_key” cosmetic
    • “nl_house_prices” added an optional parameter “api_key” cosmetic
    • “nl_insolvency_check” added an optional parameter “api_key” cosmetic
    • “nl_neighbourhood” added an optional parameter “api_key” cosmetic
    • “nl_postcode_addresses” added an optional parameter “api_key” cosmetic
    • “nl_rent_check” added an optional parameter “api_key” cosmetic
    • “nl_vehicle_compare” added an optional parameter “api_key” cosmetic
    • “nl_vehicle_report” added an optional parameter “api_key” cosmetic
    • “pep_batch” added an optional parameter “api_key” cosmetic
    • “pep_screen” added an optional parameter “api_key” cosmetic
    • “peppol_lookup” added an optional parameter “api_key” cosmetic
    • “phone_verify” added an optional parameter “api_key” cosmetic
    • “self_hosted_wallet_evidence” added an optional parameter “api_key” cosmetic
    • “supplier_invoice_check” added an optional parameter “api_key” cosmetic
    • “us_company_lookup” added an optional parameter “api_key” cosmetic
    • “us_trade_screen” added an optional parameter “api_key” cosmetic
    • “watch_30_days” added an optional parameter “api_key” cosmetic
    • “x402_payee_check” added an optional parameter “api_key” cosmetic
    • “get_trial_key” reworded the description of “email” cosmetic
    • “get_trial_key” made “email” optional cosmetic
    • Tool “get_trial_key” changed its title: Get a free Factline trial key → Get a free Factline key cosmetic
  • 30 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.

  • 29 Oct 26 0
    • Tool “china_supplier_check” rewrote its description, which is the text the model reads security
    • Tool “company_dossier” rewrote its description, which is the text the model reads security
    • Tool “company_lookup” rewrote its description, which is the text the model reads security
    • Tool “kyc_check” rewrote its description, which is the text the model reads security
    • New resource “skill-check-a-chinese-supplier” functional
  • 28 Oct 26 +1
    • Tool “watch_30_days” rewrote its description, which is the text the model reads security
    • New resource “skill-before-an-x402-payment” functional
    • New resource “skill-check-a-counterparty” functional
    • New resource “skill-dutch-address-and-vehicle-facts” functional
    • New resource “skill-verify-before-paying” functional
    • Server version: 0.10.0 → 0.11.0 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://factline.dev/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=factline.dev CN=WE1,O=Google Trust Services,C=US 5 Oct 2026 3 Jan 2027 ECDSA 256 ECDSA-SHA256 be39c6ca6e0ad624130bd40b6f3570ef
SANs: factline.dev, www.factline.dev, *.www.factline.dev
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC secure

Validation of factline.dev. — Secure

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
dev. present 60074 8 Verified
factline.dev. present 2371 13 Verified
factline.dev. Verified address RRset verified with the apex keys
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' blob:; connect-src 'self' https://cloudflareinsights.com; form-action 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'
x-content-type-options nosniff
x-frame-options DENY
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=(), payment=(), usb=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://factline.dev/mcp Verified 200
http (plaintext) http://factline.dev/mcp HTTPS enforced 301 https://factline.dev/mcp
MCP tools · 65 exposed · ~12,515 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
pep_screen ~210

Use when you must check whether a person is a politically exposed person (PEP) for AML/KYC: heads of state and government, ministers of every country, central bank governors, MEPs and national MPs of the EU, EEA, UK, US and Switzerland, current or former (default 5 years). Fuzzy matching with positions, country and dates. Pairs with sanctions screening. Costs 0.005 USDC via x402, or 3 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
birth_yearstring–Birth year, e.g. 1967
countrystring–ISO country, e.g. NL
namestringyesFull name, e.g. Mark Rutte

No output schema declared.

No examples provided.

peppol_lookup ~280

Use when you need to send an e-invoice or check if a company can receive one: looks the company up in the Peppol Directory by VAT number, company number (Belgian KBO, French SIREN, Dutch KvK...) or name, and returns its Peppol participant ids and accepted documents (invoice, credit note, self-billing, orders). Belgium requires Peppol B2B e-invoicing since 2026; France requires e-invoice receipt from 2026-09. Costs 0.003 USDC via x402, or 2 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–ISO country, e.g. BE, FR
idstring–Or a company number (Belgian KBO, French SIREN, Dutch KvK) or Peppol id such as 0208:0400378485
namestring–Or a company name (with country)
vatstring–EU VAT number, e.g. BE0400378485

No output schema declared.

No examples provided.

phone_verify ~189

Use when you need to check a phone number from any country: valid and possible against allocated ranges, E.164 and national format, country, and line type (mobile, landline, VoIP, toll-free, premium) with an SMS-capable hint. National numbers need a country, e.g. 0612345678 with country=NL. Costs 0.003 USDC via x402, or 2 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–ISO country for national numbers, e.g. NL
phonestringyesPhone number, e.g. +31612345678

No output schema declared.

No examples provided.

self_hosted_wallet_evidence ~223

Use when a crypto service sends to or receives from a self-hosted wallet and must document its checks (EU AMLR, Travel Rule files): screens the wallet against OFAC-listed addresses, the claimed owner against EU, UN, UK and US sanctions and PEP, and checks the company register for businesses. Returns no_hits, review or block_review with list versions and a signed receipt. Input: wallet, owner, optional owner_type, birth_year, country. Costs 0.02 USDC via x402, or 10 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
birth_yearstring––
countrystring––
ownerstringyesPerson or company that claims the wallet
owner_typestring––
walletstringyes–

No output schema declared.

No examples provided.

supplier_card_verify ~134

Free. Use before onboarding or paying a supplier that has a website: reads https://<domain>/.well-known/supplier.json (spec factline.dev/supplier-json), checks its VAT number in VIES and company number in the register against the name, and with iban says whether that IBAN is one of the supplier's own hashed accounts. Returns verified, review, invalid_card or no_card. Input: domain, optional iban.

NameTypeReqDescription
domainstringyesThe supplier's website, e.g. example-trading.nl
ibanstring–IBAN from an invoice, to match against the card

No output schema declared.

No examples provided.

supplier_invoice_check ~323

Use before an agent pays a supplier invoice: supplier in official registers; company, directors, owners and parents screened (EU, UN, UK, US sanctions, PEP); VAT match; IBAN valid, same country, on the Polish whitelist; sender email; Dutch bankruptcy; Peppol. With known_iban, a different bank account than the one on file puts it on hold. Verdict: pass, review or hold. Costs 0.08 USDC via x402, or 40 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–Supplier's ISO country, e.g. BE, NL, GB, PL
domainstring–Supplier website
emailstring–Email address the invoice came from
ibanstring–IBAN the invoice asks you to pay
idstring–Or the supplier's company number
known_ibanstring–The supplier's IBAN in your vendor master: a different IBAN on the invoice puts it on hold (changed bank details)
kvkstring–Dutch KvK number: adds a bankruptcy check
namestring–Supplier company name, e.g. Colruyt Group
vatstring–VAT number on the invoice

No output schema declared.

No examples provided.

supplier_real_check ~232

Use before onboarding or paying a new supplier that may be fake (real registration, good website). Compares company and website age, tests the sender domain for a lookalike of the website, checks UK director identity verification and virtual-office addresses, and runs the company check (sanctions, PEP, VAT). Input: name or id with country, domain (website), email (sender). Costs 0.06 USDC via x402, or 30 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
countrystring–ISO country, e.g. GB, NL
domainstring–The supplier's website
emailstring–The email address it writes from
idstring–Or its company number
namestring–Supplier company name
vatstring–VAT number

No output schema declared.

No examples provided.

us_company_lookup ~203

Use to verify a US listed company or SEC registrant: finds it by name, ticker or CIK and returns its SEC record (legal name, former names, tickers and exchanges, EIN, state of incorporation, industry code, business address, latest 10-K/20-F and 10-Q dates). Private US companies are not in EDGAR. Input: name, ticker or cik. Costs 0.01 USDC via x402, or 5 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
cikstring–SEC CIK number
namestring–Company name, e.g. Apple
tickerstring–Ticker, e.g. AAPL

No output schema declared.

No examples provided.

us_trade_screen ~203

Use before buying from, selling to or shipping to a company, above all a Chinese or Russian one: screens the name against the US Consolidated Screening List (Commerce, State and Treasury export-control lists, without the SDN list, which the sanctions screen covers) and the DHS UFLPA Entity List (forced-labour import ban). These restrict trade, they are not asset freezes. Input: name, optional type (entity or person), threshold. Costs 0.005 USDC via x402, or 3 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
namestringyesCompany or person name, e.g. 'Hoshine Silicon Industry'
typestring––

No output schema declared.

No examples provided.

watch_30_days ~236

Use for ongoing monitoring: the user wants to be told later or must show screening keeps running. Watches one item for 30 days, paid once, no account. kind=sanctions (a name, re-screened when EU, UN, UK or US lists change), company (COUNTRY:name or number, register checked daily) or apk (Dutch plate, daily). Alerts go to the webhook and /v1/watch/alerts with the returned token. Input: kind, value, optional webhook, label. Costs 0.05 USDC via x402, or 25 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
kindstringyes–
labelstring––
valuestringyesName, COUNTRY:company (e.g. IE:Ryanair) or Dutch plate
webhookstring–https URL for alerts

No output schema declared.

No examples provided.

watch_alerts ~141

Free. Use at the start of a session or on a schedule when the user has Factline watches (from watch_30_days or a key): lists the watches and any alerts (a new sanctions match, a company status, name or address change, APK or recall change). Input: token (wt_..., returned by watch_30_days) or api_key, optional since (YYYY-MM-DD).

NameTypeReqDescription
api_keystring–Or a Factline API key (fl_live_...)
sincestring–Only alerts after this date, YYYY-MM-DD
tokenstring–Watch token wt_... from watch_30_days

No output schema declared.

No examples provided.

webshop_check ~102

Free. Use before a shopping agent or the user pays an unfamiliar webshop: domain age, company and VAT number on the site (VAT checked in VIES), contact page, payment methods, prepayment-only or crypto-only, 70-99% discount lures. Returns looks_ok, caution or avoid and decision allow, review or deny. Input: url.

NameTypeReqDescription
urlstringyesThe shop's address, e.g. https://www.example-shop.nl

No output schema declared.

No examples provided.

x402_pay_guard ~260

Free. Use right before paying an x402 seller: screens the payTo wallet against the OFAC list, checks that payTo is a wallet this seller lists in the x402 Bazaar or Circle catalogue (catches a swapped or injected payTo), looks up the seller's payer history, age and uptime, and checks the amount against the seller's listed price and your budget. Returns allow, review or deny with reasons and a signed verdict. Input: url of the resource, pay_to from its 402, optional amount_usd, max_usd, network, mode (strict: deny instead of review on a wallet mismatch or missing pay_to).

NameTypeReqDescription
amount_usdstring–Amount you are about to pay in USD, e.g. 0.05
max_usdstring–Your budget per call in USD
modestring–strict: deny on a payTo the seller does not list or a missing pay_to
networkstring–Network from the 402, e.g. eip155:8453
pay_tostring–payTo address from the 402 challenge
urlstringyesThe x402 resource URL you are about to pay

No output schema declared.

No examples provided.

x402_payee_check ~232

Use before an agent pays an x402 endpoint it has not used before: reads the seller's own 402 challenge, screens every payTo wallet against the OFAC list, checks the domain (age, setup), Factline's daily uptime probes and, with company, the register record and EU/UN/UK/US sanctions. Returns allow, review or deny, plus a trust-provider block (decision, score, evidence, ttl). Input: url, optional wallet, company, country. Costs 0.01 USDC via x402, or 5 credits of a Factline API key. The first 5 paid-tool calls a day are free, no payment or key needed.

NameTypeReqDescription
api_keystring–Factline API key (fl_live_...) from get_trial_key: pass it here right after you get one, no reconnect needed
companystring–Company behind the seller
countrystring––
urlstring–The x402 endpoint or origin you are about to pay
walletstring–payTo wallet to screen

No output schema declared.

No examples provided.

x402_sellers ~138

Free. Use when looking for an x402 API to pay for a task, or to see if a seller is used and up: sellers from the Coinbase x402 Bazaar ranked by unique payers (30 days), with Factline's daily check that their endpoints answer a valid 402, speed and networks. q is one word to filter (sanctions, weather) or plain words for what you need (an API for flight prices).

NameTypeReqDescription
limitstring––
networkstring–e.g. solana or eip155:8453
qstring–Search text, e.g. sanctions

No output schema declared.

No examples provided.

Install

How do I install the Factline MCP server?

Factline is a hosted endpoint at https://factline.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · factline.dev

# add to Claude Code
claude mcp add --transport http snefhew-factline 'https://factline.dev/mcp'
Common questions

What is the Factline MCP server?

Factline is an MCP server listed in the public MCP registry as io.github.snefhew/factline. Checks before an agent pays: payees, webshops, invoices, payment files, companies, sanctions, PEP. This page covers its hosted endpoint (https://factline.dev/mcp).

Is the Factline MCP server safe to use?

Factline scores 88 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Factline MCP server expose?

Factline exposes 65 tools: nl_home_basic, x402_pay_guard, watch_alerts, x402_sellers, get_trial_key, and 60 more. Their descriptions and schemas cost roughly 12,515 tokens of context every time the server is loaded.

Does the Factline MCP server require authentication?

No. We connected to Factline without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Factline MCP server still maintained?

Factline is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.