US Business Verification (KYB) MCP Server

ai.greyridgesignals/business-verification-mcpVersion 0.7.0

Keyless KYB: verify, OFAC SDN + GLEIF ownership/UBO graph (parents+subsidiaries). NY/CO/CT. No key.

Status

Responds164 msNov 14, 2026, 13:29 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 13:29 UTC
Latency: 164 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 22:14 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://business-verification-mcp.sigrunner.workers.dev/mcpResponds164 msNov 14, 2026, 13:29 UTC

No sign-in

Claude Code

claude mcp add --transport http business-verification-mcp https://business-verification-mcp.sigrunner.workers.dev/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: business-verification-mcp
Remote MCP server URL: https://business-verification-mcp.sigrunner.workers.dev/mcp

Cursor

{
  "mcpServers": {
    "business-verification-mcp": {
      "url": "https://business-verification-mcp.sigrunner.workers.dev/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"business-verification-mcp","type":"http","url":"https://business-verification-mcp.sigrunner.workers.dev/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

6 tools

Tools of US Business Verification (KYB) MCP Server
	Description		Read-only	Idempotent	Open world
`list_states`List the US states currently verifiable through this server (keyless, public-domain official registries) and how each is addressed. No network call.	List the US states currently verifiable through this server (keyless, public-domain official registries) and how each is addressed. No network call.	Not declared	Not declared	Not declared	Not declared
`lookup_entity`Authoritative lookup of ONE business by its registry entity_id within a state. Unlike verify_business this does NO fuzzy name matching — the entity_id is the registry primary key, so a hit is the single canonical row (match_confidence 1.0, match_tier "exact_id"). Returns the same FREE TASTE as a verified match (entity_name, normalized status, risk flags); the full diligence record (registered_agent, principal_address, formation_date, UCC-lien detail, OFAC hit detail, provenance source_url) is delivered by the hosted rail in see_also. WHEN TO USE: you already have an entity_id (e.g. from a prior verify_business or search_entities result) and want to re-resolve it exactly or refresh its status. If you only have a name, use verify_business or search_entities. matched=false (never fabricated) when the id is unknown or the state is unsupported.	Authoritative lookup of ONE business by its registry entity_id within a state. Unlike verify_business this does NO fuzzy name matching — the entity_id is the registry primary key, so a hit is the single canonical row (match_confidence 1.0, match_tier "exact_id"). Returns the same FREE TASTE as a verified match (entity_name, normalized status, risk flags); the full diligence record (registered_agent, principal_address, formation_date, UCC-lien detail, OFAC hit detail, provenance source_url) is delivered by the hosted rail in see_also. WHEN TO USE: you already have an entity_id (e.g. from a prior verify_business or search_entities result) and want to re-resolve it exactly or refresh its status. If you only have a name, use verify_business or search_entities. matched=false (never fabricated) when the id is unknown or the state is unsupported.	Not declared	Not declared	Not declared	Not declared
`map_ownership`Corporate OWNERSHIP GRAPH / UBO (ultimate beneficial owner) tracer for a company (FREE TASTE). Given a company NAME or its LEI, trace its ownership using the keyless GLEIF Global LEI relationship register (Level-2, CC0 public domain): the ultimate parent (the UBO control anchor), the full multi-hop parent CHAIN walked up level by level (not a single hop), and the direct subsidiaries with the TRUE total count. Each node also carries registeredAs — its authoritative national-register number (French SIREN, German HRB, etc.) — and a national_register hint naming which official register can confirm it, the connected link between the global ownership graph and a per-country registry that flat LEI scrapers do not join. This free taste returns the UBO anchor, the parent chain, and one bounded page of direct children with the real subsidiary total. The FULL recursive N-level subsidiary tree and each node's registeredAs CONFIRMED (resolved) against the live national register are delivered by the hosted rail in see_also. WHEN TO USE: you need who ultimately owns/controls a company, or its corporate family (parents + subsidiaries). For a plain is-it-real/active check use verify_business; for an OFAC watchlist check use screen_sanctions. Keyless, no API key. Resolution is guarded: a name only resolves on a strong leading-token match, and a company with no reported parent is honestly reported as an ultimate parent (not an error).	Corporate OWNERSHIP GRAPH / UBO (ultimate beneficial owner) tracer for a company (FREE TASTE). Given a company NAME or its LEI, trace its ownership using the keyless GLEIF Global LEI relationship register (Level-2, CC0 public domain): the ultimate parent (the UBO control anchor), the full multi-hop parent CHAIN walked up level by level (not a single hop), and the direct subsidiaries with the TRUE total count. Each node also carries registeredAs — its authoritative national-register number (French SIREN, German HRB, etc.) — and a national_register hint naming which official register can confirm it, the connected link between the global ownership graph and a per-country registry that flat LEI scrapers do not join. This free taste returns the UBO anchor, the parent chain, and one bounded page of direct children with the real subsidiary total. The FULL recursive N-level subsidiary tree and each node's registeredAs CONFIRMED (resolved) against the live national register are delivered by the hosted rail in see_also. WHEN TO USE: you need who ultimately owns/controls a company, or its corporate family (parents + subsidiaries). For a plain is-it-real/active check use verify_business; for an OFAC watchlist check use screen_sanctions. Keyless, no API key. Resolution is guarded: a name only resolves on a strong leading-token match, and a company with no reported parent is honestly reported as an ultimate parent (not an error).	Not declared	Not declared	Not declared	Not declared
`screen_sanctions`OFAC SDN sanctions screening / watchlist screen per name. Screen one or more names directly against the live OFAC SDN (Specially Designated Nationals) sanctions list — no state lookup. Returns per-name verdict (clear \| potential_match \| match), matched program(s), the alias or primary name that matched, a confidence score, and the exact OFAC source URL. The list is downloaded live per call (delisted entities correctly return clear). Matching uses distinctiveness learned from the list itself (IDF-weighted contiguous-phrase containment), not a naive substring, to suppress false positives. WHEN TO USE: a pure OFAC watchlist check on names, with NO state registry lookup. If you want to verify a business in a registry (which already includes this OFAC screen on each match), use verify_business instead.	OFAC SDN sanctions screening / watchlist screen per name. Screen one or more names directly against the live OFAC SDN (Specially Designated Nationals) sanctions list — no state lookup. Returns per-name verdict (clear \| potential_match \| match), matched program(s), the alias or primary name that matched, a confidence score, and the exact OFAC source URL. The list is downloaded live per call (delisted entities correctly return clear). Matching uses distinctiveness learned from the list itself (IDF-weighted contiguous-phrase containment), not a naive substring, to suppress false positives. WHEN TO USE: a pure OFAC watchlist check on names, with NO state registry lookup. If you want to verify a business in a registry (which already includes this OFAC screen on each match), use verify_business instead.	Not declared	Not declared	Not declared	Not declared
`search_entities`Browse / enumerate businesses within ONE state whose official name begins with (then contains) a fragment — the "list the companies in this state" surface. Unlike verify_business (which collapses to the single best match) this returns a bounded, name-ordered LIST of candidate entities as a FREE TASTE — each row carries entity_name, normalized status and jurisdiction, enough to disambiguate which "ACME " is which. The per-row diligence detail (entity_id, registered_agent, source_url, formation_date) is delivered by the hosted rail in see_also. WHEN TO USE: you want to discover or disambiguate the entities under a name stem (e.g. all "ACME " filings in Colorado). For a single known business use verify_business; for a known id use lookup_entity. Keyless, public-domain official registries.	Browse / enumerate businesses within ONE state whose official name begins with (then contains) a fragment — the "list the companies in this state" surface. Unlike verify_business (which collapses to the single best match) this returns a bounded, name-ordered LIST of candidate entities as a FREE TASTE — each row carries entity_name, normalized status and jurisdiction, enough to disambiguate which "ACME " is which. The per-row diligence detail (entity_id, registered_agent, source_url, formation_date) is delivered by the hosted rail in see_also. WHEN TO USE: you want to discover or disambiguate the entities under a name stem (e.g. all "ACME " filings in Colorado). For a single known business use verify_business; for a known id use lookup_entity. Keyless, public-domain official registries.	Not declared	Not declared	Not declared	Not declared
`verify_business`KYB / know-your-business verification (FREE TASTE). Verify one or more US businesses against official, keyless state business-registry sources (currently NY, CO, CT). Each business may be a bare name string ("Palantir Technologies") or an object {name, state}. Returns one record per input with the scored match_confidence, the official entity_name, the normalized status (active/inactive), jurisdiction, a recently_formed flag, the CO has_active_liens risk flag, and a field_safety injection screen (OWASP LLM01) over registry free-text — returned fast, keyless. An OFAC SDN sanctions screen is opt-in (set includeSanctions=true, or use screen_sanctions); the full OFAC hit detail runs on the hosted rail. This is enough to confirm a business is real and in good standing. The full diligence record — registry entity_id, verbatim official status, entity_type, formation_date, registered_agent, principal_address, the itemized UCC-lien profile (secured parties, amounts, dates), the OFAC hit detail, and the exact source_url + retrieved_at provenance — is delivered by the hosted batch rail named in see_also ($0.01 per verified match, metered, billed only on a match). No-matches return a defensible audit (no_match_reason + candidate_count), never a bare false. WHEN TO USE: you have a business NAME. If you already hold the entity_id use lookup_entity; to list many businesses by a name prefix use search_entities; for an OFAC-only check use screen_sanctions. Keyless, public-domain sources, no API key.	KYB / know-your-business verification (FREE TASTE). Verify one or more US businesses against official, keyless state business-registry sources (currently NY, CO, CT). Each business may be a bare name string ("Palantir Technologies") or an object {name, state}. Returns one record per input with the scored match_confidence, the official entity_name, the normalized status (active/inactive), jurisdiction, a recently_formed flag, the CO has_active_liens risk flag, and a field_safety injection screen (OWASP LLM01) over registry free-text — returned fast, keyless. An OFAC SDN sanctions screen is opt-in (set includeSanctions=true, or use screen_sanctions); the full OFAC hit detail runs on the hosted rail. This is enough to confirm a business is real and in good standing. The full diligence record — registry entity_id, verbatim official status, entity_type, formation_date, registered_agent, principal_address, the itemized UCC-lien profile (secured parties, amounts, dates), the OFAC hit detail, and the exact source_url + retrieved_at provenance — is delivered by the hosted batch rail named in see_also ($0.01 per verified match, metered, billed only on a match). No-matches return a defensible audit (no_match_reason + candidate_count), never a bare false. WHEN TO USE: you have a business NAME. If you already hold the entity_id use lookup_entity; to list many businesses by a name prefix use search_entities; for an OFAC-only check use screen_sanctions. Keyless, public-domain sources, no API key.	Not declared	Not declared	Not declared	Not declared

Details

Registry status: Active
Published: Nov 12, 2026
Updated: Nov 12, 2026
Website: https://business-verification-mcp.sigrunner.workers.dev/⁠ (opens in a new tab)
Repository: https://github.com/rezearcher/business-verification-mcp⁠ (opens in a new tab)
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing