# Sanctions screening

> Screen names and crypto wallets against OFAC, UK, EU and UN sanctions lists, with list dates

- name: io.github.Bosco-Labs/sanctions-screening
- version: 1.0.1
- connection class: R1 (autonomous)
- trust: 93/100 flags: duplicate-repo
- quality: 91/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.Bosco-Labs%2Fsanctions-screening
- tools: https://api.protogrid.dev/v1/servers/io.github.Bosco-Labs%2Fsanctions-screening/tools

**An agent can connect on its own if it already holds `SANCTIONS_SCREENING_TOKEN`.** Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "sanctions-screening": {
      "type": "http",
      "url": "https://api.boscolabs.dev/mcp?tools=sanctions_screening,counterparty_check,plan_official_records_query",
      "headers": {
        "Authorization": "Bearer ${SANCTIONS_SCREENING_TOKEN}"
      }
    }
  }
}
```

Placeholders to fill: `${SANCTIONS_SCREENING_TOKEN}`.

## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-100% +updated-5d-ago -duplicate-repo(5 names)
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 91/100 (new)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list declares ttlMs 0, so clients re-fetch it on every use

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 94 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 6 of 6 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 4 of 6 tools declare all four hints; missing: lei_lookup (destructiveHint, idempotentHint); sec_company_lookup (destructiveHint, idempotentHint)
- pass `tools.token_cost`: about 2,876 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump
- pass `tools.hidden_text`: no hidden text in tool names, descriptions, schemas or annotations

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`, `stability.new_links`: tool history recorded for 5 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 6, about 2,876 tokens to load them all
- tool set hash: 58207139898f4f601ee343ad9ecc29e2
- tools last changed: 2026-11-09T20:59:18.678Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.Bosco-Labs/sanctions-screening.svg)](https://protogrid.dev/servers/io.github.Bosco-Labs/sanctions-screening)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-11-09 `counterparty_check` changed (inputSchema)
- 2026-11-09 `sanctions_screening` changed (title, annotations)
- 2026-11-09 `counterparty_check` changed (description, inputSchema)
  - before: Can I do business with this company? One call checks a supplier, customer or partner against official sources and returns a checklist: pass, fail, review or unverified per check, each with its source link and time. Built for AI agents doing KYB, vendor onboarding or "may I pay this party?" checks, and for people who want a fast, sourced first screen. Price: $0.05 per `counterparty-check`.
  - after: Can I do business with this company? One call checks a supplier, customer or partner against official sources and returns a checklist: pass, fail, review or unverified per check, each with its source link and time. Built for AI agents doing KYB, vendor onboarding or "may I pay this party?" checks, and for people who want a fast, sourced first screen. To screen a vendor list, pass up to 10 companies in `companies`: one checklist per company, same price each. Price: $0.05 per `counterparty-check`.

Full history: https://api.protogrid.dev/v1/servers/io.github.Bosco-Labs%2Fsanctions-screening/changes

## Remotes

- https://api.boscolabs.dev/mcp?tools=sanctions_screening,counterparty_check,plan_official_records_query (streamable-http, auth api_key ${SANCTIONS_SCREENING_TOKEN}, reachable true, uptime30d 1)

## Packages

_none_

## Tools (6)

- `counterparty_check`: Can I do business with this company? One call checks a supplier, customer or partner against official sources and returns a checklist: pass, fail, review or unverified per check, each with its source link and time. Built for AI agents doing KYB, vendor onboarding or "may I pay this party?" checks, and for people who want a fast, sourced first screen. To screen a vendor list, pass up to 10 companies in `companies`: one checklist per company, same price each.

Price: $0.05 per `counterparty-check`.
- `describe_official_records_tool`: Free, no key needed. One Bosco Labs tool's input schema, example input, example rows, output fields, price per row, caps and sources. Takes the tool name (eu_tenders or eu-tenders); an unknown name returns the closest names.
- `lei_lookup`: Free, no API token needed. Legal Entity Identifier (LEI) lookup in the official GLEIF
    register: about 2.9 million companies, funds and other legal entities worldwide (source:
    GLEIF API, CC0 open data). Use it to identify a company: its exact legal name, LEI,
    whether it is active, its jurisdiction and country, its local registration number and its
    ultimate parent company.

    Pass an LEI (exact record) or a company name (best matches first; check `legal_name`).

    Returns one row per entity: lei, legal_name, entity_status (ACTIVE/INACTIVE),
    registration_status (ISSUED, LAPSED, ...), jurisdiction, legal_address_country,
    legal_address_city, headquarters_country, registered_as (local registry number),
    ultimate_parent (lei, legal_name; when reported), source_url (the GLEIF record; cite it)
    and next_steps (the paid Bosco Labs call for this company's financials: tool and
    arguments on the remote MCP server and HTTP API, stdio_tool in this package).
    
- `plan_official_records_query`: Free, no key needed. Turns a question in plain words into the exact typed Bosco Labs calls that answer it: tool, input, why, and the maximum price of each step, plus what is not covered. Pass the user's question verbatim AND the entities you extracted from it (company_names, tickers, identifiers, countries, dates, law references...): the planner trusts your entities over its own parsing and puts them in the right input fields. The plan echoes them in entities_used and lists in `missing` what to pass for a better plan. Rules and examples first; only when they are unsure and you passed no entities does a small AI step extract the entities (budget-capped, marked `assisted`). Same steps, same plan_id. Run it with run_official_records_plan (paid, max_usd) or call the listed tools directly. Low confidence returns the top 3 candidate tools instead.
- `sanctions_screening`: Answers "is this company, vessel or person sanctioned?" for one or many names, against the official OFAC SDN and non-SDN lists, the US Consolidated Screening List (Commerce Entity List, Denied Persons, State lists), the UK Sanctions List, the EU financial sanctions list and the UN Security Council list. Every answer says which lists were checked and how current they were, and every match links to its official source. Built for AI agents doing KYB, compliance or procurement checks, and for people who need a quick, sourced screen. It also checks crypto wallet addresses exactly against the addresses OFAC lists (XBT, ETH, USDT, TRX and more), e.g. before an agent pays.

Price: $0.01 per `name-screened`.
- `sec_company_lookup`: Free, no API token needed. Identify a US-listed (SEC-registered) company: CIK, official
    name, ticker(s), exchange(s), industry (SIC code) and state of incorporation (source: SEC
    EDGAR company tickers file and submissions API). Use it to turn a ticker or name into the
    CIK that SEC tools take, or to check which exchange a stock trades on.

    Pass a ticker, a CIK or part of the name (best matches first, then by company size; check
    `name`). A name search covers companies with a listed ticker (about 10,000); a CIK also
    finds filers without one.

    Returns one row per company: cik, name, tickers, exchanges, sic, sic_description,
    state_of_incorporation, fiscal_year_end (MMDD), source_url (the EDGAR company page; cite
    it) and next_steps (the paid Bosco Labs calls for its filings and insider trades).