OnchainDiligence
Server Details
Pay-per-call compliance via x402: wallet sanctions, OFAC name, UK + US company verification.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- Qazza1/onchaindiligence-mcp
- GitHub Stars
- 0
- Server Listing
- OnchainDiligence MCP Server
Available Tools
5 toolsdiligenceARead-onlyInspect
Combined counterparty due diligence in one call: runs sanctions screening on a crypto wallet (Chainalysis oracle — OFAC SDN, EU, UN) AND a UK Companies House KYB lookup (status, type, PSC / beneficial owners) in parallel. Built for compliance agents vetting a counterparty that has both an on-chain wallet and a UK company. Returns both independent results, plus an explicit disclaimer that no verified link between the wallet and the company is established by the data.
| Name | Required | Description | Default |
|---|---|---|---|
| wallet | Yes | EVM wallet address (0x + 40 hex) to sanctions-screen | |
| company | Yes | UK Companies House registration number to verify |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses parallel execution, independent results, and a disclaimer about no verified link. Adds value beyond readOnly and openWorld annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single concise paragraph, no wasted words, effectively front-loaded with the main function.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Adequately describes the combined function and use case, but lacks details on result structure since no output schema exists.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with clear descriptions. Description adds no additional detail beyond what's in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states it combines sanctions screening on a crypto wallet and UK Companies House KYB lookup. It distinguishes from sibling tools like screen_wallet and verify_uk_company by offering a combined call.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states it's built for compliance agents vetting a counterparty with both an on-chain wallet and a UK company. Implies not to use if only one check is needed, but lacks explicit exclusion.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
screen_nameARead-onlyInspect
OFAC name screening: fuzzy-match a person or company name against the official US Treasury OFAC Specially Designated Nationals (SDN) list (primary names + strong aliases). Returns scored candidate matches with the matched name, SDN type, and program. SCOPE: this is a screening aid for AML / KYC / sanctions compliance — a match is a candidate to investigate with secondary identifiers (DOB, nationality, ID), NOT a determination. Weak AKAs are not screened, per OFAC guidance.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Person or company name to screen against the OFAC SDN list | |
| threshold | No | Optional match confidence cutoff 0.5–1.0 (default 0.85). Lower = more candidates, more false positives. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true. The description transparently discloses the output format (scored candidate matches with matched name, SDN type, program), the scope (screening aid, not determination), and the limitation that weak AKAs are excluded. No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise at three sentences, front-loading the main purpose. It is well-structured: first the action, then output, then scope/limitations. Minor improvement could be breaking into bullet points for readability, but overall efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description adequately explains the return format (scored candidates with matched name, SDN type, program). It covers important constraints (weak AKAs excluded, need for secondary identifiers). For a screening tool with simple parameters, this is fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% for both parameters, so baseline is 3. The description does not add significant new meaning beyond the schema's descriptions for 'name' and 'threshold'. The schema already explains the threshold range and default. The description's context aligns but does not enhance parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'fuzzy-match' and the resource 'person or company name against the OFAC SDN list'. It specifies it screens primary names and strong aliases, distinguishes from weak AKAs, and clarifies it is a screening aid, not a determination. The purpose is distinct from sibling tools like 'screen_wallet' or 'verify_uk_company'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use: for AML/KYC/sanctions compliance. It provides clear exclusions: weak AKAs are not screened, and a match is not a final determination, requiring secondary identifiers. However, it does not explicitly compare to sibling tools or state when not to use this tool over others.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
screen_walletARead-onlyInspect
Sanctions screening for a crypto wallet address. Checks an EVM address against the Chainalysis on-chain sanctions oracle, which covers OFAC SDN, EU, and UN designated addresses. The oracle reflects designations as they stand today, including removals — an address that was once designated may screen clean if it has since been delisted. Returns a clear sanctioned / not-sanctioned boolean; the oracle does not return programme-level case detail. Use for AML compliance, counterparty due diligence, and payment screening before sending USDC or any funds to an address.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | EVM wallet address (0x + 40 hex) to sanctions-screen |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=true and openWorldHint=true, which already inform safety and data freshness. The description adds valuable context beyond annotations: the oracle reflects current designations including removals (an address may screen clean after delisting), and it explicitly states the oracle does not return programme-level case detail. This transparency about dynamic data and output limitation goes beyond what annotations cover.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is efficiently structured: first sentence states purpose, second explains the oracle's dynamic nature, third describes the output and limitation, fourth lists use cases. No redundant sentences; every part earns its place. Information is front-loaded with the core function, making it easy for an agent to quickly parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool with no output schema, the description is remarkably complete. It covers what the tool does, how the data behaves (open-world), what the output is (boolean), and its limitation (no case detail). It also provides practical guidance (when to use). There are no obvious gaps for an agent to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the single parameter 'address' is fully described in the schema (EVM address format). The description adds little to parameter semantics—it reuses the same format but adds the screening purpose and use-case context. Since the schema already documents the parameter, the baseline of 3 applies; the description does not introduce new field-level meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with the exact function: 'Sanctions screening for a crypto wallet address' and names the specific oracle (Chainalysis) and coverage (OFAC SDN, EU, UN). It also states the output is a boolean, distinguishing it from sibling tools like screen_name (name-based) and verify_uk_company/verify_us_company (company verification), which are clearly different domains.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit use cases ('Use for AML compliance, counterparty due diligence, and payment screening before sending USDC or any funds to an address'). While it doesn't explicitly say 'do not use for name/company screening' or name alternatives, the purpose is so specific that an agent can infer when this tool applies versus siblings. It lacks an explicit when-not or alternative routing, but the context is strong enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_uk_companyARead-onlyInspect
UK company verification and KYB (know-your-business) lookup via the official Companies House register. Given a UK company registration number, returns legal status (active / dissolved), company type, incorporation date, registered office address, and the people with significant control (PSC / beneficial owners). Use for KYB onboarding, supplier and counterparty due diligence, and confirming a UK business is real, active, and who controls it. Authoritative UK government open data.
| Name | Required | Description | Default |
|---|---|---|---|
| companyNumber | Yes | UK Companies House registration number to verify, e.g. 00000006 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true. The description adds value by noting it is 'authoritative UK government open data' and specifying the returned data types (legal status, PSC, etc.). No contradiction with annotations, and the description enhances understanding of the tool's behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is five sentences, efficiently covering purpose, returned data, use cases, and authority. It is well-structured and front-loaded. Minor room for further conciseness, but overall very good.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (1 parameter, no output schema), the description adequately lists the types of data returned (legal status, company type, incorporation date, address, PSC). It does not cover error handling or output format, but for a read-only lookup, it provides sufficient context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with the parameter companyNumber fully described. The description restates 'given a UK company registration number' but does not add significant new meaning beyond the schema's description and example. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it performs UK company verification and KYB lookup via Companies House, specifying the exact returned fields (legal status, type, incorporation date, address, PSC). It distinguishes itself from the sibling verify_us_company by being UK-specific and provides a distinct set of data.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly lists use cases: 'KYB onboarding, supplier and counterparty due diligence, and confirming a UK business is real, active, and who controls it.' It does not explicitly state when not to use, nor does it compare to siblings like screen_name or diligence, but the context is clear enough for an agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_us_companyARead-onlyInspect
US public company verification via the SEC EDGAR system. Given a ticker, SEC CIK, or company name, returns the registered entity name, CIK, industry (SIC code), state of incorporation, listed exchanges and tickers, business address, and most recent SEC filing. Ambiguous name searches return candidates and never silently select a company. SCOPE: EDGAR covers SEC-registered PUBLIC companies and funds only — NOT private US companies, which register at the state level. Use for KYB and counterparty due diligence on listed US entities. Authoritative US government open data.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | US public company ticker, SEC CIK, or company name — e.g. "AAPL", "0000320193", or "Apple Inc" |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and openWorldHint=true, and the description adds valuable behavioral detail: ambiguous name searches return candidates and never silently select a company. It also discloses the authoritative data source and the EDGAR coverage boundary, which go beyond what annotations convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded: it states the core function, return fields, ambiguity behavior, scope boundary, and use case in a few ordered sentences. Every sentence adds useful information without filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With a single parameter and no output schema, the description does the necessary work: it enumerates the returned fields, explains behavior on ambiguous input, and constrains scope. An agent would know what to pass and what to expect from the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the schema already explains that query is a ticker, CIK, or company name with examples. The tool description repeats this rather than adding new parameter-level meaning, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'US public company verification via the SEC EDGAR system.' It clearly distinguishes itself from siblings like verify_uk_company by specifying US jurisdiction and public-company scope, and it enumerates concrete return fields such as CIK, SIC code, and listed exchanges.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states the intended use ('Use for KYB and counterparty due diligence on listed US entities') and explicitly defines when NOT to use it ('NOT private US companies, which register at the state level'). This gives an agent clear routing criteria relative to other tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user or an account that owns the GitHub organization, then choose Claim with GitHub.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Email, phone, domain, URL & OFAC verification; phishing and IBAN checks via x402.
European business verification for AI agents: registry, VAT, sanctions, IBAN. Pay-per-call x402.
Deterministic Mexican/LatAm verification + sanctions & PEP screening for AI agents. Pay via x402.
Pay-per-call crypto intelligence: 19 tools over 10+ live sources, USDC via x402.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceCrypto compliance tools for AI-agent payments: screen any address for sanctions, frozen-stablecoin and hacker/mixer exposure across 8+ chains, trace fund taint, and get an allow/review/decline decision before settlement. Free keyless address checks; deeper endpoints are x402-payable.124MIT
- FlicenseNot gradedqualityBmaintenanceKeyless, pay-per-call compliance & regulated-data tools for AI agents: OFAC wallet + sanctions/PEP + KYB screening, SEC filings, FRED economics, FDA recalls, federal awards, and continuous monitoring (watch a wallet/company/brand for status changes). USDC via x402 on Base/Solana, no API key, no signup.
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to run pay-per-call checks on US freight carriers and brokers, OFAC sanctions lists, and African FX rates using x402 micropayments or a prepaid pass without an API key.MIT
- AlicenseNot gradedqualityDmaintenanceMCP server providing EU compliance APIs for VAT validation, sanctions screening, counterparty checks, and invoice extraction. Enables AI agents to make pay-per-call requests settled in USDC on Base via x402, with no account or API key required.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Each tool has a distinct purpose, but 'diligence' overlaps with the combination of 'screen_wallet' and 'verify_uk_company', which could cause confusion about when to use the combined vs. individual tools. However, the descriptions clearly delineate that 'diligence' runs both checks in parallel with an additional disclaimer, so the ambiguity is limited.
Four of five tools follow a clear verb_noun pattern (screen_name, screen_wallet, verify_uk_company, verify_us_company), but 'diligence' is a bare noun that doesn't fit the convention. This minor deviation is still readable and predictable overall.
With 5 tools, the set is well-scoped for a compliance/due diligence server. Each tool covers a distinct aspect (name screening, wallet screening, UK company verification, US company verification, and a combined diligence option) without unnecessary bloat or trivial additions.
The tool surface covers the core due diligence workflows: sanctions screening for both names and wallets, company verification for both UK and US entities, and a combined diligence call that ties together the on-chain and off-chain checks. There are no obvious dead ends or missing critical operations within the stated domain.