kyb-brasil

br_sanctions_screen

Read-only

Screen a Brazilian CNPJ, all branches of the same company (CNPJ root) and its corporate partners against the official CGU sanction lists: CEIS (debarred), CNEP (anti-corruption penalties), CEPIM (barred non-profits), leniency agreements, plus the Ministry of Labour forced-labour employer list. Each hit has type, body, dates, active flag and an evidence URL. Beyond a plain CEIS/CNEP check. Signed answer (Ed25519 attestation), verifiable at /v1/verify.

Input Schema

TableJSON Schema

Name	Required	Description	Default
`cnpj`	Yes	Brazilian CNPJ, 14 characters, with or without punctuation (e.g. 00.000.000/0001-91).

Output Schema

TableJSON Schema

Name	Required	Description
`cnpj`	Yes	Normalized 14-character CNPJ.
`hits`	Yes	Each hit: list, sanctioned_entity, sanction_type, dates, active, evidence_url.
`clear`	Yes	True when there is no ACTIVE sanction on the company, its branches or corporate partners.
`cached`	Yes
`receipt`	No	Re-read this answer free for 10 minutes with br_replay.
`sources`	Yes	Source URL and fetch time of each fact.
`summary`	Yes	Short summary in English and Portuguese.
`active_hits`	Yes
`attestation`	No	Ed25519 signature of this answer; verify at verify_url or with the public key at /.well-known/kyb-attestation.json.
`expired_hits`	Yes
`generated_at`	Yes
`data_freshness`	Yes
`screened_entities`	Yes

Schema Changelog

Changes observed during successful MCP inspections.

Changed2 schema fields changedOct 12, 2026

addedOutput schema / properties / attestation

Added value: +{
+  "additionalProperties": false,
+  "description": "Ed25519 signature of this answer; verify at verify_url or with the public key at /.well-known/kyb-attestation.json.",
+  "properties": {
+    "algorithm": {
+      "type": "string"
+    },
+    "key_id": {
+      "type": "string"
+    },
+    "sha256": {
+      "type": "string"
+    },
+    "signature": {
+      "type": "string"
+    },
+    "signed_at": {
+      "type": "string"
+    },
+    "verify_url": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "algorithm",
+    "key_id",
+    "sha256",
+    "signed_at",
+    "signature",
+    "verify_url"
+  ],
+  "type": "object"
+}

addedOutput schema / properties / receipt

Added value: +{
+  "additionalProperties": false,
+  "description": "Re-read this answer free for 10 minutes with br_replay.",
+  "properties": {
+    "replay_token": {
+      "type": "string"
+    },
+    "replay_until": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "replay_token",
+    "replay_until"
+  ],
+  "type": "object"
+}

First observedOct 11, 2026

TDQS

Score is being calculated.

All kyb-brasil tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources

Need Help?