Japan MOF Sanctions List Relay
Server Details
Is this name on Japan's MOF asset-freeze list? Hosted, list-change history kept. Reference only.
- Status
- Healthy
- Uptime
- 99.9% over 25 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- ChatGPT
- –
- Claude
- –
TDQS
Scored across 4 tools
The four tools have clearly distinct roles: catalog describes the service, get_receipt retrieves paid-call results, sanctions_list_changes reports list deltas, and sanctions_screen_name checks a name. There is little risk of confusing the two sanctions tools because one is time-based change tracking and the other is name screening.
All names use snake_case, and the two core tools share a clear sanctions_ prefix. Minor inconsistency exists because catalog is a bare noun while get_receipt follows a verb_noun pattern and the sanctions tools use domain-prefixed forms.
Four tools is well-scoped for a focused sanctions-list relay: two core data tools plus catalog and receipt retrieval. Each tool appears to earn its place without bloating the surface.
The surface covers the main relay workflows: service discovery, name screening, list-change history, and result re-fetch. A direct entry lookup or current-list retrieval could be useful, but the existing tools return entry ids and details, so gaps are minor.
Available Tools
4 toolscatalogCatalog: tools, prices and limitsARead-onlyInspect
List the tools of this server with prices, data sources, licensing, daily limits and data freshness.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| legal | Yes | |
| terms | Yes | URL of the terms of service. |
| tools | Yes | Every tool of this server with its price. |
| paused | Yes | Operator pause flags (true = paused). |
| server | Yes | |
| payment | Yes | |
| provenance | No | Freshness receipts for every upstream source used. |
| daily_limits | Yes | Daily limits of paid calls (calls, usd, timezone) or a misconfiguration notice. |
| fetch_status_values | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so safety is covered. The description adds the content categories returned (prices, licensing, limits, freshness), which is useful context, but an output schema exists and would surface the same structure, so the incremental disclosure is modest.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler; every clause enumerates distinct payload content, so nothing is wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no parameters, a read-only annotation, and an output schema present, the description need not explain return values or safety. It is nearly complete for this simple tool; only a hint about when to reach for it is absent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so there is nothing for the description to disambiguate. Baseline 4 applies under the '0 params' rule.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear verb ("List") plus resource ("the tools of this server") and an enumeration of the payload contents (prices, data sources, licensing, daily limits, freshness). It is plainly distinguishable from siblings like get_receipt or drone_flight_check, though it does not explicitly name or contrast them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit when-to-use or when-not-to-use guidance is given; usage is only implied by the discovery framing ("the tools of this server"). An agent can infer this is the entry point for learning available tools and pricing, but nothing states that intent directly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_receiptGet receipt of a paid callARead-onlyInspect
Re-fetch the stored result of a settled paid call by its receipt_id, for when the response was lost after payment. Free. Unknown or unsettled receipt ids return RECEIPT_NOT_FOUND. Results are kept for 30 days after settlement.
| Name | Required | Description | Default |
|---|---|---|---|
| receipt_id | Yes | The receipt_id returned with a paid result ("rcpt_" + 64 hex characters). |
Output Schema
| Name | Required | Description |
|---|---|---|
| tool | Yes | Name of the paid tool that produced the result. |
| terms | Yes | URL of the terms of service. |
| result | Yes | The stored result, exactly as returned by the paid call. |
| payment | Yes | |
| provenance | Yes | Freshness receipts for every upstream source used. |
| receipt_id | Yes | Receipt id of the settled paid call ("rcpt_" + 64 hex). Use with get_receipt. |
| settled_at | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond readOnlyHint=true, the description discloses pricing ('Free'), error behavior for unknown/unsettled ids (RECEIPT_NOT_FOUND), and a retention window (30 days after settlement). These are substantive operational facts an agent cannot get from the annotations or schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the purpose, followed by cost, error case, and retention. No sentence is redundant and nothing is buried.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With an output schema present, return values need no explanation, and the annotations cover safety. The description still covers cost, failure mode, and data lifetime, leaving no material gap for an agent calling this single-param read tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the schema already documents the 'rcpt_' + 64 hex format, so the baseline is 3. The description adds semantic constraint by implying the id must belong to a settled paid call, which goes slightly beyond the schema's format-only documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource: 'Re-fetch the stored result of a settled paid call by its receipt_id.' This is unambiguous and an agent can immediately tell what the tool returns and what it operates on, even though the sibling tools are unrelated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states the triggering condition clearly ('for when the response was lost after payment'), which is exactly the scenario that should select this tool. It also implicitly scopes usage to settled calls via the RECEIPT_NOT_FOUND note, though it names no alternative tools for other recovery paths.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sanctions_list_changesMOF asset-freeze list changes since a dateARead-onlyInspect
What was added to, removed from or modified in the Japan MOF asset-freeze list since a date? From this service's own record of list versions (MOF publishes only the current list). Each change has the entry id, names, program, before/after fields and the versions compared. History starts at tracking_since; nothing earlier was observed. Free window: last 30 days (an earlier since is clamped; see history_window). Reference relay only.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of changes, 1-200 (default 100) | |
| since | Yes | ISO 8601 date or date-time with time zone, e.g. 2026-10-01 or 2026-10-01T00:00:00Z | |
| entry_id | No | Optional filter: MOF list number, e.g. 029-000001 | |
| change_type | No | Optional filter: added, removed or modified |
Output Schema
| Name | Required | Description |
|---|---|---|
| query | Yes | |
| terms | Yes | URL of the terms of service. |
| changes | Yes | Per-entry differences between list versions observed by this service, oldest first. |
| coverage | Yes | |
| truncated | Yes | |
| provenance | Yes | Freshness receipts for every upstream source used. |
| answered_at | Yes | |
| attribution | Yes | |
| not_covered | Yes | |
| history_note | Yes | |
| legal_notice | Yes | |
| history_window | Yes | Free history window applied to this answer. |
| tracking_since | Yes | When this service downloaded its first list version. Nothing before it was observed. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover read-only/open-world, yet the description discloses data provenance (own version records, since MOF publishes only the current list), the history floor at tracking_since, the 30-day free window with clamping semantics, and the per-change payload. These are exactly the behavioral traits an agent cannot get from structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core question, then progressively denser qualifications about provenance, history, and windowing. Every sentence carries content, though 'Reference relay only' is a terse fragment whose payoff is unclear.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With an output schema present, return values need not be spelled out, and the description still hints at the change fields. Provenance, history limits, and windowing are all covered; only explicit routing relative to the sibling tools is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds real meaning for `since`: earlier values are clamped to the 30-day window and history is bounded by tracking_since. It also frames limit/filters implicitly through the change payload, slightly exceeding the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening sentence names the specific resource (Japan MOF asset-freeze list), the operation (changes since a date), and enumerates the change kinds. It is unmistakably distinct from siblings like sanctions_screen_name (name screening) and catalog.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by the question framing and the 'since' requirement, but there is no explicit when-to-use guidance, no statement of when this is preferable to sanctions_screen_name or catalog, and 'Reference relay only' is opaque rather than directive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sanctions_screen_nameScreen a name against the MOF asset-freeze listARead-onlyInspect
Does this person or entity name (Latin or Japanese) appear on the Japan MOF asset-freeze list under the Foreign Exchange Act? Returns exact_match, candidates (similar names, not matches), no_match_in_checked_list or unknown (stale/unavailable), with entry ids, all name forms, program, notice dates, list version, freshness and attribution. Reference relay only: not a compliance determination or a statement that a transaction is permitted.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Name of a person or entity in Latin letters or Japanese (katakana, hiragana or kanji), e.g. 'Vladimir Putin' or 'ウラジーミル・プーチン' | |
| max_candidates | No | Maximum number of similar-name candidates to return, 1-25 (default 10) |
Output Schema
| Name | Required | Description |
|---|---|---|
| query | Yes | |
| terms | Yes | URL of the terms of service. |
| status | Yes | exact_match = equal after normalization to a listed name, alias or former name (identity not confirmed); candidates = similar names only, NOT matches; no_match_in_checked_list = not found in the list version checked (not a statement that a transaction is permitted); unknown = data stale, still loading or unreadable. |
| history | Yes | |
| freshness | Yes | |
| candidates | Yes | Similar names. Candidates are not matches. |
| provenance | Yes | Freshness receipts for every upstream source used. |
| answered_at | Yes | |
| attribution | Yes | |
| not_covered | Yes | |
| legal_notice | Yes | |
| list_version | Yes | |
| exact_matches | Yes | |
| matching_note | Yes | |
| interpretation | Yes | |
| unknown_reason | Yes | |
| candidates_total | Yes | |
| candidates_truncated | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only cover readOnlyHint and openWorldHint; the description goes further by enumerating outcome states including the 'unknown (stale/unavailable)' degraded mode and reporting freshness/list version/attribution, which tells the agent data may be stale. The 'reference relay only' disclaimer clarifies the output is not a compliance verdict.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded as a direct question, then a dense enumeration of return states, then the disclaimer. Slightly packed but every clause carries information; no filler sentences.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With an output schema present, return-value detail is technically redundant, but the description still usefully flags degraded/stale results and attribution that an agent needs for correct interpretation. Nothing critical is missing for calling a 2-parameter screening tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters are already documented in the schema, including the Latin/Japanese examples. The description restates the Latin-or-Japanese name constraint but adds nothing about max_candidates beyond what the schema provides, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (screen) and resource (person or entity name) against a precisely named list (Japan MOF asset-freeze under the Foreign Exchange Act). It is clearly distinguishable from siblings like sanctions_list_changes and catalog.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage (screening a name) and adds an interpretive boundary via 'Reference relay only: not a compliance determination or a statement that a transaction is permitted.' However, it never explicitly says when to use this versus sanctions_list_changes or other siblings, leaving routing to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
- First observed
catalog - First observed
get_receipt - First observed
sanctions_list_changes - First observed
sanctions_screen_name
Related MCP Connectors
Screen a name against the U.S. Treasury OFAC SDN list. Information, not a compliance determination.
Checks whether a name is on the European Union's financial sanctions list, for compliance and AML du
Checks whether a name is on the FinCEN (US financial crimes) lists, for compliance and AML due dilig
Checks whether a name is on Canada's international sanctions list (SEMA), for compliance and AML due
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceVerifica se um nome consta na lista consolidada de sanções do Conselho de Segurança da ONU, para diligência de compliance e AML.MIT
- FlicenseNot gradedqualityDmaintenanceScreens names and companies against OFAC, EU, UK, and UN sanctions lists with fuzzy-match scores, supporting bulk lookups for AML/KYC checks. Data is sourced directly from official government lists and cached for fast repeat checks.-
- AlicenseNot gradedqualityDmaintenanceVerifica se um nome consta na lista de sanções financeiras do Reino Unido (HM Treasury), para diligência de compliance e AML.MIT
- AlicenseNot gradedqualityBmaintenanceScreens names against the US Consolidated Screening List including OFAC SDN and BIS Entity List, keyless.207 npmMIT
Glama MCP Gateway
Add one secure layer between your agents and this server.