Validate and analyze a phone number to determine its country, region, carrier, line type (mobile/landline/VoIP), and timezone. Use this to verify phone number legitimacy, identify the carrier or country of origin, or detect VoIP numbers that may indicate fraud. The number must include the country code prefix. Returns JSON with fields: valid (boolean), country, region, carrier, line_type, timezone, and formatted versions (national, international, E.164). Read-only lookup, no authentication required.

Predict the probability of a chargeback (payment dispute) for a vacation rental booking. Returns risk score, key risk factors, and specific prevention recommendations. Pass booking_id (UUID), optional amount in cents, and optional guest_profile.

Lease a real mobile phone number for receiving SMS OTP codes. Returns the phone number (e164 format) and a session_id needed for all subsequent calls. The number is exclusively yours for ttl_seconds. Next step: use the returned `number` on your target service to trigger an SMS, then call `wait_for_otp` with the returned `session_id`.

List directors and officers for a Companies House company number. Returns names, roles, appointment dates, nationality, and total appointment count. Directors with a high appointment count (>=10 other companies) are flagged via `high_appointment_count_flag` — a common trait in nominee director fraud and phoenix company structures.

Call this tool when your agent has received an invoice and needs to verify the supplier details on the invoice match official government registry records. Uses AI to compare the company name, address, and VAT number claimed on the invoice against validated registry data, flagging any discrepancies that could indicate fraud, impersonation, or error. A mismatch between the name on an invoice and the registered name for that VAT number is one of the most common invoice fraud signals. Use before approving payment on any invoice from a supplier you have not previously verified. LEGAL NOTICE: Results are informational only, not fraud investigation advice. Full terms: kordagencies.com/terms.html. Free tier: first 20 calls/month, no API key needed.

Call this tool after validate_vat returns a result, when your agent needs an AI-powered fraud risk assessment before proceeding with a transaction. Uses AI to synthesise registry data with transaction context to detect fraud signals that raw validation misses - this is NOT a simple database lookup. Returns a CLEAR/REVIEW/BLOCK recommendation with specific reasons. Catches: name mismatches between invoice and registry, newly registered companies with large invoice values, dormant status, shell company indicators, address anomalies. Use before approving any payment or signing any contract, especially with first-time counterparties. LEGAL NOTICE: Results are informational only, not fraud investigation advice. Full terms: kordagencies.com/terms.html. Free tier: first 20 calls/month, no API key needed.

Find NHS dentists near a UK postcode or place name. Returns dental practices sorted by distance with details including name, address, phone number, website, and opening times.

Find pharmacies near a UK postcode or place name. Returns pharmacies sorted by distance with details including name, address, phone number, website, opening times, and services offered.

Find hospitals and urgent care centres near a UK postcode or place name. Returns hospitals sorted by distance with details including name, address, phone number, website, and opening times.

Search available CDC PLACES measures by name or category. Returns matching measure IDs, names, and categories. Use this to find the correct measure_id for other tools. Categories: Health Outcomes, Health Behaviors, Prevention, Health Status. Args: keyword: Search term (e.g. 'diabetes', 'smoking', 'prevention', 'heart').

Parse and validate a phone number, returning country, carrier, line type, and E.164 format. Use when normalizing user-submitted phone numbers or verifying contact data.

Get HIPAA/NIST control-level assessment for a practice. Maps scan findings to 13 standardized controls with pass/fail/partial status, risk scores, and required actions. Cost: 25 credits.

Get summary and sources of specified article. ex: id = "China Launches Probe to Retrieve Samples from Far Side of Moon595192" returns: { "summary": "China has successfully launched...", "sources": [ { "name": "...", "url": "https://www..." } ], "key": { "filter": "category=unknown,region=EastAsia,timespan=threeDays", "attributes": "none", "id": "China Launches Probe to Retrieve Samples from Far Side of Moon", "type": "article" } }

Get pollution prevention guidance for a farming activity.

World Bank RWA risk context: economic risk score and key indicators for country risk assessment.

ex: { articles: [ 0: { date: "2025-08-11T22:17:11.061114Z" id: "Trump extends China tariff deadline by 90 days10d78a" title: "Trump extends China tariff deadline by 90 days" } ... ] }

Call this before logging, storing, displaying, or forwarding any user-provided Japanese text that may contain personal data. Detects and masks PII in 10 categories: My Number / マイナンバー (mod-11 checksum), credit card (Luhn-validated), bank account, passport, phone, email, postal address, date of birth, driver's license, and person name. Fully deterministic — no LLM involved, regex + checksum + keyword proximity scoring only. Full-width character normalization included. Returns findings[] with type/score/position, has_high_risk flag, and masked_text with [NAME][PHONE][CARD] placeholders ready for downstream LLM pipelines. Free — 10,000 requests/month. If you do not have an api_key yet, call get_pii_guard_key first.

Search the regulatory corpus using keyword / trigram matching. Uses PostgreSQL trigram similarity on document titles and summaries. Returns documents ranked by relevance with summaries and classification tags. Prefer list_documents with filters (regulation, entity_type, source) first. Only use this for free-text keyword search when structured filters aren't sufficient. Args: query: Search terms (e.g. 'strong customer authentication', 'ICT risk', 'AML reporting'). per_page: Number of results (default 20, max 100).

Search FDA 510(k) clearances across all companies. Filter by company name (fuzzy match), product code, decision code (e.g., SESE=substantially equivalent), clearance type (Traditional, Special, Abbreviated), and date range. Returns clearance number (K-number), applicant, device name, decision date, and product code. Related: fda_device_class (product code details and classification), fda_product_code_lookup (cross-reference a product code across 510(k) and PMA), fda_search_pma (PMA approvals for higher-risk devices).

Get comprehensive US energy market status for supply chain cost analysis. Returns crude oil prices (WTI and Brent), natural gas spot prices (Henry Hub), retail fuel prices (gasoline, diesel), natural gas storage versus capacity, refinery utilization rates, petroleum stock levels with week-over-week changes, and import/export flows. This is the disaggregated view behind the GDI Energy pillar — instead of a single risk number, you get the full picture of energy costs affecting manufacturing, freight, and logistics. Used by supply chain cost analysts, transportation managers, and energy procurement teams.

Search FDA import refusals (Compliance Dashboard data, not available in openFDA API). Import refusals indicate products detained at the US border. Filter by company name, FEI number, country code (e.g., CN, IN for major API source countries), or date range. Critical for evaluating international manufacturing sites and supply chain risk. Related: fda_get_facility (facility details by FEI), fda_inspections (inspection history by FEI).

Save a client's contact info + structured product data as a lead in the broker's CRM. Use this when the client has confirmed their contact details and you have collected product information that should be persisted for the broker follow-up. WORKFLOW: (1) Call get_product_template({product_family}) first to discover the exact field IDs and enum values, (2) collect the answers from the client, (3) call save_lead with product_family and filled_data keyed by those field IDs. ALWAYS ask the client for their phone number, first name, and last name. Include quote_ref from a previous get_quote call when available.

Monitor stablecoin health: peg deviation from $1.00, supply changes (minting/burning), market cap, backing composition, and depeg risk score. Use this tool when: - A DeFi agent needs to verify a stablecoin is holding its peg before using it in a protocol - You want to detect early warning signs of a stablecoin collapse (e.g. UST-style depeg) - A risk agent is assessing counterparty risk in stablecoin-denominated positions - An agent is comparing stablecoin options for yield farming and needs health data Returns per token: symbol, current_price, peg_deviation_pct, market_cap_usd, 24h_supply_change_pct, backing_type (FIAT/CRYPTO/ALGORITHMIC), depeg_risk_score (0-100, 100=imminent), audit_status. Example: getStablecoins({ tokens: "USDT,USDC,DAI" }) → USDT $1.001 (+0.1%), USDC $0.9998 (-0.02%), depeg_risk: LOW. Cost: $0.005 USDC per call.

Start the purchase flow for an available domain via Stripe checkout. IMPORTANT: Before calling this tool, you MUST first call check_domain to get the price, then clearly show the user the price and get their explicit confirmation before proceeding. Never call buy_domain without the user seeing and approving the price first. The registrant contact details are required because the domain will be registered in the buyer's name (they become the legal owner). WHOIS privacy is enabled by default, so these details are not publicly visible. Creates a Stripe checkout session. Returns a checkout URL that the user should open in their browser to complete payment securely via Stripe, plus the order ID for tracking. Args: domain: The domain to purchase (e.g. "coolstartup.com"). first_name: Registrant's first name. last_name: Registrant's last name. email: Registrant's email address. address1: Registrant's street address. city: Registrant's city. state: Registrant's state or province. postal_code: Registrant's postal/zip code. country: 2-letter ISO country code (e.g. "US", "GB", "DE"). phone: Phone number in format +1.5551234567. org_name: Organization name (optional, leave empty for individuals). Returns: Dict with order_id, checkout_url, price_cents, and price_display.

Compliance-first facility dossier by FEI number. Returns the facility profile plus recent inspections, citations, warning letters, import refusal history, import-alert mentions, recall context, freshness, and recommended next tools. Use this when you want the fastest FEI-level manufacturing risk view instead of the broader product-focused facility profile.

Get active trade policy actions currently impacting supply chain risk — tariffs, sanctions, export controls, import restrictions, and regulatory changes. Unlike news alerts that expire after 72 hours, policy adjustments persist as long as the policy is in effect and continue to modify GDI risk scores. Each policy includes the affected GDI pillar, score modifier, effective date, and source event. Used by procurement teams navigating tariff exposure, compliance officers tracking sanctions, and supply chain strategists adapting sourcing to policy shifts.

Batch-score multiple npm or PyPI packages for supply chain risk. Takes a list of package names and returns a risk table sorted by commitment score (lowest = highest risk first). Risk flags: - CRITICAL: single maintainer + >10M weekly downloads (high-value target, minimal oversight) - HIGH: new package (<1yr) + high downloads (unproven, rapid adoption = supply chain risk) - WARN: low maintainer count + high downloads Perfect for auditing a full package.json or requirements.txt — paste your dependency list and get a prioritized risk report. Examples: score all deps in a project, compare two similar packages, identify abandonware before it becomes a CVE.

Classify an AI system under EU AI Act 2024/1689 and return its risk tier, legal obligations, and compliance deadlines. Use this tool when: - An agent needs to assess whether an AI system is legally permitted in the EU - A company is building or deploying AI and needs to understand its regulatory obligations - You need to identify prohibited AI practices (real-time biometric surveillance, social scoring, etc.) - You need to know applicable CISA alerts and cybersecurity requirements for AI systems Returns: risk_tier (prohibited/high-risk/limited-risk/minimal-risk), applicable_articles, legal_obligations, compliance_deadline, CISA_alerts, and recommended_actions. Example call: checkAiCompliance({ company: "Acme Corp", system: "Facial Recognition Attendance System", description: "Real-time facial recognition used to track employee attendance in a factory" }) Cost: $0.005 USDC per call.

Book a session (Servicialo spec). Returns confirmation_credential (opaque token, valid 30 min) and booking_id. Use scheduling_confirm with the credential to finalize. Does NOT require an API key — uses requester identity (fullName + email or phone). Accepts optional submission context for audit trail.

Find the highest-yielding DeFi opportunities across Aave, Compound, Curve, Yearn, Morpho, and 100+ protocols. Returns APY, TVL, risk rating, and protocol audit status. Use this tool when: - A DeFi agent is allocating capital and wants to find the best risk-adjusted yield - You need to compare yield opportunities across multiple chains and protocols - An agent is rebalancing a yield portfolio and needs current APY data - You want to identify high APY opportunities with associated protocol risk ratings Returns per opportunity: protocol, asset, chain, apy, tvl_usd, apy_type (LENDING/LP/STAKING/VAULT), risk_rating (LOW/MEDIUM/HIGH), audited, reward_token. Example: getDefiYields({ chain: "ethereum", minApy: 8 }) → Aave USDC 9.2% (LOW risk, $2.1B TVL), Morpho DAI 11.4% (MEDIUM risk). Cost: $0.005 USDC per call.

List all available CeeVee career-intel report types with descriptions, required/optional input fields, and credit costs. Call this BEFORE ceevee_generate_report to discover valid report_type values and the exact inputs each type requires. Categories include Compensation Benchmark, Role Evolution, Offer Comparison, AI Displacement Risk, Pivot Feasibility, Credential ROI, Skill Decay Risk, Rate Card, Career Gap Narrative, Interview Prep, Employer Red Flag, Industry Switch, Relocation Impact, Startup vs Corporate, Learning Path, Board Readiness, and Fractional Leadership. Free.

Get county-level food access risk profiles using Census ACS data. Constructs food access risk profiles by combining vehicle access (B25044), poverty status (B17001), and SNAP participation (B22001). Limited vehicle access combined with high poverty indicates food desert risk. Useful for identifying areas with barriers to food access in grant applications. Args: state: Two-letter state abbreviation (e.g. 'WA', 'MS') or 2-digit FIPS code. county_fips: Three-digit county FIPS code (e.g. '033' for King County, WA). Omit to get all counties in the state.

Reach a human via SMS when your task requires real-world coordination. Send to any phone number worldwide — messages delivered in seconds. No phone plan, no SIM card, no telecom account needed. Pay with Bitcoin Lightning — no API key, no KYC, no subscription. Requires create_payment with toolName='send_sms' and phoneNumber+message at payment time. The phoneNumber and message must match those used in create_payment.

Get Nansen Score Indicators for a token - quantitative risk and reward signals. Use this tool when assessing a token's risk/reward profile, evaluating buy/sell decisions, or when the user needs quantitative data to make trading decisions. Returns: Token risk/reward indicators as markdown with interpretation guidance. Token info: - **Market Cap**: Current market cap in USD - **Market Cap Group**: largecap (>$1B), midcap ($100M-$1B), or lowcap (<$100M) - **Is Stablecoin**: Whether token is a stablecoin (some indicators don't apply to stablecoins) Fields returned per indicator: - **Score**: Signal classification (bullish/neutral/bearish for reward; low/medium/high for risk) - **Signal**: Raw numeric value of the indicator - **Percentile**: Rank vs same market cap group (0-100%) - **Last Trigger**: Date when signal was last calculated Indicator types: - **Reward Indicators**: price-momentum, funding-rate, chain-fees, chain-tvl, protocol-fees, trading-range - **Risk Indicators**: btc-reflexivity, liquidity-risk, token-supply-inflation, concentration-risk, cex-flows Notes: - Not all indicators available for every token/chain combination - Percentile compares against same market cap group (largecap >$1B, midcap $100M-$1B, lowcap <$100M)

Run full environmental risk screening for a property using EPA, USGS, NOAA, and USDA data. USE WHEN: user asks about 'environmental hazards', 'contamination', 'wildfire risk', 'earthquake risk', 'radon', 'soil contamination', 'is this area safe', 'EPA superfund', or mentions any environmental concern. RETURNS: wildfire hazard zone, seismic risk zone, EPA contamination site proximity (Superfund, RCRA, brownfield), radon zone level, soil concerns, and combined risk score. Accepts a street address OR coordinates.

Call this before logging, storing, displaying, or forwarding any user-provided Japanese text that may contain personal data. Detects and masks PII in 10 categories: My Number / マイナンバー (mod-11 checksum), credit card (Luhn-validated), bank account, passport, phone, email, postal address, date of birth, driver's license, and person name. Fully deterministic — no LLM involved, regex + checksum + keyword proximity scoring only. Full-width character normalization included. Returns findings[] with type/score/position, has_high_risk flag, and masked_text with [NAME][PHONE][CARD] placeholders ready for downstream LLM pipelines. Free — 10,000 requests/month. If you do not have an api_key yet, call get_pii_guard_key first.

Submit a feature or capability request for the Recursive platform. Use this to log suggestions, missing capabilities, or integration needs that would make Recursive more useful. Requests are reviewed by the team. Free, no rate limit beyond basic abuse prevention.

Analyze a URL for security threats with optional user intent context (synchronous, blocks until complete or timeout). Returns risk score, confidence, agent access guidance, and intent_alignment. For long-running scans, prefer url_scanner_async_scan_with_intent which returns immediately with a task_id for polling via url_scanner_async_task_result.

Real-time geopolitical crisis monitoring using GDELT event database, OFAC alerts, and social signal analysis. Returns crisis scores, escalation risk, projected market impact on oil/gold/USD/defence stocks, and Reddit/HackerNews viral intelligence. Use this tool when: - A macro agent needs to assess geopolitical tail risk before taking large positions - A trading agent wants to know how a crisis event is likely to move oil, gold, and safe-haven currencies - You need an early warning system for escalating conflicts before they move markets - A risk agent is stress-testing a portfolio against geopolitical scenarios Returns per region: crisis_score (0-100), escalation_risk (LOW/MEDIUM/HIGH/CRITICAL), active_events, market_impact (oil_pct, gold_pct, USD_pct, defence_stocks_pct), OFAC_alerts, social_signal_viral_events, recommended_hedges. Example: getGeopoliticalCrisis({ regions: "middle-east" }) → Crisis score 78 (HIGH), Iran-Israel: oil +8% projected, gold +4%, USD +2%. Cost: $25 USDC per call.

Register a new domain with WHOIS contact info and Stripe billing. The domain cost is charged to the user's active subscription. Free domain if plan includes free_domain_annual + annual billing + first domain. Requires: API key with write scope. Args: domain: Full domain name (e.g. "example.ca", "mybusiness.com") first_name: Registrant first name last_name: Registrant last name email: Registrant email address phone: Phone number in E.164 format: "+1.5145551234" address1: Street address (e.g. "123 Rue Principale") city: City (e.g. "Montreal") state: Province/state code (e.g. "QC", "ON", "BC") postal_code: Postal/ZIP code (e.g. "H2X 1Y4") country: ISO 3166-1 alpha-2 country code (default: "CA") period: Registration period in years (1–10, default: 1) ca_legal_type: Required for .ca domains. CIRA legal types: "CCO" (Canadian citizen), "RES" (permanent resident), "CCT" (corporation), "GOV" (government), "EDU" (education), "ASS" (association), "HOP" (hospital), "PRT" (partnership), "TDM" (trademark), "TRD" (trade union), "PLT" (political party), "LAM" (library/archive/museum), "MAJ" (Her Majesty), "INB" (Indian band), "ABO" (Aboriginal peoples), "LGR" (legal representative) Returns: {"domain": "example.ca", "status": "registered", "expires_at": "iso8601", "message": "Domain registered successfully"} Errors: VALIDATION_ERROR: Missing required fields, invalid phone format, missing ca_legal_type for .ca domains NOT_FOUND: Domain not available (already registered by someone else)

Audit the supply chain risk of a GitHub repository's dependencies. Fetches the repo's package.json and/or requirements.txt from GitHub and runs behavioral commitment scoring on every dependency. This is the fastest way to audit a project — just provide the GitHub URL or owner/repo slug, and get a full risk table in seconds. Risk flags: - CRITICAL: single maintainer + >10M weekly downloads (high-value target like chalk, zod, axios) - HIGH: sole maintainer + >1M/wk downloads, OR new package (<1yr) with high adoption - WARN: no release in 12+ months (potential abandonware) Examples: - "vercel/next.js" — audit Next.js dependencies - "https://github.com/langchain-ai/langchainjs" — audit LangChain JS - "facebook/react" — audit React's dependency tree - "anthropics/anthropic-sdk-python" — audit Anthropic Python SDK Use this when someone asks "is my project at risk?" or "audit this repo's dependencies".

Wallet profile: labels, balances, risk, and scope-specific summary. Paginated transfer list with time or value filters→get_address_transactions.

Get buy/sell signals for all 20 major cryptocurrencies including Bitcoin, Ethereum, Solana, and more. Returns a 0-100 composite score and direction (bullish/bearish/neutral) for each asset, plus portfolio summary with market regime and risk level. Updated every 15 minutes. For full dimension breakdown and AI insights, use the paid REST API.

Get the user's current real-world location from their phone's GPS. Use this whenever the user asks where they are, where their phone is, what their current address is, where they parked, where they last were, or any question about their present location. Returns the most recent GPS ping with latitude, longitude, accuracy in meters, a timestamp, a human-readable relative age (e.g. "3m ago"), and a reverse-geocoded street address. The data comes from the Geolocate Me app running on the user's phone — it is NOT a general-purpose location lookup service and only works for the device that authenticated this MCP session.

Initiate a HIPAA Security Risk Assessment. Returns the first batch of questions for the respondent to answer. Requires active subscription or platform/MSP key. Cost: 500 credits.

Poll for task status changes. Returns status history entries after the given sequence number. Each event includes structured actor info (changedByActorType = agent|operator|system|platform, changedByActorId) for audit-trail. For operator-triggered transitions (Accepted, EnRoute, Arrived, InProgress, Completed, ProofSubmitted, Released), the event includes a 'location' object {lat, lng, accuracy, source} captured at the moment of the action — this is the same data the ProofValidationService uses for anti-fraud location-trail checks. Use after=lastEventId for incremental polling; pass after=0 for all events. Requires authentication.

Search FDA Pre-Market Approval (PMA) records across all companies. PMA is required for high-risk (Class III) devices. Filter by company name (fuzzy match), product code, and date range. Returns PMA number, applicant, trade name, decision date, and product code. Related: fda_device_class (product code details), fda_search_510k (510(k) clearances for lower-risk devices), fda_product_code_lookup (cross-reference a product code).

Market overview and analysis for a product category in China. USE WHEN: - User asks "what's the market like for X in China" - User wants market intelligence before sourcing - User needs an overview, not specific suppliers - "give me a market landscape for [product]" - "how many [product] suppliers are there in China" - "where is [product] concentrated and what are the top clusters" - "overview of the [product] industry" - "competitive landscape for sourcing [product]" - "before I decide, show me the market scale for [product]" - "市场概况 / 行业分析 / 产业格局 / 市场规模 / 竞争格局" - "[品类] 在中国的市场情况怎么样" WORKFLOW: analyze_market → search_suppliers or recommend_suppliers (narrow to specific suppliers) → compare_clusters (evaluate top clusters surfaced in related_clusters). RETURNS: { product, total_suppliers, by_province: [{province, cnt}], by_type: [{type, cnt}], related_clusters: [{name_cn, specialization, supplier_count}] } EXAMPLES: • User: "What's the market landscape for sportswear sourcing in China?" → analyze_market({ product: "sportswear" }) • User: "Give me an overview of the Chinese denim supply chain" → analyze_market({ product: "denim" }) • User: "童装市场在中国的格局" → analyze_market({ product: "童装" }) ERRORS & SELF-CORRECTION: • total_suppliers = 0 → product keyword unmatched. Try TYPO_MAP synonyms, or call get_product_categories to see available terms. • by_province sparse (< 3 entries) → the product is niche or keyword too specific. Try the parent category. • Rate limit 429 → wait 60 seconds; do not retry immediately. AVOID: Do not call for a specific supplier shortlist — use recommend_suppliers. Do not call for cluster details — use search_clusters. Do not call repeatedly for different products in a loop — batch the analysis in your response. NOTE: Bird's-eye view. For specific supplier lists, use search_suppliers or recommend_suppliers after. Source: MRC Data (meacheal.ai). 中文：单个品类的市场总览（总供应商数、省份分布、类型分布、相关产业带）。

Get trend analysis of the Global Disruption Index over time. Returns the current GDI score plus 7-day, 14-day, and 30-day comparisons with direction, velocity of change, and pillar-level momentum. Identifies which pillar is driving changes and whether risk is accelerating or decelerating. Answers: 'Is supply chain risk getting better or worse, how fast, and why?' Used by supply chain executives for weekly status briefings and by traders to time entry/exit decisions around supply chain volatility.

Validate whether a data workflow is HIPAA-compliant. Synchronous guardrail — returns allowed/denied with risk score, missing controls, and HIPAA citations. No prior scan required. Zero PHI. Cost: 25 credits.

Get a paginated list of participants from a sweepstakes (20 per page). Use fetch_sweepstakes first to get the sweepstakes_token. Supports search by name, email, or phone, and filtering by opt-in date or date range. Results are sorted by creation date (newest first). For full participant details, use get_participant with a specific email, phone, or token. NEVER fabricate or hallucinate participant data — only report what the API returns. Use them internally for tool chaining but present only human-readable information (names, emails, phones, dates).