Prototype · Preview: every server in the official registry, synced every 30 minutes. Reviews and accounts come in a later step.
PopNx MCPMCP servers for people who use AI · explained in plain words

Agent Data Tools: Company, compliance and checks

by Nutshell2000version 1.96.0i★ –iRuns in the cloud
Registry nameio.github.Nutshell2000/agent-data-tools-compliance

Install

Overview

Description from the maker (original English)

31 tools: OFAC sanctions, counterparty checks, company, domain, email. 25 free calls.

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

  • Connection: Runs in the cloud
  • Transport: Streamable HTTP
  • Category: Chat & email
  • You need to fill in: Authorization

Install

Pick the AI app you use, then copy the settings.

Before you install

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

Which app do you use?

Pick your app above. We remember it, so next time the button says “Install in …”.

This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.

Run this in your terminal

claude mcp add --transport http agent-data-tools-compliance https://agent-data-tools.revmesh2074.workers.dev/mcp/compliance --header 'Authorization: your-value'

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "agent-data-tools-compliance": {
      "url": "https://agent-data-tools.revmesh2074.workers.dev/mcp/compliance",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "agent-data-tools-compliance": {
      "type": "http",
      "url": "https://agent-data-tools.revmesh2074.workers.dev/mcp/compliance",
      "headers": {
        "Authorization": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

  • Authorization secret HTTP header
    Optional. 'Bearer adt_...' API key from https://agent-data-tools.revmesh2074.workers.dev/credits to pay by card. Leave empty to pay each call with x402 (USDC).

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Tool names and descriptions exactly as the server reported them on Nov 6, 2026. The maker wrote them, not us; we show them as plain text.

  • check_payee

    Fast check of a payee before an agent pays it: OFAC SDN match on the address, account type (wallet, delegated wallet or contract) and nonce on Base, Ethereum, Arbitrum, Optimism or Polygon, and optionally the payee domain's age and trust flags. One block, review or pass verdict w

  • check_counterparty

    Screen a payee before paying, trading or onboarding: one call vets an address on Base, Ethereum, Arbitrum or Optimism with an OFAC SDN match, account type and activity, USD holdings and, on Base, wallet or contract risk checks; add the payee's domain for its age and trust flags.

  • check_x402_seller

    Audit an x402 seller before an agent buys from it: decodes the endpoint's 402 terms without paying, OFAC-screens each payTo address, reads its account type and nonce on the payment network, checks the seller domain's age and trust flags, and flags non-USDC assets and high prices.

  • sanctions_check

    Check a crypto wallet address against the OFAC SDN sanctions list before you pay it or accept funds: EVM (Ethereum, Base, Arbitrum, Polygon), BTC, USDT, TRX and more, or a person or company name with aliases. Returns a verdict (block on a listed address, review on a name match, p

  • pack_url_safety

    Check a link before an agent opens or pays it: where it really leads (each redirect hop, the final URL), the destination domain's age, registrar and trust flags, HTTPS and security headers, and named risk signals (days-old domain, bare IP host, punycode look-alike, user@host tric

  • x402_check

    Check an x402 seller before you pay it: decode any public endpoint's 402 payment requirements without paying (v1 body or v2 header) into USD price for native USDC, network, asset, recipient, scheme and timeout, plus a listing-quality score for https resource URL, atomic amount, f

  • sec_filings

    Latest SEC EDGAR filings for a US-listed company by stock ticker or CIK: form (10-K, 10-Q, 8-K, 4, S-1…), filing and report dates, accession number, document description and a direct link, newest first, optionally only one form type. Plus company name, CIK and industry (SIC). Pub

  • pack_website_audit

    One call to audit a website: is it up and how fast, the redirect chain (including whether plain http moves to https), the on-page SEO audit with its score and issues, HTTP security headers and their grade, robots.txt for the page, and the domain's DNS, email authentication and re

  • pack_email_deliverability

    Email deliverability check for a domain in one call: MX records, SPF and its all-policy, DMARC and its policy, DKIM keys at the common selectors (Google, Microsoft, Mailchimp and others), MTA-STS, TLS-RPT and BIMI, with a 0-100 score, a grade and a list of fixes; optionally also

  • pack_ip_intelligence

    One call for everything about an IP address: its type (public, private, loopback, carrier-grade NAT), the registry record (holding organisation, network name and range, registration country, abuse contact) and the reverse DNS name. IPv4 and IPv6. Registration country, not city ge

  • pack_api_health

    One call to health-check an API endpoint: up or down with status and response time over three requests (min, median, max), the redirect chain, HTTP security headers, whether it is a paid x402 endpoint and what its payment terms are, and the API's OpenAPI document when one is foun

  • openapi_summary

    Read an OpenAPI 3 or Swagger 2 document (JSON or YAML, up to 2 MB) from a URL and summarise it for an agent: title, version, description, servers, auth schemes, operation count by method, tags, which operations are paid (402 or x-payment-info) or deprecated, and up to 150 operati

  • mcp_inspect

    MCP server check over streamable HTTP: whether it answers initialize, its name, version, protocol version and capabilities, whether it needs sign-in (OAuth or another 401 challenge), and its tools with names, titles, descriptions and input parameters, plus prompt and resource cou

  • pack_domain_intel

    Company enrichment in one call for any domain: the site's name, description and logo, its tech stack (CMS, frameworks, analytics, hosting), email provider and email security (SPF, DMARC), who hosts the server (IP registry holder), DNS records, and the domain's registrar, age and

  • email

    Check email syntax, DNS and MX records, disposable providers, role addresses, free providers and SPF/DMARC presence. Returns likely-deliverable, risky, undeliverable or invalid with reasons. No message is sent and the mail server is not contacted. These are DNS and syntax signals

  • company

    Facts about a company by name or Wikidata ID: official website, founding date, country, headquarters, industries, CEO, founders, parent, employee count, stock tickers and exchanges, and LEI, with Wikidata and Wikipedia links. Public domain data (CC0), best for established and lis

  • domain

    Domain intelligence in one call: DNS records (A, AAAA, CNAME, MX, NS, TXT, CAA), DNSSEC status, registrar, registration and expiry dates with domain age in days (RDAP/WHOIS), and email authentication (SPF and DMARC records and policies, whether the domain accepts mail). Use for l

  • domain_report

    A trust verdict for any domain in one call: high/medium/low trust with named flags for very new registrations, expiry, missing or weak SPF and DMARC, too few nameservers, no web host and non-resolving domains, plus the key facts (registrar, age, nameservers, DNSSEC). Use for lead

  • package

    Reports package existence, latest version and release, age, version count, npm weekly downloads, licenses, deprecation and known advisory severity. ok means no listed flags, not a safety guarantee. Supports npm, PyPI, Cargo, Go, Maven and NuGet. Optional exact version adds pinned

  • package_audit

    Check up to 10 public dependencies, optionally pinned to exact versions, for advisory IDs, OSV affected/fixed ranges and dated FIRST EPSS CVE estimates. Scoped npm names supported. Detail and subrequest caps apply; omitted details and incomplete coverage are explicit. Missing evi

  • text_prompt_injection

    Scan text an agent is about to read (web page, email, tool result; up to 8,000 characters) for prompt-injection attempts: instruction overrides, fake system messages, asks to hide things from the user, exfiltration links, attempts to extract private data or move money, invisible

  • http_security_headers

    Fetch a public URL and grade its HTTP security headers: HSTS, Content-Security-Policy, framing protection, nosniff, Referrer-Policy and Permissions-Policy, plus version leaks (Server, X-Powered-By) and cookies missing Secure, HttpOnly or SameSite. Returns a grade A-F, a score and

  • dockerfile_lint

    Check a Dockerfile (up to 8,000 characters) for common security and image-size problems: unpinned or :latest base images, running as root, piping downloads into a shell, sensitive values baked into ENV or ARG, ADD from URLs, apt and pip cache left in layers, sudo, chmod 777 and a

  • ip_lookup

    Look up who holds an IPv4 or IPv6 address in the regional internet registries' public RDAP records (ARIN, RIPE NCC, APNIC, LACNIC, AFRINIC): the holding organisation, network name and range, allocation type, registration country, abuse contact and registry. Use to see which compa

  • dns_lookup

    Look up DNS records of a domain over DNS-over-HTTPS (Cloudflare 1.1.1.1): A, AAAA, CNAME, MX, NS, TXT, SOA, CAA, SRV, PTR, DS, DNSKEY or HTTPS, with each answer's TTL, the response code (NOERROR, NXDOMAIN…) and whether DNSSEC validated. Use to check email (MX, SPF in TXT), verify

  • dns_propagation

    Check whether a DNS change has propagated: the same record queried at five public resolvers (Cloudflare, Google, AdGuard, AliDNS and DNSPod), each resolver's answers and TTLs, whether they all agree, and the majority answer. Record types A, AAAA, CNAME, MX, NS, TXT, CAA. Use to s

  • text_pii

    Find personal data in a text and get it back redacted: emails, phone numbers, card numbers (Luhn-checked), IBANs (mod-97), US SSNs, IP and crypto wallet addresses, each with its position, plus the text with every hit replaced by a label such as [EMAIL]. Hits are shown masked. Up

  • sec_8k

    Latest Form 8-K current reports for a US-listed company by ticker, name or CIK: filing date, the reported items with their meaning (results of operations, executive departures, material agreements, cybersecurity incidents, bankruptcy and others), accession number and a direct lin

  • sec_insider

    Recent insider trades in a US-listed company from its SEC Form 4 filings: who traded (name and role: director, officer title, 10% owner), date, buy or sell (open-market purchase, sale, award, option exercise, tax withholding), shares, price, dollar value, holding afterwards and w

  • sec_13f

    The latest 13F-HR holdings of an institutional investment manager (hedge fund, mutual fund family, bank) from SEC EDGAR: each position's issuer, class, CUSIP, value in USD, shares and portfolio weight, largest first, plus the report period, total value and position count. Give th

  • gov_federal_register

    Search the US Federal Register: final rules, proposed rules, notices and presidential documents, newest first, with title, type, agencies, abstract, publication date, comment deadline, effective date and links. Filter by type and agency. From the Federal Register API (US governme

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026

  • ✓ Pass

    Maker matches the repo

    The registry name was verified with the GitHub account Nutshell2000, which owns the repo

  • … Not checked yet

    Still maintained

    We have not read this repo from GitHub yet

  • … Not checked yet

    Has a licence

    We have not read this repo from GitHub yet

  • ✓ Pass

    Endpoint responds

    Responded in 752 ms (HTTP 200)

  • – Not applicable

    Sign-in with OAuth

    No sign-in needed

  • ✓ Pass

    No hidden instructions in tool descriptions

    Read 31 tool descriptions and found no hidden instructions to the AI

Compared with others in Chat & emaili

  • More stars than 0% of the other 1766 servers in this category
  • Published to the registry more recently than 99% of the other 1766 servers in this category
  • Basic checks equal to or better than 100% of the other 1766 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Agent Data Tools: Company, compliance and checks safe?

It passed 3 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: Authorization

Does it run on my computer or in the cloud?

It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.

Is it still maintained?

The GitHub repo last changed –, and the latest version (1.96.0) reached the registry today.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.

What can I use instead?

In the same category: Vexa, emailmd, MCP WhatsApp Cloud

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Vexa

by Vexa-ai

Meeting bot and transcripts for Google Meet, Teams and Zoom. Live or after, speakers labelled.

Runs in the cloud★ 2,949Apache-2.0Updated 2 months ago
Install

emailmd

by anypost

Render markdown into email-safe HTML, lint drafts for deliverability problems, and preview emails.

Computer or cloud★ 1,385MITUpdated 31 days ago
Install

MCP server for WhatsApp Cloud API (Meta) — messages, media, and templates via Graph API

Runs on your computer★ 277MITUpdated 5 months ago
Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

Agent Data Tools

187 pay-per-call tools for AI agents over MCP and plain HTTP: web search and news, payee screening and OFAC sanctions checks, crypto token prices, wallet balances and token transfers, web page to Markdown, PDF to text, email verification, company and domain lookups, weather, SEC filings, World Bank GDP, inflation, population and unemployment, LLM chat and embeddings. In full: blockchain reads on 5 EVM chains plus Bitcoin, token prices and risk, OFAC sanctions and counterparty checks, company and domain data, web pages and PDFs as text, weather, time, countries, and everyday utilities (JSON, CSV, hashes, dates, validators). Most tools cost $0.01 per successful call.

Quick start

  1. Connect any MCP client to https://agent-data-tools.revmesh2074.workers.dev/mcp (Streamable HTTP, no sign-up), or use the buttons above. Claude Code: claude mcp add --transport http agent-data-tools https://agent-data-tools.revmesh2074.workers.dev/mcp. Claude.ai and ChatGPT: add a custom connector with https://agent-data-tools.revmesh2074.workers.dev/mcp/account. If your client limits how many tools it loads, connect one section instead. Smaller sections: /mcp/prices, /mcp/chain, /mcp/web, /mcp/compliance, /mcp/ai, /mcp/everyday, /mcp/utilities.
  2. Try free: every caller gets 25 free successful calls; over MCP they are used automatically. Over HTTP add trial=1. Failed calls never count. AI, rendering and search tools are not included.
  3. Then pay either way:
  • Card: buy prepaid credits at /credits ($5 = 5,000 credits, $20 = 22,000, $100 = 125,000; 1 credit = $0.001) and send the key as Authorization: Bearer adt_… (or X-API-Key) on HTTP calls or in your MCP client's connection headers.
  • Crypto: any x402 client pays per call in USDC on Base, Polygon, Arbitrum or Solana; MPP clients pay on Tempo or Base.

Failed calls are never charged. Free previews of every tool's output: add sample=1. Machine-readable catalog: /openapi.json, /llms.txt. Support: spellz111122@gmail.com.

Details and buyer clients

Operated by SpellzCode. Check a Base transaction or wallet through a capped, account-free client: one transaction-status result costs $0.003, a wallet snapshot $0.005. Inspect a free quote before an explicitly authorized purchase. Optional gas and allowance checks cost $0.002 each; the client never buys them automatically. Uses an existing funded Base x402 wallet and never sends the transaction being checked.

For static documentation reading, get clean text, Markdown, code and tables for $0.002 USDC on Base. No account or subscription. Static HTML, Markdown and plain text only; no JavaScript rendering, authenticated pages or paywall access.

The reader client requires Node 20.19+ and no npm installation or TypeScript. An unsigned quote needs no key and never pays. An explicit authorized reader purchase needs an existing funded Base wallet and a per-call cap of at most $0.002. The local MCP adapter starts in quotes-only mode; deliberately enabled buying shares a process budget across reader, sitemap and Bitcoin-data calls. Keys stay on the buyer's device. The separate chain client has the operation-specific caps above and grants no session or monthly spending allowance.

Repository fallback downloads for 1.7.6: CLI executable and its checksum, or local MCP adapter and its checksum. Save the executable and matching checksum in one folder, then follow the verification instructions before running it. Release notes and all six files. These match the website's published bytes; checksums are not independent security signatures. Older 1.7.0 downloads and 1.5.1 downloads remain available unchanged.

Need help with an existing attempt? Report a purchase problem using the request ID, approximate UTC time and reported payment status. Stop after an uncertain signed outcome; do not make a new purchase to reproduce it. For missing text, code or tables, report an output problem with a short public or authored example. Reports are public: never include keys, signatures, raw payment headers or private content.

The reader also supports an exact HTML section ID and retains labelled source image descriptions; it does not interpret image pixels. Source-declared authors and publication/update dates now include provenance and unverified/ambiguity warnings when available. Check scope, output limits and warnings before claiming coverage. Full buying instructions.

Cached examples are actual build-time results on owned HTML and are labelled separately from illustrative snippets. Local tests do not establish funded production delivery or customer demand.

A Cloudflare Worker that sells 175 active tools to AI agents. Each call is paid in USDC through the x402 protocol (Base, Polygon, Arbitrum, Monad or World Chain) or with prepaid card credits, and the money goes straight to the address in PAY_TO.

EndpointReturnsPrice
GET /sitemap?url=&contains=&maxUrls=&offset=XML sitemap URLs, source-reported dates and pagination (bounded, no crawling)$0.002
GET /extract?url=Web page as clean text, headings and links$0.002
GET /domain?name=DNS, registration age, SPF/DMARC$0.005
GET /domain-report?name=Domain trust verdict and email-auth flags$0.01
GET /token?address=Base ERC-20 facts and risk flags$0.01
GET /token-report?address=Base token risks and live DEX market data$0.01
GET /wallet?address=Base wallet balances and account nonce$0.005
GET /summarize?url=Short summary and key points of a page$0.01
GET /screenshot?url=JPEG of the rendered page (base64)$0.01
GET /image?prompt=Generated 1024x1024 image (base64)$0.01
GET /transcribe?url=Text of an audio file (max 5 MB)$0.01
GET /describe?url=Description of an image, or an answer about it$0.01
GET /btc-feesBitcoin fee rates and mempool status$0.002
GET /btc-address?address=Bitcoin address balance and activity$0.01
GET /ln-invoice?invoice=Decoded Lightning invoice$0.002.003
GET /package-audit?packages=Audit up to 10 dependencies; supports exact-version advisories and fixes$0.01
GET /wallet-audit?address=Base token holdings and nonce-based heuristic risk indicators$0.01
GET /contract-risk?address=Limited bytecode, EIP-1967 slot and zero-supply heuristics$0.01
GET /trade-insight?token=&wallet=Separate token and wallet risk indicators; no trade recommendation$0.01
GET /liquidity-pool-audit?address=Verified Base DEX pair details and reported market data$0.01
GET /mev-simulatorBase gas-cost estimates using fixed typical gas units; not a quote$0.01
GET /package?ecosystem=&name=&version=Latest or pinned package metadata and bounded dependency-risk signals (not a safety guarantee)$0.002.003
GET /email?address=Email validation without sending mail$0.002.003
GET /papers?query=Academic paper search$0.01
GET /fx?from=&to=Currency exchange rates and conversion$0.002.003
GET /btc-priceBitcoin price in major currencies$0.002.003
GET /base-gasBase network gas price and fee estimate$0.002
GET /base-tx?hash=Base transaction status and details$0.003
GET /base-allowance?token=&owner=&spender=ERC-20 approval check on Base$0.002
GET /ens?name=ENS name/address resolution$0.002.003
GET /weather?lat=&lon=Current weather and hourly forecast$0.002.003
GET /time?zone=Current time and time zone conversion$0.002.003

Free calls are on: 25 successful calls per caller and 2,000 a day in total (src/lib/free-calls.ts), automatic over MCP and with trial=1 over HTTP. Without trial=1, an unpaid HTTP request gets the normal 402 challenge. The table above lists a few core tools; the full, current catalog is at /#tools and in /openapi.json.

The homepage and llms.txt include a copy-pastable Node.js/TypeScript x402 client using @x402/fetch, @x402/evm and viem. It reads the private key from X402_PRIVATE_KEY (never hard-code or commit it), pins Base, the service's published PAY_TO recipient and Base USDC, and caps each payment at $0.01, the ordinary per-call price, so it can pay for every tool priced at $0.01 or less. It does not add trial=1. /package-audit remains $0.20 per call and is intentionally refused by this lower-spend example. The OpenAPI x-guidance carries the same client, price and trial notes. Tool-specific guides (/guides/web-reading, /guides/bitcoin-fees, /guides/dependency-audit) pin that one tool's exact price instead.

A staging copy of the service runs on the Base Sepolia testnet (wrangler.staging.jsonc, keyless facilitator, faucet USDC) so every release can be paid for real over HTTP v2

Only the beginning is shown; read the rest in the repo

Ask PopNx