Seal Security
Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.
Description from the maker (original English)
Supplier, company, sanctions, PEP, VAT and IBAN checks for agents. 5 checks a day free, no key.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Works in Claude on the web, desktop and mobile:
https://factline.dev/mcp/kycRun this in your terminal
claude mcp add --transport http factline-kyc https://factline.dev/mcp/kycPaste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"factline-kyc": {
"url": "https://factline.dev/mcp/kyc"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"factline-kyc": {
"type": "http",
"url": "https://factline.dev/mcp/kyc"
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
ChatGPT connects only to servers on the internet:
https://factline.dev/mcp/kycMenu names can differ slightly by plan and over time.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
Tool names and descriptions exactly as the server reported them on Nov 7, 2026. The maker wrote them, not us; we show them as plain text.
x402_pay_guardFree. Use right before paying an x402 seller: screens the payTo wallet against the OFAC list, checks that payTo is a wallet this seller lists in the x402 Bazaar or Circle catalogue (catches a swapped or injected payTo), looks up the seller's payer history, age and uptime, and che
watch_alertsFree. Use at the start of a session or on a schedule when the user has Factline watches (from watch_30_days or a key): lists the watches and any alerts (a new sanctions match, a company status, name or address change, APK or recall change). Input: token (wt_..., returned by watch
x402_sellersFree. Use when looking for an x402 API to pay for a task, or to see if a seller is used and up: sellers from the Coinbase x402 Bazaar ranked by unique payers (30 days), with Factline's daily check that their endpoints answer a valid 402, speed and networks. q is one word to filte
get_trial_keyFree. Use when Factline's free calls for today are used up or the user wants more paid checks without a crypto wallet. Without an email it returns a starter key at once (100 credits, 14 days, no human step). With the user's work email it returns a trial key (2,000 credits a month
eu_exchange_ratesFree. Use when the user needs an official euro exchange rate or a conversion for an invoice, contract or report: ECB euro reference rates (about 30 currencies), today or any working day in the last 90 days, with cross rates. Input: base (default EUR), symbols (e.g. USD,GBP), opti
eu_law_lookupFree. Use when the user cites an EU regulation, directive or decision and you need its official title, date, whether it is still in force, and the EUR-Lex link to cite: by CELEX number (e.g. 32016R0679) or citation (e.g. Regulation (EU) 2016/679, Directive 2015/849).
webshop_checkFree. Use before a shopping agent or the user pays an unfamiliar webshop: domain age, company and VAT number on the site (VAT checked in VIES), contact page, payment methods, prepayment-only or crypto-only, 70-99% discount lures. Returns looks_ok, caution or avoid and decision al
firm_checkFree. Use when the user asks whether criminals can send mail as their firm or whether lookalike domains of it exist: DMARC and SPF status of the firm's domain and registered lookalike domains (typos, swapped letters). Input: domain.
supplier_card_verifyFree. Use before onboarding or paying a supplier that has a website: reads https:// /.well-known/supplier.json (spec factline.dev/supplier-json), checks its VAT number in VIES and company number in the register against the name, and with iban says whether that IBAN is one of the
mcp_server_checkFree. Use before connecting to or installing an MCP server you have not used before, or to re-check one: connects once (no tool is called), scans tool descriptions for prompt-injection wording and invisible characters, lists tools that write, send, pay or run commands, checks the
payment_run_checkFree. Use before a payment run is sent to the bank: give the payment file as text (SEPA pain.001 XML or CSV with payee name and IBAN) and, best, last run's file or a vendor list as previous. Each line gets release, review or hold: invalid or changed IBAN, a payee name that imitat
eudr_geo_checkFree. Use when the user has a supplier's EUDR plot file for a due diligence statement (from 30 Dec 2026): checks [longitude, latitude] order, at least 6 decimals, a point only for plots up to 4 ha, closed and non-crossing polygons, plots inside the country of production, area per
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 8, 2026
The publisher (snefhew) is not the repo owner (snefhew); someone else may have listed it
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Responded in 289 ms (HTTP 200)
No sign-in needed
Read 12 tool descriptions and found no hidden instructions to the AI
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 2 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
The registry does not list a required key, though some servers ask you to sign in on first use.
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed –, and the latest version (0.10.0) reached the registry 12 days ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: Seal Security, Zeqqat, EchelonGraph CVE & Exposure
Servers in the same category from other makers, sorted by stars.
Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.
Open source MCP gateway: agents call your APIs without holding keys or seeing secrets.
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
No README found in the repo