Compliance & Sanções

io.github.mcp-dirPublished by GitHub account mcp-dirv0.1.0Updated Oct 26, 2026

Due diligence & KYC: PEP, national and international sanctions (OFAC, UN, EU, UK, FBI, INTERPOL, FIN

VerifiedStreamable HTTPWeb executableFinanceSecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Remote MCP server for due diligence and KYC: checks CPFs and CNPJs against PEP lists, sanctions lists and Brazilian public compliance registries.

What you can do
  • Check PEP status and extended PEP family relationships by CPF
  • Search international sanctions lists (OFAC, UN, EU, UK, FBI, INTERPOL, FINCEN) by name
  • Query Brazilian integrity registries (CEIS, CNEP, CEAF, CEPIM, improbity, CGU penalties, leniency agreements, forced-labour list) by CPF or CNPJ
  • Check arrest warrants, criminal records, central bank disqualified/prohibited lists, CVM registration and sanction proceedings, CARF, professional councils, ANTT, IBAMA and municipal/state tax certificates
  • Validate PIX key holders and inspect platform state (version, toolkit info, marketplace search, connection status, authentication, bug reporting)
When to use it
Useful when an assistant has to screen people or companies before onboarding, contracting, lending or payments, or when you need to pull Brazilian and international compliance records in one place instead of visiting each source.
Requirements
A remote streamable HTTP endpoint; no local package or runtime. No authentication, environment variables or headers are declared in the manifest, though the server's own tools describe a browser login and an Authorization Bearer token for a permanent connection.
Before you install
Queries send personal identifiers (CPF, CNPJ, names, PIX keys) to a third-party API, so confirm the legal basis and data-protection rules for handling them. Results are list lookups and may be incomplete or outdated; do not treat them as a final compliance decision. The server also exposes account, marketplace and feedback tools that may send conversation content when reporting a bug.

Installation

In SourceWeft

  1. Open Compliance & Sanções in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.mcp-dir%2Fcompliance-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "compliance-san-es": {
      "type": "http",
      "url": "https://api.mcp.ai/p_compliance"
    }
  }
}

README

This repository has no README.

Tools

37

compliance_pep

Verifica se um CPF é Pessoa Exposta Politicamente (PEP).

ParametersCPFcompleto

compliance_pep_parentescos

PEP estendida — pessoa exposta politicamente + parentescos.

ParametersCPFcompleto

compliance_ofac

Busca em listas de sanções OFAC (EUA) por nome.

ParametersNOMEcompleto

compliance_onu

Busca na lista consolidada de sanções da ONU por nome.

ParametersNOMEcompleto

compliance_ue

Busca na lista de sanções financeiras da União Europeia por nome.

ParametersNOMEcompleto

compliance_uk

Busca na lista de sanções do Reino Unido (HM Treasury) por nome.

ParametersNOMEcompleto

compliance_fbi

Busca na lista FBI Most Wanted por nome.

ParametersNOMEcompleto

compliance_interpol

Busca na lista da INTERPOL por nome.

ParametersNOMEcompletoSOBRENOMEDATANASCIMENTO

compliance_fincen

Busca na lista FINCEN por nome.

ParametersNOMEcompleto

compliance_ceis

CEIS — empresas inidôneas e suspensas, por CNPJ/CPF.

ParametersCPFCNPJcompleto

compliance_cnep

CNEP — empresas punidas, por CNPJ/CPF.

ParametersCPFCNPJcompleto

compliance_ceaf

CEAF — expulsões da administração federal, por CPF.

ParametersCPFcompleto

compliance_cepim

CEPIM — entidades privadas impedidas, por CNPJ.

ParametersCNPJcompleto

compliance_improbidade

CNIA — condenações por improbidade administrativa e inelegibilidade, por CNPJ/CPF.

ParametersCPFCNPJcompleto

compliance_mandados_prisao

CNJ — mandados de prisão em aberto, por CPF/nome.

ParametersCPFNOMEALCUNHANOMEMAENOMEPAIcompleto

compliance_antecedentes_pf

Antecedentes criminais (Polícia Federal) por CPF/nome.

ParametersCPFNOMENOMEMAENOMEPAIcompletoDATANASCIMENTO

compliance_antecedentes_civil

Antecedentes criminais (Polícia Civil) por CPF/nome/UF.

ParametersRGUFrequiredCPFNOMEGENERONOMEMAEcompletoDATANASCIMENTO

compliance_leniencia

Acordos de leniência por CNPJ.

ParametersCNPJcompleto

compliance_cgu

Consulta de penalidades CGU por CPF/CNPJ.

ParametersCPFCNPJTIPOrequiredcompleto

compliance_trabalho_forcado

Verificação de empregador em lista de trabalho forçado/escravo, por CNPJ/CPF.

ParametersCPFCNPJcompleto

compliance_bacen_inabilitados

Banco Central — quadro geral de inabilitados, por CPF/CNPJ.

ParametersCPFcompleto

compliance_bacen_proibidos

Banco Central — quadro geral de proibidos, por CPF/CNPJ.

ParametersCPFCNPJcompleto

compliance_pix

Antifraude de chave PIX — valida o titular de uma chave PIX.

ParametersTIPOCHAVErequiredcompletoDOCUMENTOrequired

compliance_cvm

Cadastro na CVM (Comissão de Valores Mobiliários) por CPF/CNPJ.

ParametersCPFCNPJcompleto

compliance_cvm_sancionadores

Processos administrativos sancionadores da CVM por CPF/CNPJ.

ParametersCPFCNPJcompleto

compliance_carf

Processos no CARF (Conselho Administrativo de Recursos Fiscais) por CPF/CNPJ.

ParametersCPFCNPJcompleto

compliance_confea_crea

Registro profissional no CONFEA/CREA (engenharia/agronomia).

ParametersCPFcompletoREGISTRONACIONAL

compliance_antt

Regularidade de transportadora na ANTT por CPF/CNPJ/RNTRC.

ParametersCPFCNPJRNTRCcompleto

compliance_ibama_debitos

Certidão negativa de débitos do IBAMA por CPF/CNPJ.

ParametersCPFCNPJcompleto

compliance_cnd_municipal

Certidão Negativa de Débitos Municipal por CNPJ/CPF (informe o município).

ParametersIMCPFCNPJcompletoMUNICIPIOrequired

compliance_cadin

CADIN estadual (inadimplentes com a Fazenda) por CPF/CNPJ/UF.

ParametersUFCPFCNPJcompleto

show_version

Show Version

Show the current MCP platform and adapter versions.

Takes no parameters.

report_bug

Report Bug

Report a bug, missing feature, or send feedback. Include the conversation array with recent messages for reproduction.

Parameterscontextmessagerequiredconversation

connect

Connection Status

Returns connection status and URLs. When all providers are connected, returns authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-install URLs.

Takes no parameters.

toolkit_info

Toolkit Info

Returns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.

Takes no parameters.

marketplace

Marketplace

The official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them. Covers capability requests like "find an MCP that does X", "consulta um CPF", "is there a tool for Y". Core flow: action=search discovers MCPs by intent → describe returns one MCP's full profile (every tool with its id + params, pricing, auth) so you pick the right tool_id → invoke RUNS that tool. KEY: invoke works even when the MCP is NOT installed — it runs the tool pontualmente (one-off), without adding the MCP to the toolkit and without bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wallet is empty, invoke returns a checkout/top-up link (the user opens it, then you retry). Use install only to make an MCP PERMANENT in the active toolkit (its tools then show up natively in future sessions); prefer invoke for a single/occasional use. list_tools lists what is callable right now. subscribe/cancel handle per-MCP billing; report_bug sends feedback; request_mcp asks us to build a NEW MCP when nothing fits. Search/describe flag installed_in_toolkit vs installed_in_workspace. Writes (install/uninstall/subscribe/cancel and the one-off install behind invoke) require workspace owner/admin. It also carries the mcp.ai PROMPT LIBRARY, which is about ready-made prompt TEXT rather than MCPs: search_prompts finds one, get_prompt returns its full text with {{variables}} filled, and publish_prompt saves a prompt and returns a shareable mcp.ai/p/<slug> link that opens without login.

Parameterslimitqueryactionmcp_idmessagetool_idargumentsimmediatetier_slugprompt_bodyprompt_slugprompt_tool+11 more

authenticate

Authenticate

MCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header `Authorization: Bearer <token>` for a permanent, non-expiring connection. Or paste it here for a session-only login: call with { token: "<jwt>" } after the user pastes, or with no args to get the link.

Parameterstoken

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.