EU Business Data (VAT, EORI, company, sanctions, KYB)

io.github.zifengwPublished by GitHub account zifengwv1.0.2Updated Oct 31, 2026

EU VAT (VIES) and EORI validation, company registry, sanctions screening, KYB. Free tier, x402.

VerifiedStreamable HTTPWeb executableFinanceDeveloper ToolsBusiness & Commerce

Overview

AI-generated overview

Remote MCP server for EU business checks: VAT (VIES) and EORI validation, company registry lookup, sanctions screening, KYB and e-invoice validation.

What you can do
  • Validate EU VAT numbers against VIES, singly or in batch, with name/address and consultation numbers
  • Validate EU EORI customs numbers, singly or in batch
  • Look up companies in European registries and screen names against EU, UN, UK and US sanctions lists
  • Run combined KYB checks and counterparty due-diligence reports with risk flags
  • Validate, parse and create UBL/CII e-invoices, check e-invoicing routing and run a sandbox send with a signed receipt
  • Check whether a French e-invoicing platform is on the official DGFiP list
When to use it
Useful when an assistant has to verify suppliers or B2B customers, run onboarding or KYB checks, screen counterparties against sanctions lists, or handle EU e-invoicing formats without building integrations to each national source.
Requirements
A remote streamable HTTP endpoint; no install or signup for the free tier. Optional API key sent as X-API-Key or Authorization Bearer header for higher volume. Network access to the provider's host.
Before you install
Free tier is capped (20 tool calls per day per session, shared limits for cloud connector traffic) and paid plans or x402 USDC payments on Base apply beyond it. Company names and VAT numbers you submit go to a third-party commercial service. Sandbox send transmits nothing, but live Peppol transmission is not available. Results are not legal or tax advice.

Installation

In SourceWeft

  1. Open EU Business Data (VAT, EORI, company, sanctions, KYB) in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.zifengw%2Feu-business-data-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "eu-business-data-vat-eori-company-sancti": {
      "type": "http",
      "url": "https://api.wsystem.dev/mcp/"
    }
  }
}

README

EU Business Data MCP – VAT, EORI, company registry, sanctions, KYB & e-invoicing

A remote MCP server and x402 pay-per-call API for European business data checks, aimed at AI agents and KYB/onboarding/invoicing workflows.

Maker disclosure: built and operated by W System. This is our own commercial product. The code is MIT-licensed.

Remote MCP endpoint (streamable HTTP)

https://api.wsystem.dev/mcp/

Free tier, no signup: 20 tool calls per day per MCP session. Direct clients (Claude Code, Cursor, mcp-remote and others connecting from your own machine) also get at most 20 per IP, so opening more sessions doesn't add calls. Claude.ai / Claude Desktop custom connectors call from Anthropic's cloud (outbound range 160.79.104.0/21), so those calls are counted per session, not per IP; all keyless traffic from that range shares 2,000 lookups per day (verify_batch / verify_eori_batch count one per number). New keyless sessions: 1,500 per IP per day (3,000 per Anthropic address). Limits reset at 00:00 UTC; live values: https://api.wsystem.dev/mcp/limits

Optional API key for volume: send X-API-Key: <key> (or Authorization: Bearer <key>) with every MCP request. Keyed calls use the key's monthly units (same weights as the REST API) instead of the free tier. Keys: https://wsystem.dev/pricing (Starter EUR 19/month, 5,000 units; Pro EUR 49/month, 25,000 units; there is no free key). Keys in the URL are not accepted. How to add one in Claude: docs/mcp-claude-cursor.md.

Server card: https://api.wsystem.dev/server-card · Website: https://wsystem.dev · LLM summary: https://wsystem.dev/llms.txt

Example client config:

json
{ "mcpServers": { "eu-business-data": { "type": "http", "url": "https://api.wsystem.dev/mcp/" } } }

Tools (14)

ToolWhat it does
verify_vatValidate an EU VAT number live against VIES (27 EU states + XI), with name/address and optional consultation number
verify_batchValidate several VAT numbers at once
lookup_companyLook up a company in European business registries
screen_sanctionsFuzzy-match a name against EU / UN / UK / US sanctions lists
kyb_checkCombined KYB: VAT validity + registry + sanctions screening
verify_eoriValidate an EU EORI number (customs)
verify_eori_batchValidate several EORI numbers at once
validate_einvoiceValidate a UBL or CII e-invoice against the official EN 16931 and XRechnung rules: errors with rule IDs, plain-English messages and fix hints
parse_einvoiceRead an incoming e-invoice (UBL Invoice/CreditNote, CII, or the XML inside a ZUGFeRD / Factur-X PDF as base64) into one JSON shape: seller, buyer, dates, references, totals, VAT breakdown, payment/IBAN, lines, attachments. Values as written, no validation (use validate_einvoice). Guide: read XRechnung / ZUGFeRD as JSON
create_einvoiceTurn simple JSON into a validated UBL 2.1 invoice (EN 16931, XRechnung or Peppol BIS 3 structure)
einvoice_route"Can I e-invoice this company?": VIES + Peppol Directory + country B2B mandate + recommended format
send_einvoice_sandboxSANDBOX: verify buyer VAT + sanctions → create/validate EN 16931 → route → mock transport (nothing transmitted) → Ed25519-signed evidence receipt
due_diligence_reportVAT, register, sanctions, EORI, GLEIF LEI and Peppol in one report with risk flags and a timestamp
check_fr_pa_registryFrance: is this e-invoicing platform on the official DGFiP list of Plateformes Agréées (PA)? Name or website in; approved / awaiting interop tests / not found, registration date and official source out (also free as REST: GET https://api.wsystem.dev/fr/pa-registry?name=Pennylane)

Quick answers

When VIES is down (fallback) and UK numbers

  • VIES is retried with backoff. If a member state is still MS_UNAVAILABLE/timing out, the result comes from that country's free official source: PL Biała lista (Ministry of Finance), CZ ARES (VAT register status), FI YTJ open data (VAT register), FR Recherche d'entreprises / SIRENE (company active + VAT key; no free French VAT-registration API exists).
  • Otherwise the last successful VIES answer for that number is returned, labelled with its date. Otherwise member_state_unavailable.
  • Fallback results have fallback: true, fallback_type (national_source | last_vies_result), source, legal_status, vies_error, and no consultation number. National registers show domestic status, which is not VIES audit proof. Turn off with fallback=false.
  • No free automated source for DE (BZSt eVatR requires a German requester VAT ID), ES (certificate), IT (captcha), NL, BE, HU (NAV technical user), DK.
  • GET /vies/status: EC VIES per-country availability, cached 5 min, free.
  • GB: accepted and HMRC check-digit validated, but the live HMRC lookup is not switched on yet (HMRC production access pending). GB numbers return status: member_state_unavailable, valid: null, error: HMRC_LIVE_ACCESS_PENDING: not a validity result, not cached and not billed. XI (Northern Ireland) is checked in VIES.

Integration guides

Step-by-step guides (every snippet tested against the live API): docs/

Website with a free VAT and EORI checker: https://wsystem.dev REST API docs and a free API key (no card): https://api.wsystem.dev/docs?ref=mcp-github

Pricing

  • MCP endpoint: free, 20 tool calls per day per MCP session (details and the shared limit for Claude connector traffic above). With an API key in X-API-Key: Starter EUR 19/month (5,000 units) or Pro EUR 49/month (25,000 units). When a free limit is reached, the tool returns an error that names the limit and explains how to add a key.
  • REST API with x402 on the same host (https://api.wsystem.dev, e.g. GET /verify?vat=..., POST /verify/batch, GET /company?q=..., sanctions, KYB and EORI routes): after the free allowance, calls are paid per request with x402 in USDC on Base: about $0.01 per single check, $0.10 per batch, $0.045 per KYB check. Unpaid calls get HTTP 402 with the payment requirements.
  • Apify Actors (pay per event), see below.

Also on Apify

The same checks are available as Apify Actors (pay per event), and through Apify's hosted MCP server:

Blog: https://wsystem.hashnode.dev

Ready-made examples (run in one click on Apify)

Each example opens a pre-filled run with real sample output, so you can see the result format before you pay for anything:

Run it yourself

bash
pip install -r requirements.txtuvicorn vatcheck.server:app --port 8000     # REST at /, MCP at /mcp/# or stdio MCP:python -m vatcheck.mcp_server stdio

x402 is off unless X402_ENABLED=1 and X402_PAY_TO are set (see vatcheck/x402.py).

Data sources & disclaimer

Data comes live from public sources such as the European Commission VIES and EORI services, public business registries and official sanctions lists. Not affiliated with the European Commission or any authority. Results are not legal or tax advice.

License

MIT. See LICENSE.

Source: README.md at commit c33d398

Tools

0
SourceWeft has not read this server's tools yet.

Version history

2
  1. v1.0.2LatestOct 17, 2026
  2. v1.0.0Oct 16, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts