GCC Sanctions & Terror-List Screener

tech.noahsarchPublished by noahsarch.techOfficial publisherv0.1.1Updated Nov 1, 2026

Screen names vs OFAC, UN, EU, UK and UAE terrorist lists with Arabic-aware matching.

The publisher's own server: Business-Day Oracle

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Screens names against OFAC, UN, EU, UK and UAE sanctions and terrorist lists, with Arabic-aware matching and audit-ready reports.

What you can do
  • Screen a person, company, vessel or aircraft name against OFAC SDN and Consolidated, UN, EU, UK and UAE lists, with scored hits and a clear/review/likely_match hint
  • Screen up to 500 subjects in one batch, with per-subject decisions and summary counts
  • Produce a self-contained HTML audit report recording list versions, hashes, inputs and every hit
  • Check per-list freshness, entry counts, source pages and last refresh failures
  • Explain how two names were normalised and scored, component by component
When to use it
Useful for compliance, onboarding or KYC-style checks where an assistant must screen customer, counterparty or beneficial-owner names and keep a record of the check. Also handy when names are in Arabic or transliterated variants and a plain string match would miss.
Requirements
Remote streamable HTTP endpoint; no local install. The catalogue and free tools (list_status) work without credentials; screening tools need an API key sent in the X-API-Key header, obtained by contacting the provider. Batch screening is charged per unique name.
Before you install
Screening is charged per unique name, so batch runs can cost money. An API key is required for screening and must be kept private. Hits are not determinations: the server itself says every hit must be verified by a human against the source list entry, and results carry a disclaimer. Snapshots older than 7 days are flagged as stale.

Installation

In SourceWeft

  1. Open GCC Sanctions & Terror-List Screener in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/tech.noahsarch%2Fsanctions-screener/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "gcc-sanctions-terror-list-screener": {
      "type": "http",
      "url": "https://screen.noahsarch.tech/mcp"
    }
  }
}

Tools

5

screen_name

Screen one name against sanctions and terror lists

Screen a person, company, vessel or aircraft name against OFAC SDN + Consolidated, UN, EU, UK and the UAE Local Terrorist List. Returns up to 20 hits sorted by score with list, listed_name, aliases_matched, score, match_strength (exact / strong / possible / weak), matched_on (which alias, which normalisation, DOB / nationality / type agreement), programs, listed_on, DOBs, nationalities, id_numbers, reference and source_url, plus decision_hint. Example: name 'Mohamed Hussein Al-Tikriti', dob '1966', nationality 'IQ', entity_type 'individual'. Response: result plus data_confidence, estimated_items[], sources[] (official list pages), data_version (snapshot id), warnings[] (e.g. a list snapshot older than 7 days) and a disclaimer. Lists: ofac_sdn, ofac_cons, un, eu, uk, uae. Names are never logged; matching is deterministic (no AI) and runs offline against the bundled snapshot.

Parametersdobnamerequiredlistsid_numbermin_scoreentity_typenationality

screen_batch

Screen up to 500 names in one call

Each subject may carry dob, nationality, entity_type, id_number and your reference. Identical rows are screened once (charged once). Returns per-subject decision_hint, hit_count, top_score and the top 5 hits, plus summary counts (clear / review / likely_match). Charged per unique name. Example: subjects [{name:'Ali Kony', reference:'C-17'}, {name:'شركة الأمل للتجارة', entity_type:'entity'}], default_nationality 'AE'. Response: result plus data_confidence, estimated_items[], sources[] (official list pages), data_version (snapshot id), warnings[] (e.g. a list snapshot older than 7 days) and a disclaimer. Lists: ofac_sdn, ofac_cons, un, eu, uk, uae. Names are never logged; matching is deterministic (no AI) and runs offline against the bundled snapshot.

Parameterslistssubjectsrequiredmin_scoredefault_nationality

audit_report

Produce an HTML audit report of a screening

Screens 1–50 subjects and returns a self-contained HTML report (result.html): timestamp, each list with its version / fetched-at / SHA-256, the inputs, every hit with its explanation, and an explicit no-match statement for clear subjects — suitable for the client's AML file (open in a browser, print to PDF). One charge per report. Example: subjects [{name:'Qusay Saddam Hussein', dob:'1966'}], case_reference 'KYC-2026-0412', prepared_by 'MLRO'. Response: result plus data_confidence, estimated_items[], sources[] (official list pages), data_version (snapshot id), warnings[] (e.g. a list snapshot older than 7 days) and a disclaimer. Lists: ofac_sdn, ofac_cons, un, eu, uk, uae. Names are never logged; matching is deterministic (no AI) and runs offline against the bundled snapshot.

Parameterslistssubjectsrequiredmin_scoreprepared_bycase_reference

list_status

Freshness and provenance of every bundled list

Per list: entries (individuals / entities / vessels / aircraft), aliases, fetched_at, days_since_fetch (stale flag when older than 7 days), official source URL and page, SHA-256 of the downloaded file, licence/terms, and any failures of the last refresh. Free. Call it before relying on a 'clear' result in a regulated process. Response: result plus data_confidence, estimated_items[], sources[] (official list pages), data_version (snapshot id), warnings[] (e.g. a list snapshot older than 7 days) and a disclaimer. Lists: ofac_sdn, ofac_cons, un, eu, uk, uae. Names are never logged; matching is deterministic (no AI) and runs offline against the bundled snapshot.

Takes no parameters.

explain_match

Show why two names do or don't match

Normalises both names step by step (Unicode, Arabic letter folding, honorifics/particles dropped, merged 'Abdul…' forms split, romanisation variants folded) and returns every score component (token_sort, token_set, Jaro-Winkler, subset, or the cross-script skeleton) and the resulting score / strength. Free. Example: name_a 'Abd al-Rahman Al Shaikh', name_b 'عبدالرحمن الشيخ'. Response: result plus data_confidence, estimated_items[], sources[] (official list pages), data_version (snapshot id), warnings[] (e.g. a list snapshot older than 7 days) and a disclaimer. Lists: ofac_sdn, ofac_cons, un, eu, uk, uae. Names are never logged; matching is deterministic (no AI) and runs offline against the bundled snapshot.

Parametersname_arequiredname_brequired

Version history

1
  1. v0.1.1LatestNov 1, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.

Other Noahsarch integrations