Pyxmark

com.pyxmark由 pyxmark.com 发布官方发布者v0.1.0更新于 Oct 27, 2026

Vendor checks: sanctions lists, SEC filings, domain age and a due-diligence report with sources.

已验证Streamable HTTP可网页运行金融安全与监控商业与电商

概览

AI 生成的概览

托管型 MCP 服务器,让助手按制裁名单筛查公司或个人、查询 SEC EDGAR 记录、检查域名信号,并生成尽职调查报告。

可以做什么
  • 按 OFAC、联合国、欧盟和英国制裁名单模糊筛查个人或机构名称,可选出生日期、国籍和国家以区分同名对象
  • 将名称、股票代码或 CIK 解析为 SEC 注册公司,并获取其 EDGAR 档案:身份、地址、三年财务数据和近期 10-K、10-Q、8-K 申报
  • 查询域名的注册日期、注册商、MX、SPF、DMARC 记录以及 Wayback Machine 最早快照日期
  • 获取美国某州的官方州务卿企业查询链接
  • 一次调用生成尽职调查报告,汇总上述信号,给出风险提示摘要和 clear、review 或 hold 结论
适用场景
适合在向供应商、合作方付款或准入前做核查,或确认某公司、某人是否出现在制裁名单上。也适合快速查询上市公司的 SEC 财务数据和申报文件。
运行要求
远程 Streamable HTTP 端点,无需登录、账号或 API 密钥。免费使用按 IP 地址每天限 25 次查询。仅支持本地 stdio 的客户端需要借助 npx 桥接。
安装前请注意
结果仅供参考,不构成合规裁定;名称匹配为模糊匹配,任何疑似命中都应对照所链接的官方条目核实后再行动。不适用于信用、就业、住房、保险或租赁等消费者筛查。查询内容(包括名称和域名)会发送到该托管服务。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Pyxmark,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/com.pyxmark%2Fpyxmark/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "pyxmark": {
      "type": "http",
      "url": "https://mcp.pyxmark.com/mcp"
    }
  }
}

README

[Pyxmark logo]

Pyxmark

Check a company before you pay it. Pyxmark is a hosted MCP server that screens a company or person against the OFAC, UN, EU and UK sanctions lists, looks the company up in SEC EDGAR, checks its web domain's age and email records, and puts it together in a due-diligence report with a clear, review or hold verdict. Every result links to the official record and says when each list was last synced.

This repository holds listing and install files only. The server is hosted; its code isn't published here.

Connect

Server URL: https://mcp.pyxmark.com/mcp (Streamable HTTP). No sign in and no key.

[Install in Cursor] [Install in VS Code]

Claude (claude.ai and Claude Desktop): Customize → Connectors → + Add → Add custom connector. Name it Pyxmark, paste the server URL, choose No sign in, then Add. Free plans allow one custom connector. On Team and Enterprise an owner adds it first under Organization settings → Connectors.

Claude Code

claude mcp add --transport http pyxmark https://mcp.pyxmark.com/mcp

ChatGPT (web): Plugins → + → Add custom MCP server. Name it Pyxmark, paste the server URL, pick No authentication, select I understand and want to continue, then Create as a plugin. Install it and pick it with @ in a chat.

Codex and the ChatGPT desktop app

codex mcp add pyxmark --url https://mcp.pyxmark.com/mcp

Or in the desktop app: Settings → MCP servers → Add server, choose Streamable HTTP and paste the URL.

Cursor: use the Install in Cursor button, or add this to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project):

json
{ "mcpServers": { "pyxmark": { "url": "https://mcp.pyxmark.com/mcp" } } }

VS Code (GitHub Copilot): use the Install in VS Code button, or run MCP: Add Server from the Command Palette, choose HTTP and paste the URL. From a terminal:

code --add-mcp '{"name":"pyxmark","type":"http","url":"https://mcp.pyxmark.com/mcp"}'

Grok: at grok.com/connectors choose New Connector, then Custom, and paste the URL. On Grok Business and Enterprise a team admin adds it first. In Grok Build:

grok mcp add --transport http pyxmark https://mcp.pyxmark.com/mcp

Grok Bot: there's no settings form. Tell your bot "Add this MCP server: https://mcp.pyxmark.com/mcp". It confirms, and the tools work from your next message.

Gemini CLI

gemini mcp add --transport http -s user pyxmark https://mcp.pyxmark.com/mcp

Other clients: most read the standard block below, which is also this repo's .mcp.json (Claude Code, VS Code and Grok Build pick it up from a project root). Clients that only run local stdio servers can use npx -y mcp-remote https://mcp.pyxmark.com/mcp.

json
{ "mcpServers": { "pyxmark": { "type": "http", "url": "https://mcp.pyxmark.com/mcp" } } }

Check it works: ask "List the Pyxmark tools". You should see 7 read-only tools. Then ask "Is Microsoft Corporation on any sanctions list?" It should come back with no match.

AI agents setting this up for a user: follow llms-install.md.

Tools

Six tools are listed today, all read-only. A seventh, check_exclusions (SAM.gov federal exclusions), is added to the list once SAM.gov data has synced; until then each due_diligence_report includes a link to search SAM.gov yourself.

ToolWhat it does
due_diligence_reportOne report on a vendor: sanctions screen, SEC record and risk filings, domain age, first Wayback Machine snapshot and email records, ending in a clear, review or hold verdict with reasons
screen_sanctionsFuzzy-screens a name against OFAC SDN and Consolidated, UN, EU and UK lists. Optional birth date, nationality and country tell apart people with the same name. Optional address, email, phone, website, IDs and owners are matched against what the lists record, including sanctioned regions and the OFAC 50 percent rule
search_companyFinds which SEC-registered company a name, ticker or CIK refers to
company_profileThe SEC EDGAR record for one company: identity, address, three years of key financials and recent filings
domain_ageDomain registration date and registrar (RDAP, with a WHOIS fallback), its MX, SPF and DMARC records, and the date of its first Wayback Machine snapshot
state_registry_linkA link to the US state business registry search for a company

Try asking

  • "Run a due diligence report on Acme Corp, acme.com, Delaware."
  • "Is this supplier on any sanctions list?"
  • "Show me Tesla's last three years of revenue and recent 8-Ks."

Read this

Results are informational, not a compliance determination. Names are matched fuzzily, so check any potential match against the linked official entry before you act. Pyxmark isn't for consumer screening (credit, jobs, housing, insurance or tenancy).

Privacy: https://pyxmark.com/privacy · Terms: https://pyxmark.com/terms

UK Sanctions List data contains public sector information licensed under the Open Government Licence v3.0.

来源:README.md,提交 6cd5b43

工具

6

search_company

Search SEC companies

Look up which SEC-registered company a name, ticker or CIK refers to. Returns up to 10 candidates, each with its CIK, tickers and a match score, and nothing else. Use it to pick the right CIK when a name is ambiguous, then call company_profile with that CIK for the details.

输入参数query必填

company_profile

SEC company profile

Full SEC EDGAR record for one company, given its CIK, ticker or name (best match): legal name, industry (SIC), state of incorporation, business address, 3 fiscal years of revenue, net income, total assets and cash, and its recent 10-K, 10-Q and 8-K filings with links. Use search_company first if you only have a partial or ambiguous name.

输入参数ciknameticker

screen_sanctions

Screen sanctions lists

Fuzzy-screen a person or organisation name against OFAC SDN + Consolidated, UN, EU, and UK sanctions lists. Returns up to 15 scored matches with source links; if more match, the summary says so and suggests a more specific query. Optional dob/birth_year, nationality and country set aside same-name matches whose listed details differ (rules at https://mcp.pyxmark.com/#details). Optional address, email, phone, website, ids and owners are matched against the details the lists give (identifier matches, sanctioned regions, the 50 percent rule); the assessment field sums it up as hold / review / clear. Informational only, not a compliance determination. Results come from public government lists and filings, may be incomplete or out of date, and fuzzy name matches can be false positives or miss variants. Verify every potential match against the official source before acting.

输入参数dobidsname必填emailphoneownersaddresscountrywebsitethresholdbirth_yearnationality另有 1 个

domain_age

Domain age and email records

Domain registration date, age, registrar (RDAP) and email-auth records (MX, SPF, DMARC), which are common fraud signals, plus first_archived: the date of the Wayback Machine's earliest snapshot (null if none; archive.status says unavailable if archive.org didn't answer). notes holds factual remarks, such as a first snapshot under 90 days old or a registration years older than the first snapshot; they are not flags.

输入参数domain必填

due_diligence_report

Vendor due diligence report

One-call due-diligence report: SEC profile (if public), sanctions screen, federal exclusions, domain signals (registration age, email records, Wayback Machine first-seen date), and state registry link, with a red-flag summary, a verdict (clear / review / hold; rules at https://mcp.pyxmark.com/#verdict) and source links. An agent should not pay or onboard on 'hold', and should ask a person on 'review'. Informational only, not a compliance determination. Results come from public government lists and filings, may be incomplete or out of date, and fuzzy name matches can be false positives or miss variants. Verify every potential match against the official source before acting. Colorado vendors only (state CO or a Colorado address): address_density gives how many active Colorado companies list the vendor's address, from the Colorado Department of State's Business Entities in Colorado data (Public Domain), refreshed monthly. A building that also hosts a listed virtual mailbox service, an address shared by 1,000+ companies, or a registered agent's address used by hundreds of companies that almost none of them list as their principal address adds a worth-a-second-look line under info, never a red flag or a verdict change; other states are not covered.

输入参数cikdobidsnameemailphonestatedomainownerstickeraddresscountry另有 4 个

版本历史

1
  1. v0.1.0最新Oct 18, 2026

评分

已满足适用检查项的 90%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。