Pyxmark

com.pyxmark由 pyxmark.com 發布官方發布者v0.1.0更新於 Oct 27, 2026

Vendor checks: sanctions lists, SEC filings, domain age and a due-diligence report with sources.

已驗證Streamable HTTP可網頁執行金融安全與監控商業與電商

概覽

AI 產生的概覽

託管型 MCP 伺服器,讓助理依制裁名單篩查公司或個人、查詢 SEC EDGAR 紀錄、檢查網域訊號,並產出盡職調查報告。

可以做什麼
  • 依 OFAC、聯合國、歐盟與英國制裁名單模糊篩查個人或機構名稱,可選填出生日期、國籍與國家以區分同名對象
  • 將名稱、股票代號或 CIK 解析為 SEC 註冊公司,並取得其 EDGAR 檔案:身分、地址、三年財務資料與近期 10-K、10-Q、8-K 申報
  • 查詢網域的註冊日期、註冊商、MX、SPF、DMARC 紀錄以及 Wayback Machine 最早快照日期
  • 取得美國某一州的官方州務卿企業查詢連結
  • 一次呼叫產出盡職調查報告,彙整上述訊號,給出風險提示摘要與 clear、review 或 hold 結論
適用情境
適合在向供應商、合作對象付款或納入合作前做查核,或確認某公司、某人是否出現在制裁名單上。也適合快速查詢上市公司的 SEC 財務資料與申報文件。
執行需求
遠端 Streamable HTTP 端點,無需登入、帳號或 API 金鑰。免費使用依 IP 位址每天限 25 次查詢。僅支援本機 stdio 的用戶端需透過 npx 橋接。
安裝前請注意
結果僅供參考,不構成法遵認定;名稱比對為模糊比對,任何疑似命中都應對照所連結的官方條目核實後再行動。不適用於信用、就業、住房、保險或租賃等消費者篩查。查詢內容(包括名稱與網域)會傳送至該託管服務。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Pyxmark,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/com.pyxmark%2Fpyxmark/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "pyxmark": {
      "type": "http",
      "url": "https://mcp.pyxmark.com/mcp"
    }
  }
}

README

[Pyxmark logo]

Pyxmark

Check a company before you pay it. Pyxmark is a hosted MCP server that screens a company or person against the OFAC, UN, EU and UK sanctions lists, looks the company up in SEC EDGAR, checks its web domain's age and email records, and puts it together in a due-diligence report with a clear, review or hold verdict. Every result links to the official record and says when each list was last synced.

This repository holds listing and install files only. The server is hosted; its code isn't published here.

Connect

Server URL: https://mcp.pyxmark.com/mcp (Streamable HTTP). No sign in and no key.

[Install in Cursor] [Install in VS Code]

Claude (claude.ai and Claude Desktop): Customize → Connectors → + Add → Add custom connector. Name it Pyxmark, paste the server URL, choose No sign in, then Add. Free plans allow one custom connector. On Team and Enterprise an owner adds it first under Organization settings → Connectors.

Claude Code

claude mcp add --transport http pyxmark https://mcp.pyxmark.com/mcp

ChatGPT (web): Plugins → + → Add custom MCP server. Name it Pyxmark, paste the server URL, pick No authentication, select I understand and want to continue, then Create as a plugin. Install it and pick it with @ in a chat.

Codex and the ChatGPT desktop app

codex mcp add pyxmark --url https://mcp.pyxmark.com/mcp

Or in the desktop app: Settings → MCP servers → Add server, choose Streamable HTTP and paste the URL.

Cursor: use the Install in Cursor button, or add this to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (one project):

json
{ "mcpServers": { "pyxmark": { "url": "https://mcp.pyxmark.com/mcp" } } }

VS Code (GitHub Copilot): use the Install in VS Code button, or run MCP: Add Server from the Command Palette, choose HTTP and paste the URL. From a terminal:

code --add-mcp '{"name":"pyxmark","type":"http","url":"https://mcp.pyxmark.com/mcp"}'

Grok: at grok.com/connectors choose New Connector, then Custom, and paste the URL. On Grok Business and Enterprise a team admin adds it first. In Grok Build:

grok mcp add --transport http pyxmark https://mcp.pyxmark.com/mcp

Grok Bot: there's no settings form. Tell your bot "Add this MCP server: https://mcp.pyxmark.com/mcp". It confirms, and the tools work from your next message.

Gemini CLI

gemini mcp add --transport http -s user pyxmark https://mcp.pyxmark.com/mcp

Other clients: most read the standard block below, which is also this repo's .mcp.json (Claude Code, VS Code and Grok Build pick it up from a project root). Clients that only run local stdio servers can use npx -y mcp-remote https://mcp.pyxmark.com/mcp.

json
{ "mcpServers": { "pyxmark": { "type": "http", "url": "https://mcp.pyxmark.com/mcp" } } }

Check it works: ask "List the Pyxmark tools". You should see 7 read-only tools. Then ask "Is Microsoft Corporation on any sanctions list?" It should come back with no match.

AI agents setting this up for a user: follow llms-install.md.

Tools

Six tools are listed today, all read-only. A seventh, check_exclusions (SAM.gov federal exclusions), is added to the list once SAM.gov data has synced; until then each due_diligence_report includes a link to search SAM.gov yourself.

ToolWhat it does
due_diligence_reportOne report on a vendor: sanctions screen, SEC record and risk filings, domain age, first Wayback Machine snapshot and email records, ending in a clear, review or hold verdict with reasons
screen_sanctionsFuzzy-screens a name against OFAC SDN and Consolidated, UN, EU and UK lists. Optional birth date, nationality and country tell apart people with the same name. Optional address, email, phone, website, IDs and owners are matched against what the lists record, including sanctioned regions and the OFAC 50 percent rule
search_companyFinds which SEC-registered company a name, ticker or CIK refers to
company_profileThe SEC EDGAR record for one company: identity, address, three years of key financials and recent filings
domain_ageDomain registration date and registrar (RDAP, with a WHOIS fallback), its MX, SPF and DMARC records, and the date of its first Wayback Machine snapshot
state_registry_linkA link to the US state business registry search for a company

Try asking

  • "Run a due diligence report on Acme Corp, acme.com, Delaware."
  • "Is this supplier on any sanctions list?"
  • "Show me Tesla's last three years of revenue and recent 8-Ks."

Read this

Results are informational, not a compliance determination. Names are matched fuzzily, so check any potential match against the linked official entry before you act. Pyxmark isn't for consumer screening (credit, jobs, housing, insurance or tenancy).

Privacy: https://pyxmark.com/privacy · Terms: https://pyxmark.com/terms

UK Sanctions List data contains public sector information licensed under the Open Government Licence v3.0.

來源:README.md,提交 6cd5b43

工具

6

search_company

Search SEC companies

Look up which SEC-registered company a name, ticker or CIK refers to. Returns up to 10 candidates, each with its CIK, tickers and a match score, and nothing else. Use it to pick the right CIK when a name is ambiguous, then call company_profile with that CIK for the details.

輸入參數query必填

company_profile

SEC company profile

Full SEC EDGAR record for one company, given its CIK, ticker or name (best match): legal name, industry (SIC), state of incorporation, business address, 3 fiscal years of revenue, net income, total assets and cash, and its recent 10-K, 10-Q and 8-K filings with links. Use search_company first if you only have a partial or ambiguous name.

輸入參數ciknameticker

screen_sanctions

Screen sanctions lists

Fuzzy-screen a person or organisation name against OFAC SDN + Consolidated, UN, EU, and UK sanctions lists. Returns up to 15 scored matches with source links; if more match, the summary says so and suggests a more specific query. Optional dob/birth_year, nationality and country set aside same-name matches whose listed details differ (rules at https://mcp.pyxmark.com/#details). Optional address, email, phone, website, ids and owners are matched against the details the lists give (identifier matches, sanctioned regions, the 50 percent rule); the assessment field sums it up as hold / review / clear. Informational only, not a compliance determination. Results come from public government lists and filings, may be incomplete or out of date, and fuzzy name matches can be false positives or miss variants. Verify every potential match against the official source before acting.

輸入參數dobidsname必填emailphoneownersaddresscountrywebsitethresholdbirth_yearnationality另有 1 個

domain_age

Domain age and email records

Domain registration date, age, registrar (RDAP) and email-auth records (MX, SPF, DMARC), which are common fraud signals, plus first_archived: the date of the Wayback Machine's earliest snapshot (null if none; archive.status says unavailable if archive.org didn't answer). notes holds factual remarks, such as a first snapshot under 90 days old or a registration years older than the first snapshot; they are not flags.

輸入參數domain必填

due_diligence_report

Vendor due diligence report

One-call due-diligence report: SEC profile (if public), sanctions screen, federal exclusions, domain signals (registration age, email records, Wayback Machine first-seen date), and state registry link, with a red-flag summary, a verdict (clear / review / hold; rules at https://mcp.pyxmark.com/#verdict) and source links. An agent should not pay or onboard on 'hold', and should ask a person on 'review'. Informational only, not a compliance determination. Results come from public government lists and filings, may be incomplete or out of date, and fuzzy name matches can be false positives or miss variants. Verify every potential match against the official source before acting. Colorado vendors only (state CO or a Colorado address): address_density gives how many active Colorado companies list the vendor's address, from the Colorado Department of State's Business Entities in Colorado data (Public Domain), refreshed monthly. A building that also hosts a listed virtual mailbox service, an address shared by 1,000+ companies, or a registered agent's address used by hundreds of companies that almost none of them list as their principal address adds a worth-a-second-look line under info, never a red flag or a verdict change; other states are not covered.

輸入參數cikdobidsnameemailphonestatedomainownerstickeraddresscountry另有 4 個

版本歷史

1
  1. v0.1.0最新Oct 18, 2026

評分

已滿足適用檢查項的 90%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。