Nordic Registry Mcp Server

Nordic Registry MCP Server

[CI] [lint] [License] [CodeScene Average Code Health]

What is this?

Verify company legitimacy across Norway, Denmark, Finland, and Sweden in seconds. Check bankruptcy status, board members, signing authority, and financial data from official registries, without switching between four government websites.

23 tools wrapping the public APIs of Brønnøysundregistrene, CVR, PRH, and Bolagsverket. Works with Claude Desktop, Claude Code, Cursor, and any MCP client.

What it does:

• Search companies by name across four Nordic countries
• Get company details: status, employees, industry, addresses
• Look up board members, CEOs, auditors, and roles
• Check who can legally sign on behalf of a company
• Access Swedish annual reports (årsredovisningar)
• Batch lookups for validating lists of company IDs

What it doesn't do:

• Modify registry data (read-only)
• Store or cache personal data beyond the session
• Require payment (all underlying APIs are free)

Supported Countries

All APIs are free. Norway, Denmark, and Finland require no authentication. Sweden uses the värdefulla datamängder API which requires OAuth2 credentials (free registration).

What Can You Do?

Once connected, just ask your AI:

Use Cases

Case Processing: Verify Applicant Companies

When processing permit applications, license renewals, or grant requests, verify the applying company exists and is in good standing.

You: "A company applied for an environmental permit. Org number 923609016.      Check if they're active and who can sign on their behalf."
AI: Let me verify the company and check signing authority.→ norway_get_company("923609016")→ norway_get_signature_rights("923609016")
Result: Equinor ASA - Active since 1972, registered for VAT, 21,200 employees.Authorized signatories: [Name 1] (CEO), [Name 2] + [Name 3] (joint signature).The application signature matches an authorized signatory.

Procurement: Validate Vendors Before Contract Award

Before awarding a municipal contract, verify that bidding companies are legitimate and not bankrupt.

You: "We received bids from three Danish companies for the IT contract.      CVR numbers: 10150817, 25063783, 37553472. Are they all legitimate?"
AI: I'll verify each company's status.→ denmark_get_company("10150817")→ denmark_get_company("25063783")→ denmark_get_company("37553472")
Result:- 10150817: Novo Nordisk A/S - Active, 47,000+ employees ✓- 25063783: Mærsk A/S - Active, established company ✓- 37553472: [Company name] - BANKRUPT ✗
Recommendation: Exclude 37553472 from consideration.

Grant Administration: Verify Non-Profit Status

When processing grant applications from voluntary organizations, verify their registration in Frivillighetsregisteret.

You: "An organization applied for cultural funding.      They claim to be a registered non-profit. Org number 971274808."
AI: Let me check their voluntary organization status.→ norway_get_company("971274808")
Result: Norges Røde Kors - Registered in Frivillighetsregisteret since 2009.Organization form: FLI (Forening/lag/innretning).Activity: Humanitarian aid and emergency response.Confirmed as eligible non-profit organization.

Regulatory Oversight: Monitor Industry Changes

Track new company registrations or status changes in regulated sectors.

You: "I need to monitor new companies in the financial sector.      What relevant registrations happened this week?"
AI: Let me check recent registry updates.→ norway_get_updates(since="2024-01-08T00:00:00Z", size=100)
Result: 12 new registrations in financial services sector:- 3 new AS companies (aksjeselskap)- 2 new NUF branches of foreign financial institutions- 7 updates to existing financial companies[List with org numbers for follow-up]

Cross-Border Coordination: Track Multinational Presence

When coordinating with other Nordic authorities, identify a company's presence across jurisdictions.

You: "We're investigating a company that may operate across Nordic countries.      Check if Volvo has registered entities in Norway and Denmark."
AI: Let me search both registries.→ norway_search_companies("Volvo")→ denmark_search_companies("Volvo")
Result: Found registered entities:- Norway: Volvo Norge AS (org 923609016) - 450 employees, automotive- Denmark: Volvo Danmark A/S (CVR 12345678) - 320 employeesBoth are subsidiaries of Swedish parent company.

Data Quality: Validate Registry Submissions

When receiving bulk data submissions referencing company identifiers, validate them against official registries.

You: "A ministry submitted a list of 50 org numbers for a new subsidy program.      Validate which ones are current and active."
AI: I'll validate them against Brønnøysundregistrene.→ norway_batch_get_companies([list of 50 org numbers])
Result:- 47 companies: Active and valid ✓- 2 companies: Marked as bankrupt - may need review- 1 org number: Not found in registry - possibly incorrect
Flagged entries exported for manual review.

Statistics: Company Demographics by Municipality

Support policy analysis by examining business composition in specific areas.

You: "How many AS companies are registered in Oslo municipality?"
AI: Let me search with municipality filter.→ norway_search_companies(query="*", org_form="AS", municipality="0301")
Result: Found 45,231 AS companies registered in Oslo (municipality 0301).Paginated results available for detailed analysis.

Due Diligence: Verify Board Composition

Before approving state aid or contracts above threshold, verify company governance.

You: "Check the board composition of company 914778271.      We need this for the state aid application review."
AI: Let me retrieve their roles.→ norway_get_company("914778271")→ norway_get_roles("914778271")
Result: [Company name] - AS registered 2015Board members:- [Name 1] - Styreleder (Chair)- [Name 2] - Styremedlem- [Name 3] - Styremedlem- [Name 4] - Daglig leder (CEO)Auditor: [Audit firm name]

Document Retrieval: Access Swedish Annual Reports

When reviewing Swedish companies for cross-border matters, check available financial documentation.

You: "A Swedish company applied for recognition in Norway.      What financial reports are available for org 5560125790?"
AI: Let me check Bolagsverket for filed documents.→ sweden_get_company("5560125790")→ sweden_get_document_list("5560125790")
Result: [Company name] - Active Swedish ABAvailable årsredovisningar: 8 annual reports (2016-2023)Most recent: Financial year ending 2023-06-30, filed 2023-08-15.

Quick Start

Option 1: Download Binary

Go to Releases and download for your platform.

Option 2: Build from Source

git clone https://github.com/olgasafonova/nordic-registry-mcp-server.gitcd nordic-registry-mcp-servergo build .

Requires Go 1.24+

Setup

Cursor Marketplace

/add-plugin nordic-registry

Claude Code CLI

claude mcp add nordic-registry ./nordic-registry-mcp-server

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{  "mcpServers": {    "nordic-registry": {      "command": "/path/to/nordic-registry-mcp-server"    }  }}

Restart Claude Desktop after changes.

Not working? Tell us what made it hard — even one sentence helps.

All Tools

Norway (Brønnøysundregistrene)

Denmark (CVR)

Note: Danish search returns only one result. Large companies often have multiple entities. Try variations like "[Company] Denmark", "[Company] A/S", or pre-merger names if the first result seems wrong.

Finland (PRH)

Note: Common names like "Nokia" return 900+ results. Use exact legal name ("Nokia Oyj"), filter by company_form (OY/OYJ), or filter by location to narrow results.

Sweden (Bolagsverket)

Requires OAuth2 credentials. Set BOLAGSVERKET_CLIENT_ID and BOLAGSVERKET_CLIENT_SECRET environment variables.

Note: Sweden has no name search in this API - you must have the org number.

Example Prompts

Company Search

• "Find Norwegian companies named Telenor"
• "Search for AS companies in Oslo"
• "Find Danish companies named Carlsberg"
• "Look up Finnish company Kone"
• "Find voluntary organizations named Røde Kors"

Company Details

• "Get details for Norwegian org 923609016"
• "Look up CVR 10150817"
• "Get Finnish company 0112038-9"

Board & Roles (Norway only)

• "Who is on the board of 923609016?"
• "Find the CEO of Equinor"
• "List all directors for org 914778271"

Signature Rights (Norway only)

• "Who can sign for company 923609016?"
• "Get signature rights for Equinor"
• "Who has prokura for 914778271?"

Branch Offices

• "What branches does 923609016 have?"
• "Search for branch offices named Equinor"
• "List production units for CVR 10150817"

Registry Updates (Norway only)

• "What companies changed since yesterday?"
• "Get recent registry updates"
• "What branch offices changed recently?"

Batch Operations (Norway only)

• "Look up these companies: 923609016, 914778271, 985399077"
• "Validate these org numbers from my spreadsheet"
• "Get details for multiple Norwegian companies at once"

Reference Data (Norway only)

• "List all Norwegian municipalities"
• "What is Oslo's municipality code?"
• "What does AS mean?"
• "List organization form codes"

Phone & P-Number Lookup (Denmark)

• "Find company with phone 33121212"
• "Look up production unit P-number 1234567890"

Sweden Lookups

• "Get Swedish company 5560125790"
• "Look up Volvo's organization number in Sweden"
• "What annual reports are available for 5560125790?"
• "List årsredovisningar for Swedish company X"
• "Is the Swedish API working?"

Sweden Setup

Sweden's Bolagsverket API requires OAuth2 authentication (free).

1. Register for the värdefulla datamängder API (submit customer registration form)
2. Access the Developer Portal to get your OAuth2 credentials
3. Set environment variables:
   bash

   export BOLAGSVERKET_CLIENT_ID="your-client-id"export BOLAGSVERKET_CLIENT_SECRET="your-client-secret"

The server will log whether Sweden credentials are configured on startup. If not configured, Sweden tools are simply not registered.

HTTP Mode

For remote access or integration with other tools:

# Start HTTP server./nordic-registry-mcp-server -http :8080
# With authentication./nordic-registry-mcp-server -http :8080 -token "your-secret-token"
# Full production setup./nordic-registry-mcp-server -http :8080 \  -token "your-secret-token" \  -origins "https://app.example.com" \  -rate-limit 60 \  -trusted-proxies "10.0.0.0/8"

Security Features

• Bearer Token Auth: Optional authentication via -token flag or MCP_AUTH_TOKEN env var. Binding to a non-loopback address without a token is refused at startup; loopback binds (127.0.0.1, localhost) still run token-free for local development.
• CORS Protection: Restrict origins via -origins flag (comma-separated)
• Rate Limiting: Per-IP rate limiting via -rate-limit (requests per minute)
• Trusted Proxies: Honor X-Forwarded-For from trusted networks via -trusted-proxies
• Request Size Limits: 2MB default, 10MB max request body

Endpoints

Every endpoint except the /health and /ready probes shares the same auth path: when a token is set, /, /metrics, /status, and /tools all require it. The probes stay unauthenticated so orchestrators can reach them.

Architecture

nordic-registry-mcp-server/├── main.go                 # Entry point, HTTP/stdio transport, security middleware├── internal/│   ├── base/              # Shared HTTP client with resilience│   │   └── client.go      # Connection pooling, retries, rate limiting│   ├── errors/            # Shared error types│   │   └── errors.go      # NotFoundError, ValidationError│   ├── infra/             # Resilience infrastructure│   │   ├── cache.go       # LRU cache with TTL│   │   └── resilience.go  # Circuit breaker, request deduplication│   ├── norway/            # Norwegian registry (Brønnøysundregistrene)│   ├── denmark/           # Danish registry (CVR)│   ├── finland/           # Finnish registry (PRH)│   └── sweden/            # Swedish registry (Bolagsverket, OAuth2)├── tools/│   ├── definitions.go     # Tool specifications (23 tools)│   ├── handlers.go        # MCP tool registration│   └── registry.go        # Tool metadata types├── metrics/               # Prometheus metrics (namespace: nordic_registry_mcp)└── tracing/               # OpenTelemetry tracing

Resilience Features

• LRU Cache: TTL varies by endpoint type (searches: 2min, details: 5-15min, documents: 30min, reference data: 24h)
• Circuit Breaker: Opens after 5 consecutive failures, 30s recovery timeout
• Request Deduplication: Identical concurrent requests share a single API call
• Rate Limiting: Semaphore-based concurrency control (15 concurrent requests)
• Retry with Backoff: Exponential backoff with jitter on transient failures
• Response Size Limits: 10MB for API responses, 100MB for document downloads
• Token Efficiency: Paginated responses (default 20 results) to minimize LLM context usage

Documentation

Development

# Buildgo build .
# Testgo test ./...
# Lint (requires golangci-lint)golangci-lint run

Future Vision: Integration with Public 360°

This server is designed to work alongside public360-mcp-server, which provides AI access to Public 360° document and case management systems used by Nordic public sector organizations.

The integration scenario:

A caseworker receives a permit application from a company. Today's workflow:

1. Open the case in Public 360°
2. Manually look up the company in Brønnøysundregistrene
3. Verify the company is active and not bankrupt
4. Check if the signer has authority
5. Copy relevant details back into the case

With both MCP servers connected:

You: "I received permit application case 2024/12345.      The applicant is org 923609016. Verify the company      and check if the signature is valid."
AI: [Calls public360: sif_get_cases to get case details]    [Calls nordic-registry: norway_get_company to verify company]    [Calls nordic-registry: norway_get_signature_rights to check authority]
Result: Case 2024/12345 - Environmental permit application        Applicant: Equinor ASA (923609016) - ACTIVE        Signed by: [Name] - Authorized signatory ✓
        Recommendation: Signature is valid. Company is in good standing.

Planned integration points:

This turns two separate data sources into a connected workflow where the AI can verify external data and update internal systems in one conversation.

Enhanced Registry Data (Future)

The current implementation uses free, open APIs. More comprehensive data is available through premium services:

Sweden (Bolagsverket)

The free värdefulla datamängder API we use today provides company basics and annual reports. Bolagsverket offers additional e-services for authorized signatories and company mortgages. Third-party aggregators like Roaring.io provide enriched datasets combining multiple sources.

Finland (PRH)

The free PRH Open Data API provides basic company information updated daily. The Virre Information Service offers board member details, signatory information, and document purchases. Contract clients get reduced fees for high-volume access.

Why this matters:

Norway already provides board members, roles, and signature authority through the free Brønnøysundregistrene API. Adding premium Sweden and Finland data would give consistent coverage across all four countries for:

• Verifying who can sign contracts
• Checking board composition for due diligence
• Accessing complete financial documentation

More MCP Servers

Check out my other MCP servers:

License

Apache License 2.0

Credits

• Built with Go MCP SDK
• Data from Brønnøysundregistrene, CVR, PRH, Bolagsverket