Pyxmark

Measured conclusion: Alive, not deep-tested. L2 outcome: not_attempted.

Vendor checks: sanctions lists, SEC filings, domain age and a due-diligence report with sources.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Pyxmark": {
      "url": "https://mcp.pyxmark.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (6)

• search_company read-only

  Look up which SEC-registered company a name, ticker or CIK refers to. Returns up to 10 candidates, each with its CIK, tickers and a match score, and nothing else. Use it to pick the right CIK when a name is ambiguous, then call company_profile with that CIK for the details.

  Parameters:

  • query (required) — string — Company name, ticker, or CIK

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• company_profile read-only

  Full SEC EDGAR record for one company, given its CIK, ticker or name (best match): legal name, industry (SIC), state of incorporation, business address, 3 fiscal years of revenue, net income, total assets and cash, and its recent 10-K, 10-Q and 8-K filings with links. Use search_company first if you only have a partial or ambiguous name.

  Parameters:

  • cik — string — SEC CIK number
  • name — string — Company name (fuzzy)
  • ticker — string — Stock ticker

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• screen_sanctions read-only

  Fuzzy-screen a person or organisation name against OFAC SDN + Consolidated, UN, EU, and UK sanctions lists. Returns up to 15 scored matches with source links; if more match, the summary says so and suggests a more specific query. Optional dob/birth_year, nationality and country set aside same-name matches whose listed details differ (rules at https://mcp.pyxmark.com/#details). Optional address, email, phone, website, ids and owners are matched against the details the lists give (identifier matches, sanctioned regions, the 50 percent rule); the assessment field sums it up as hold / review / clear. Informational only, not a compliance determination. Results come from public government lists and filings, may be incomplete or out of date, and fuzzy name matches can be false positives or miss variants. Verify every potential match against the official source before acting.

  Parameters:

  • name (required) — string — Person or organisation name
  • dob — string — Optional: date of birth (YYYY-MM-DD) of the person, to tell them apart from others with the same name
  • ids — array — Optional: identifiers to match against the lists: company registration or tax numbers, passport or national ID numbers, vessel IMO numbers, SWIFT/BIC codes, crypto addresses
  • email — string — Optional: contact email, matched against emails and domains the lists give
  • phone — string — Optional: phone number, matched on its last 9 digits against phones the lists give
  • owners — array — Optional: owners and their share (percent). Each is screened; listed owners holding 50% or more in total make the company blocked under the OFAC 50 percent rule
  • address — string — Optional: street address or city (free text). Flags addresses in comprehensively sanctioned regions: Crimea, the so-called DNR/LNR, Iran, North Korea, Cuba (Syria is flagged for review)
  • country — string — Optional: country where the person lives or the organisation is based
  • website — string — Optional: website or domain, matched against websites the lists give
  • threshold — number — Minimum match score 0-1 (default 0.88)
  • birth_year — number — Optional: birth year, if the full date isn't known
  • nationality — string — Optional: the person's nationality (country name or ISO code)
  • subject_type — string — Optional: whether the name is a company or a person. Defaults to company when the name has a legal suffix such as Inc or LLC (or, in a report, when it is an SEC-registered company); then person, vessel and aircraft entries must match almost exactly.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• domain_age read-only

  Domain registration date, age, registrar (RDAP) and email-auth records (MX, SPF, DMARC), which are common fraud signals, plus first_archived: the date of the Wayback Machine's earliest snapshot (null if none; archive.status says unavailable if archive.org didn't answer). notes holds factual remarks, such as a first snapshot under 90 days old or a registration years older than the first snapshot; they are not flags.

  Parameters:

  • domain (required) — string — Domain, URL, or email address

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

• state_registry_link read-only

  Official Secretary of State business-search link for a US state, to verify a private company's status, formation date, and registered agent.

  Parameters:

  • state (required) — string — Two-letter code or state name
  • company — string — Company name (optional)

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• due_diligence_report read-only

  One-call due-diligence report: SEC profile (if public), sanctions screen, federal exclusions, domain signals (registration age, email records, Wayback Machine first-seen date), and state registry link, with a red-flag summary, a verdict (clear / review / hold; rules at https://mcp.pyxmark.com/#verdict) and source links. An agent should not pay or onboard on 'hold', and should ask a person on 'review'. Informational only, not a compliance determination. Results come from public government lists and filings, may be incomplete or out of date, and fuzzy name matches can be false positives or miss variants. Verify every potential match against the official source before acting. Colorado vendors only (state CO or a Colorado address): address_density gives how many active Colorado companies list the vendor's address, from the Colorado Department of State's Business Entities in Colorado data (Public Domain), refreshed monthly. A building that also hosts a listed virtual mailbox service, an address shared by 1,000+ companies, or a registered agent's address used by hundreds of companies that almost none of them list as their principal address adds a worth-a-second-look line under info, never a red flag or a verdict change; other states are not covered.

  Parameters:

  • cik — string — SEC CIK
  • dob — string — Optional: date of birth (YYYY-MM-DD) of the person, to tell them apart from others with the same name
  • ids — array — Optional: identifiers to match against the lists: company registration or tax numbers, passport or national ID numbers, vessel IMO numbers, SWIFT/BIC codes, crypto addresses
  • name — string — Company or person name
  • email — string — Optional: contact email, matched against emails and domains the lists give
  • phone — string — Optional: phone number, matched on its last 9 digits against phones the lists give
  • state — string — US state of incorporation/registration
  • domain — string — Company website or email domain
  • owners — array — Optional: owners and their share (percent). Each is screened; listed owners holding 50% or more in total make the company blocked under the OFAC 50 percent rule
  • ticker — string — Ticker
  • address — string — Optional: street address or city (free text). Flags addresses in comprehensively sanctioned regions: Crimea, the so-called DNR/LNR, Iran, North Korea, Cuba (Syria is flagged for review)
  • country — string — Optional: country where the person lives or the organisation is based
  • website — string — Optional: website or domain, matched against websites the lists give
  • birth_year — number — Optional: birth year, if the full date isn't known
  • nationality — string — Optional: the person's nationality (country name or ISO code)
  • subject_type — string — Optional: whether the name is a company or a person. Defaults to company when the name has a legal suffix such as Inc or LLC (or, in a report, when it is an SEC-registered company); then person, vessel and aircraft entries must match almost exactly.

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.