WhiteIntel-OS

<div align="center">

<img src="https://raw.githubusercontent.com/Hei33enberg/whiteintel-mcp-server/main/logo-mark-512.png" width="132" alt="WhiteIntel" />

# @whiteintel/mcp-server

**They trace names. We trace who really owns them.**

<!-- Cursor one-click install (anonymous remote endpoint, no key) -->
<a href="https://cursor.com/install-mcp?name=whiteintel&config=eyJ1cmwiOiJodHRwczovL3doaXRlaW50ZWwuZGV2L2FwaS9tY3AifQ%3D%3D"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/deeplink/mcp-install-dark.png"><img alt="Add whiteintel MCP server to Cursor" src="https://cursor.com/deeplink/mcp-install-light.png"></picture></a>

[![Add to Replit](https://replit.com/badge?caption=Add%20WhiteIntel%20to%20Replit)](https://replit.com/integrations?mcp=eyJkaXNwbGF5TmFtZSI6IldoaXRlSW50ZWwiLCJiYXNlVXJsIjoiaHR0cHM6Ly93aGl0ZWludGVsLmRldi9hcGkvbWNwIn0%3D)

The corporate-ownership & sanctions intelligence layer for AI agents — built for the agentic era. WhiteIntel turns public-registry and offshore-leak data into MCP-native intelligence primitives — **entity search, semantic discovery, ownership-path traversal, sanctions screening, offshore-exposure detection, and fully cited dossiers** — so any AI agent can investigate a company, trace its ultimate beneficial owner, and flag risk in one conversation. Your agent isn't querying a database — it's conducting an investigation.

**[Read the Methodology →](https://whiteintel.dev/methodology)**

[![npm](https://img.shields.io/npm/v/@whiteintel/mcp-server.svg)](https://www.npmjs.com/package/@whiteintel/mcp-server)
[![CI](https://github.com/Hei33enberg/whiteintel-mcp-server/actions/workflows/ci.yml/badge.svg)](https://github.com/Hei33enberg/whiteintel-mcp-server/actions/workflows/ci.yml)
[![License: MIT](https://img.shields.io/badge/License-MIT-2f7d4f.svg)](LICENSE)
[![MCP](https://img.shields.io/badge/MCP-compatible-7c3aed.svg)](https://modelcontextprotocol.io)
[![Tools](https://img.shields.io/badge/tools-23%20live-00ff7f)](https://whiteintel.dev/developers)
[![Corpus](https://img.shields.io/badge/corpus-130.7M%20entities-2f7d4f)](https://whiteintel.dev/coverage)
[![Sources](https://img.shields.io/badge/sources-31%20fused-2f7d4f)](https://whiteintel.dev/sources)
[![whiteintel.dev](https://img.shields.io/badge/site-whiteintel.dev-5af082)](https://whiteintel.dev)

</div>

---

## What's live today

**One command, any MCP agent:**

```bash
npx -y @whiteintel/mcp-server
```

…starts an MCP server with **23 tools** that give any AI agent — Claude Desktop, Cursor, Cline, Windsurf, or your own runtime — **full corporate-ownership intelligence**: search by name or meaning, trace ownership chains to the UBO, screen sanctions across OFAC/EU/UN/UK, detect offshore layering, pull fully cited dossiers with financials and asset layers, and even purchase deeper intelligence through agent-initiated Stripe checkout. Every claim cited to its source, every edge traced to a registry record.

| Tool | What it does | Category |
|---|---|---|
| `search_entities` | Search the corpus (companies + people) by name → entity ids | 🔍 Discovery |
| `semantic_search` | Meaning-based search (BGE-M3 vector ANN) — find entities by profile, not keywords | 🔍 Discovery |
| `find_similar` | "More like this" — nearest entities to a known id, for peer discovery and clustering | 🔍 Discovery |
| `search_companies` | Free-text company-name search → registration number | 🔍 Discovery |
| `lookup_company` | UK company by Companies House number → record + ownership graph | 📋 Lookup |
| `lookup_by_identifier` | Resolve by strong id — LEI, OFAC/EU/UN/UK sanctions id, UEN, SEC CIK, KRS, GB-COH, SIREN, Brazil RFB CNPJ | 📋 Lookup |
| `get_entity` | Full record for one entity + its direct relationships | 📋 Lookup |
| `resolve` | Batch-resolve names or `scheme:value` ids → canonical entity ids + confidence | 📋 Lookup |
| `list_jurisdictions` | Coverage map per country — tier, scope and record depth we hold | 🗺️ Coverage |
| `list_asset_coverage` | Coverage map per asset class — aircraft, vessels, real estate | 🗺️ Coverage |
| `get_dossier` | Structured, fully-cited dossier: identity, ownership/UBO chain, risk, provenance | 📊 Intelligence |
| `trace_ownership_path` | Walk ownership upward to the ultimate beneficial owner | 📊 Intelligence |
| `graph_neighbourhood` | Every edge within N hops of an entity, both directions — hard-capped, says when the view is partial | 🕸️ Graph |
| `graph_path` | How two entities are connected — **bounded, not exhaustive**: `found: false` is not proof of no link | 🕸️ Graph |
| `get_sanctions` | Sanctions exposure (OFAC/EU/UN/UK) for entity and its resolved cluster siblings | 🛡️ Risk |
| `check_offshore_exposure` | Flag sanctioned + secrecy-jurisdiction hops in the ownership chain | 🛡️ Risk |
| `get_company_details` | UK register detail: address, status, SIC, filings, charges, former names | 📋 Lookup |
| `get_financials` | Filed UK financials YoY (turnover, profit, net assets, cash, employees) | 📊 Intelligence |
| `get_pulse` | Live corpus activity feed — recent ownership/control changes, sourced | 📊 Intelligence |
| `get_pricing` | Full price list + machine-readable purchase flow (static, no network call) | 💳 Commerce |
| `buy_dossier` | Start a one-off dossier purchase via guest Stripe Checkout → `checkout_url` | 💳 Commerce |
| `get_payment_link` | Permanent, reusable Stripe payment links — the artefact you hand to a human | 💳 Commerce |
| `claim_dossier` | Redeem a paid session for a 90-day access token (idempotent) | 💳 Commerce |

**23 callable tools** — 4 Discovery + 4 Lookup + 2 Coverage + 4 Intelligence + 2 Graph + 2 Risk + 3 Commerce + 1 Feed + 1 Pricing. All read-only except `buy_dossier` (opens Stripe — money moves only when a human completes it) and `claim_dossier` (redeems an already-paid session). Ids flow between tools: search → get_dossier → trace_ownership_path → get_sanctions.

## Quickstart (60 seconds)

> **Distribution:** the package is on npm — `npx -y @whiteintel/mcp-server` Just Works.

**1. Run it.** No key needed — works anonymously on the free tier:

```bash
npx -y @whiteintel/mcp-server
```

**2a. Claude Desktop / Cursor** — add to your MCP config:

```json
{
  "mcpServers": {
    "whiteintel": {
      "command": "npx",
      "args": ["-y", "@whiteintel/mcp-server"],
      "env": { "WHITEINTEL_API_KEY": "wi_…" }
    }
  }
}
```

**2b. Claude Code CLI:**

```bash
claude mcp add whiteintel -- npx -y @whiteintel/mcp-server
```

**2c. One-click:** add WhiteIntel to your editor at **[whiteintel.dev/developers](https://whiteintel.dev/developers)**.

The `env` block is optional — omit it to use the anonymous free tier. Set `WHITEINTEL_API_KEY=wi_…` to authenticate as your plan and lift limits.

### Try it

> **You:** "Who ultimately owns Revolut? Check sanctions on the whole chain."
>
> **Agent:** calls `search_entities({ query: "Revolut" })` → `trace_ownership_path({ id })` → `get_sanctions({ id })` for each hop → a fully cited ownership chain with sanctions screening at every level. Done.

> **You:** "Find companies similar to Wirecard and check for offshore exposure."
>
> **Agent:** calls `find_similar({ entity_id })` → `check_offshore_exposure({ id })` → flagged secrecy-jurisdiction hops and sanctioned intermediaries across the peer set.

## Agents can pay

An agent can buy the paid depth of a dossier end-to-end, **no WhiteIntel account needed:**

1. **`buy_dossier`** `{ tier: "standard" | "premium", entity_id }` → returns a Stripe `checkout_url`. Standard (€39) unlocks the full multi-hop UBO chain + financials; Premium (€99) adds aircraft, sanctioned vessels and property; on HIGH-risk or sanctioned subjects it additionally runs a live adverse-media scan (that scan is gated — it does not run on lower-risk entities).
2. A **human completes payment** at the `checkout_url` — Stripe collects an email and redirects back.
3. **`claim_dossier`** `{ session_id }` → `{ token, entity_id, tier }`. Idempotent; returns `402` until paid.
4. **`get_dossier`** `{ id, token }` → the unlocked, fully-cited dossier JSON. Tokens valid 90 days.

**No human at the keyboard right now?** Step 1 is the wrong tool: a `checkout_url` is single-use and expires in 24 hours, so it is dead by the time someone reads your report. Call **`get_payment_link`** instead — it returns permanent Stripe links you can paste into a document, a ticket or a message, and append `?client_reference_id=<entity uuid>` to bind one to a specific company. Measured 2026-08-11: those links cover the **Standard** tier only (single / 5 / 25); Premium still goes through `buy_dossier`.

Check **`get_pricing`** first — it returns the full price list plus this flow in machine-readable form.

## The corpus

**~130.7M entities across 31 fused registries** — every claim cited, every edge traced.

*Measured 2026-08-16 from [whiteintel.dev/api/public/stats](https://whiteintel.dev/api/public/stats) (`entities` = 130,735,728, itself a planner estimate). That endpoint rebuilds its source map by counting registries, so it is always the authority — and a new source shows up there without anyone editing this file.*

| Source | What | Coverage |
|---|---|---|
| **OpenOwnership** | UK PSCs (Persons with Significant Control) | 🇬🇧 Full |
| **GLEIF** | Global LEI registry + parent/child ownership relations — nightly refresh scheduled | 🌍 Global |
| **ACRA Singapore** | Singapore company registry | 🇸🇬 Full |
| **ICIJ Offshore Leaks** | Panama Papers, Paradise Papers, Pandora Papers | 🌍 Offshore |
| **SEC EDGAR** | US securities filings + beneficial ownership | 🇺🇸 Full |
| **UK Companies House** | Full UK register — bulk + live filing stream | 🇬🇧 Full |
| **FAA** | US aircraft registry (tail numbers → owners) | 🇺🇸 Full |
| **France SIRENE** | French company register | 🇫🇷 Full |
| **Brazil RFB** | Brazilian federal revenue — CNPJ register | 🇧🇷 Full |
| **Cyprus DRCOR** | Cypriot register — **officer