prometiam-risk-mcp

Model Context Protocol server for the Prometiam company data API — official company-registry data for Spain, France, the UK, Ireland, Poland, Norway, Finland, Sweden, Croatia, Belgium, Denmark, Estonia, Slovakia, Switzerland, Latvia, Cyprus, Romania, Lithuania, Canada, Australia, Japan, Israel, Singapore, Colombia, Taiwan, Czech Republic, Germany, Brazil and the United States (state registers, SEC EDGAR, GLEIF), plus directors, corporate events, insolvency, VAT/LEI lookup, sanctions screening, annual financial statements, public-procurement awards (Spain, France, the UK, Ireland, Poland, Norway) and public-buyer risk scores (Spain, France), as native MCP tools for Claude Desktop, Cursor, Continue, Cline, and any MCP-compatible client.

What you get

35 MCP tools that wrap the Prometiam Risk API:

Source: Spain (BORME), France (BODACC), United Kingdom (Companies House), Ireland (CRO), Poland (KRS), Norway (Brønnøysundregistrene / Enhetsregisteret, NLOD), Finland (Kaupparekisteri), Sweden (Bolagsverket), Croatia (Sudski registar), Belgium (KBO/BCE), Denmark (CVR), Estonia (e-Business Register), Slovakia (RPO), Switzerland (Zefix), Latvia (Register of Enterprises), Cyprus (DRCOR), Romania (ONRC), Lithuania (JAR), Canada (Corporations Canada), Australia (ASIC and the ABR), Japan (National Tax Agency), Israel (Corporations Authority), Brazil (CNPJ), Colombia (RUES), Singapore (ACRA), Taiwan (GCIS), the Czech Republic (public register of the Ministry of Justice, and RES), Germany (LEI-registered entities only, GLEIF), and in the United States the New York, Colorado, Connecticut, Pennsylvania and Florida state registers, SEC EDGAR and GLEIF — 33M+ companies. Daily updates for Spain, France, Ireland, Poland and Norway, monthly bulk plus daily delta for the UK, every working day for Finland, Sweden, Belgium, Denmark, Croatia, Estonia, Slovakia, Switzerland, Latvia, Lithuania, Canada, Japan, Israel, Colombia, Taiwan and the Czech Republic, weekly for Australia and the United States, and monthly for Cyprus, Romania, Singapore and Brazil. EU data residency.

Officer/director data is held for Spain, France, the UK and Norway. Ireland and Poland are company-level for now. Ireland, Poland and Norway have register-change events only, from 14 Oct 2026 (no gazette). Finland, Sweden, Belgium, Croatia, Denmark, Estonia, Slovakia, Switzerland, Latvia, Cyprus, Romania, Lithuania, Canada, Australia, Japan, Israel, Singapore, Colombia, Taiwan, Czech Republic, Germany, Brazil and the United States are company records only, with register-change events (name, status, legal form and registered address; share capital for Croatia; dated when the change first appears in the register data (for the United States, the weekly read of the registers that first sees it), not gazette notices, none before 2026-09-30) and monitoring, but no officers and no registry-compliance signal. Corporate insolvency notices are linked by business ID (Finland), organisationsnummer (Sweden), MBS (Croatia), CVR number (Denmark) and UID (Switzerland, where the SHAB notice names the debtor's UID): Swedish notices are Bolagsverket's procedure data (konkurs, företagsrekonstruktion, ackordsförhandling), updated weekly, with no court, case number or link; Croatian notices are court decisions with court and case number where the register states them, only for companies still on the register; Danish notices come from CVR credit information (konkurs and tvangsakkord): one notice per proceeding, dated by the decision that opened it, with the latest stage of the proceeding, with no court or case number. Belgium, Estonia and Slovakia have no insolvency notices (their bankruptcy shows in the company status and in their register-change events). Sole traders (enskild näringsverksamhet, trgovac pojedinac), enterprises of natural persons (eenmanszaak / entreprise individuelle), sole proprietorships (enkeltmandsvirksomhed) and estates are never served; Denmark has no share capital, and its status includes the register's bankruptcy state. Switzerland, Latvia and Cyprus have no activity code (Latvia, Cyprus, Romania, Lithuania, Canada, Australia, Japan, Israel, Singapore, Colombia, Taiwan, Czech Republic and Brazil also have no insolvency notices; Latvian individual merchants, Cypriot trade names and partnerships and Romanian natural persons and sole traders are never served; Cyprus has no VAT number; Romania has no share capital and its VAT number is built from the CUI by rule), and its sole proprietorships and other natural persons are never served. Every company object carries vat_number and vat_number_source (published by the register, or built from the identifier by rule where the registration is not confirmed; null for the UK, Ireland, Slovakia, Cyprus, the United States, Canada, Japan, Israel, Brazil, Colombia and Singapore). United States (country=US): company records from the business registers of New York, Colorado, Connecticut, Pennsylvania and Florida (state open data and public records) plus SEC filers (EDGAR) and LEI holders (GLEIF) from every state, Delaware included, as one record per state registration (NY-4424185, CIK-0000320193, LEI-…); New York and Pennsylvania active entities only; updated weekly; no officers and no registry-compliance signal, with register-change events (dated by the weekly read) and monitoring; no VAT number; US insolvency notices are not linked to the company records; sole proprietorships never served; not every US company. US sources: New York Department of State, Colorado Secretary of State, Connecticut Secretary of the State, Pennsylvania Department of State (open data), Florida Department of State, Division of Corporations (public records), SEC EDGAR, GLEIF (CC0). Contains CVR data (Erhvervsstyrelsen), CC BY 4.0. Source: Zefix, Federal Office of Justice, Federal Commercial Registry Office (open use, source required); restructured by Prometiam, not a certified register extract. Contains data from the Register of Enterprises of the Republic of Latvia and the State Revenue Service (CC0). Contains data from the Department of the Registrar of Companies and Intellectual Property (DRCOR), Republic of Cyprus, via data.gov.cy, CC BY 4.0. Contains data from the National Trade Register Office (ONRC), CC BY 4.0. Lithuania: Company records from the Register of Legal Entities (JAR): legal name, legal form, status, registered address, identifiers and dates; no officers or registry-compliance signal; register-change events (name, status, legal form and registered address, dated when the change first appears in the register data, none before the first load) and monitoring are available. Updated each working day. Company status includes liquidation, bankruptcy and restructuring; there are no insolvency notices. Activity codes follow NACE Rev. 2.1 (EVRK 2.1, class level; the 6-digit code is in registry_details). Share capital is held for UAB and AB only. VAT numbers come from the State Tax Inspectorate (VMI) list. Sole proprietorships, partnerships (KUB, TUB), branches, state enterprises and non-commercial bodies are never served. Credit: Contains data from the Register of Legal Entities (JAR), Registrų centras, the State Data Agency (Statistics Lithuania) and the State Tax Inspectorate (VMI), CC BY 4.0. Adapted by Prometiam. Canada: Company records from Corporations Canada (Innovation, Science and Economic Development Canada): legal name, legal form, status, registered address, identifiers and dates; no officers or registry-compliance signal; register-change events (name, status, legal form and registered address, dated when the change first appears in the register data, none before the first load) and monitoring are available. Updated each working day. Federal corporations only (Canada Business Corporations Act, Canada Cooperatives Act and the repealed Canada Corporations Act Part I and Cooperative Associations Act); provincial and territorial corporations, not-for-profit corporations and boards of trade are not in the register. There is no insolvency, liquidation or bankruptcy status (that is the Office of the Superintendent of Bankruptcy and the courts), no activity code, share capital or VAT number. The Business Number is searchable with business_number=, and a corporation's other names are in registry_details. Credit: Contains information licensed under the Open Government Licence – Canada (Corporations Canada, Innovation, Science and Economic Development Canada). Adapted by Prometiam. Australia: Company records from the Australian Securities and Investments Commission (ASIC) and the Australian Business Register (ABR): legal name, legal form, status, registered address, identifiers and dates; no officers or registry-compliance signal; register-change events (name, status, legal form and registered address, dated when the change first appears in the register data, none before the first load) and monitoring are available. Updated weekly. Proprietary, public and foreign companies (ACN and ARBN) only; associations, cooperatives, other bodies, individuals and sole traders are never served. The register gives the state and the postcode, not a street address. ASIC does not separate liquidation from administration, so external administration shows as in_administration and there is no in_liquidation status; there are no insolvency notices. No activity code or share capital. The VAT number is the ABN when the ABN is active and registered for GST; an ABN is searchable with abn= and a GST-registered one with vat=. Data are licensed CC BY 3.0 AU (no sublicensing): the credit and licence link travel with every answer. Credit: Contains data from the Australian Securities and Investments Commission (ASIC) Company Dataset and the Australian Business Register (ABN Bulk Extract), licensed CC BY 3.0 AU (https://creativecommons.org/licenses/by/3.0/au/). Adapted by Prometiam (joined, normalised, status derived). Japan: Company records from the National Tax Agency corporate number publication site: legal name, legal form, status, registered address, identifiers and dates; no officers or registry-compliance signal; register-change events (name, status, legal form and registered address, dated when the change first appears in the register data, none before the first load) and monitoring are available. Updated each working day, with a monthly full reconciliation. Companies (kabushiki, godo, gomei, goshi and tokurei yugen kaisha) and registered foreign companies only; national and local government bodies, associations and other corporations are never served. Status is active, deregistered or merged (with the successor's number): the register publishes no liquidation or insolvency state and there are no insolvency notices; no founding date, activity code, share capital or VAT number. The registration date is the date the corporate number was assigned and is null for companies that carry only the 5 October 2015 designation. Names are in Japanese; the English name, the kana reading and a romanised name are in registry_details. Credit: Source: National Tax Agency Corporate Number Publication Site (https://www.houjin-bangou.nta.go.jp/). Edited and processed by Prometiam; not a product of the National Tax Agency or the State. 出典：国税庁法人番号公表サイト（https://www.houjin-bangou.nta.go.jp/）。Prometiamが編集・加工して作成（国税庁が作成した情報ではありません）。 Israel: Company records from the Israeli Corporations Authority (Ministry of Justice): legal name, legal form, status, registered address, identifiers and dates; no officers or registry-compliance signal; register-change events (name, status, legal form and registered address, dated when the change first appears in the register data, none before the first load) and monitoring are available. Updated each working day. Israeli and registered foreign companies only; partnerships, cooperative societies, non-profit associations and sole traders are other registers and are not served. Company status includes liquidation, receivership, restructuring and insolvency proceedings; there are no insolvency notices. Names are in Hebrew, with the English name in registry_details where the register holds one. No activity code, share capital or VAT number. Credit: Contains information from the Israeli Corporations Authority, Ministry of Justice, via data.gov.il (used under the data.gov.il terms of use). Adapted by Prometiam; not an official register extract. Brazil: Company records from the Cadastro Nacional da Pessoa Jurídica (CNPJ), Receita Federal do Brasil: legal name, legal form, status, registered address, identifiers and dates; no officers or registry-compliance signal; register-change events (name, status, legal form and registered address, dated when the change first appears in the register data, none before the first load) and monitoring are available. Updated monthly (the Receita publishes one full file a month). Commercial legal persons only: limited companies (LTDA), corporations (S.A.), simple societies, single-member limited companies (EIRELI), public companies and mixed-capital companies, and cooperatives; sole traders (empresário individual, MEI included), non-profit entities, branches of foreign companies and every other natural-person form are never served. One record per CNPJ root, with the head office's 14-character CNPJ (shown 00.000.000/0001-91; the 8-digit root finds it too); branches are not served. Status is active, suspended, inapta (served as active_strike_off_pending), deregistered or merged; judicial recovery, bankruptcy, liquidation and intervention are read from the register's special situation, and there are no insolvency notices. The activity code is CNAE-Subclasses 2.3 (BR-CNAE-2.3), not a NACE code, and no NACE class is derived; the secondary codes are in registry_details. No VAT number (a vat search is refused), and no partners, officers or contacts. Credit: Contains data from the Cadastro Nacional da Pessoa Jurídica (CNPJ), Receita Federal do Brasil, published as open data (CC BY). Adapted by Prometiam. Colombia: Company records from Confecámaras (RUES, the Colombian chambers of commerce): legal name, legal form, status, registered address, identifiers and dates; no officers or registry-compliance signal; register-change events (name, status, legal form and registered address, dated when the change first appears in the register data, none before the first load) and monitoring are available. Updated each working day: the source's own update date is data_as_of and is in the credit. Companies of the commercial register only (S.A.S., Ltda., S.A., S. en C., S.C.A., collective companies, single-person companies (E.U.) and branches of foreign companies); natural persons, non-profit entities, cooperatives and public bodies are never served. The register has no address, share capital, contact, activity description or VAT number (a vat search is refused), and no liquidation state: liquidation, judicial liquidation and reorganisation are read from the company name and served as the status, and a cancelled registration is deregistered or merged. The registration may not be current although it reads active: last_renewal_year in registry_details is the last year it was renewed. company_name is the name without those markers and name_as_registered is the name as published. The activity code is the CIIU Rev.4 A.C. 4-digit code (CO-CIIU-REV4-AC), not a NACE code. No insolvency notices. The records are offered under CC BY-SA 4.0 (share-alike). Credit: Contains data from Confecámaras (RUES, Registro Único Empresarial y Social), via the Portal de Datos Abiertos www.datos.gov.co, last updated on the date shown in data_as_of, licensed under CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). Adapted by Prometiam; the adapted Colombian records are offered under CC BY-SA 4.0. Singapore: Company records from the Accounting and Corporate Regulatory Authority (ACRA): legal name, legal form, status, registered address, identifiers and dates; no officers or registry-compliance signal; register-change events (name, status, legal form and registered address, dated when the change first appears in the register data, none before the first load) and monitoring are available. Updated monthly. Local companies, limited liability partnerships (LLP) and registered foreign company branches only; sole proprietorships, general partnerships and limited partnerships are never served. Status includes liquidation, judicial management and receivership, and a struck-off, dissolved or amalgamated company is deregistered or merged; there are no insolvency notices. The register publishes no cessation date, share capital, GST (VAT) number (a vat search is refused), region or officers. The activity code is SSIC 2020 (5 digits, SG-SSIC-2020; a legacy 4-digit code carries no scheme) and no NACE class is derived. The annual return and accounts-due dates are in registry_details as published. API use of the data is licensed, not a right to the data itself. Credit: Contains information from ACRA Information on Corporate Entities and Entities Registered with ACRA accessed on the date shown in data_as_of from the Accounting and Corporate Regulatory Authority (ACRA) via data.gov.sg, which is made available under the terms of the Singapore Open Data Licence version 1.0 (https://data.gov.sg/open-data-licence). Adapted by Prometiam; not an official ACRA extract. Taiwan: Company records from the Ministry of Economic Affairs (GCIS) and the Ministry of Finance (Fiscal Information Agency): legal name, legal form, status, registered address, identifiers and dates; no officers or registry-compliance signal; register-change events (name, status, legal form and registered address, dated when the change first appears in the register data, none before the first load) and monitoring are available. Updated each working day. Limited companies, companies limited by shares, unlimited companies, limited partnership companies and Taiwan branches of foreign companies only; sole proprietorships, partnerships, domestic branches, cooperatives, associations and representative offices are never served. Names and addresses are in Chinese (the register publishes no English name). The responsible person is not served. Status includes dissolution, reorganisation, receivership and bankruptcy. The VAT number is the unified business number where the company is in the Ministry of Finance tax file (searchable with vat=), else null. The activity code is the Ministry of Finance tax industry code (6 digits, TW-TAX-SIC), which is not a NACE code, and the other codes of the file are in secondary_activity_codes. The check digit of the number is advisory. No officers; no insolvency notices. Credit: Contains data from the Ministry of Economic Affairs (Department of Commerce, GCIS) and the Ministry of Finance (Fiscal Information Agency), Republic of China (Taiwan), released under the Open Government Data License, version 1.0 (https://data.gov.tw/license). Adapted by Prometiam, not a certified register extract. Czech Republic: Company records from the Czech public register (Veřejný rejstřík), kept by the regional courts and published by the Ministry of Justice as open data, with the region (kraj) and the activity code from the Czech Statistical Office Register of Economic Entities (RES): legal name, legal form, status, registered address, share capital, identifiers and dates; no officers, partners or shareholders and no registry-compliance signal; register-change events (name, status, legal form, registered address and share capital, dated when the change first appears in the register data, none before the first load, October 2026) and monitoring are available. Updated each working day. Commercial legal persons only (s.r.o., a.s., v.o.s., k.s., cooperatives, SE, SCE and EEIG); sole traders (OSVČ) and every other natural person, associations, foundations, trust funds, owners associations (SVJ) and branches are never served. Status includes liquidation, insolvency, bankruptcy and restructuring; there are no insolvency notices (the Czech Republic is not one of the twelve insolvency markets) and no financial statements. No VAT number: a vat search is refused. The activity code is CZ-NACE 2025. The IČO has eight digits and its check digit is advisory, so companies whose IČO fails it are served. The registering court and file number (for example B 1581, Městský soud v Praze) are in registry_details. Credit: Contains data from the public registers of the Czech Republic (Ministry of Justice, ISVR open data) and the Czech Statistical Office (RES, CC BY 4.0). Adapted by Prometiam. Germany (DE): LEI-registered entities only, from the Global Legal Entity Identifier Foundation (GLEIF) golden copy; not the German commercial register (Handelsregister). Company records only: the company number is the 20-character LEI (ISO 17442 check), searchable with company_number or lei; no officers, share capital, activity code or VAT number (a vat search is refused), no registry-compliance signal and no financial statements; register-change events (name, status, legal form, registered address, none before the first load, October 2026) and monitoring are available. Updated daily. GmbH, UG (haftungsbeschränkt), AG, KGaA, SE, OHG, KG (including GmbH & Co. KG), eG and PartG only; sole traders (e.K.) and other natural persons, GbR, associations (e.V.), foundations, public-law bodies, funds and branches are never served. Status is active, deregistered or merged; the LEI's own renewal status is registry_details.lei_status; the register court, register type and number (for example Amtsgericht München, HRB) are in registry_details. German corporate insolvency notices are served separately (Germany is one of the twelve insolvency markets) and are not linked to these records. Credit: Contains LEI data from the Global Legal Entity Identifier Foundation (GLEIF), available under CC0 1.0. LEI-registered entities only; not an extract of the German commercial register (Handelsregister).

Install

npx -y prometiam-risk-mcp   # one-shot run, no install needed
# or
npm install -g prometiam-risk-mcp   # global install for the bin

Configure

It works without any key. The server ships with a shared demo key — 30 requests a minute and 2,000 a day for everyone using it — so the first tool call answers right after npx. When the shared quota is used up the error tells you how to continue.

For your own credits — 14-day free trial: 500 credits; a card is required, nothing is charged for 14 days — sign up at https://www.prometiam.com/signup?utm_source=mcp and set the key as an environment variable:

export PROMETIAM_API_KEY="rk_live_..."

Use with Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "prometiam-risk": {
      "command": "npx",
      "args": ["-y", "prometiam-risk-mcp"],
      "env": {
        "PROMETIAM_API_KEY": "rk_live_your_key_here"
      }
    }
  }
}

Restart Claude Desktop. The 35 tools appear in the tool list. Try:

"What's the Prometiam coverage today?" "Search for companies named Mercadona in Spain." "Run a sanctions screen on the name Juan Perez at threshold 85." "Build a corporate-event timeline for Inditex."

Use with Cursor

Edit .cursor/mcp.json in your project (or globally at ~/.cursor/mcp.json):

{
  "mcpServers": {
    "prometiam-risk": {
      "command": "npx",
      "args": ["-y", "prometiam-risk-mcp"],
      "env": {
        "PROMETIAM_API_KEY": "rk_live_your_key_here"
      }
    }
  }
}

Use with Continue

Add to ~/.continue/config.json under experimental.modelContextProtocolServers:

{
  "experimental": {
    "modelContextProtocolServers": [
      {
        "transport": {
          "type": "stdio",
          "command": "npx",
          "args": ["-y", "prometiam-risk-mcp"],
          "env": { "PROMETIAM_API_KEY": "rk_live_your_key_here" }
        }
      }
    ]
  }
}

Use with any other MCP client

Anything that speaks MCP over stdio works. Run the binary with PROMETIAM_API_KEY set in the environment. JSON-RPC requests on stdin, responses on stdout, logs on stderr.

Environment variables

Smoke test

Once installed and configured, you can verify the server lists tools without spinning up an MCP client:

echo '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' | PROMETIAM_API_KEY=rk_live_... npx -y prometiam-risk-mcp

You should see a JSON-RPC response with all 35 tools and their schemas.

Rate limits & pricing

Per Prometiam tier (returned in every response's meta.rate_limit). Every successful call costs credits (0 for account and coverage, 1 for a company search or record, 2 for corporate events, people, director network, insolvency and procurement, 3 for a sanctions screen per name, 25 for one company's financial statements); errors cost nothing, and each response states its cost in the X-Credits-Cost header:

Privacy and data residency

• All requests hit the Prometiam Risk API in EU (AWS eu-central-1, Frankfurt).
• The MCP server adds no telemetry of its own — it just forwards requests to the API.
• Officer data is processed under GDPR Article 6(1)(c) (legal obligation of public registries) and 6(1)(f) (legitimate interest in fraud prevention).
• Mostly read-only. The only mutating tools are monitor_subscribe and monitor_stop (create/delete a monitoring subscription tied to your key); every other tool is read-only.

Source

This package is open source under the MIT license. The Risk API itself is a commercial service — see https://www.prometiam.com/mcp for the install page, or https://www.prometiam.com?utm_source=npm&utm_medium=readme for terms.

• API documentation: https://www.prometiam.com/risk-api/docs?utm_source=npm&utm_medium=readme
• OpenAPI 3.0 spec: https://www.prometiam.com/openapi.json
• Pricing: https://www.prometiam.com/pricing?utm_source=npm&utm_medium=readme
• Support: https://www.prometiam.com/contact

License

MIT © Prometiam