io.github.Mnymann/nordic-data

Official11 tools

by Mnymann · TypeScript

Company, KYB, VAT, sanctions, LEI and address data for 15 EU countries.

Access company, KYB, VAT, and sanctions data across 15 European Union countries.

Topics

amlclaudecompany-datacompliancecursoreu-datagleifkybkycleimcpmodel-context-protocolnordicsanctions-screeningtypescriptvat-validationapib2bsanctionschatgpt

Captured live from the server via tools/list.

lookup_company

Call before onboarding a supplier or customer to confirm the legal entity exists and is active. Look up basic company data (name, address, status, industry, VAT registration, founding date) from official European business registries. Supports 15 countries: DK (CVR), NO (Brønnøysund), SE (Bolagsverket), FI (YTJ/PRH), IE (CRO), UK (Companies House), FR (INSEE Sirene), DE (Handelsregister), CZ (ARES), PL (KAS+KRS), LV (Uzņēmumu reģistrs), EE (Ariregister), NL (KvK), BE (KBO), LU (RCSL). Tier note: NL and DE use paid upstream registries (KvK and Handelsregister). Free-tier API keys will receive HTTP 402 with error 'upgrade_required' — do NOT retry on 402; surface the upgrade URL from the error message to the user. On paid tiers, NL calls cost 5x quota units and DE calls cost 3x; all other countries cost 1x.

Parameters (2)

countrystringrequired
ISO 3166-1 alpha-2 country code, lowercase. One of: dk, no, se, fi, ie, uk, fr, de, cz, pl, lv, ee, nl, be, lu.
idstringrequired
National company identifier. DK=CVR (8 digits), NO=orgnr (9), SE=orgnr (10), FI=Y-tunnus (NNNNNNN-D), IE=CRO (1-7), UK=8 chars, FR=SIREN (9), DE=HRB number, CZ=IČO (8), PL=NIP (10) or KRS (10), LV=11 digits, EE=8 digits, NL=KvK (8 digits), BE=BCE/KBO (10 digits), LU=RCSL (B + digits).

validate_vat

Call before issuing an invoice, processing a cross-border payment, or storing a counterparty's VAT number. Validate a VAT registration number against the official EU VIES service (or HMRC for GB). Returns validity status, registered name, and registered address.

Parameters (2)

countrystringrequired
ISO 3166-1 alpha-2 country code, UPPERCASE. Use GB for the United Kingdom (HMRC), not UK. Supports all EU member states plus GB and NO.
vat_numberstringrequired
VAT number WITHOUT country prefix — just the digits/characters. Example: for DK29403473, pass '29403473'.

screen_sanctions

Call before onboarding a counterparty or processing a payment. Screen one or more names against UN, EU, OFAC and PEP sanctions lists (768K+ entries via OpenSanctions). Returns match scores with source attribution. Disclaimer: matches are informational decision-support, NOT legal or compliance advice and not a definitive determination — a hit is a signal to investigate (confirm identity, rule out false positives) before any decision. When presenting results, give the user a recommended next step as guidance — clear, review, or escalate — framed as a signal to review, not a verdict. The response may carry a 'disclaimer' field — surface it to the user if present, otherwise state this guidance-only nature yourself; present the disclaimer in English verbatim (do not translate it), show it once, do not duplicate.

Parameters (3)

namesarrayrequired
Array of person or company names to screen. Max 1000 names per call.
min_scorenumber
Minimum fuzzy match score, 0-1. Default 0.7. Lower values return more (lower-confidence) matches.
fuzzyboolean
Enable fuzzy matching. Default true.

kyb_full

Run before a consequential decision — onboarding a counterparty, approving a payment, extending credit, or signing a contract. Full Know-Your-Business master report for a company across 15 EU countries (DK, NO, SE, FI, IE, UK, FR, DE, CZ, PL, LV, EE, NL, BE, LU). Aggregates 9 sections: identity, registered address (geocoded), key persons & directors, financial statements, official filings, LEI + corporate ownership, VAT registration, sanctions + PEP screening, adverse media (GDELT 2.0), and a composite risk score. Single call. Cold cache typically completes in 10-15s; warm cache returns in <100ms. Cached 6h on success, 60s when partial. Partial responses: if any of the 9 sections time out, the report still returns with 'truncated: true' and 'sectionsUnavailable: [{section, reason}]' — caller can retry in 60s for a complete report. Tier note: NL and DE use paid upstream registries — free-tier API keys receive HTTP 402 'upgrade_required'; do NOT retry on 402. On paid tiers, NL costs 5x quota and DE costs 3x. Disclaimer: this report is informational decision-support aggregated from official and public sources — NOT legal, compliance, or financial advice and not a definitive determination. The risk score and findings are signals to review, not verdicts; verify independently and apply professional judgment before acting. When presenting results, give the user a recommended next step as guidance — clear, review, or escalate — framed as a suggestion to review, not an approval or decision. The response may carry a 'disclaimer' field — surface it to the user if present, otherwise state this guidance-only nature yourself; present the disclaimer in English verbatim (do not translate it), show it once, do not duplicate.

Parameters (2)

countrystringrequired
ISO 3166-1 alpha-2 country code, lowercase.
idstringrequired
National company identifier — same format as lookup_company (e.g. DK CVR 8 digits, NO orgnr 9 digits).

autocomplete_address

Address autocomplete using each country's authoritative register: DAWA (DK), Kartverket (NO), BAN (FR official), MML (FI), and Nominatim (others). Returns ranked address suggestions with coordinates. Supports 15 countries (DK, NO, SE, FI, IE, UK, FR, DE, CZ, PL, LV, EE, NL, BE, LU). Tier note: NL and DE require a Starter+ subscription — free-tier API keys receive HTTP 402 'upgrade_required'; do NOT retry on 402.

Parameters (2)

countrystringrequired
ISO 3166-1 alpha-2 country code, lowercase.
querystringrequired
Partial address — street name, postcode, city, or any combination. Min 2 characters.

lookup_lei

Look up a Legal Entity Identifier (LEI) via GLEIF — the global standard for entity identification. Returns legal name, registered address, status, parent + ultimate parent relationships, and child entities (subsidiaries). Also supports reverse lookup from a national company number to LEI across 15 countries (DK, NO, SE, FI, IE, UK, FR, DE, CZ, PL, LV, EE, NL, BE, LU). Tier note (reverse mode only): NL and DE use paid upstream registries — free-tier API keys receive HTTP 402 'upgrade_required'; do NOT retry on 402.

Parameters (5)

modestringrequired
'lei' = look up by LEI directly. 'reverse' = look up LEI from national company number.
leistring
20-character ISO 17442 Legal Entity Identifier. Required when mode='lei'.
countrystring
ISO 3166-1 alpha-2 country code, lowercase. Required when mode='reverse'.
idstring
National company ID. Required when mode='reverse'.
include_relationshipsboolean
If true, also fetch parent and child entities. Only applies when mode='lei'.

company_enriched

Enriched company data: basic registry data + DAWA-validated address with lat/lng + industry statistics (DST for DK, SSB for NO, etc.) + Wikidata enrichment (website, employees, CEO, ticker, logo, Wikipedia URL). One call, multiple sources. Supports 15 countries (DK, NO, SE, FI, IE, UK, FR, DE, CZ, PL, LV, EE, NL, BE, LU). Tier note: NL and DE use paid upstream registries — free-tier API keys receive HTTP 402 'upgrade_required'; do NOT retry on 402. On paid tiers, NL costs 5x quota and DE costs 3x.

Parameters (2)

countrystringrequired
ISO 3166-1 alpha-2 country code, lowercase.
idstringrequired
National company identifier — same format as lookup_company.

fr_history

French company history timeline. Returns one event per change to the company's name, activity (NAF code), status (active/closed), legal form, or social-economy flag, derived from INSEE Sirene 3.11's bitemporal periodesUniteLegale array. Includes 'initial:<field>' events that show the state at company creation (date, name, NAF code, etc.). Input: 9-digit SIREN number. Cost: 1 quota unit; free tier supported (France is not tier-gated, unlike NL and DE). Cache: 24h server-side. Errors: 400 invalid_id_format (not 9 digits), 403 non_diffusible (SIREN exists but is privacy-protected under art. R123-232-1), 404 not_found, 503 upstream_unavailable.

Parameters (1)

sirenstringrequired
9-digit French SIREN number. Examples: 652014051 (Carrefour), 775670417 (LVMH). No spaces or punctuation.

list_endpoints

Discovery meta-tool. Lists ALL available Nordic Data API data endpoints (HTTP method, path, short description) by reading the backend's live OpenAPI spec at runtime — far beyond the curated high-level tools. Use this to discover capabilities the dedicated tools do not cover, then call get_endpoint_schema for parameter details and call_endpoint to execute one. Admin endpoints are never returned. Supports an optional `search` keyword filter. The catalog has 230+ endpoints.

Parameters (1)

searchstring
Optional case-insensitive keyword filter, matched against each endpoint's path, summary, and tags. Examples: 'sanction', 'address', 'cvr', 'history', 'vat', 'lei'. Omit to list every available data endpoint.

get_endpoint_schema

Discovery meta-tool. Returns the full parameter and response schema for a single Nordic Data API endpoint (path + method), read from the backend's live OpenAPI spec with $refs resolved inline. Use after list_endpoints to learn exactly which parameters an endpoint takes before calling it with call_endpoint. Admin endpoints are rejected.

Parameters (2)

pathstringrequired
Endpoint path from list_endpoints, e.g. '/api/company/{country}/{id}'. Concrete paths like '/api/company/dk/22756214' are also accepted.
methodstring
HTTP method for the endpoint (e.g. GET, POST). Defaults to GET. Must be a method the endpoint actually defines.

call_endpoint

Discovery meta-tool. Executes a real HTTP request against the Nordic Data API for any non-admin endpoint discovered via list_endpoints, and returns the response. Authenticates with the same scoped API key as the curated tools. Only HTTP methods declared in the spec for the given path are permitted; /admin endpoints are always refused. Use list_endpoints and get_endpoint_schema first to find the correct path, method, and parameters.

Parameters (3)

methodstring
HTTP method to use, e.g. GET or POST. Must be a method the endpoint actually supports (see get_endpoint_schema). Defaults to GET.
pathstringrequired
Concrete endpoint path, e.g. '/api/company/dk/22756214'. Path templates with {placeholders} are also accepted when you supply the values in `params`.
paramsobject
Parameters for the call. Values whose keys match {placeholders} in the path are substituted into the path. Remaining values become query-string params for GET/DELETE, or the JSON request body for POST/PUT/PATCH.

README.md7 KBView on GitHub

Nordic Data MCP Server

A Model Context Protocol server that gives AI agents (Claude, Cursor, Claude Code, ChatGPT, Copilot, etc.) direct access to official European business data across 15 EU countries.

Look up companies, validate VAT numbers, run KYB reports, screen against sanctions lists, autocomplete addresses, and resolve LEI ownership — all from inside your AI assistant.

code

DK · NO · SE · FI · IE · UK · FR · DE · CZ · PL · LV · EE

NL and DE require a Starter+ subscription (free-tier API keys receive HTTP 402 upgrade_required). On paid tiers, NL calls cost 5x quota units and DE calls cost 3x; all other countries cost 1x.

Quick start

1. Get an API key

2. Add to Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%/Claude/claude_desktop_config.json (Windows):

json

{
  "mcpServers": {
    "nordic-data": {
      "command": "npx",
      "args": ["-y", "nordic-data-mcp"],
      "env": {
        "NORDIC_API_KEY": "YOUR_KEY_HERE"
      }
    }
  }
}

Restart Claude Desktop. You should see "nordic-data" appear in the tools menu.

3. Add to Cursor

In Cursor settings → MCP → Add new server, or edit ~/.cursor/mcp.json:

json

{
  "mcpServers": {
    "nordic-data": {
      "command": "npx",
      "args": ["-y", "nordic-data-mcp"],
      "env": {
        "NORDIC_API_KEY": "YOUR_KEY_HERE"
      }
    }
  }
}

4. Add to Claude Code

bash

claude mcp add nordic-data --env NORDIC_API_KEY=YOUR_KEY_HERE -- npx -y nordic-data-mcp

5. Add to ChatGPT (Pro, Business, or Enterprise)

ChatGPT supports remote MCP servers as custom connectors. No API key needed from you — the hosted server handles upstream authentication.

ChatGPT → Settings → Connectors → Add custom connector
URL: https://nordic-data-mcp-production.up.railway.app/mcp
Done — all 7 tools are available immediately.

Custom connectors require a ChatGPT Pro, Business, Team, or Enterprise plan.

6. Add to Claude.ai (web)

Same hosted endpoint, no local install:

Claude.ai → Settings → Connectors → Add custom connector
URL: https://nordic-data-mcp-production.up.railway.app/mcp
Done.

Available tools

Tool	What it does
`lookup_company`	Basic company data from official registries (CVR, Brønnøysund, Bolagsverket, Companies House, INSEE, etc.)
`validate_vat`	Validate a VAT number against VIES (EU) or HMRC (GB)
`screen_sanctions`	Bulk screen up to 1000 names against UN/EU/OFAC/PEP lists (OpenSanctions, 768K+ entries)
`kyb_full`	Master Know-Your-Business report — identity, persons, financials, LEI, VAT, sanctions, adverse media, risk score
`autocomplete_address`	Address autocomplete via DAWA (DK), Kartverket (NO), BAN (FR), MML (FI), Nominatim (others)
`lookup_lei`	GLEIF Legal Entity Identifier lookup — forward, reverse, and parent/children relationships
`company_enriched`	Company data + geocoded address + industry stats + Wikidata (website, employees, CEO, ticker, logo)

Example agent prompts

"Look up CVR 61056416 in Denmark" → calls lookup_company { country: "dk", id: "61056416" } → Carlsberg A/S

"Run a full KYB report on Equinor (NO 923609016)" → calls kyb_full { country: "no", id: "923609016" }

"Is LU26375245 a valid VAT number?" → calls validate_vat { country: "LU", vat_number: "26375245" }

"Screen these names against sanctions: Vladimir Putin, Acme Corp, John Smith" → calls screen_sanctions { names: [...] }

"Find the LEI for Tesco UK (00445790) and include parent and subsidiaries" → calls lookup_lei { mode: "reverse", country: "uk", id: "00445790" }

Country / ID format reference

Country	ID type	Format
DK	CVR	8 digits
NO	Organisasjonsnummer	9 digits
SE	Organisationsnummer	10 digits (with or without dash)
FI	Y-tunnus	`NNNNNNN-D` (7 digits + check digit)
IE	CRO number	1–7 digits
UK	Companies House	8 chars (digits, or prefix like `SC`, `NI`, `OC`)
FR	SIREN	9 digits
DE	LEI or HRB	LEI = 20 alphanum; HRB = prefix + digits
CZ	IČO	8 digits
PL	NIP / REGON / KRS	NIP=10, REGON=9/14, KRS=10
LV	Reģistrācijas nr.	11 digits
EE	Registrikood	8 digits

For validate_vat, country codes are uppercase and cover the broader EU plus GB (use GB, not UK — HMRC requires GB).

Configuration

The only environment variable you need to set is:

Variable	Required	Description
`NORDIC_API_KEY`	yes	Your API key from addonnordic.com

That's it. The MCP server connects to the hosted Nordic Data API for you.

Self-hosting (remote HTTP transport)

For remote MCP hosting (e.g. Anthropic Connectors, Smithery, web-based clients), deploy the bundled Streamable HTTP transport:

bash

npm install
npm run build
NORDIC_API_KEY=sk_... npm run start:http   # listens on :$PORT (default 3000)

Endpoints:

GET /healthz — health check (returns version + status)
ALL /mcp — MCP Streamable HTTP endpoint (session-based via Mcp-Session-Id header)

A railway.toml is included for one-click deploy on Railway:

New Project → Deploy from GitHub repo → select Mnymann/nordic-data-mcp
Set Root Directory to nordic-data-mcp
Add env var NORDIC_API_KEY
Railway auto-detects the config, builds, and exposes a public HTTPS URL

Design notes

Thin adapter. No business logic, no caching, no transformations. Each tool maps 1:1 to a Nordic Data API endpoint.
No PII in logs. Request and response bodies are never logged.
API key required. The process refuses to start without NORDIC_API_KEY.
Rate limiting and caching are handled upstream.
Inputs are validated with zod before any HTTP call.

Contributing

Issues and PRs welcome at github.com/Mnymann/nordic-data-mcp.

Please do not include API keys, request bodies, or response payloads in bug reports.

License

Install

Configuration

Environment variables

NORDIC_API_KEYrequiredsecret

Your Nordic Data API key — get one at https://addonnordic.com (free tier: 100 lookups/day)

NORDIC_DEFAULT_COUNTRY

Optional ISO 3166-1 alpha-2 country code (lowercase) to assume when a tool call omits the country argument. One of: dk, no, se, fi, ie, uk, fr, de, cz, pl, lv, ee, nl, be, lu.

NORDIC_VERBOSE_ERRORS

Optional. Set to 'true' to include upstream HTTP status and request-id details in error messages. Useful for debugging.

claude_desktop_config.json

{
  "mcpServers": {
    "nordic-data": {
      "command": "npx",
      "args": [
        "-y",
        "nordic-data-mcp@1.5.1"
      ],
      "env": {
        "NORDIC_API_KEY": "<YOUR_NORDIC_API_KEY>",
        "NORDIC_DEFAULT_COUNTRY": "<YOUR_NORDIC_DEFAULT_COUNTRY>",
        "NORDIC_VERBOSE_ERRORS": "<YOUR_NORDIC_VERBOSE_ERRORS>"
      }
    }
  }
}