An MCP server for AI agents: verify a company, check a licence, search the web

Updated 2026-11-11

Why an MCP server for these tasks

An AI assistant often needs three kinds of facts before it acts: is this vendor on a sanctions list, is this contractor licensed, and what does this company actually do. Each of these is normally a separate website, a separate form, or a separate API key. An MCP (Model Context Protocol) server puts them behind one address that the assistant can call as tools.

Tolca runs a public MCP endpoint. It needs no account and no API key for discovery:

• URL: https://tolca.tonbot.ca/mcp/public
• Transport: HTTP (remote MCP server, URL only)
• Paid tools are paid per call, through x402 (USDC on Base). Some tools may be free to try in a chat connector; check the tool description returned by the server.

The tools that matter most

• verify_business (0.05 $ per company): KYB check. It screens against US sanctions lists (CSL, including OFAC SDN), UK Sanctions List, the EU consolidated list and the Canadian LMES list, including UN sanctions applied by the UK and the EU. It also reads Companies House (UK), federal corporations in Canada, GLEIF (LEI), and contractor licences in Quebec, Washington and Oregon. The verdict is ok, review, blocking or not_found. It does not return personal data.
• qc_licence (0.01 $): the RBQ licence of a Quebec contractor on its own.
• qc_contractor_check (0.1 $): the broader Quebec contractor check: RBQ licence, RENA, environmental sanctions and the federal list.
• company_enrich (0.02 $): a company profile from its website or its name: what it does, services, territory, phone numbers and emails published by the company (with the source page), and registries.
• web_search (0.008 $): searches the web and reads the three best pages in one call. French and Canada by default. Nothing is charged when there are zero results.
• pkg_check (0.003 $): security check of an npm or PyPI package before you install it.

Doing it by hand first

You can do most of these checks for free. This is the method, so you know what the tool replaces:

1. Sanctions: search the company name in the official consolidated lists. The US list is on the OFAC Sanctions List Search site. The UK and EU lists are published by their governments. Check name variants, not only the exact name.
2. Companies House (UK): the public register gives the status and officers of a UK company.
3. Quebec contractors: the RBQ licence lookup is on the Régie du bâtiment du Québec website. Check that the licence is valid and that the class matches the work.
4. Registry of enterprises (Quebec): the Registraire des entreprises gives the NEQ, the status and the officers of a Quebec company.

Manual checks are slow when you have 5 vendors, and painful at 200. That is when a single tool call makes sense.

Connecting it to an assistant

Most MCP clients let you add a remote server by URL. Add https://tolca.tonbot.ca/mcp/public, then ask the assistant to list the available tools. The tool names and prices are returned by the server itself, so check them there before you rely on them.

Example request to the assistant: "Before we pay this vendor, verify the company name and tell me whether the verdict is ok, review or blocking. Show the list that matched, if any."

Limits to keep in mind

• A review verdict means a human must look at it. It is not a conclusion that the company is guilty of anything.
• A not_found verdict means the company was not matched in the sources checked. It does not prove that the company does not exist. Check the legal name and the country.
• Tolca checks public lists and registries. It does not replace your own compliance process, and it is not legal advice.

Summary

For a single check, the official lists are free and remain the reference. For agents that run checks all day, one remote MCP endpoint with per-call prices is simpler to wire in. Start with verify_business on the vendor you are about to pay.