Jithox EU Counterparty Sanctions Preflight

Screen a counterparty name or identifier against a dated snapshot of the official EU Consolidated Financial Sanctions List before an agent or an operator onboards, pays or transacts.

For: Developers building payment, onboarding, procurement and marketplace agents that need a documented screening step before acting.

Read-only preflight evidence over MCP. Technical evidence only — not a legal, fiscal or compliance determination, and not legal advice.

What it does

• Returns ranked CANDIDATE designations with deterministic scores, plus the programme and legal basis.
• States the source, the snapshot publication date and a checksum on every answer.
• Reports uncertainty explicitly: possible_match and needs_review are first-class answers, not errors.
• Issues an Ed25519 receipt over HASHED inputs that attests WHAT was screened and WHEN.

What it does NOT do

• Does not block, freeze, approve or reject anything.
• Does not make a legal or compliance determination, and is not legal advice.
• Does not replace a compliance review.
• Does not make a payment or execute a transaction.
• Does not evaluate the 50% ownership/control rule, beneficial ownership, PEP status or adverse media.
• Covers the EU consolidated financial sanctions list only — not global lists.

Tools (5)

Exactly 5 read-only tools. There is no send, pay, file, block or declare capability on this server.

• screen_sanctioned_name — Screen a counterparty name
  Screen a counterparty name against a dated snapshot of the official EU Consolidated Financial Sanctions List.
• screen_sanctioned_identifier — Screen an identifier
  Deterministic EXACT match of an identifier (passport / national id / registration / other) against listed designations' identifiers — no fuzzy matching.
• get_sanctions_listing — Get an official listing detail
  Return the full official listing detail (names, programme, legal basis, listing date, identifier types, countries) for a candidate logicalId surfaced by a prior screen, with provenance.
• list_sanctions_regimes — List EU sanctions regimes
  Enumerate the EU sanctions programmes/regimes present in the snapshot (regulation/legal basis, since date, subject count) — the policy-layer read.
• prepare_screening_receipt — Prepare a screening receipt
  Bundle the screening checks into one idempotent Ed25519-signed receipt committing to the HASHED inputs, sources, snapshot checksum, retrieval times and decision states — provable evidence of WHAT was screened and WHEN.

Connect

MCP endpoint (Streamable HTTP): https://sanctions.mcp.jithox.com/mcp

Server identity: com.jithox/eu-sanctions-preflight v0.2.1

Authentication

OAuth 2.1 with mandatory PKCE (S256) and dynamic client registration is the default. An unauthenticated call returns 401 with a WWW-Authenticate header pointing at /.well-known/oauth-protected-resource, which points at the authorization server metadata. Your MCP client performs that discovery automatically.

Clients that cannot open a browser (blocked loopback callback, CI, headless) may instead send the developer access key directly on every call — Authorization: Bearer pcd_… or X-Jithox-Api-Key in the client config. Same key, same scopes, same rotation/revocation and expiry; treat a key in a config file like a password.

Tokens are audience-bound to this server with least-privilege per-tool scopes: a token issued for another Jithox server is rejected here, and a key minted for another Jithox server fails this server's scope check.

Data

Source: The EU Consolidated Financial Sanctions List (FSF), published by the European Union / European Commission. Reuse is governed by Commission Decision 2011/833/EU (default CC BY 4.0) with source acknowledgement. Only the EU Official Journal is authentic.

Freshness: The list is refreshed automatically from the official EU source: each fetch is structurally validated, checked against the CSV distribution of the same generation, and activated atomically — a failed refresh keeps the last known-good list and is never shown as zero results. Every answer carries the snapshot's publication date. Past the fresh bound answers are reported as stale — explicitly non-decisive — and past the absolute bound (72h without a validated refresh) the tools return unavailable and perform NO screening; a missing, stale or expired snapshot is never reported as a clear result.

Example flow

1. Your agent has counterparty details (a company name, optionally a registration identifier and a country).
2. The name is normalised deterministically (case, accents, punctuation and legal-form tokens).
3. screen_sanctioned_name returns exact_match, possible_match, needs_review or not_listed_in_snapshot, with candidates and provenance.
4. Anything other than a definitive no-match is routed to a human — a not_listed_in_snapshot result is NOT a guarantee of non-designation.
5. prepare_screening_receipt commits the hashed inputs, sources and decision states to a signed, offline-verifiable receipt.

Get started

Self-service: create a free credential, use the free trial calls, then add prepaid credit and keep going. No application, no approval, no sales contact — and the same balance works across every available Jithox MCP server.

Start at https://jithox.com (sign-up: https://jithox.com/sign-up). You pay per ACCEPTED call: a failure, a refusal, a rate limit or an unavailable source costs nothing. The current per-accepted-call price of THIS product is machine-readable at https://jithox.com/api/pricing/v1 (per_product), offer status at https://jithox.com/api/capabilities/v1.

Health is public and needs no access: /healthz and /readyz.

Support and security

Support: info.jithox@gmail.com. Security reports: see /.well-known/security.txt — please report privately and do not run load tests against production.

No independent third-party penetration test has been performed on this server.