# Jithox EU Counterparty Sanctions Preflight

> Read-only EU counterparty sanctions preflight. Screen a name or identifier against a dated snapshot of the official EU Consolidated Financial Sanctions List BEFORE an agent or operator transacts, pays or onboards. Results are screening EVIDENCE, never a legal/compliance determination; a 'clear' is not a guarantee of non-designation; missing/stale/unavailable is never a positive verdict. No payment, transaction, filing or autonomous action.

This is an **MCP server**, not a website. An AI agent connects to it directly
and calls its tools; a human reads https://sanctions.mcp.jithox.com/docs.

## Connect

- MCP endpoint: https://sanctions.mcp.jithox.com/mcp
- Transports: Streamable HTTP and the legacy HTTP+SSE transport, both on that one URL
- Protocol revisions served: 2026-07-28, 2025-11-25, 2025-06-18, 2025-03-26
- Auth: OAuth 2.1 (discovery at https://sanctions.mcp.jithox.com/.well-known/oauth-protected-resource, PKCE S256),
  or send the workspace access key directly as `Authorization: Bearer <key>`
  (or `X-Jithox-Api-Key`) when a browser callback is impossible. Never both.
- Free and unauthenticated: `initialize`, `server/discover`, `tools/list`,
  `/healthz`, `/readyz`, and every document linked below.

## Tools (5, all read-only)

- `screen_sanctioned_name` — Screen a counterparty name against a dated snapshot of the official EU Consolidated Financial Sanctions List.
- `screen_sanctioned_identifier` — Deterministic EXACT match of an identifier (passport / national id / registration / other) against listed designations' identifiers — no fuzzy matching.
- `get_sanctions_listing` — Return the full official listing detail (names, programme, legal basis, listing date, identifier types, countries) for a candidate logicalId surfaced by a prior screen, with provenance.
- `list_sanctions_regimes` — Enumerate the EU sanctions programmes/regimes present in the snapshot (regulation/legal basis, since date, subject count) — the policy-layer read.
- `prepare_screening_receipt` — Bundle the screening checks into one idempotent Ed25519-signed receipt committing to the HASHED inputs, sources, snapshot checksum, retrieval times and decision states — provable evidence of WHAT was screened and WHEN.

There is no write, send, order or payment tool on this server. `file_sanctions_report`
is absent by construction and answers 404 with the reason.

## What an answer is, and is not

Every accepted call returns a uniform decision envelope (status, evidence,
provenance with the source and the moment it was read, limitations) plus an
Ed25519-signed receipt anyone can verify offline against
https://sanctions.mcp.jithox.com/receipts/public-key.pem. A refusal, a rate limit, an unavailable
source or an incomplete question costs nothing and is never dressed as an
answer. "Unavailable" is a truthful state, never a negative verdict.

## Who this is for, and where you can be

No geographic restriction, no EU company required, no EU address, no VAT
number needed to connect. These servers encode EUROPEAN RULES, and European
rules bind whoever sells into, ships to or invoices the EU — wherever they
are. An exporter in the United States, a manufacturer in China, a marketplace
seller in India and a SaaS billing EU customers all face the same checks, and
all of them can call these servers today.

Payment does not require a euro account, a card, or a Jithox account at all:
the x402 lane settles in USDC on Base from any wallet, anywhere. The prepaid
balance is priced in EUR; the machine lane is not.

## Cost

25 accepted calls free (14 days from key creation), then a
prepaid balance charged per ACCEPTED call. The current per-accepted-call price
for THIS product (and its non-chargeable error states — failures, refusals and
unavailable sources cost nothing) is machine-readable at
https://jithox.com/api/pricing/v1 under per_product; sign-up and trial
activation at https://jithox.com/sign-up. Accountless machine payment is also
possible on the products that enable it — see https://sanctions.mcp.jithox.com/x402/quickstart.json.

## Machine-readable

- https://sanctions.mcp.jithox.com/.well-known/jithox-capability.json — this server's identity and tools
- https://sanctions.mcp.jithox.com/.well-known/oauth-protected-resource — auth discovery
- https://jithox.com/api/capabilities/v1 — offer status of every Jithox capability
- https://jithox.com/api/pricing/v1 — the pricing contract (per_product = per-accepted-call terms)
- https://sanctions.mcp.jithox.com/x402/products — the cross-product index (only products announced for discovery)
- https://sanctions.mcp.jithox.com/x402/quickstart.json — how to pay per call without an account
- https://sanctions.mcp.jithox.com/agents — the long-form briefing for agent runtimes
- https://sanctions.mcp.jithox.com/docs — the human developer guide

## Boundaries

- Screening evidence only — never proof that a counterparty is or is not the same entity as a candidate, that a transaction is lawful, or that every sanctions regime, ownership-and-control rule or exemption has been assessed; a no-match is not the absence of sanctions risk, and human legal or compliance review remains required.
- Screening evidence only — NOT a legal or compliance determination, and not legal advice.
- A 'clear' result is not a guarantee of non-designation; it reflects only this dated snapshot.
- Confirm every result against your own compliance process; only an official authority decides a designation.
- This tool does not evaluate the 50%-ownership/control rule, beneficial ownership, PEP status or adverse media.
- Matching is deterministic (normalized names/identifiers); there is no ML, and outages are never a positive verdict.

No independent penetration test has been performed. Public self-service, and no
compliance certification of any kind is claimed or implied.