41
grade D
14 days ago
glama
mcp-sanctions-check
MCP server for OFAC SDN sanctions screening. Check names against US Treasury sanctions lists with automatic cache refresh. No API key needed for the check itself.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: ADMIN_TOKEN, COMPANIES_HOUSE_API_KEY, GATEWAY_SERVICE_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
ADMIN_TOKENconfig
API_BASE🔐 secret
COMPANIES_HOUSE_API_KEYconfig
FREE_TIER_DAILY_LIMITconfig
FREE_TIER_ENABLEDconfig
GATEWAY_PORT🔐 secret
GATEWAY_SERVICE_KEYconfig
OLLAMA_URLconfig
PORTconfig
RATE_LIMIT_MAXconfig
RATE_LIMIT_WINDOW_MSconfig
SDN_REFRESH_HOURS// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/haveblue997-l402-apis-ifiuiq)commit: 98717c7f4befc29ff08639ee5452f4076de59325
code hash: aa37124751197f32cd36f13dbba77c62b22e5e6e7536c15cc75d75dc21a9a9c7
verified: 4/11/2026, 2:22:40 PM