bizfile-mcp 1.3.0

package/.env.example

@@ -0,0 +1,20 @@
+# Bizfile MCP Server — Environment Variables
+# Copy this file to .env and fill in your values
+# NEVER commit .env to git
+
+# ── REQUIRED ──────────────────────────────────────────────
+# Your Anthropic API key from console.anthropic.com
+ANTHROPIC_API_KEY=sk-ant-your-key-here
+
+# ── OPTIONAL (adds more data sources) ─────────────────────
+# UK Companies House — free at developer.company-information.service.gov.uk
+# Adds detailed UK company profiles, filing history, and officer data
+COMPANIES_HOUSE_API_KEY=your-companies-house-key
+
+# OpenCorporates — free tier at opencorporates.com/api_accounts/new
+# Higher rate limits with an API token (free registration)
+OPENCORPORATES_API_TOKEN=your-opencorporates-token
+
+# ── FUTURE (v2) ───────────────────────────────────────────
+# Stripe for billing (add when first customer is ready)
+# STRIPE_SECRET_KEY=sk_live_your-key

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 OjasKord
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,158 @@
+# Bizfile MCP — Global Company Intelligence
+
+> Real-time company verification, KYC, and due diligence across 130+ jurisdictions for AI agents.
+
+[![smithery badge](https://smithery.ai/badge/OjasKord/bizfile-mcp)](https://smithery.ai/server/OjasKord/bizfile-mcp)
+
+## What it does
+
+Bizfile MCP gives any AI agent instant access to verified company data from official government registries worldwide. No hallucinated data — every result comes directly from authoritative sources in real time.
+
+Built for compliance, KYC, and due diligence workflows running inside AI agents.
+
+---
+
+## Tools
+
+### `search_company`
+Search for any company by name across UK Companies House, Singapore ACRA, and OpenCorporates (130+ jurisdictions).
+
+**Example:**
+```json
+{ "company_name": "Shell", "country": "UK" }
+```
+**Returns:** List of matching companies with registration numbers, status, jurisdiction, incorporation date, and registry URLs.
+
+---
+
+### `get_company_profile`
+Get a full company profile including registration status, registered address, SIC codes, filing history, accounts status, and key officers.
+
+**Example:**
+```json
+{ "company_name": "Shell PLC", "registration_number": "04366849", "jurisdiction": "gb" }
+```
+**Returns:** Complete company record with filing history URL, SIC codes, accounts, and officer list.
+
+---
+
+### `verify_company`
+KYC-style verification of a company across multiple registries. Returns a confidence rating (HIGH / MEDIUM / LOW), verified status, and any discrepancies found.
+
+**Example:**
+```json
+{ "company_name": "Accenture Singapore", "country": "SG" }
+```
+**Returns:** Verification report with confidence level, confirmed identity fields, data sources checked, and verification gaps.
+
+---
+
+### `check_company_risk`
+AI-powered due diligence risk assessment. Analyses registry data to produce a risk score (0–100), risk level, specific risk factors, and recommended due diligence actions.
+
+**Example:**
+```json
+{ "company_name": "Acme Trading Ltd", "registration_number": "12345678", "jurisdiction": "gb" }
+```
+**Returns:** Risk score, risk level (LOW / MEDIUM / HIGH / CRITICAL), list of specific risk factors with severity, positive indicators, and recommended next steps.
+
+---
+
+### `get_officers`
+Get the directors and officers of a UK company including appointment dates, roles, nationalities, and resignation history. Useful for beneficial ownership analysis.
+
+**Example:**
+```json
+{ "company_name": "Shell PLC", "registration_number": "04366849", "jurisdiction": "gb" }
+```
+**Returns:** Active and resigned officers with roles, appointment dates, nationalities, and occupations.
+
+---
+
+## Data Sources
+
+| Source | Coverage | Free |
+|--------|----------|------|
+| UK Companies House | 5M+ UK companies, full filing history | ✅ |
+| Singapore ACRA | All Singapore-registered entities | ✅ |
+| OpenCorporates | 210M+ companies, 130+ jurisdictions | ✅ |
+| US SEC EDGAR | All US public company filings | ✅ |
+
+All data sourced from official government registries under open data licences. AI analysis powered by Anthropic Claude.
+
+---
+
+## Quick Start
+
+### Connect via Smithery
+```bash
+smithery mcp add OjasKord/bizfile-mcp
+```
+
+### Connect via Claude Desktop
+Add to your `claude_desktop_config.json`:
+```json
+{
+  "mcpServers": {
+    "bizfile": {
+      "command": "node",
+      "args": ["/path/to/bizfile-mcp/src/server.js"],
+      "env": {
+        "ANTHROPIC_API_KEY": "your-key-here",
+        "COMPANIES_HOUSE_API_KEY": "your-key-here"
+      }
+    }
+  }
+}
+```
+
+### Connect via HTTP
+```
+https://bizfile-mcp--ojaskord.run.tools
+```
+
+---
+
+## Environment Variables
+
+| Variable | Required | Description |
+|----------|----------|-------------|
+| `ANTHROPIC_API_KEY` | ✅ Required | Powers AI risk assessment and verification |
+| `COMPANIES_HOUSE_API_KEY` | Recommended | Free from developer.company-information.service.gov.uk — unlocks full UK data |
+| `OPENCORPORATES_API_TOKEN` | Optional | Higher rate limits on global search |
+
+---
+
+## Use Cases
+
+- **KYC automation** — Verify counterparties before onboarding
+- **Due diligence agents** — Automated company research for M&A and investment
+- **Compliance workflows** — Screen companies against registry data
+- **Legal research** — Director history, filing compliance, company status
+- **Trade finance** — Verify buyers, sellers, and intermediaries in commodity deals
+- **Credit underwriting** — Company age, filing history, officer stability
+
+---
+
+## Pricing
+
+| Tier | Price | Calls |
+|------|-------|-------|
+| Free | — | 100 calls/month |
+| Pro | $299/month | 10,000 calls/month |
+| Enterprise | $999/month | Unlimited + SLA |
+
+---
+
+## Support
+
+- GitHub Issues: [github.com/OjasKord/bizfile-mcp/issues](https://github.com/OjasKord/bizfile-mcp/issues)
+- Email: contact@bizfilemcp.com
+
+---
+
+## Legal
+
+All data retrieved from official public government registries. This tool does not provide legal or financial advice. Always verify critical information with qualified professionals.
+
+MIT License

package/SYSTEM_PROMPT.md

@@ -0,0 +1,30 @@
+# Bizfile MCP — System Prompt
+
+You have access to Bizfile MCP, a company intelligence server that provides real-time data from official government registries worldwide.
+
+## Available Tools
+
+- **search_company** — Find any company by name across 130+ jurisdictions
+- **get_company_profile** — Get full company details including status, address, filings, and officers
+- **verify_company** — KYC-style verification with confidence rating
+- **check_company_risk** — AI risk assessment with score 0-100 and due diligence recommendations
+- **get_officers** — Directors and officers with appointment history
+
+## How to use effectively
+
+1. Always start with `search_company` to get the registration number
+2. Use the registration number with `get_company_profile` for full details
+3. Use `check_company_risk` for due diligence workflows
+4. Use `verify_company` for KYC and onboarding workflows
+5. Use `get_officers` with jurisdiction: gb for UK beneficial ownership checks
+
+## Jurisdiction codes
+- `gb` — United Kingdom
+- `sg` — Singapore  
+- `us` — United States
+- `us_de` — Delaware (US)
+- `ie` — Ireland
+- `au` — Australia
+
+## Data is live
+All data is fetched in real time from official registries. Results reflect the current state of company records.

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "bizfile-mcp",
+  "version": "1.3.0",
+  "description": "Real-time company verification, KYC, and due diligence across 130+ jurisdictions. Search companies, verify identities, assess risk, and get officer data from UK Companies House, Singapore ACRA, and US SEC EDGAR.",
+  "main": "src/server.js",
+  "type": "module",
+  "scripts": {
+    "start": "node src/server.js",
+    "dev": "node --watch src/server.js"
+  },
+  "keywords": [
+    "mcp",
+    "company-intelligence",
+    "kyc",
+    "due-diligence",
+    "compliance",
+    "company-registry",
+    "companies-house",
+    "acra",
+    "singapore",
+    "uk",
+    "business-verification",
+    "corporate-intelligence",
+    "aml",
+    "sanctions",
+    "directors",
+    "officers",
+    "trade-finance",
+    "fintech",
+    "legal",
+    "risk"
+  ],
+  "author": "OjasKord",
+  "license": "MIT",
+  "homepage": "https://github.com/OjasKord/bizfile-mcp",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/OjasKord/bizfile-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/OjasKord/bizfile-mcp/issues"
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.39.0",
+    "@modelcontextprotocol/sdk": "^1.10.1",
+    "node-fetch": "^3.3.2"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}

package/smithery.yaml

@@ -0,0 +1,41 @@
+# Smithery configuration for Bizfile MCP
+# https://smithery.ai/docs/config
+
+startCommand:
+  type: http
+  configSchema:
+    type: object
+    properties:
+      anthropicApiKey:
+        type: string
+        description: "Your Anthropic API key from console.anthropic.com"
+        x-from:
+          header: "x-anthropic-api-key"
+      companiesHouseApiKey:
+        type: string
+        description: "UK Companies House API key (free at developer.company-information.service.gov.uk) — unlocks full UK company data"
+        x-from:
+          header: "x-companies-house-api-key"
+    required: []
+  url: https://bizfile-mcp-production.up.railway.app
+
+systemPrompt: |
+  You have access to Bizfile MCP, a company intelligence server providing real-time data from official government registries worldwide.
+
+  Available tools:
+  - search_company: Find any company by name across 130+ jurisdictions
+  - get_company_profile: Full company details including status, address, filings, and officers
+  - verify_company: KYC-style verification with confidence rating (HIGH/MEDIUM/LOW)
+  - check_company_risk: AI risk score 0-100 with due diligence recommendations
+  - get_officers: Directors and officers with appointment history (UK companies)
+
+  Best practice workflow:
+  1. Use search_company to find the company and get its registration number
+  2. Use get_company_profile with the registration number for full details
+  3. Use check_company_risk for due diligence
+  4. Use verify_company for KYC and onboarding
+  5. Use get_officers with jurisdiction: gb for UK beneficial ownership checks
+
+  Jurisdiction codes: gb (UK), sg (Singapore), us (USA), ie (Ireland), au (Australia)
+
+  All data is fetched live from official government registries. No hallucinated company data.

package/src/server.js

@@ -0,0 +1,263 @@
+#!/usr/bin/env node
+/**
+ * Bizfile MCP Server v1.3
+ * Root endpoint handles MCP JSON-RPC directly (Smithery-compatible)
+ */
+
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
+import Anthropic from "@anthropic-ai/sdk";
+import http from "http";
+import { randomUUID } from "crypto";
+
+const anthropic = new Anthropic({ apiKey: process.env.ANTHROPIC_API_KEY });
+const MODEL = "claude-sonnet-4-20250514";
+const PORT = process.env.PORT || 3000;
+
+// ─── DATA SOURCES ─────────────────────────────────────────────────────────────
+
+async function searchCompaniesHouse(companyName) {
+  const apiKey = process.env.COMPANIES_HOUSE_API_KEY;
+  if (!apiKey) return null;
+  const auth = Buffer.from(`${apiKey}:`).toString("base64");
+  const res = await fetch(`https://api.company-information.service.gov.uk/search/companies?q=${encodeURIComponent(companyName)}&items_per_page=5`, { headers: { Authorization: `Basic ${auth}` } });
+  if (!res.ok) return null;
+  return await res.json();
+}
+
+async function getCompaniesHouseProfile(companyNumber) {
+  const apiKey = process.env.COMPANIES_HOUSE_API_KEY;
+  if (!apiKey) return null;
+  const auth = Buffer.from(`${apiKey}:`).toString("base64");
+  const headers = { Authorization: `Basic ${auth}` };
+  const [profileRes, officersRes] = await Promise.all([
+    fetch(`https://api.company-information.service.gov.uk/company/${companyNumber}`, { headers }),
+    fetch(`https://api.company-information.service.gov.uk/company/${companyNumber}/officers`, { headers }),
+  ]);
+  return { profile: profileRes.ok ? await profileRes.json() : null, officers: officersRes.ok ? await officersRes.json() : null };
+}
+
+async function searchACRA(companyName) {
+  const res = await fetch(`https://data.gov.sg/api/action/datastore_search?resource_id=d_3f960c10fed6145404ca7b821f263b87&q=${encodeURIComponent(companyName)}&limit=5`);
+  if (!res.ok) return null;
+  const data = await res.json();
+  return data.result?.records || null;
+}
+
+async function searchOpenCorporates(companyName, jurisdiction) {
+  const params = new URLSearchParams({ q: companyName, per_page: "5" });
+  if (jurisdiction) params.append("jurisdiction_code", jurisdiction);
+  const apiToken = process.env.OPENCORPORATES_API_TOKEN;
+  if (apiToken) params.append("api_token", apiToken);
+  const res = await fetch(`https://api.opencorporates.com/v0.4/companies/search?${params}`);
+  if (!res.ok) return [];
+  const data = await res.json();
+  return data.results?.companies || [];
+}
+
+async function getOpenCorporatesCompany(jurisdictionCode, companyNumber) {
+  const apiToken = process.env.OPENCORPORATES_API_TOKEN;
+  const tokenParam = apiToken ? `?api_token=${apiToken}` : "";
+  const res = await fetch(`https://api.opencorporates.com/v0.4/companies/${jurisdictionCode}/${companyNumber}${tokenParam}`);
+  if (!res.ok) return null;
+  const data = await res.json();
+  return data.results?.company || null;
+}
+
+// ─── AI ANALYSIS ─────────────────────────────────────────────────────────────
+
+async function analyzeWithClaude(systemPrompt, userContent) {
+  const response = await anthropic.messages.create({
+    model: MODEL, max_tokens: 1500,
+    system: systemPrompt,
+    messages: [{ role: "user", content: userContent }],
+  });
+  return response.content[0].text;
+}
+
+const RISK_PROMPT = `You are a corporate KYC specialist. Return ONLY valid JSON, no markdown:
+{"risk_score":0-100,"risk_level":"LOW|MEDIUM|HIGH|CRITICAL","risk_factors":[{"factor":"string","detail":"string","severity":"LOW|MEDIUM|HIGH"}],"positive_indicators":["string"],"recommended_actions":["string"],"summary":"string"}`;
+
+const VERIFY_PROMPT = `You are a KYC verification specialist. Return ONLY valid JSON, no markdown:
+{"verified":true,"confidence":"HIGH|MEDIUM|LOW","identity_confirmed":{"legal_name":"string","registration_number":"string","jurisdiction":"string","status":"ACTIVE|INACTIVE|DISSOLVED|UNKNOWN"},"data_sources_checked":["string"],"discrepancies":["string"],"verification_gaps":["string"],"summary":"string"}`;
+
+// ─── TOOL HANDLERS ────────────────────────────────────────────────────────────
+
+async function handleSearchCompany({ company_name, jurisdiction, country }) {
+  const results = { sources: {}, companies: [] };
+  await Promise.all([
+    searchCompaniesHouse(company_name).then(r => { if (r) results.sources.companies_house = r; }).catch(() => {}),
+    searchACRA(company_name).then(r => { if (r) results.sources.acra_singapore = r; }).catch(() => {}),
+    searchOpenCorporates(company_name, jurisdiction).then(r => { if (r?.length) results.sources.opencorporates = r; }).catch(() => {}),
+  ]);
+  if (results.sources.companies_house?.items) results.companies.push(...results.sources.companies_house.items.slice(0, 5).map(c => ({ source: "Companies House (UK)", name: c.title, registration_number: c.company_number, status: c.company_status, type: c.company_type, jurisdiction: "United Kingdom", incorporated: c.date_of_creation, url: `https://find-and-update.company-information.service.gov.uk/company/${c.company_number}` })));
+  if (results.sources.acra_singapore) results.companies.push(...results.sources.acra_singapore.slice(0, 5).map(c => ({ source: "ACRA (Singapore)", name: c.entity_name, registration_number: c.uen, status: c.uen_status, type: c.entity_type, jurisdiction: "Singapore", incorporated: c.reg_date })));
+  if (results.sources.opencorporates?.length) results.companies.push(...results.sources.opencorporates.slice(0, 5).map(item => { const c = item.company; return { source: "OpenCorporates", name: c.name, registration_number: c.company_number, status: c.current_status || (c.inactive ? "Inactive" : "Active"), type: c.company_type, jurisdiction: c.jurisdiction_code?.toUpperCase(), incorporated: c.incorporation_date, url: c.opencorporates_url }; }));
+  return { query: company_name, total_results: results.companies.length, companies: results.companies, sources_checked: Object.keys(results.sources) };
+}
+
+async function handleGetCompanyProfile({ company_name, registration_number, jurisdiction }) {
+  if (!registration_number) return { note: "Full profile requires a registration number. Use search_company first.", search: await handleSearchCompany({ company_name, jurisdiction }) };
+  let profileData = {};
+  if ((jurisdiction === "gb" || jurisdiction === "uk") && registration_number) { const ch = await getCompaniesHouseProfile(registration_number).catch(() => null); if (ch) profileData.companies_house = ch; }
+  try { if (jurisdiction && registration_number) { const oc = await getOpenCorporatesCompany(jurisdiction, registration_number); if (oc) profileData.opencorporates = oc; } } catch {}
+  const ch = profileData.companies_house?.profile;
+  const oc = profileData.opencorporates;
+  const officers = profileData.companies_house?.officers?.items || [];
+  return { legal_name: ch?.company_name || oc?.name, registration_number: ch?.company_number || oc?.company_number, status: ch?.company_status || (oc?.inactive ? "inactive" : "active"), type: ch?.type || oc?.company_type, jurisdiction: ch ? "United Kingdom" : oc?.jurisdiction_code?.toUpperCase(), incorporated: ch?.date_of_creation || oc?.incorporation_date, dissolved: ch?.date_of_cessation || oc?.dissolution_date, registered_address: ch?.registered_office_address || null, sic_codes: ch?.sic_codes || [], officers: officers.slice(0, 10).map(o => ({ name: o.name, role: o.officer_role, appointed: o.appointed_on, resigned: o.resigned_on || null, nationality: o.nationality || null })), filing_history_url: ch ? `https://find-and-update.company-information.service.gov.uk/company/${ch.company_number}/filing-history` : null, sources: Object.keys(profileData) };
+}
+
+async function handleVerifyCompany({ company_name, registration_number, jurisdiction, country }) {
+  const searchData = await handleSearchCompany({ company_name, jurisdiction: jurisdiction || country, country });
+  const analysis = await analyzeWithClaude(VERIFY_PROMPT, JSON.stringify({ company_name, registration_number, search_results: searchData }));
+  let parsed; try { parsed = JSON.parse(analysis); } catch { parsed = { raw_analysis: analysis }; }
+  return { ...parsed, raw_data: searchData };
+}
+
+async function handleCheckCompanyRisk({ company_name, registration_number, jurisdiction }) {
+  let companyData = {};
+  try { companyData.search = await handleSearchCompany({ company_name, jurisdiction }); } catch {}
+  if (registration_number && jurisdiction) { try { companyData.profile = await handleGetCompanyProfile({ company_name, registration_number, jurisdiction }); } catch {} }
+  const analysis = await analyzeWithClaude(RISK_PROMPT, JSON.stringify({ company_name, registration_number, jurisdiction, data: companyData }));
+  let parsed; try { parsed = JSON.parse(analysis); } catch { parsed = { raw_analysis: analysis }; }
+  return { company: company_name, registration_number: registration_number || null, jurisdiction: jurisdiction || "unknown", ...parsed, data_sources: companyData.search?.sources_checked || [] };
+}
+
+async function handleGetOfficers({ company_name, registration_number, jurisdiction }) {
+  if (!registration_number) return { note: "Registration number required. Use search_company to find it.", company: company_name };
+  if (jurisdiction !== "gb" && jurisdiction !== "uk") return { note: "Officer data available for UK companies (jurisdiction: gb).", company: company_name };
+  const ch = await getCompaniesHouseProfile(registration_number).catch(() => null);
+  if (!ch?.officers?.items?.length) return { note: "No officer data found.", company: company_name };
+  const officers = ch.officers.items.map(o => ({ name: o.name, role: o.officer_role, appointed: o.appointed_on, resigned: o.resigned_on || null, nationality: o.nationality || null, occupation: o.occupation || null }));
+  return { company: company_name, registration_number, source: "Companies House (UK)", total_officers: officers.length, active_officers: officers.filter(o => !o.resigned), resigned_officers: officers.filter(o => o.resigned) };
+}
+
+// ─── TOOL DEFINITIONS ─────────────────────────────────────────────────────────
+
+const TOOLS = [
+  { name: "search_company", description: "Search for a company by name across UK Companies House, Singapore ACRA, and OpenCorporates (130+ jurisdictions). Returns matching companies with registration numbers and status.", inputSchema: { type: "object", properties: { company_name: { type: "string", description: "Company name to search for" }, country: { type: "string", description: "Optional country filter e.g. UK, SG, US" }, jurisdiction: { type: "string", description: "Optional jurisdiction code e.g. gb, sg" } }, required: ["company_name"] } },
+  { name: "get_company_profile", description: "Get detailed company profile including status, address, SIC codes, filing history. Provide registration_number and jurisdiction for best results.", inputSchema: { type: "object", properties: { company_name: { type: "string" }, registration_number: { type: "string" }, jurisdiction: { type: "string", description: "Jurisdiction code: gb (UK), sg (Singapore)" } }, required: ["company_name"] } },
+  { name: "verify_company", description: "KYC-style company verification. Returns confidence rating, verified status, and discrepancies found across registries.", inputSchema: { type: "object", properties: { company_name: { type: "string" }, registration_number: { type: "string" }, jurisdiction: { type: "string" }, country: { type: "string" } }, required: ["company_name"] } },
+  { name: "check_company_risk", description: "AI-powered due diligence risk assessment. Returns risk score 0-100, risk level, specific risk factors, and recommended due diligence actions.", inputSchema: { type: "object", properties: { company_name: { type: "string" }, registration_number: { type: "string" }, jurisdiction: { type: "string" } }, required: ["company_name"] } },
+  { name: "get_officers", description: "Get directors and officers of a UK company with appointment dates, roles, and nationalities. Requires registration_number and jurisdiction: gb.", inputSchema: { type: "object", properties: { company_name: { type: "string" }, registration_number: { type: "string", description: "Required" }, jurisdiction: { type: "string", description: "Use gb for UK companies" } }, required: ["company_name", "registration_number", "jurisdiction"] } },
+];
+
+// ─── MCP SERVER FACTORY ───────────────────────────────────────────────────────
+
+function createMCPServer() {
+  const server = new Server({ name: "bizfile-mcp", version: "1.3.0" }, { capabilities: { tools: {} } });
+  server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
+  server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    const { name, arguments: args } = request.params;
+    try {
+      let result;
+      switch (name) {
+        case "search_company": result = await handleSearchCompany(args); break;
+        case "get_company_profile": result = await handleGetCompanyProfile(args); break;
+        case "verify_company": result = await handleVerifyCompany(args); break;
+        case "check_company_risk": result = await handleCheckCompanyRisk(args); break;
+        case "get_officers": result = await handleGetOfficers(args); break;
+        default: throw new Error(`Unknown tool: ${name}`);
+      }
+      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+    } catch (error) {
+      return { content: [{ type: "text", text: JSON.stringify({ error: error.message, tool: name }) }], isError: true };
+    }
+  });
+  return server;
+}
+
+// ─── HTTP SERVER ──────────────────────────────────────────────────────────────
+
+const sessions = new Map();
+
+const httpServer = http.createServer(async (req, res) => {
+  res.setHeader("Access-Control-Allow-Origin", "*");
+  res.setHeader("Access-Control-Allow-Methods", "GET, POST, DELETE, OPTIONS");
+  res.setHeader("Access-Control-Allow-Headers", "Content-Type, Mcp-Session-Id");
+  if (req.method === "OPTIONS") { res.writeHead(204); res.end(); return; }
+
+  const url = new URL(req.url, `http://localhost`);
+
+  // Health check on /health only
+  if (url.pathname === "/health") {
+    res.writeHead(200, { "Content-Type": "application/json" });
+    res.end(JSON.stringify({ name: "bizfile-mcp", version: "1.3.0", status: "running", tools: TOOLS.map(t => t.name) }));
+    return;
+  }
+
+  // All MCP traffic goes through / and /mcp
+  if (url.pathname === "/" || url.pathname === "/mcp") {
+    if (req.method === "POST") {
+      let body = "";
+      req.on("data", chunk => { body += chunk; });
+      req.on("end", async () => {
+        try {
+          const message = JSON.parse(body);
+          const sessionId = req.headers["mcp-session-id"];
+          let transport;
+
+          if (sessionId && sessions.has(sessionId)) {
+            transport = sessions.get(sessionId);
+          } else if (isInitializeRequest(message)) {
+            const server = createMCPServer();
+            transport = new StreamableHTTPServerTransport({
+              sessionIdGenerator: () => randomUUID(),
+              onsessioninitialized: (id) => sessions.set(id, transport),
+            });
+            transport.onclose = () => { if (transport.sessionId) sessions.delete(transport.sessionId); };
+            await server.connect(transport);
+          } else {
+            // Stateless fallback — create a fresh server for each request
+            const server = createMCPServer();
+            transport = new StreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+            await server.connect(transport);
+          }
+
+          await transport.handleRequest(req, res, message);
+        } catch (e) {
+          if (!res.headersSent) { res.writeHead(500, { "Content-Type": "application/json" }); res.end(JSON.stringify({ error: e.message })); }
+        }
+      });
+      return;
+    }
+
+    if (req.method === "GET") {
+      const sessionId = req.headers["mcp-session-id"];
+      if (sessionId && sessions.has(sessionId)) {
+        await sessions.get(sessionId).handleRequest(req, res);
+      } else {
+        res.writeHead(400, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ error: "Invalid or missing session ID" }));
+      }
+      return;
+    }
+
+    if (req.method === "DELETE") {
+      const sessionId = req.headers["mcp-session-id"];
+      if (sessionId && sessions.has(sessionId)) { await sessions.get(sessionId).close(); sessions.delete(sessionId); }
+      res.writeHead(200); res.end();
+      return;
+    }
+  }
+
+  res.writeHead(404, { "Content-Type": "application/json" });
+  res.end(JSON.stringify({ error: "Not found" }));
+});
+
+// ─── START ────────────────────────────────────────────────────────────────────
+
+if (process.env.MCP_TRANSPORT === "stdio") {
+  const server = createMCPServer();
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+  console.error("Bizfile MCP Server v1.3 running (STDIO)");
+} else {
+  httpServer.listen(PORT, () => {
+    console.log(`Bizfile MCP Server v1.3 running on port ${PORT}`);
+    console.log(`Health: http://localhost:${PORT}/health`);
+    console.log(`MCP: http://localhost:${PORT}/`);
+  });
+}

package/test.js

@@ -0,0 +1,137 @@
+/**
+ * Bizfile MCP — Quick Test Script
+ * Tests each data source independently
+ * Run: node test.js
+ */
+
+const COMPANIES_HOUSE_API_KEY = process.env.COMPANIES_HOUSE_API_KEY;
+const ANTHROPIC_API_KEY = process.env.ANTHROPIC_API_KEY;
+
+console.log("=== Bizfile MCP — Data Source Tests ===\n");
+
+// Test 1: Companies House
+async function testCompaniesHouse() {
+  console.log("TEST 1: UK Companies House...");
+  if (!COMPANIES_HOUSE_API_KEY) {
+    console.log("  ⚠️  COMPANIES_HOUSE_API_KEY not set — skipping\n");
+    return;
+  }
+  try {
+    const auth = Buffer.from(`${COMPANIES_HOUSE_API_KEY}:`).toString("base64");
+    const res = await fetch(
+      "https://api.company-information.service.gov.uk/search/companies?q=Shell&items_per_page=3",
+      { headers: { Authorization: `Basic ${auth}` } }
+    );
+    const data = await res.json();
+    if (data.items && data.items.length > 0) {
+      console.log(`  ✅ Working — found ${data.total_results} results for "Shell"`);
+      console.log(`  First result: ${data.items[0].title} (${data.items[0].company_number})\n`);
+    } else {
+      console.log("  ❌ No results returned\n");
+    }
+  } catch (e) {
+    console.log(`  ❌ Error: ${e.message}\n`);
+  }
+}
+
+// Test 2: Singapore ACRA
+async function testACRA() {
+  console.log("TEST 2: Singapore ACRA...");
+  try {
+    const res = await fetch(
+      "https://data.gov.sg/api/action/datastore_search?resource_id=d_3f960c10fed6145404ca7b821f263b87&q=singapore+airlines&limit=3"
+    );
+    const data = await res.json();
+    if (data.result?.records?.length > 0) {
+      console.log(`  ✅ Working — found ${data.result.total} results for "Singapore Airlines"`);
+      console.log(`  First result: ${data.result.records[0].entity_name}\n`);
+    } else {
+      console.log("  ⚠️  No results — ACRA dataset may have changed\n");
+    }
+  } catch (e) {
+    console.log(`  ❌ Error: ${e.message}\n`);
+  }
+}
+
+// Test 3: SEC EDGAR
+async function testEDGAR() {
+  console.log("TEST 3: US SEC EDGAR...");
+  try {
+    const res = await fetch(
+      "https://efts.sec.gov/LATEST/search-index?q=%22Apple+Inc%22&forms=10-K&hits.hits._source=display_names,file_date,form_type",
+      { headers: { "User-Agent": "BizfileMCP contact@bizfilemcp.com" } }
+    );
+    const data = await res.json();
+    if (data.hits?.hits?.length > 0) {
+      console.log(`  ✅ Working — found SEC filings for Apple Inc`);
+      console.log(`  Latest filing: ${data.hits.hits[0]._source.form_type} on ${data.hits.hits[0]._source.file_date}\n`);
+    } else {
+      console.log("  ⚠️  No results returned\n");
+    }
+  } catch (e) {
+    console.log(`  ❌ Error: ${e.message}\n`);
+  }
+}
+
+// Test 4: OpenCorporates (no key needed for basic search)
+async function testOpenCorporates() {
+  console.log("TEST 4: OpenCorporates (global)...");
+  try {
+    const res = await fetch(
+      "https://api.opencorporates.com/v0.4/companies/search?q=Accenture&per_page=3"
+    );
+    const data = await res.json();
+    if (data.results?.companies?.length > 0) {
+      console.log(`  ✅ Working — found ${data.results.total_count} results for "Accenture"`);
+      console.log(`  First result: ${data.results.companies[0].company.name} (${data.results.companies[0].company.jurisdiction_code})\n`);
+    } else {
+      console.log("  ⚠️  No results returned\n");
+    }
+  } catch (e) {
+    console.log(`  ❌ Error: ${e.message}\n`);
+  }
+}
+
+// Test 5: Anthropic API
+async function testAnthropic() {
+  console.log("TEST 5: Anthropic API...");
+  if (!ANTHROPIC_API_KEY) {
+    console.log("  ⚠️  ANTHROPIC_API_KEY not set — skipping\n");
+    return;
+  }
+  try {
+    const res = await fetch("https://api.anthropic.com/v1/messages", {
+      method: "POST",
+      headers: {
+        "x-api-key": ANTHROPIC_API_KEY,
+        "anthropic-version": "2023-06-01",
+        "content-type": "application/json",
+      },
+      body: JSON.stringify({
+        model: "claude-haiku-4-5-20251001",
+        max_tokens: 50,
+        messages: [{ role: "user", content: "Reply with just: API working" }],
+      }),
+    });
+    const data = await res.json();
+    if (data.content?.[0]?.text) {
+      console.log(`  ✅ Working — ${data.content[0].text}\n`);
+    } else {
+      console.log(`  ❌ Unexpected response: ${JSON.stringify(data)}\n`);
+    }
+  } catch (e) {
+    console.log(`  ❌ Error: ${e.message}\n`);
+  }
+}
+
+// Run all tests
+async function runTests() {
+  await testCompaniesHouse();
+  await testACRA();
+  await testEDGAR();
+  await testOpenCorporates();
+  await testAnthropic();
+  console.log("=== Tests complete ===");
+}
+
+runTests();