Cipher & Row

Who this is for:engineers buildingAI agent carrier vetting, autonomous dispatch, brokerage automation, and freight-fraud-prevention systems - and security reviewers evaluating how the server resists prompt injection.

claude mcp add --transport http cipher-row https://mcp.cipherandrow.com/mcp # then run /mcp in a session and choose Authenticate

Raw HTTP- OAuth 2.1 + PKCE, or anAuthorization: Bearer cr_live_...key:

curl -sS https://mcp.cipherandrow.com/mcp \ -H "Content-Type: application/json" \ -H "Authorization: Bearer cr_live_YOUR_KEY" \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{ "name":"cr_verify_carrier","arguments":{"dot_number":"53467"}}}'

The surface is verification + a watchlist. No tool posts a load, moves money, or messages a counterparty- so even a hijacked agent's blast radius is bounded by design.

├── schemas/ JSON Schemas (draft 2020-12) for all 8 tools + tools.json manifest ├── mcp-config/ Copy-paste client configs (Claude Desktop/Code, Cursor, generic) ├── docs/ │ ├── PROMPT-INJECTION-DEFENSE.md Air-gapped verification: how the server resists injection │ ├── API-TO-MCP.md Append-only audit trail + multi-signal scores over MCP │ ├── AUTHENTICATION.md OAuth 2.1 + PKCE and API-key auth │ ├── RATE-LIMITS.md Per-tier, per-category ceilings │ └── TOOLS.md Human-readable tool reference ├── examples/ │ ├── vet-a-carrier.md End-to-end disambiguate → verify → decide → monitor │ └── sample-responses/ Illustrative response shapes ├── SECURITY.md Responsible disclosure + security posture ├── LICENSE MIT (this interface repo) └── NOTICE What is open here vs. what stays proprietary

- Disambiguatewithcr_search_registry(identity only, no score).
- Verifywithcr_verify_carrier/cr_verify_broker- profile, fraud signals, and a canonical0-100 trust scorewith a per-factor breakdown, computedserver-sidefrom independent regulated signals. The entity being scored has no channel to inflate its own score.
- Decidein your agent, on the evidence and verdict - not on the conversation.
- Monitorwithcr_add_partnerso authority, insurance, and bond changes reach you between deals. Every verification call is written to aserver-side audit log.

- United States- live FMCSA authority, insurance (BIPD/cargo/bond), safety and inspection history, surety bonds (BMC-84/85), sanctions screening.
- Canada- federal + cross-border FMCSA on every lookup; provincial depth varies by province. Canadianbrokerverification is available over MCP (cab_id); Canadiancarrierintake is a REST write, not an MCP tool.

- Air-gapped verification- trust decisions are grounded in out-of-band authoritative data, not in the agent's persuadable context.
- Typed output is structured evidence; third-party free-text fields are data to reason over, never commands to execute.
- OAuth 2.1 + PKCEwith scoped, server-enforced role gating andper-key rate limits.
- EIN excludedfrom the agent door; inputs sanitized; payloads capped.
- Audit logof every verification call (which tool, which account, when, outcome).

Keywords: MCP freight verification · LLM-ready freight data · AI agent carrier vetting · FMCSA carrier lookup API · broker verification · double-brokering fraud detection · chameleon carrier · freight trust score · Model Context Protocol logistics · autonomous dispatch agent.

EU Corporate Sustainability Reporting Directive compliance — ESRS mapping, double materiality, ESG data collection by MEOK AI Labs

MCP-сервер для проверки контрагентов через egrul.nalog.ru: получение выписки ЕГРЮЛ/ЕГРИП по ИНН/ОГРН.

CLI and MCP server for the UK Companies House API — company search, profiles, officers, filings, ownership, and due diligence

Company lookup, LEI search, SEC filings, and financials for AI agents. 6 tools, free, no API key.

All-in-one bundle: EU VAT validation, Dutch CBS statistics, and GDPR compliance tools — 19 tools for EU businesses in a single MCP server.

Ask natural language questions about your SafetyCulture data using the SafetyCulture API.

Provides basic enterprise information services, including business registration, company profiles, shareholders, and key personnel.

Provides comprehensive enterprise risk analysis, including violation records, mortgage information, business anomalies, and judicial cases.

Provides comprehensive information queries for enterprise qualification certificates, including honors, administrative licenses, and profiles.