Sanctions Screening MCP server
{
"mcpServers": {
"watchtower": {
"type": "http",
"url": "https://watchtower-api.com/mcp"
}
}
}{
"mcpServers": {
"watchtower": {
"type": "http",
"url": "https://watchtower-api.com/mcp"
}
}
}{
"mcpServers": {
"watchtower": {
"type": "http",
"url": "https://watchtower-api.com/mcp"
}
}
}{
"servers": {
"watchtower": {
"type": "http",
"url": "https://watchtower-api.com/mcp"
}
}
}{
"mcpServers": {
"watchtower": {
"type": "http",
"url": "https://watchtower-api.com/mcp"
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsonversion 1.1.0
What it does
Watchtower exposes compliance and data-integrity tools for AI agents, including sanctions screening against 10 government lists, KYB (Know Your Business), identifier validation, jurisdiction risk assessment, PII/secret detection, and LEI resolution. It is for developers building agents that need to perform regulatory checks and validate data without managing their own list infrastructure.
- Screen a person or company name against OFAC, UN, EU, UK, and other sanctions lists to block high-risk parties during onboarding.
- Validate financial identifiers like IBAN, LEI, BIC, and cryptocurrency addresses by checksum to catch malformed or fraudulent data.
- Scan unstructured text to detect and redact PII (emails, SSNs) and secrets (API keys, private keys) before storing or processing.
Tools this server exposes
| Tool | Does |
|---|---|
| screen_name | Screen a person, company, or vessel against 10 sanctions and exclusion lists covering OFAC, UN, EU, UK, Canada, Australia, France, Switzerland, and US export-co |
| kyb_check | Look up a company by name and return its official GLEIF legal identity along with its sanctions and exclusions screening in one call. |
| screen_crypto_address | Check a cryptocurrency address against OFAC's sanctioned-address list. |
| validate_identifier | Validate and normalize IBAN, LEI, ISIN, BIC, VAT, card numbers, Ethereum addresses, Bitcoin addresses, email, and other identifiers by checksum. |
| check_jurisdiction | Look up a country or jurisdiction in FATF (black and grey list) and EU high-risk-country AML classifications with dates and sources. |
| scan_text | Detect and redact PII (emails, SSNs, card numbers, IBANs) and secrets (API keys, private keys, tokens) in text. |
| resolve_lei | Resolve a Legal Entity Identifier via GLEIF to retrieve legal name, status, and jurisdiction. |
| search_lei_by_name | Search for a Legal Entity Identifier by company name via GLEIF. |
| create_watch | Set up monitoring of a name; a webhook fires when that name's sanctions matches change. |
| get_screening_info | List sanctions list versions, source freshness, entry counts, and current pricing. |
| create_api_key | Create a free API key with trial credit for authenticated access to paid tools. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.