Check a company before you deal with it.

Pyxmark lets your AI assistant look up a US company in SEC filings, screen the name against the OFAC, UN, EU and UK sanctions lists, check federal contracting exclusions, and read the warning signs in its web domain. Every answer links to the government source.

Staging. Access is by invitation while we test. Write to hello@whetwheel.com for a key.

Connect

You need an API key (it starts with vk_). The server address is:

https://mcp.whetwheel.com/mcp

Claude Code

claude mcp add --transport http vetco https://mcp.whetwheel.com/mcp \
  --header "Authorization: Bearer vk_YOUR_KEY"

Cursor

Settings → MCP → Add new server, or put this in ~/.cursor/mcp.json:

{
  "mcpServers": {
    "vetco": {
      "url": "https://mcp.whetwheel.com/mcp",
      "headers": { "Authorization": "Bearer vk_YOUR_KEY" }
    }
  }
}

Claude Desktop

Settings → Developer → Edit Config, then add:

{
  "mcpServers": {
    "vetco": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.whetwheel.com/mcp",
               "--header", "Authorization: Bearer vk_YOUR_KEY"]
    }
  }
}

Clients that can't send headers can use https://mcp.whetwheel.com/mcp?key=vk_YOUR_KEY. Treat that URL like a password.

Try asking

“Run a due diligence report on Acme Corp, acme.com, Delaware.”
“Is this supplier on any sanctions list?”
“Show me Tesla's last three years of revenue and recent 8-Ks.”

Tools

search_company: Find a US public company in SEC EDGAR by name, ticker, or CIK. Returns CIK, tickers, and match score.
company_profile: SEC EDGAR profile: identity, industry, state of incorporation, address, 3 years of key financials (revenue, net income, assets, cash), and recent 10-K/10-Q/8-K filings with links.
screen_sanctions: Fuzzy-screen a person or organisation name against OFAC SDN + Consolidated, UN, EU, and UK sanctions lists. Returns scored matches with source links.
check_exclusions: Check a name against SAM.gov federal contracting exclusions (debarments/suspensions).
domain_age: Domain registration date, age, registrar (RDAP) and email-auth records (MX, SPF, DMARC) — common fraud signals.
state_registry_link: Official Secretary of State business-search link for a US state, to verify a private company's status, formation date, and registered agent.
due_diligence_report: One-call due-diligence report: SEC profile (if public), sanctions screen, federal exclusions, domain signals, and state registry link, with a red-flag summary and source links.

Limits and pricing

Free: 50 lookups a month. Every tool call counts as one lookup. Paid plans will be about $12 a month for 3,000 lookups.

Sources

SEC EDGAR; OFAC SDN and Consolidated lists; UN Security Council Consolidated List; EU Financial Sanctions; UK Sanctions List; SAM.gov exclusions; RDAP and public DNS. Lists refresh daily. See sync status.

Read this

Results are informational, not a compliance determination. Lists change, names are matched fuzzily, and a near match is not proof of identity. Check the linked official record before you act.