Security & Testing

watchtower-api.com

Screens entities and crypto addresses against global sanctions lists and provides monitoring.

x402 supported1 endpoint13 known toolsFirst detected July 25, 2026Last detected August 29, 2026

ENDPOINT 1

https://watchtower-api.com/mcp

No auth detected

MCP server metadata

Name: watchtower-sanctions-screening
Version: 1.1.0

Capabilities

tools.listChanged

Known tools 13

create_api_key

Create a Watchtower API key.

Potential side effects

screen_name

Screen a person/company/vessel name against OFAC (SDN + Consolidated), UN, EU, UK, Canada, Australia, France, Switzerland, US export-control (BIS/State), and US SAM procurement/benefit exclusions.

Inferred read-only

screen_names_batch

Screen up to 500 names in one call against OFAC SDN, OFAC Consolidated, UN, EU, and UK OFSI sanctions lists.

Inferred read-only

screen_crypto_address

Check whether a crypto address (BTC/ETH/others) appears on OFAC's sanctioned digital-currency address list.

Inferred read-only

create_watch

Monitor a name against all sanctions + US export-control lists.

Inferred read-only

list_watches

List your active watches (free).

Inferred read-only

validate_identifier

Deterministically validate & normalize an identifier by its checksum/format: iban, lei, isin, bic, card, vat, eth, email, domain, phone, uuid, btc, cusip, sedol, imei.

Potential side effects

check_jurisdiction

Classify a country's AML risk against the FATF black/grey lists AND the EU high-risk-third-countries list.

Inferred read-only

scan_text

Detect & redact PII and secrets in text (private_key, jwt, aws_access_key, github_token, stripe_key, slack_token, openai_key, google_api_key, sendgrid_key, npm_token, gitlab_token, twilio_key, slack_webhook, azure_storage_key, basic_auth_url, email, ssn, ipv4, eth_address, iban, credit_card, phone).

Potential side effects

resolve_lei

Resolve a Legal Entity Identifier (LEI) to its official GLEIF record: legal name, status, jurisdiction, country, registration status.

Inferred read-only

search_lei_by_name

Find Legal Entity Identifiers by company legal name via GLEIF — returns candidate records (lei, legal_name, status, jurisdiction, country).

Inferred read-only

kyb_check

Know-Your-Business in one call: resolve a company (by name or LEI) to its GLEIF legal identity AND screen it against sanctions + exclusion lists.

Inferred read-only

get_screening_info

Free: sanctions list versions, source hashes, freshness, entry counts, and the full per-tool price menu.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.watchtower-sanctions-screening]
url = "https://watchtower-api.com/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "watchtower-sanctions-screening": {
      "type": "http",
      "url": "https://watchtower-api.com/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: watchtower-sanctions-screening
Remote MCP URL: https://watchtower-api.com/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "watchtower-sanctions-screening": {
      "url": "https://watchtower-api.com/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "watchtower-sanctions-screening": {
      "type": "http",
      "url": "https://watchtower-api.com/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "watchtower-sanctions-screening",
  "transport": "streamable-http",
  "url": "https://watchtower-api.com/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for watchtower-api.com was fetched 2026-08-03T10:17:04.880Z and is being refreshed.

Trust status Neutral

watchtower-api.com is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.