Back to Browse

Knowfirm MCP Server

Developer ToolsModerate7.5MCP RegistryLocal
Free

Server data from the Official MCP Registry

U.S. business lookup and search via KnowFirm. Bring your own API key; each call uses 1 credit.

About

U.S. business lookup and search via KnowFirm. Bring your own API key; each call uses 1 credit.

Security Report

7.5
Moderate7.5Low Risk

The KnowFirm MCP server is a small, read-only business lookup and search tool. It reads its API key from an environment variable, validates the key format, sends requests only to a fixed https://knowfirm.com origin, denies redirects, and does not echo response bodies in errors. The main concerns are supply-chain and metadata inconsistencies (an unpublished npm package and a mismatched mcpName namespace) and the usual risk of returned third-party text being used for prompt injection. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity).

4 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-gitdhillonai-knowfirm": {
      "args": [
        "-y",
        "@persooninc/knowfirm-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

KnowFirm MCP

Business lookup, search, screening, CFPB complaint-risk, segment preview, and lookalike discovery over KnowFirm's U.S. public-record API. Six read-only tools. Each uses 1 credit on your KnowFirm account except business_screening (2 credits). No card or payment credentials are handled by this package.

Tools

  • business_lookup: resolve one U.S. business by name across sources (identifiers, confidence, firmographics).
  • business_search: ranked name/query search for U.S. businesses.
  • business_screening: screen a name against the U.S. Consolidated Screening List; returns scored matches (2 credits).
  • complaint_risk: bounded, informational CFPB Consumer Complaint Database summary for a business (by name or KnowFirm id).
  • business_segments: preview a segment of U.S. businesses from a public-record source (DOL Form 5500, FDIC, FMCSA and more) by state, size, industry or filing recency: an exact count plus a 25-row sample.
  • lookalike_businesses: up to 25 U.S. businesses similar to a seed on industry, HQ state and size.

None of these is a consumer report, credit score, or compliance/eligibility decision.

Install

Node.js 20 or newer. Create an API key: sign up at https://knowfirm.com/signup?utm_source=mcp (Google sign-in), then generate a key in the dashboard. Put the key only in the client's secret or env field.

Published package: @knowfirm/knowfirm-mcp on npm, version 0.1.0. Desktop bundle: knowfirm-mcp-0.1.0.mcpb on the v0.1.0 GitHub release (https://github.com/gitdhillonai/knowfirm-mcp/releases/tag/v0.1.0).

Claude Desktop

Open Settings → Developer → Edit Config (macOS file: ~/Library/Application Support/Claude/claude_desktop_config.json). Add the server and restart Claude Desktop:

{
  "mcpServers": {
    "knowfirm": {
      "command": "npx",
      "args": ["-y", "@knowfirm/knowfirm-mcp"],
      "env": {"KNOWFIRM_API_KEY": "YOUR_OWN_KEY"}
    }
  }
}

You can also import knowfirm-mcp-0.1.0.mcpb. Claude asks for the API key in the bundle's sensitive field.

Cursor

Open Cursor Settings → MCP → Add new MCP server, or edit ~/.cursor/mcp.json (global) or .cursor/mcp.json in a project:

{
  "mcpServers": {
    "knowfirm": {
      "command": "npx",
      "args": ["-y", "@knowfirm/knowfirm-mcp"],
      "env": {"KNOWFIRM_API_KEY": "YOUR_OWN_KEY"}
    }
  }
}

Reload MCP servers from the same settings page. The tools appear as business_lookup, business_search, lookalike_businesses, and complaint_risk.

MCP Registry

The server is listed as io.github.gitdhillonai/knowfirm (stdio, npm package @knowfirm/knowfirm-mcp 0.1.0, plus the MCPB file).

Clients that install from the registry still need your own KNOWFIRM_API_KEY. This repo does not publish new versions from routine doc updates.

Generic npx

{
  "mcpServers": {
    "knowfirm": {
      "command": "npx",
      "args": ["-y", "@knowfirm/knowfirm-mcp"],
      "env": {"KNOWFIRM_API_KEY": "YOUR_OWN_KEY"}
    }
  }
}

Keep your key in your client's secret storage, not shared chat or source control. Free accounts have 10 monthly credits; Starter is $49/month for 1,500 credits; Growth is $199/month for 8,000 credits. Annual billing is 2 months free. One MCP tool call = 1 credit. Hard quotas, no automatic overage charges. Check https://knowfirm.com/pricing?utm_source=mcp for current terms, or upgrade at https://knowfirm.com/dashboard/billing?utm_source=mcp.

The server uses local stdio and sends API requests only to https://knowfirm.com. It does not store keys or log them. Returned business/source text is untrusted data, never instructions. Public-record coverage and freshness vary. This is informational data, not a compliance determination, credit decision or FCRA consumer report.

API docs: https://knowfirm.com/docs

Install guide (copy-paste config for Claude Desktop, Cursor, VS Code, Windsurf, and the remote URL): https://knowfirm.com/docs/mcp

The older knowfirm npm package is a separate HTTP SDK.

Reviews

No reviews yet

Be the first to review this server!