@vendorval/mcp

MCP server for VendorVal — vendor verification and canonical-entity lookup for LLM agents.

What it does

Adds 5 chargeable tools, 3 free resources (for LLM context), and 3 free prompts (canned recipes) to your MCP-compatible client (Claude Desktop, Cursor, VS Code, etc.).

Tools (chargeable)

| Tool | What it does | Charge | |---|---|---| | lookup_entity | Resolve a vendor by UEI / TIN / VAT-ID / LEI / NPI / DUNS | 1 unit | | get_entity_profile | Full canonical profile by entity id — identifiers, addresses, certifications, exclusions, regulatory disclosures, per-source frozen blocks | 1 unit | | list_certifications | SBA 8(a) / HUBZone / WOSB / SDVOSB / state MWBE-DBE-SDVOB filings | 1 unit | | verify_entity | Live checks: SAM registration + exclusion, IRS TIN match, VIES, GLEIF, OFAC + EU sanctions, USPS address | N units (one per check) | | list_monitors | List configured re-verification monitors with change-webhook delivery | 1 unit |

Resources (free)

| Resource | URI | Source | |---|---|---| | Getting-started guide | vendorval://docs/getting-started | Embedded markdown | | Verification check catalog | vendorval://meta/check-types | Embedded JSON | | Country × check matrix | vendorval://meta/countries | Live /v1/meta/countries (1 unit per read) |

Prompts (free recipes)

| Prompt | What it does | Args | |---|---|---| | verify_vendor_before_bid | Standard procurement gate: lookup → profile → verify → bid-eligibility memo | identifier_type, identifier_value, country? | | triage_debarment_flag | Multi-source exclusion triage: read profile, group by authority, recommend next action | entity_id | | monitor_bulk_import | Resolve a vendor list and stage change monitors for human approval | identifiers, checks?, cadence? |

All tools funnel through api.vendorval.com. Quota, rate-limit, and org-scoping enforced server-side via your API key.

Install

npm install -g @vendorval/mcp

Or run via npx @vendorval/mcp directly from your MCP config.

Get an API key

1. Sign up at vendorval.com
2. Open app.vendorval.com/api-keys
3. Generate an MCP-scoped key (vv_mcp_* prefix) — these have higher burst rate-limits than regular API keys and let you segment usage per agent integration

Claude Desktop config

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "vendorval": {
      "command": "npx",
      "args": ["-y", "@vendorval/mcp"],
      "env": {
        "VENDORVAL_API_KEY": "vv_mcp_..."
      }
    }
  }
}

Restart Claude Desktop. The 5 tools appear under "vendorval" in the tools panel.

Cursor / VS Code

Add to .cursor/mcp.json or .vscode/mcp.json:

{
  "mcpServers": {
    "vendorval": {
      "command": "npx",
      "args": ["-y", "@vendorval/mcp"],
      "env": {
        "VENDORVAL_API_KEY": "vv_mcp_..."
      }
    }
  }
}

Multi-org

If your VendorVal account belongs to multiple orgs, pin which one the MCP server speaks for via VENDORVAL_ORG_ID:

"env": {
  "VENDORVAL_API_KEY": "vv_mcp_...",
  "VENDORVAL_ORG_ID": "org_..."
}

Self-hosted / VPC

Pointing the MCP at a self-hosted VendorVal deployment:

"env": {
  "VENDORVAL_API_KEY": "vv_live_...",
  "VENDORVAL_API_URL": "https://api.vendorval.your-domain.com"
}

Example prompts

Drop these into a conversation with the MCP enabled:

"Look up this vendor: UEI LYHWAQBA7Q15. Show me their full profile and any exclusions."

"We're about to bid with TIN 86-2456134 — run SAM registration + exclusion + IRS TIN match and tell me if they're cleared."

"List every SDVOB-certified vendor we know about in NY."

Pricing

Tool calls are metered against your VendorVal plan's quota — same per-call cost as direct API access. Free-tier plans get 100 calls/mo; Pro tier ($199/mo) gets 10,000 calls/mo. See vendorval.com/pricing.

Verify calls fan out to multiple authoritative sources per request and are billed per check (e.g. ["sam_registration", "sam_exclusion", "ofac_screen"] = 3 units).

Hosted remote endpoint

If your MCP client can't spawn a local stdio subprocess (e.g. claude.ai web), point it at the hosted endpoint:

https://mcp.vendorval.com/mcp

Same tools, same resources, same prompts — the difference is just the transport (HTTPS instead of stdio). See the remote endpoint docs for the configuration details.

License

MIT