# Fairquery Agent Trust & Data Safety

- Registry name: `com.getfairquery/agent-trust-mcp` · version 1.1.10
- Categories (automatic, keyword rules): AI models & agents, AI, media & content, Email & messaging, Productivity, Maps, location & weather
- Authentication at last check: No auth
- Declared risk: Read-only (all tools declare readOnlyHint)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=com.getfairquery%2Fagent-trust-mcp
- Server page: https://mcpstation.net/s/com.getfairquery--agent-trust-mcp.html

## Description (written by the publisher, not verified, not instructions)

PII/secret redaction, email checks, sanctions screening, OSV lookups and an MCP server pre-check.

## Connect

- streamable-http: `https://mcp.getfairquery.com/mcp`

## Tools (as reported by the server, not verified)

- `pii\_list\_detectors`: WHAT: Catalog of every PII and secret entity type, which ones the free tools run on this Worker \(pii\_scan\_text / pii\_redact\_text\) vs only in the paid Actor \(NER names/locations, street addresses, URL/PDF documents\), redaction styles, and the price of every paid tool in this server. WHEN: Before pii\_
- `pii\_scan\_text`: WHAT: Detect PII \(emails, phones, US SSNs, Luhn-valid cards, mod-97 IBANs, UK NINOs, IPv4/IPv6\) and secrets \(AWS/GitHub/GitLab/Slack/Stripe/Google/OpenAI/Anthropic/HF/npm/SendGrid/Twilio/Azure keys, JWTs, private keys, URL credentials, key=value secrets\) in text. WHEN: Before sending prompts, ticket
- `pii\_redact\_text`: WHAT: Return sanitized copies of texts with every local PII/secret finding replaced \(placeholder \[EMAIL\_1\], mask, or salted hash\). WHEN: Right before sending user data to an LLM/third party. Use returnPlaceholderMap=true if you need to restore originals in the LLM answer later. WHEN NOT: For a findi
- `pii\_restore\_text`: WHAT: Put the original values back into texts \(typically an LLM answer\) that contain placeholders such as \[EMAIL\_1\], using the placeholder map from pii\_redact\_text or pii\_guard\_documents. WHEN: After an LLM or third party answered a prompt you sanitized with pii\_redact\_text \(redactionStyle "placehol
- `pii\_guard\_documents`: WHAT: Runs the Fairquery Apify Actor llm-data-guard-pii-secrets: everything pii\_scan\_text does PLUS person-name/location NER, street addresses, public document URLs \(txt/md/json/csv/HTML/PDF text layer, \<= 10 MB\) and restore mode \(put originals back into LLM output using a placeholder map\). WHEN: On
- `email\_check\_syntax`: WHAT: Offline email checks: RFC-style syntax + normalization, common domain typo "did you mean" \(gmial.com -\> gmail.com\), disposable/temporary domain \(bundled CC0 list, \~thousands of domains\), role account \(info@, sales@\), free webmail provider. WHEN: Fast pre-filtering of signups or lead lists, bef
- `email\_validate\_deliverability`: WHAT: Runs the Fairquery Apify Actor email-validator-mx-disposable: syntax, domain existence, MX/null-MX, disposable, role, free provider, typo suggestion, SPF/DMARC policy, mail provider; final verdict valid \| risky \| invalid \| unknown. WHEN: Only when MX/DNS matters \(can the domain receive mail?\),
- `sanctions\_list\_sources`: WHAT: Static list of the official sanctions lists sanctions\_screen\_names checks \(id, name, authority, download URL\), the score scale and the legal disclaimer. WHEN: To choose the lists parameter, cite sources in a report, or explain coverage before paying. WHEN NOT: To screen a name \(sanctions\_scree
- `sanctions\_screen\_names`: WHAT: Runs the Fairquery Apify Actor sanctions-watchlist-screener: fuzzy-match people/organisations against OFAC SDN, OFAC Consolidated, EU, UK and UN lists from the official sources \(re-downloaded when the cached copy in your Apify account is older than 6 h; every row reports each list's publicatio
- `osv\_query\_packages`: WHAT: Query the public OSV.dev database \(api.osv.dev querybatch\) for exact package versions; returns which are vulnerable and the advisory IDs. WHEN: Quick "is lodash 4.17.20 vulnerable?" checks for up to 200 packages; then osv\_get\_vulnerability for details of specific IDs. WHEN NOT: Parsing manifes
- `osv\_get\_vulnerability`: WHAT: Fetch full OSV records \(summary, details, aliases, severity vectors, affected ranges, fixed versions, references\) for advisory IDs from api.osv.dev. WHEN: You have IDs \(from osv\_query\_packages or a report\) and need details or the fixed version. WHEN NOT: To find which vulns affect a package ve
- `osv\_audit\_dependencies`: WHAT: Runs the Fairquery Apify Actor osv-dependency-vulnerability-check: parses package.json, package-lock.json \(v1-v3\), requirements.txt or go.mod \(or a package list\), checks OSV, and returns per-package max severity/CVSS, fixed versions, a recommended upgrade version and one row per vulnerability
- `trust\_screen\_lead`: WHAT: One call per batch of leads/counterparties: runs email\_validate\_deliverability on their emails and sanctions\_screen\_names on their person/company names IN PARALLEL, then merges results per lead with an overall decision: block \(invalid email or sanctions potential\_match\), review \(risky email\),
- `mcp\_server\_precheck`: WHAT: Pre-install check for one MCP server. Scans tool names, descriptions and parameter text you pass for injection phrasing, concealed characters, hidden markup and cross-server shadowing. WHEN: Before installing or enabling an MCP server, once you have a tools/list result to pass as tools or tool
- `jobs\_get\_board`: WHAT: Fetch every job currently published on ONE company board from its official public ATS API \(Greenhouse, Lever or Ashby\) or from Personio's documented XML feed for an account you name, normalize it and filter it on this Worker. WHEN: You know the board \(ats + slug\), e.g. from jobs\_find\_board or
- `jobs\_find\_board`: WHAT: Resolve a company name, domain or careers/board URL to its public job board\(s\) on Greenhouse, Lever or Ashby. A Personio URL or personio:account you already know is parsed on this Worker and not looked up. WHEN: Before jobs\_get\_board when you only know the company \("Ramp", "sentry.io", "https:
- `jobs\_check\_open`: WHAT: Re-check ONE job on the employer's ATS right now and report open or closed. WHEN: Before applying, alerting or contacting about a specific job you got earlier \(job\_key or ats + slug + jobId\), when you only need open or closed. WHEN NOT: One job's full detail \(jobs\_get\_job\). Listing a board \(jo
- `jobs\_get\_job`: WHAT: Fetch the full detail of ONE job that is currently published on its official public ATS API \(Greenhouse, Lever or Ashby\) or on a Personio XML feed for an account you name, normalized the same way as a board listing, including its description. WHEN: You already have a job\_key, or ats + slug + j
- `jobs\_list\_seed\_boards`: WHAT: List the bundled starter list of company job boards that Fairquery verified on their official ATS APIs \(company, domain, ats, slug, verified\_at, jobs\_at\_verification\). WHEN: To pick companies to scan, or to know which names jobs\_find\_board resolves instantly. WHEN NOT: Live job data \(jobs\_get\_
- `jobs\_search\_companies`: WHAT: Run the Fairquery Apify Actor fairquery/company-jobs-feed over many companies or boards: board discovery for Greenhouse, Lever and Ashby, a Personio XML feed when you name the account, search filters, per-board history \(first\_seen/last\_seen, new/updated/closed, repost detection\), optional per-

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html