DataNexus is an MCP server with 55 tools an agent can call, among them apikeys_generate_api_key, apikeys_revoke_api_key, apikeys_rotate_api_key. It answers at https://datanexusmcp.com/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 10 of 10 times since 4 September 2026; the last check, on 18 October 2026, succeeded.
Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
apikeys_generate_api_key | Generate a DataNexus API key for the given email address. Anonymous callers get 10 free lookups/week; a registered free key unlocks 100/week. Store the returned key — it is shown only once. Pass it as the X-Api-Key header on future requests Inputs: email |
apikeys_revoke_api_key | ⚠️ DESTRUCTIVE — requires human confirmation before use in automated pipelines. Permanently revoke a DataNexus API key. The key will stop working immediately. This action cannot be undone — generate a new key if access is needed again. Inputs: key |
apikeys_rotate_api_key | ⚠️ DESTRUCTIVE — requires human confirmation before use in automated pipelines. Revoke the current API key and issue a replacement. Returns the new key once — store it immediately. Pass keys as the X-DataNexus-Key header. Inputs: current_key |
compliance_check_sam_exclusion | Check whether an entity is on the US federal exclusions list (debarred from government contracts). Read-only. No side effects. Idempotent. US only. name_or_ein: Entity name or 9-digit EIN with or without dash e.g. Acme Corp or 13-1234567. R Inputs: name_or_ein |
compliance_fetch_finra_broker | Fetch FINRA BrokerCheck registration for a US broker or investment adviser by CRD number. Read-only. No side effects. Idempotent. US only. crd_number: Central Registration Depository number as a string of digits e.g. 1234567. Required. CRD Inputs: crd_number |
compliance_fetch_npi_provider | Fetch NPI registration details for a US healthcare provider by NPI number. Read-only. No side effects. Idempotent. US only. npi_number: 10-digit NPI number e.g. 1003000126. Required. Do not include dashes or spaces. Returns provider name, c Inputs: npi_number |
compliance_search_npi_by_name | Search the NPPES NPI Registry by provider name with optional state and speciality filters. Read-only. No side effects. Idempotent. US only. Returns up to 10 matches. name: Full or partial provider name. Required. state: Two-letter US state Inputs: name, state, speciality |
domain_check_email_security | Check SPF, DMARC, and DKIM email authentication for a domain. domain: Domain without protocol e.g. "google.com". Returns: overall_grade (A–F), spf_score, dmarc_score, dkim_score (each 0–10), spf_record, dmarc_record, dkim_selectors_found. S Inputs: domain |
domain_fetch_dns_records | Fetch current DNS records for a domain via Cloudflare DNS over HTTPS. Read-only. No side effects. Idempotent. domain: Domain name without protocol e.g. cloudflare.com. Required. record_types: List of DNS record types to fetch. Required. Val Inputs: domain, record_types |
domain_fetch_domain_history | Fetch historical SSL certificate issuance for a domain from Certificate Transparency logs. Read-only. No side effects. Idempotent. domain: Domain name without protocol e.g. example.com. Required. Returns all past certificates with issuer, v Inputs: domain |
domain_fetch_domain_rdap | Fetch domain registration details via IANA RDAP (the modern structured replacement for WHOIS). Read-only. No side effects. Idempotent. domain: Domain name without protocol e.g. example.com not https://example.com. Required. Returns registra Inputs: domain |
domain_fetch_reverse_ip | Find domains co-hosted on the same IP address (reverse IP lookup). Read-only. No side effects. Idempotent. domain_or_ip: Domain name (e.g. shared.dreamhost.com) or IPv4 address (e.g. 1.2.3.4). Required. If a domain is given, it is first res Inputs: domain_or_ip |
domain_fetch_ssl_certificate_chain | Fetch SSL certificate history for a domain from Certificate Transparency logs. Read-only. No side effects. Idempotent. domain: Domain name without protocol e.g. github.com. Required. Does not support IP addresses or wildcard domains. Return Inputs: domain |
domain_fetch_subdomains | Enumerate subdomains for a domain via Certificate Transparency logs. Read-only. No side effects. Idempotent. domain: Domain name without protocol e.g. anthropic.com. Required. Returns deduplicated list of known subdomains. Primary source: c Inputs: domain |
frontend_security_audit_ci_pipeline | Scan GitHub Actions, Vercel, or Netlify CI configs for exposed secrets, missing lockfile enforcement, and unpinned dependencies. Paste your config content — no filesystem access required. config: Raw YAML/TOML content of your CI config. Req Inputs: config, config_type |
frontend_security_audit_manifest | Audit a frontend package.json for security risks — returns a single SHIP/CAUTION/BLOCK verdict with licence risks and abandonment signals. Different from security_fetch_package_vulnerabilities which audits a single package — this takes your Inputs: manifest, lockfile |
frontend_security_detect_typosquatting | Typosquatting detection optimised for the top 500 frontend packages (React, Vite, Axios, Lodash, etc.). Fewer false positives than a full npm scan. For backend packages, use security_detect_typosquatting instead. package_name: Package name Inputs: package_name, ecosystem |
frontend_security_fetch_package_risk_brief | SHIP/CAUTION/BLOCK risk brief for an npm package with frontend-specific context. Wraps security_fetch_package_risk_brief restricted to npm, and adds weekly_downloads and is_ui_component signals. package_name: npm package name. Required. ver Inputs: package_name, version |
govcon_fetch_open_solicitations | Fetch currently open government contract solicitations matching a keyword. Read-only. No side effects. Idempotent. keyword: Description of goods or services sought e.g. cloud computing services. Required. Encode special characters — + becom Inputs: keyword, agency, jurisdiction |
govcon_fetch_vendor_contract_history | Fetch the complete federal contract award history for a specific vendor. Read-only. No side effects. Idempotent. vendor_name: Company or organisation name e.g. Booz Allen Hamilton. Required. Fuzzy match used. jurisdiction: One of US, EU, or Inputs: vendor_name, jurisdiction |
govcon_search_contract_awards | Search government contract awards by keyword, agency, and date range. keyword: Contract scope e.g. "cybersecurity software". agency: Awarding agency e.g. "Department of Defense". Optional. date_from: Earliest award date ISO 8601 e.g. "2024- Inputs: keyword, agency, date_from, jurisdiction |
legal_fetch_inventor_portfolio | Fetch the patent portfolio for a named inventor with optional assignee filter. Read-only. No side effects. Idempotent. inventor_name: Inventor surname or full name e.g. Smith or John Smith. Required. Fuzzy match — common names may return ma Inputs: inventor_name, assignee |
legal_fetch_patent_by_number | Fetch full patent details by patent number and jurisdiction. Read-only. No side effects. Idempotent. patent_number: Patent number in EPODOC format e.g. EP1000000 for European, CN120586032 for Chinese, JP2020123456 for Japanese, WO2020123456 Inputs: patent_number, jurisdiction |
legal_fetch_patent_citations | Fetch forward and backward citation chains for a specific patent. Read-only. No side effects. Idempotent. patent_number: Patent number in EPODOC format e.g. EP1000000 for European, CN120586032 for Chinese, JP2020123456 for Japanese, WO20201 Inputs: patent_number, jurisdiction |
legal_search_patents_by_keyword | Search patents by keyword across EPO, USPTO, or WIPO. Read-only. No side effects. Idempotent. Returns up to 10 matches. keywords: Search terms describing the invention e.g. neural network image classification. Required. jurisdiction: One of Inputs: keywords, jurisdiction, date_from |
nonprofit_fetch_charity_uk | Fetch UK registered charity details by charity number or organisation name. Read-only. No side effects. Idempotent. UK only. charity_number_or_name: UK registered charity number (7 digits, e.g. 1234567) or full/partial organisation name. Re Inputs: charity_number_or_name |
nonprofit_fetch_nonprofit_by_ein | Fetch IRS 990 filing data for any US nonprofit by EIN. Read-only. No side effects. Idempotent. US only. ein: 9-digit Employer ID with or without dash, e.g. 46-5734087 or 465734087. Required. Returns name, revenue, expenses, assets, NTEE cod Inputs: ein |
nonprofit_fetch_nonprofit_financial_trends | 5-year financial trend for any US nonprofit. Revenue growth, expense ratios, reserve trajectory, and health score history from IRS Form 990 data via ProPublica. Returns trend_direction (GROWING/STABLE/DECLINING/VOLATILE/INSUFFICIENT_DATA), Inputs: ein, years |
nonprofit_fetch_nonprofit_full_profile | Complete nonprofit due diligence in one call. Revenue trends, executive pay, risk flags, and a health score from IRS 990 data. Uses ProPublica Nonprofit Explorer API with IRS e-File fallback. Data refreshed on each call. Returns financials, Inputs: ein |
nonprofit_search_nonprofits_by_category | Search US nonprofits by mission category and state. Returns up to 25 results with revenue, assets, and health scores (0–100). Category maps to NTEE codes: education, healthcare, arts, environment, human_services, civil_rights, international Inputs: category, state |
nonprofit_search_nonprofits_by_name | Search US nonprofits by name with optional state filter. Read-only. No side effects. Idempotent. US only. Returns up to 25 matches. name: Full or partial organisation name. Required. state: Two-letter US state code e.g. CA, NY. Optional, de Inputs: name, state |
regulatory_fetch_docket_details | Fetch full details for a specific regulatory docket by ID. Read-only. No side effects. Idempotent. US federal only. docket_id: Docket identifier in agency format e.g. EPA-HQ-OAR-2021-0317 or FTC-2024-0041. Required. Timeout is 30 seconds — Inputs: docket_id |
regulatory_fetch_federal_register_notices | Fetch recent Federal Register notices and rules for a specific agency. Read-only. No side effects. Idempotent. US federal only. agency: Agency name or abbreviation e.g. SEC, Food and Drug Administration, EPA. Required. keyword: Optional top Inputs: agency, keyword, date_from |
regulatory_search_open_rulemakings | Search open rulemakings and public comment periods on Regulations.gov and the Federal Register. Read-only. No side effects. Idempotent. US federal only. keyword: Topic keywords e.g. artificial intelligence, data privacy. Required. agency: A Inputs: keyword, agency, status |
report_feedback | Report a data quality issue or agent intent gap for a DataNexus tool response. tool_id: e.g. "T10" or "security_fetch_cve_detail". query_hash: From the query_hash field of the response. signal: incorrect_data | missing_field | stale_data | Inputs: tool_id, query_hash, signal, comment, missing_fields, feedback_type |
report_mcpize_link | Check MCPize subscription status for a DataNexus tool. tool_id: DataNexus tool identifier e.g. "T10". Pass the tool the user is asking about. Returns: status ("free" | "subscription_required" | "not_configured"), message, tool_id, and upgra Inputs: tool_id |
search_datanexus_tools | Find the right DataNexus tool by describing your task in plain English. Read-only. No side effects. Call this before any other DataNexus tool to reduce context load from 40000 to 800 tokens. query: Plain English description of your task e.g Inputs: query, domain |
security_audit_licence_compatibility | Audit the licence compatibility of your entire dependency list. Input package names (with ecosystem) or SPDX IDs; get a COMPATIBLE/CONFLICT verdict with specific conflicting pairs and recommended action. Uses static SPDX compatibility table Inputs: packages, spdx_ids |
security_audit_sbom_continuous | Persistent SBOM watch. Register once, check anytime for new CVEs affecting your dependency snapshot. Silent permanent watch — CycloneDX and SPDX supported. Uses OSV.dev for vulnerability lookup, Redis for persistence with 90-day TTL. Suppor Inputs: sbom, watch_id, action |
security_audit_sbom_license_policy | Audit a CycloneDX or SPDX SBOM against an SPDX licence policy and return a PASS/WARN/BLOCK verdict. sbom: Full SBOM as a JSON string — CycloneDX or SPDX format. Required. 500 KB max. policy: Optional dict with block/warn/allow arrays of exa Inputs: sbom, policy |
security_audit_sbom_vulnerabilities, security_detect_typosquatting, security_fetch_cisa_kev, security_fetch_cve_detail, security_fetch_cve_epss, security_fetch_cve_risk_summary, security_fetch_cve_watch, security_fetch_cve_watch_status, security_fetch_dependency_graph, security_fetch_licence_analysis, security_fetch_package_licence, security_fetch_package_maintainer_history, security_fetch_package_risk_brief, security_fetch_package_vulnerabilities, validate_tool_output
Every block below points at https://datanexusmcp.com/mcp. Pick your client and copy.
claude mcp add --transport http datanexus https://datanexusmcp.com/mcp
{
"mcpServers": {
"datanexus": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://datanexusmcp.com/mcp"]
}
}
}{
"mcpServers": {
"datanexus": {
"url": "https://datanexusmcp.com/mcp"
}
}
}{
"servers": {
"datanexus": {
"type": "http",
"url": "https://datanexusmcp.com/mcp"
}
}
}{
"context_servers": {
"datanexus": {
"url": "https://datanexusmcp.com/mcp"
}
}
}{
"mcpServers": {
"datanexus": {
"serverUrl": "https://datanexusmcp.com/mcp"
}
}
}{
"mcpServers": {
"datanexus": {
"url": "https://datanexusmcp.com/mcp"
}
}
}name: DataNexus
version: 0.0.1
schema: v1
mcpServers:
- name: DataNexus
type: streamable-http
url: https://datanexusmcp.com/mcp{
"mcpServers": {
"datanexus": {
"httpUrl": "https://datanexusmcp.com/mcp"
}
}
}{
"mcpServers": {
"datanexus": {
"type": "http",
"url": "https://datanexusmcp.com/mcp"
}
}
}{
"mcpServers": {
"datanexus": {
"url": "https://datanexusmcp.com/mcp"
}
}
}goose://extension?url=https%3A%2F%2Fdatanexusmcp.com%2Fmcp&type=streamable_http&id=datanexus&name=DataNexus
It answered our last check on 18 October 2026 in 333 ms. Over 10 checks since 4 September 2026 it answered 10. Status here comes from Neuronto's own probes, not from the publisher.
Yes. It is published by datanexusmcp.com and served from datanexusmcp.com, the vendor's own domain: https://datanexusmcp.com/mcp.
55, as returned by the server's own tools/list on 10 September 2026: apikeys_generate_api_key, apikeys_revoke_api_key, apikeys_rotate_api_key, compliance_check_sam_exclusion, compliance_fetch_finra_broker, compliance_fetch_npi_provider, compliance_search_npi_by_name, domain_check_email_security, and 47 more.
It answered our last check on 18 October 2026 in 333 ms. Over 10 checks since 4 September 2026 it answered 10.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://datanexusmcp.com/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: com.datanexusmcp. Endpoint host: datanexusmcp.com. ARD identifier: urn:air:com.datanexusmcp:mcp:mcp-server.
First indexed 31 August 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.