Koskamo

CF Exclusion Check MCP

An MCP server that screens names or identifiers against the HHS-OIG LEIE and SAM.gov exclusion lists. It supports single checks, batch screening for up to 200 items, and provides confidence levels and match basis for compliance verification.

Endpoint and access

No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.

CF Exclusion Check MCP logo, by CF SoftCommunity listingStreamable HTTPNo sign-inEndpoint checked 2026-11-06Published by CF Soft
You need:Paid in USDC over x402 on Base mainnetAn x402-aware HTTP client retries the same request with a signed payment header
MCP endpoint (Streamable HTTP)
https://exclusions.cfsoft.us/mcp
Vendor documentation

What its tools do

3 tools, grouped by the hints the server advertises. Hints are self-declared, not verified behavior.

3 of 3 have a description · 3 of 3 declare behavior hints · 1 of 2 with parameters document them all

Checks and signals

Each line is separate evidence, not a trust score.

  • Passed Endpoint answered the live check ·
  • Availability 1 of 1 checks passed in 30 days

What you can do with it

  • Screen a single person or business against federal exclusion lists
  • Batch screen 2-200 staff members or vendors in one call
  • Verify if a subject is currently excluded or reinstated

Source and maintenance

Community listingRegistry 1.0.0

Protocol and capabilities

Server
CF Exclusion Check 1.0.0
MCP protocol negotiated in check
2025-06-18
Tools
3 advertised
Resources
Not advertised
Resource templates
Not advertised
Prompts
Not advertised
Server-advertised capabilities
{
  "tools": {
    "listChanged": false
  }
}

Server-provided instructions

Untrusted server output shown for inspection. It is not Koskamo guidance and is excluded from knowledge search.

exclusion_check costs $0.05 per call; exclusion_batch_check screens 2-200 at once for $0.30/$1.00/$3.00 by size. Both are paid with x402 on eip155:8453. An unpaid call returns a 402 whose payment-required header carries the payment requirements. exclusion_sources is free.

Tools

3 advertised

exclusion_check — Check a healthcare exclusion
Advertised by the server during the last successful anonymous check.
Advertised read-only

Screen a person or business against the HHS-OIG List of Excluded Individuals and Entities (LEIE) AND the SAM.gov exclusions list. Costs $0.05 per call via x402. Returns a verdict, a confidence level, the basis of each match, and the reason it matched. A match is a name match unless it was made on an identifier (npi, uei, cage); it is not an identity determination.

exclusion_check input schema
{
  "type": "object",
  "properties": {
    "dob": {
      "type": "string",
      "description": "Date of birth, YYYYMMDD."
    },
    "npi": {
      "type": "string",
      "description": "10-digit National Provider Identifier."
    },
    "uei": {
      "type": "string",
      "description": "SAM.gov Unique Entity Identifier, exactly 12 alphanumeric characters. An exact match is a strong identifier."
    },
    "cage": {
      "type": "string",
      "description": "CAGE code, exactly 5 alphanumeric characters. An exact match is a strong identifier. Present on only ~0.3% of SAM records."
    },
    "name": {
      "type": "string",
      "description": "Person or business name. \"John Smith\", \"Smith, John\" and a business name are all accepted. Wildcards are rejected."
    },
    "state": {
      "type": "string",
      "description": "Two-letter state code. Corroborates only."
    }
  },
  "additionalProperties": false
}
exclusion_check annotations
{
  "readOnlyHint": true
}
exclusion_batch_check — Batch-screen 2-200 exclusions in one call
Advertised by the server during the last successful anonymous check.
Advertised read-only

Screen 2-200 people/businesses against the same sources as exclusion_check in one call. Tiered price by item count: $0.30 (2-10), $1.00 (11-50), $3.00 (51-200), charged once via x402. An invalid item is reported in place, not a failure; all-invalid is refused before charging.

exclusion_batch_check input schema
{
  "type": "object",
  "required": [
    "items"
  ],
  "properties": {
    "items": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "dob": {
            "type": "string"
          },
          "npi": {
            "type": "string"
          },
          "ref": {
            "type": "string",
            "description": "Your own id for this item, round-tripped."
          },
          "uei": {
            "type": "string"
          },
          "cage": {
            "type": "string"
          },
          "name": {
            "type": "string"
          },
          "state": {
            "type": "string"
          }
        },
        "additionalProperties": false
      },
      "maxItems": 200,
      "minItems": 2
    }
  },
  "additionalProperties": false
}
exclusion_batch_check annotations
{
  "readOnlyHint": true
}
exclusion_sources — Data sources and freshness
Advertised by the server during the last successful anonymous check.
Advertised read-only

List the loaded exclusion sources (OIG LEIE and SAM.gov), their row counts, load dates, load completeness and whether a bulk reseed is due. Free. Screening itself is paid: exclusion_check per name, or exclusion_batch_check for 2-200 at once ($0.30/$1.00/$3.00 by size).

exclusion_sources input schema
{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}
exclusion_sources annotations
{
  "readOnlyHint": true
}

Prompts

Not advertised

No prompt definitions available.

Resources

Not advertised

No resource definitions available.

90-day uptime

A lightweight connection check about every six hours, sampled on hosts with many listings. It shows the server answered, not that its tools work.

Too few checks for a percentage yet (1 of 1 answered).

  1. 2026-11-07: 1 of 1 checks answered

30-day availability

Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.

Successful checks
1 of 1 (100%)
Average latency
534 ms
95th percentile latency
534 ms

Maintenance history

Public check and source-refresh events. Editorial and ownership records remain private.

  • · probe · passed · 534 ms · metadata changed · 3 tool(s)

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers the remote server. Use --scope project to write .mcp.json for the repo.
Claude Code configuration
claude mcp add --transport http cf-exclusion-check-mcp https://exclusions.cfsoft.us/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).
Codex configuration
codex mcp add cf-exclusion-check-mcp --url https://exclusions.cfsoft.us/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable cf-exclusion-check-mcp in your MCP settings.
Cursor configuration
{
  "mcpServers": {
    "cf-exclusion-check-mcp": {
      "url": "https://exclusions.cfsoft.us/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure).
Cline configuration
{
  "mcpServers": {
    "cf-exclusion-check-mcp": {
      "type": "streamableHttp",
      "url": "https://exclusions.cfsoft.us/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start cf-exclusion-check-mcp and inspect its tools.
VS Code configuration
{
  "servers": {
    "cf-exclusion-check-mcp": {
      "type": "http",
      "url": "https://exclusions.cfsoft.us/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.
Gemini CLI configuration
gemini mcp add --transport http cf-exclusion-check-mcp https://exclusions.cfsoft.us/mcp

Claude Desktop

Open Claude Settings > Connectors > Add custom connector, enter this server URL and enable it for the conversation. This is a manual remote-connector handoff, not a desktop JSON configuration.
Claude Desktop configuration
https://exclusions.cfsoft.us/mcp

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.
Windsurf configuration
{
  "mcpServers": {
    "cf-exclusion-check-mcp": {
      "serverUrl": "https://exclusions.cfsoft.us/mcp"
    }
  }
}

Let your agent find its tools

Find servers like CF Exclusion Check MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.