Gleif

@pipeworx/gleif

Global Legal Entity Identifier Foundation MCP — LEI lookup, ISIN/BIC-to-entity mapping, and corporate hierarchy, no auth.

Part of Pipeworx — an MCP gateway connecting AI agents to 1831+ live data sources. This is an independent, unofficial integration — not affiliated with, endorsed by, or published by the upstream provider.

Tools

• search_lei(query, country?, status?, page_size?) — fuzzy entity-name search. If country narrows the result to nothing, the filter is dropped and the response says so via country_filter_dropped — GLEIF filters on the registered legal address, which often is not where the entity operates (no Sberbank-named record has a Russian one; they sit in CY/SK/LU/GB).
• get_lei(lei) — full Level 1 record: legal name, addresses, jurisdiction, legal form, and LEI registration status. Accepts a company name as well as a 20-character LEI; a resolved name is echoed back as resolved_from_name. legal_form and registration_authority are decoded inline, best-effort, as legal_form_decoded / registration_authority_decoded (see decode_elf_code / decode_registration_authority below) — a decode failure never blocks the base record, and the raw codes are always still present.

registered_as + registration_authority (on get_lei and every search_lei result). The company's id in its OWN national business register, and the code of that register — RA000585 UK Companies House, RA000189 INSEE Sirene, RA000413 Japan NTA, RA000472 Brønnøysund. This is what ties an LEI to a national-register record by key rather than by name similarity (the name route is what resolved "Porsche" to a Martinique entity). An id is only unique within its register, so always read the pair. Two things to know: GLEIF publishes some registers' ids with spaces inside them (Equinor's Norwegian orgnr arrives as 923 609 016) and this pack strips all whitespace so the id joins — nothing else is changed, because -, ., _ and / are part of how those registers format their own ids; and RA999999 is GLEIF's "other / not applicable" sentinel, which never carries an id (0 of 201 in a sampled daily delta). Null when GLEIF publishes no id — ~7.5% of records.

• get_lei_relationships(lei) — Level 2 direct parent, ultimate parent, direct children (one hop).
• isin_to_lei(isin) — resolve a security's ISIN to the legal entity that issued it (LEI + legal name). A valid-but-unmapped ISIN is reported as mapped: false, reason: "isin_unmapped" — the mapping lags new issuance, so unmapped ≠ nonexistent.
• lei_to_isins(lei) — all ISINs issued by an entity (LEI or company name accepted). Returns the full set — one entity issues many securities.
• bic_to_lei(bic) — resolve a SWIFT/BIC (8 or 11 chars) to the bank's legal entity. 8-char codes are padded to the XXX head-office form (GLEIF's filter matches 11-char BICs only); a branch BIC with no mapping of its own falls back to the head office and says so.
• lei_hierarchy_tree(lei, depth?) — multi-hop ownership: ancestor chain up to the ultimate parent plus a breadth-first subsidiary tree (depth 1–4, default 2, node budget 150/call).
• gleif_group_members(lei, limit?) — the WHOLE consolidated group in one call, across every jurisdiction. Pass any member (LEI or name); the tool climbs to the ultimate accounting-consolidation parent and returns every entity that reports it, every direct-parent descendant, and their international branches. member_count, jurisdiction_count and by_jurisdiction always cover the full group; the member list is capped at limit (default 300, max 2000) and says when it is. Siemens AG: 572 reported subsidiaries, matching GLEIF's own ultimate-children count. Fund-management links are not ownership and are excluded. Carries data_as_of.
• gleif_lei_screen(jurisdiction, registration_status?, entity_status?, category?, event_type?, since_days?, name_contains?, limit?, offset?) — bulk screen across all ~3.4M LEIs: e.g. every LEI in DE that lapsed in the last 30 days, Delaware (US-DE) entities retired this quarter, UK entities whose latest event is a merger. A country code includes its subdivisions. since_days applies to status_date (LAPSED = the renewal date missed; RETIRED/ANNULLED = entity expiration date, else last update; ISSUED = initial registration) or, with event_type, to the event date. total is exact up to 100,000. GLEIF records a merger as RETIRED plus a MERGERS_AND_ACQUISITIONS/ABSORPTION event with successor_lei — MERGED is refused with that explanation rather than answered with zero rows. Sole-proprietor names are withheld in bulk results (they name individuals). Carries data_as_of.
• decode_elf_code(code) — decode an ISO 20275 Entity Legal Form code (the 4-character code in legal_form) to its registered name, language, country and jurisdiction, e.g. "XJHM" → Sweden's "Aktiebolag". The two ISO sentinel codes, "8888" (no specific legal form recorded) and "9999" (not yet classified), carry no country and are flagged via is_sentinel rather than answered as a plain miss.
• decode_registration_authority(code) — decode a GLEIF Registration Authority code (the code in registration_authority) to the national business register's name, website and jurisdiction(s), e.g. "RA000585" → the UK's Companies House. Bare digits are zero-padded and prefixed with "RA" automatically.

Data source

gleif_group_members and gleif_lei_screen answer from the GLEIF golden copy (Level 2 relationship records and Level 1 entity reference data, published three times a day at goldencopy.gleif.org), refreshed daily. data_as_of in each response is the GLEIF publish time the answer reflects.

Licence. GLEIF LEI Data Terms of Use, section II: "The data available through the Access Service are provided under the CC0 licence" (terms, read 2026-09-30).

decode_elf_code and decode_registration_authority answer per code from GLEIF's own ISO 20275 Entity Legal Forms code list and its Registration Authorities list. get_lei's inline legal_form_decoded / registration_authority_decoded use the same two lookups.

The other tools:

https://api.gleif.org/api/v1/ — public JSON:API, no key required. ISIN and BIC joins use GLEIF's official ISIN-to-LEI and BIC-to-LEI mapping files as served through the same API (filter[isin], filter[bic], /lei-records/{lei}/isins).

Passing an LEI

Every tool that takes an lei argument also takes a company name — the name is resolved against the registry and the match is returned alongside the answer. Pass the name whenever that is what you have.

Never construct an LEI code. A guessed 20-character string that happens to be a real LEI belongs to some other company, and GLEIF returns its record with nothing to indicate the wrong entity was fetched — a request for Wirecard AG once came back as Baader Bank Aktiengesellschaft. Codes are checked against the ISO 17442 (ISO 7064 MOD 97-10) check digits before any request is made, and a code that fails is rejected with a message naming search_lei; that catches roughly 96 of every 97 invented codes, but not one that collides with a live record, which is why the name path exists.

Quick Start

Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):

{
  "mcpServers": {
    "gleif": {
      "url": "https://gateway.pipeworx.io/gleif/mcp"
    }
  }
}

What this endpoint actually serves

tools/list at https://gateway.pipeworx.io/gleif/mcp returns the tools in the table above plus the shared Pipeworx meta-tools — ask_pipeworx, discover_tools, search_within, remember/recall and the rest of the gateway-wide set. So the tool count you see is larger than this table: a single-pack endpoint currently lists roughly 30 shared tools alongside the pack's own. The connection's initialize response states its exact scope, and is the authoritative answer for a given day.

This is deliberate, not multiplexing by accident. The meta-tools are what let a scoped connection answer a question this pack does not cover — via ask_pipeworx, which routes across the whole catalog — without you adding a second MCP server. There is currently no way to mount a pack endpoint without them; if the extra schemas cost you more context than the routing is worth, connect to the full gateway once rather than to several pack endpoints.

Or connect to the full Pipeworx gateway to get every pack's tools listed directly, instead of just this one's:

{
  "mcpServers": {
    "pipeworx": {
      "url": "https://gateway.pipeworx.io/mcp"
    }
  }
}

Both URLs reach the same gateway and the same 1831+ data sources. The only difference is which pack's tools are listed directly; ask_pipeworx reaches all of them from either one.

No MCP client? Call it over HTTP

curl -X POST https://gateway.pipeworx.io/v1/tools/search_lei \
  -H 'Content-Type: application/json' \
  -d '{"query":"Apple Inc"}'

No account needed for the first calls. Inspect any tool: GET https://gateway.pipeworx.io/v1/tools/search_lei. Find one: POST https://gateway.pipeworx.io/v1/tools/search_packs with {"query":"..."}.

Standalone (no gateway account)

This package also runs as a local stdio MCP server — no Pipeworx account, no gateway round-trip:

{
  "mcpServers": {
    "gleif": {
      "command": "npx",
      "args": ["-y", "@pipeworx/mcp-gleif"]
    }
  }
}

Or run it directly to confirm it starts:

npx -y @pipeworx/mcp-gleif

It speaks MCP over stdin/stdout and answers initialize/tools/list/tools/call for only this pack's tools — none of the shared meta-tools the gateway connection above adds. Same source, same tools, no ask_pipeworx routing.

Using with ask_pipeworx