
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
license-verify-mcp
Advanced tools
Verify US contractor license + surety bond + insurance from official state data. MCP-native, agent-payable, pay-per-success. WA live, CA beta.
The only MCP-native license check that returns official SURETY BOND + INSURANCE from state data — not just active/inactive status. Pay-per-success: $0.03 full result, $0.01 status-only, FREE on a miss. WA live (official L&I), CA beta (CSLB).
Tools: verify_license, list_supported_jurisdictions.
// Call
{ "tool": "verify_license", "jurisdiction": "WA", "license_number": "ECOSTSC758NN" }
// Response (abridged)
{
"found": true,
"result": {
"status": "active",
"bonded": { "is_bonded": true, "details": "Surety: NORTH RIVER INSURANCE COMPANY THE; Amount: $30,000" },
"insured": { "has_insurance": true, "details": "Carrier: State National Ins Co Inc; Coverage: $1,000,000" }
}
}
| Result | Price |
|---|---|
| Full (status + bond + insurance) | $0.03 |
Status-only (no bond/insurance match, or statusOnly: true) | $0.01 |
Miss (found: false) | FREE |
| State | Status | Source | Bond + Insurance |
|---|---|---|---|
| WA | ✅ Live | WA L&I open data (data.wa.gov) | ✅ Real data (bzff-4fmt + ciwg-agsx datasets) |
| CA | ⚠️ Beta | CSLB HTML (cslb.ca.gov) | ✅ Parsed when CSLB is up |
Washington is the reliable, production-ready jurisdiction. Official WA L&I open data is served via Socrata JSON — no scraping, no rate limits, bond and insurance data included from dedicated datasets.
California is beta. CSLB does not publish an open API; the provider fetches the HTML detail page directly. CSLB rate-limits or 503s automated requests intermittently. When unavailable, verify_license returns a clean SESSION_ERROR — you are never charged on source failures. Do not rely on CA for production workflows until a stable server-side CSLB run is confirmed.
Agentic-payments eligible — pay-per-event pricing + limited permissions + no Standby mode.
| Event | Price |
|---|---|
license-verification | $0.03 — full result (status + bond + insurance) |
status-only-result | $0.01 — status found, no bond/insurance match (or statusOnly: true) |
Charged only on found: true. Validation errors, not-found results, and source failures are not charged.
{
"jurisdiction": "WA",
"license_number": "ECOSTSC758NN"
}
| Field | Type | Required | Notes |
|---|---|---|---|
jurisdiction | "WA" | "CA" | ✅ | WA = live; CA = beta |
license_number | string | one of ↓ | WA: alphanumeric. CA: numeric, ≤8 digits |
business_name | string | one of ↑ | WA only. Partial match, may return matches[] |
{
"found": true,
"jurisdiction": "WA",
"query": { "license_number": "ECOSTSC758NN" },
"result": {
"license_number": "ECOSTSC758NN",
"business_name": "!ECO STAR C G CONSTRUCTION LLC",
"status": "active",
"license_type": "CONSTRUCTION CONTRACTOR",
"bonded": {
"is_bonded": true,
"details": "Surety: NORTH RIVER INSURANCE COMPANY THE; Bond #: 46CF842686; Amount: $30,000; Effective: 2025-08-05; Expires: Until Canceled"
},
"insured": {
"has_insurance": true,
"details": "Carrier: State National Ins Co Inc; Policy: NXT9PTHTLT-01-GL; Coverage: $1,000,000; Agency: Next Insurance Inc; Effective: 2026-06-12; Expires: 2027-06-12"
},
"effective_date": "2025-08-15",
"expiration_date": "2027-08-15"
},
"source_url": "https://data.wa.gov/resource/m8qx-ubtq",
"retrieved_at": "2026-06-26T01:34:37.598Z",
"raw": { ... }
}
status is always one of: active | expired | suspended | revoked | unknown.
On failure: { "found": false, "error": "SESSION_ERROR|NETWORK_ERROR|...", "message": "..." } — never a crash, never a charge.
npm install
npm run build
echo '{"jurisdiction":"WA","license_number":"ECOSTSC758NN"}' \
> storage/key_value_stores/default/INPUT.json
npx apify run
For use with Claude Desktop, Smithery, or any MCP-compatible agent.
verify_license — verify a contractor's license status.
jurisdiction (required): "WA" or "CA"license_number and/or business_name (at least one required)list_supported_jurisdictions — list all states with their status and data source.
{
"mcpServers": {
"license-verify": {
"command": "node",
"args": ["/absolute/path/to/license-verify-mcp/dist/index.js"]
}
}
}
npm install && npm run build
npm run start:mcp # stdio MCP server
npm run smoke # hit real WA + CA endpoints, must be 8/8 PASS
src/providers/<CODE>.ts implementing the Provider interface ({ info, verify() })src/providers/index.tsNo other changes needed in server or Actor.
MIT
FAQs
Verify US contractor license + surety bond + insurance from official state data. MCP-native, agent-payable, pay-per-success. WA live, CA beta.
We found that license-verify-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.