Sanctions and vendor checks in Grok

Add Pyxmark as a custom connector on grok.com, with one command in Grok Build, or by asking Grok Bot in chat, and Grok can screen a company or person against the OFAC, UN, EU and UK sanctions lists for you.

Server address (Streamable HTTP, no sign in or key):

https://mcp.pyxmark.com/mcp

Pyxmark is a hosted MCP server, so there’s nothing to install and no key to paste. Free use is 25 lookups a day per IP address, and every tool call counts as one.

grok.com

Go to grok.com/connectors, click New Connector, then select Custom. Enter the URL as the MCP server URL. Pyxmark has no sign in, so there’s no authentication to complete.

Grok then finds the Pyxmark tools and can use them in your conversations.

On Grok Business and Enterprise, a team admin adds the connector first in the xAI console under Grok Business → Connectors: click + Add Connector, select Other and enter the URL. Then each member connects it on grok.com/connectors.

Steps checked against xAI’s connectors guide and connector management guide.

Grok Build

Run this in a terminal:

grok mcp add --transport http pyxmark https://mcp.pyxmark.com/mcp

Or add it to ~/.grok/config.toml yourself:

[mcp_servers.pyxmark]
url = "https://mcp.pyxmark.com/mcp"

To check it, run grok mcp list or grok mcp doctor pyxmark, or type /mcps inside Grok Build. Grok Build also reads a project .mcp.json.

Steps checked against the Grok Build MCP docs.

Grok Bot

Ask Grok Bot in chat:

Add this MCP server: https://mcp.pyxmark.com/mcp

It confirms, and the tools work from your next message.

More on Grok Bot: xAI’s Grok Bot docs.

Ask it

First check the connection: ask “List the Pyxmark tools” and Grok should show the read-only tools listed in the tool reference. Then ask “Is Microsoft Corporation on any sanctions list?” It should come back with no match.

For a real vendor, try:

Run a due diligence report on Acme Corp, acme.com, Delaware.

Grok calls due_diligence_report and gets back one report:

A sanctions screen across the OFAC SDN and Consolidated, UN, EU and UK lists. Each potential match has a score, its list entry ID and a link to the official source.
The company’s SEC record and risk filings, if it files with the SEC.
The domain’s registration date, its MX, SPF and DMARC records, and its first Wayback Machine snapshot.
A link to the state business registry search.
A clear, review or hold verdict with the reasons.

You can see a full example on the OFAC sanctions MCP page.

Limits

Results are informational, not a compliance determination or legal advice.
Names are matched fuzzily, so some potential matches will be other people or companies with similar names. Check each one against the linked official entry before you act.
SAM.gov federal exclusions aren’t synced yet, so each report links to a SAM.gov search instead.
Pyxmark isn’t for consumer screening (credit, jobs, housing, insurance or tenancy).

How matching, verdicts and list refreshes work: sources, method and limits.

Using another assistant? Steps for Claude, ChatGPT, Cursor and more are on connect Pyxmark to your AI agent.