We built it for recruitment. The same 15 tools — Companies House, FCA, CQC, ESCO, IMD, pay transparency, GDPR-clean rationales — power any workflow that needs to verify a person, an employer, or a regulated activity. Five-minute MCP integration. UK data residency. EU AI Act high-risk reviewable.
Every UK regulated sector spends weeks of engineering on the same plumbing. We've already built it.
Look at what every regulated UK workflow actually needs:
Sector-specific connectors swap in. The contract surface — the 15 MCP tools — stays identical. Your team integrates once.
Real workflows, with the specific tools and the failure mode they replace. Pick the sector that matches your platform.
A conveyancer onboards a buyer, a vendor, and a corporate purchaser. They need: SRA-regulated solicitor on the other side, the buyer's identity matches a real address, the corporate vendor isn't dissolved. Today it's three separate logins.
A care-home group hires 200 staff a quarter. They need: CQC rating of the previous employer, NVQ Level 3 in their CV, valid DBS, postcode in IMD decile 1-3 for Levelling Up apprenticeships. Today it's four spreadsheets.
A broker firm onboards 30 ARs (Appointed Representatives). They need: each AR's principal firm is FCA-authorised (not just registered), each AR's company is active, salary advert is Consumer Duty-compliant. Today it's Smartsearch + LexisNexis + manual.
A college runs 40 apprenticeship programmes. They need: each standard is on the Find Apprenticeship Training feed, each employer is Companies-House-active, each tutor has DBS, each curriculum maps to ESCO occupations. Today it's the IfATE PDF + Excel.
A Tier-1 main contractor onboards 80 sub-contractor firms a year. They need: each sub is CH-active, lead operative has CSCS Gold, no dissolved supply-chain entity. Today it's an internal Sharepoint folder of card photos.
A letting agent onboards 200 tenants/quarter. They need: each landlord's company is CH-active, each tenant's employer is real (not a payslip mill), the property's postcode IMD context, salary stated transparently. Today it's three separate platforms.
A NHS Trust runs 4,000-line supplier list. Each year: confirm CH-active, no dissolution, sector-appropriate accreditation, GDPR rationale per rejection. Today it's a CSV export and a panic.
A charity onboards 30 trustees + 80 volunteers a year. They need: company-secretary level CH checks for incorporated charities, DBS for working-with-children roles, IMD-aware cohort reporting. Today it's Trustees' Week + spreadsheet.
"We were paying SmartSearch £14,000/year for AML checks plus £4,000 for our internal Companies House batch script. Mermoid replaced both with one Bearer header and a 30-line Python wrapper. Time-to-onboard a corporate client dropped from 4 hours to 12 minutes."
Annualised saving: £18,000 + 184 partner hoursThree integration patterns we've seen work — pick the lightest one that fits.
Your existing platform stays as-is. You hit POST /v1/mcp/ with a Bearer header at the moments you need verification. Result lands in your DB next to the original record.
Best for: existing internal tools, low-touch upgrades, < 1 day to integrate.
Drop our MCP shim into Claude Desktop / Cursor / Copilot. The agent calls our 15 tools naturally. Your team gets verification without writing integration code.
Best for: teams already using LLM agents, no-code workflows, < 30 min to set up.
Embed our verification badges (✓ FCA-authorised · ✓ CQC Outstanding · ✓ Pay-transparent) on your platform's listings. We host the lookup, you display the result.
Best for: marketplaces, job boards, listing sites that want differentiated trust.
Honest table. Anywhere we lose, we tell you upfront.
| Capability | Mermoid | Big-name AML / KYC vendor | DIY scripts |
|---|---|---|---|
| UK regulator coverage (CH, FCA, CQC, ESCO) | ✓ 15 tools | ✓ but £15k+/yr | — per-team build |
| 5-minute integration | ✓ Bearer header | — SOW + IT involvement | — weeks of dev |
| GDPR Art. 22 rationale per call | ✓ built in | — audit add-on | — roll your own |
| EU AI Act high-risk record-keeping | ✓ pillar breakdown | — ad-hoc | — manual |
| UK data residency (UK South) | ✓ default | — often US-hosted | ✓ if you self-host |
| MCP / AI-agent native | ✓ first-class | — bolt-on | — you write the wrapper |
| Free tier | ✓ 100 score / 1k verify / mo | — enterprise sales only | ✓ but you pay in time |
| Sector-specific deep coverage (e.g. SRA, ICAEW) | ~ Roadmap; CH + FCA + CQC today | ✓ specialist firms | ? — depends on you |
Not "by user". Not "by call". By how deep you wire it in.
100 score · 1,000 verify · 500 parse · 50 polish per month. No card. No sales call. Sign up at /developers and you're issuing keys in 60 seconds.
5k score · 50k verify · 25k parse · 2.5k polish per month. Email support. Single tenant. Ships once Stripe is wired.
50k score · 500k verify · 250k parse · 25k polish per month. Slack channel support. SLA on uptime.
Unlimited tools. Bring-your-own-domain MCP. Per-tenant audit log export. Co-branded compliance certificates. NDA on request.
If we don't address it here, ask us. We'll either fix it or tell you straight.
Same engine, sector-shaped tools. The data spine — Companies House, FCA register, CQC, GOV.UK feeds — is identical regardless of who calls it. CIPD Level 7 ≠ legal expertise, true; that's why we don't write your contracts. We do verify the regulated entities those contracts reference, which is purely a function of public registers + good engineering.
UK South only. Logs are append-only JSONL with mode 0600 on disk. No third-party telemetry on the verification path. Cosmos DB cells encrypted at rest. ICO ZC140339. We're a UK Ltd; jurisdiction never moves.
Free tier: a developer key in 60 seconds. First production call within an hour for any team that has read our developer portal. Full platform integration: typical 1-2 weeks (most of which is YOUR change-control process, not our integration).
Enterprise tier — yes, dockerised image with your own Azure tenant. You maintain the connectors. We retain the engine + scoring + audit code under licence.
You don't update anything. We do. The MCP contract surface is stable; the connector implementations adapt to upstream changes. Same Bearer header, same JSON-RPC method, same output schema — even if the underlying gov.uk feed migrates.
Not yet — and we're upfront about it. We verify employers and regulated entities. For individual identity AML you still want a SmartSearch / Onfido / Veriff alongside. Our v2 roadmap (2026 H2) covers identity, but until then, partner tools.
Free tier. No card. 60 seconds to a working key. The rest is on you to break.