Ebsa MCP server

@pipeworx/ebsa — EBSA civil-penalty enforcement

Closed US Department of Labor Employee Benefits Security Administration civil-penalty enforcement actions since 2000 — deficient-filer, late-filer and non-filer penalty assessments against ERISA benefit-plan sponsors for their Form 5500 filings. form5500 already covers the filings themselves (what sponsors reported); this is EBSA's own enforcement record against sponsors who filed deficiently, late, or not at all — distinct from dol-whd (Wage & Hour back-wage/overtime cases) and osha (safety citations), both of which already live on this same DOL API gateway.

Part of Pipeworx — an MCP gateway connecting AI agents to 1878+ live data sources. This is an independent, unofficial integration — not affiliated with, endorsed by, or published by the upstream provider.

This is a civil-penalty / filing-compliance enforcement record, not a fiduciary-breach litigation docket — EBSA does not publish a bulk dataset of individual fiduciary-breach case outcomes. This is the enforcement dataset that actually exists in structured, bulk-queryable form.

Tools

Auth

Platform key (PLATFORMDOLKEY, already set on the gateway for dol-whd and osha) with BYO override via apiKey. A free key from covers every DOL dataset on this gateway. A live sibling call (dolwhd whd_search) confirmed the platform key is valid right now (2026-10-17) — no new key needed.

Live proxy, same gateway as dol-whd and osha

This pack calls apiprod.dol.gov/v4 — the identical gateway, auth shape and query grammar dol-whd already documents in full in its own README and src/index.ts header. Every trap there applies verbatim here and is not re-derived:

or no key at all; the row endpoint (/v4/get/EBSA/ocats/json) rejects a header and needs the key as a query parameter.

• The catalog endpoint (/v4/datasets/10361) takes an X-API-KEY header

{"data":[]}.

• A zero-match query answers HTTP 204 with an empty body, not a 200 with

Retry-After — this pack backs off twice, then returns { found: false, reason: "upstreamratelimited" }.

• The upstream throttles by source IP, not by key, and sends no

be lowercase; a wrong dataset name and a malformed filter both answer a generic HTTP 500.

• filter_object keywords (field, operator, value, and, or) must

Fields (from the live dataset, not guessed)

Verified live 2026-10-17 against the dataset's own 10-row preview (no key needed to read it): casetype, ein, pn (plan number), planyear, planname, planadmin, planadminstate, planadminzipcode, finalclosereason, finalclosedate, penaltyamount, load_dt.

penaltyamount is a DOL-assigned STRING BUCKET, not an exact dollar figure — observed live values include "over $100,000", "$50,001 - $100,000", "$0-$10,000". This pack passes it through verbatim as penaltyamount_bucket and never parses it into a number.

casetype values observed live: "Deficient Filer" (the only value in the 10-row preview sample); the dataset's own description also names "late filers" and "non-filers" among the enforcement focus. casetype is matched with like (substring), not an exact enum, since the precise casing of every value was not exhaustively observed.

No individual PII

Shortened. The full README is on GitHub.