Fed Nic MCP server

@pipeworx/fed-nic

Institution search, corporate ownership hierarchy, and merger/acquisition history for US banks and bank/financial holding companies, sourced from the Federal Reserve System's National Information Center (NIC, ffiec.gov/npw).

Part of Pipeworx — an MCP gateway connecting AI agents to 1679+ live data sources.

Tools

by name. Returns RSSD ID, FDIC certificate, LEI, institution type, location, active/closed status. RANKED via nicsearchranked (migration 212): exact match, then prefix match on an active FDIC-cert institution, then any prefix match, then other active FDIC-cert institutions, then the rest — not alphabetical (see "Coverage / accuracy notes").

• nicsearchinstitutions(query, status?, state?, limit?) — find institutions

one institution, looked up by exactly one of RSSD ID, FDIC certificate number (chains to the fdic pack), or LEI (chains to the gleif pack).

• nicgetinstitution(rssdid? | fdiccert? | lei?) — full NIC record for

(default) walks the ownership chain to its top holder ("which holding company owns this bank?"); direction="down" lists entities owned by the given RSSD ID, paged via limit/offset, with totalsubsidiarycount computed as a DISTINCT count in SQL (migration 212's nicdescendantcount) — see "Coverage / accuracy notes" for why the previous count was wrong.

• nicgethierarchy(rssd_id, direction?, limit?, offset?) — direction="up"

transformations the institution was party to ("what predecessor institutions merged into this bank?").

• nicgethistory(rssd_id) — mergers, acquisitions, failures and

Auth

Keyless — no caller-facing credential. The gateway supplies the store credential automatically.

Data sources

bulk CSV files: Attributes-Active, Attributes-Closed, Relationships, Transformations. US federal government data; no reuse restriction found on the download page or the NPW site (public-domain by default for federal data — see "Reuse terms" below).

• — NIC's public

Why this pack reads from a mirror, not a live proxy

www.ffiec.gov sits behind a Cloudflare Managed Challenge (cf-mitigated: challenge) that returns a 403 "CAPTCHA Error" page to every non-browser HTTP client — confirmed on both:

(Institution/Profile/{rssd_id}, POST Institution/BuildTier, POST Institution/LoadHistory), and

• the interactive NPW pages the live site itself uses per-query

themselves,

• the bulk CSV download endpoints (FinancialReport/Return*ZipFileCSV)

with a full Chrome header set (User-Agent, Accept, Accept-Language, sec-ch-ua). A Cloudflare Worker's fetch() hits the identical wall — there is no header or cookie fix, it is a JS/TLS-fingerprint challenge, not a UA check — so there is no live per-query route this gateway can reach. Per Bruce's 2026-09-23 ruling ("build a copy when live doesn't serve"), this pack is instead backed by a periodically-refreshed copy of NIC's own public bulk files (migration supabase/migrations/209fed_nic.sql), refreshed by scripts/ingest-fed-nic.mjs — see that script's header for exactly why the refresh cannot be a Worker cron and what running it manually requires. It is registered in workers/data-pipeline/src/datasets/fed-nic.ts for freshness visibility only (no scheduled run), the same pattern workers/data-pipeline/src/datasets/ffiec.ts uses for cdr.ffiec.gov.

Reuse terms

Shortened. The full README is on GitHub.