Norric MCP Server

Norric Intelligence MCP Server

Sweden's B2B intelligence infrastructure — exposed as a single MCP server.

Products: Norric SIGNAL · Norric Kreditvakt · Norric Vigil · SiteLoop · Sigvik Framework: FastMCP 3.2.3 · Streamable HTTP transport Functions: 25 registered functions; availability varies by function

---

Authentication

Every request to /mcp requires an API key — including the initialize handshake. Anonymous discovery is not supported.

Send the key in one of two headers (server accepts both; Authorization wins when both are present):

X-Norric-Key:  <key>
Authorization: Bearer <key>

Working curl against the initialize endpoint:

curl -si https://mcp.norric.io/mcp \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "X-Norric-Key: nrc_your_api_key" \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize",
       "params":{"protocolVersion":"2025-03-26","capabilities":{},
                 "clientInfo":{"name":"my-client","version":"1"}}}'
# → HTTP/1.1 200 OK
# → mcp-session-id: <id>     (use this header on subsequent calls in the session)

Missing key returns 401 {"error": "Missing API key…"}. Wrong key returns 401 {"error": "Invalid API key…"}.

Get a key: https://norric.io/api-keys

---

Pricing

Standard and Compliance tiers are issued direct — email edgar@norric.io for qualification, pricing, and ToS. Public self-serve for paid tiers is paused pending kreditupplysningslagen (KuL) review for the Kreditvakt offering.

---

Connect

Claude Code (CLI)

claude mcp add norric https://mcp.norric.io/mcp \
  --header "Authorization: Bearer nrc_your_api_key"

Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json)

{
  "mcpServers": {
    "norric": {
      "url": "https://mcp.norric.io/mcp",
      "transport": "streamable-http",
      "headers": {
        "Authorization": "Bearer nrc_your_api_key"
      }
    }
  }
}

Cursor / Windsurf (.cursor/mcp.json)

{
  "mcpServers": {
    "norric": {
      "url": "https://mcp.norric.io/mcp",
      "headers": {
        "Authorization": "Bearer nrc_your_api_key"
      }
    }
  }
}

Local development

python server.py
# Server starts at http://localhost:8080/mcp
claude mcp add norric http://localhost:8080/mcp \
  --header "Authorization: Bearer nrc_your_api_key"

---

Tools

Norric SIGNAL — Municipal procurement (registered, inactive)

Norric Kreditvakt — Insolvency intelligence

Registry verification & changes — Sweden + Denmark (paid, x402)

Paid per call over x402 (Base Sepolia testnet USDC): verify tools $0.002, changes tools $0.02. Anonymous wallet-only access, no account or API key. HTTP mirrors: /x402/company/* (Sweden), /x402/dk/company/* (Denmark), /x402/no/company/* (Norway), /x402/fi/company/* (Finland). Danish pipeline: docs/denmark-cvr.md. Norwegian pipeline: docs/norway-brreg.md.

Norric Vigil — Company lifecycle detection (registered, inactive)

SiteLoop — Website pipeline (registered, inactive)

Sigvik — BRF property intelligence (partial)

Cross-portfolio

---

Response envelope

Every tool returns the same structure:

{
  "data": { ... },
  "metadata": {
    "response_id": "nrsp_abc123",
    "tool": "tool_name_v1",
    "source": ["skatteverket", "bolagsverket"],
    "fetched_at": "2026-04-26T10:00:00Z",
    "confidence": 0.91,
    "cache_ttl_seconds": 3600
  },
  "signals": [
    {
      "key": "skuld_published",
      "label": "Skatteskuld publicerad",
      "value": true,
      "weight": 0.45,
      "direction": "risk",
      "source": "skatteverket"
    }
  ],
  "warnings": []
}

metadata.confidence (0-1): how much to trust the data metadata.cache_ttl_seconds: how long before re-fetching signals[]: always present, empty list if not applicable

---

Two-step handshake

MCP requires initializing a session before calling tools:

# Step 1: Initialize (auth required)
SESSION=$(curl -si \
  -X POST https://mcp.norric.io/mcp \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "Authorization: Bearer nrc_your_api_key" \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"test","version":"1"}}}' \
  | grep -i "mcp-session-id" | awk '{print $2}' | tr -d '\r')

# Step 2: Call a tool (auth required)
curl -s -X POST https://mcp.norric.io/mcp \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "Authorization: Bearer nrc_your_api_key" \
  -H "mcp-session-id: $SESSION" \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"norric_status_v1","arguments":{}}}'

---

Current status

All functions are registered and callable for authorized tiers, but availability varies. Kreditvakt and the main Sigvik score are live; SIGNAL, Vigil, SiteLoop, Sigvik avgift, and Sigvik flags return empty or placeholder data until their pipelines are connected.

Check live status: call norric_status_v1.

---

Deploy to Railway

# MCP server service (existing — daring-adaptation or similar):
# Start command: python server.py
# Env vars:
#   PORT=8080
#   NORRIC_API_KEYS=<hash:tier:label lines>
#   SUPABASE_URL=<your supabase url>
#   SUPABASE_KEY=<your supabase anon key>

# Key issuance service (separate Railway service):
# Start command: uvicorn issuance.main:app --host 0.0.0.0 --port $PORT
# Env vars: STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, STRIPE_PRICE_*,
#           SENDGRID_API_KEY, RAILWAY_API_TOKEN, RAILWAY_SERVICE_ID

---

Registry

• mcp.so listing: registry/mcpso_listing.md
• Anthropic connector directory: registry/anthropic_connector_submission.md

---

Norric · Solo founder · Edgar Mutebi · Malmö · 2026