# Tizona Intelligence

> Australian business identity tools and attested web capture, over MCP and HTTP.
> Every tool states what its answer does not mean, because a validation that
> overstates itself is worse than none.

The MCP endpoint is https://tizonaintelligence.com/mcp — streamable HTTP,
protocol 2026-07-28 and earlier. No key is needed to list or call the tools.

## What the tools actually settle

- A checksum tells you a number is well-formed. It does not tell you the number
  was ever issued to anyone.
- A sanctions miss is a miss against one dated list, not a clearance.
- A name match is a similarity score, not an identification.
- A capture record says what was retrieved and when. It says nothing about
  whether the content is true.

Each response carries its own limits. Pass them on rather than dropping them.

## Attested web capture

- [capture_web_page_with_proof](https://tizonaintelligence.com/mcp): Loads a page in a real browser and returns hashes of the HTML and screenshot, the final URL after redirects, HTTP status, and the server's own date. An RFC 3161 timestamp authority signs the record hash, so the time is not ours to move.
- [verify_web_page_attestation](https://tizonaintelligence.com/mcp): Rebuilds the hashes and reports whether anything changed. Reads the timestamp token, checks it covers this record, and reports the gap between the stated capture time and the signed time.

The timestamp proves the record existed by the signed time. It does not prove
the capture happened at the second stated. A token cannot be obtained for a
moment that has not arrived, so a small gap means the record cannot have been
written later and backdated — that gap is the evidence, and verification
reports it rather than a pass or fail.

The token is included in full and chains to a public root. Check it yourself:

    openssl ts -verify -in token.tsr -token_in -digest <recordSha256> -CAfile <roots>

We do not check the signature and do not ask you to take our word for it.

## Australian identifiers

- [validate_australian_identifier](https://tizonaintelligence.com/v1/au-identifiers/validate): ABN, ACN, ARBN, TFN, Medicare and BSB. Check digits only — a valid number is well-formed, not necessarily issued. BSB has no check digit and is checked for shape alone.
- [calculate_gst](https://tizonaintelligence.com/v1/au-gst): GST from a GST-inclusive or GST-exclusive amount.
- [total_invoice](https://tizonaintelligence.com/v1/au-gst): Line items to a total, with the GST shown separately.

## Sanctions and entity matching

- [screen_against_sanctions](https://tizonaintelligence.com/v1/sanctions/screen): Screens a name against the OFAC list. Every response carries the list's publication date.
- [sanctions_dataset_version](https://tizonaintelligence.com/v1/sanctions): Which list is loaded, when it was published, and how old it is.
- [compare_entity_names](https://tizonaintelligence.com/v1/entity-match): Similarity between two names.
- [match_entity_name](https://tizonaintelligence.com/v1/entity-match): One name against a list.
- [deduplicate_entity_names](https://tizonaintelligence.com/v1/entity-match): Collapses a list to distinct parties.
- [normalise_entity_name](https://tizonaintelligence.com/v1/entity-match): Strips legal suffixes and punctuation.

## Operational

- [Health and dataset provenance](https://tizonaintelligence.com/health): Tool count, which OFAC list is loaded, when it was published, and whether it is stale.
- [Scope of an attestation](https://tizonaintelligence.com/v1/attest/scope): What a capture record claims and what it does not.

## Notes

- The HTTP endpoints under /v1/ need a key. The MCP tools do not.
- Rendering is limited to 90 captures a day across all callers, so a capture may
  be refused with the time it resets.
- Australian data, Australian rules. GST is 10 per cent. ABN, ACN, ARBN, TFN and
  Medicare have real check digits and are verified against them. BSB has none —
  that check confirms the shape is right and nothing more.