Rankiteo

Access real-time cybersecurity intelligence for any company.

CommunityOnlineAPI key requiredGlobalFreeRead-only

What it can do

  • Search Company: Search for companies by name.
  • Get Company Rating By Id: Get company rating by Company ID.
  • Get Company Rating By Domain: Get company rating by Domain.

What data it sees

Do you need an account

An API key from the service settings is required

Access real-time cybersecurity intelligence for any company. Rankiteo's MCP lets AI agents retrieve cyber risk scores, incident history, TPRM assessments, and vendor risk data for millions of organizations worldwide powering smarter underwriting, compliance, and due diligence decisions, instantly.

How to connect

How to connect Rankiteo to Claude

The server address to paste into Claude settings:

https://rankiteo-mcp--rankiteo.run.tools

  1. Open Claude (claude.ai or the desktop app).
  2. Go to Settings → Connectors.
  3. Click Add custom connector.
  4. Paste the server address copied below into Remote MCP server URL and click Add.
  5. In a chat, click + → Connectors and switch the new connector on.

Custom connectors are available on Free, Pro, Max, Team and Enterprise plans (Free is limited to one). On Team and Enterprise an organization Owner adds the connector first under Organization settings → Connectors.

Authorization

After you click Add, a sign-in window for the service opens. Sign in with your own account and approve access. Claude never sees your password.

How to connect Rankiteo to ChatGPT

The server address to paste into ChatGPT settings:

https://rankiteo-mcp--rankiteo.run.tools

  1. Open ChatGPT in a browser (chatgpt.com). A Plus, Pro, Business, Enterprise or Edu plan is required.
  2. Turn on developer mode once: Settings → Apps → Advanced settings → Developer mode.
  3. Open Settings → Connectors and click Create.
  4. Fill in the form: Name (anything), Description (one line about what the service does), MCP server URL (copy it below).
  5. Under Authentication choose OAuth if the service requires sign-in, otherwise None. Click Create.
  6. In a new chat open + → Apps/Connectors and enable the connector.

OpenAI has renamed this section before (Connectors → Apps/Plugins). If the label differs, search settings for "developer mode". On Business/Enterprise workspaces an admin must allow custom connectors first.

Authorization

On first use ChatGPT opens the service's sign-in window. Sign in and approve access.

How to connect Rankiteo to Cursor

The server address to paste into Cursor settings:

https://rankiteo-mcp--rankiteo.run.tools

Fastest: click Open in Cursor below and confirm the prompt.

Manually:

  1. In Cursor open Settings → Cursor Settings → MCP and click Add new global MCP server.
  2. Paste the JSON copied below into ~/.cursor/mcp.json (per project: .cursor/mcp.json in the repo root).
  3. Save the file. The server appears in the MCP list; authorize it there if asked.

Authorization

If the service needs sign-in, an authorize button appears next to the server in the MCP list.

Server tool list (7)

Raw names from tools/list. Only developers need these.

search_companySearch for companies by name.
get_company_rating_by_idGet company rating by Company ID.
get_company_rating_by_domainGet company rating by Domain.
get_company_rating_by_linkedin_idGet company rating by LinkedIn ID.
create_custom_companyCreate a custom (unregistered) company from a cyber security questionnaire. Computes a Rankiteo security score (0–1000), persists the company across all CRM collections, and returns the unique linkedin you can pass to get_premium_estimation for an instant quote. Parameters ---------- industry : Must be exactly one of (case-insensitive): Technology, Financial Services, Healthcare, Manufacturing, Retail & E-Commerce, Energy & Utilities, Telecommunications, Transportation & Logistics, Government, Education, Real Estate, Media & Entertainment, Professional Services, Insurance, Aerospace & Defense, Pharmaceuticals, Construction, Agriculture, Mining, Other. email_provider : One of: microsoft_365, google_workspace, on_premise, other. network_type : One of: cloud_only, hybrid, on_premises. remote_access_method : One of: vpn, rdp, zero_trust, none. endpoints_count : Total managed endpoints (e.g. 500). servers_count : Total servers (e.g. 50). cloud_providers : List of cloud providers in use. Each must be one of: AWS, Azure, GCP, Oracle Cloud, IBM Cloud, Other. mfa_scope : One of: all_users, remote_only, admin_only. backup_frequency : One of: hourly, daily, weekly, monthly, none. vuln_scanning_frequency : One of: continuous, weekly, monthly, quarterly, annual, none. pentest_frequency : One of: semi_annual, annual, biennial, none. iso_27001_date : Certification date, strict YYYY-MM-DD. Only applied when iso_27001=True, otherwise ignored. soc2_date : Certification date, strict YYYY-MM-DD. Only applied when soc2_type2 or soc2_type1 is True, otherwise ignored. pci_level : One of: 1, 2, 3, 4. Only applied when pci_dss=True, otherwise ignored. framework_* : Enforcement level for each framework (framework_pci_dss, framework_hipaa, framework_dora, framework_soc2, framework_nis2, framework_iso_27001, framework_nist_csf, framework_cis_v8, framework_gdpr). Each one of: not_started, in_progress, partial, full. Distinct from the boolean compliance certification flags above (e.g. pci_dss / iso_27001 / gdpr) — those record whether a certification is held, these record how far along enforcement of the corresponding framework is. data_classification : One of: formal, informal, none. data_retention_policy : One of: documented, informal, none. supply_chain : Comma-separated linkedin_ids of key vendors / subprocessors to link into the company's supply chain (in addition to any cloud providers declared via cloud_providers). Each id is checked against known companies; any that don't exist are dropped and reported in invalid_supply_chain_ids. incidents : List of historical incidents to attach at creation time, e.g. [{"date": "2024-03-01", "type": "Ransomware", "description": "...", "records_affected": 10000, "financial_loss": 500000, "severity": 85, "ransomware_demanded": 200000, "ransomware_paid": 0}]. "type" must be exactly one of: Data Breach, Ransomware, Malware, Business Email Compromise, Phishing, DDoS, Insider Threat, Supply Chain Attack, Other. "severity" is 0-100. To add incidents to a company AFTER it's created, use attach_incident instead of calling this tool again. Requires Underwriter or Enterprise MCP key.
attach_incidentAttach a new cyber incident to an EXISTING custom company instead of creating a new company. Use this whenever you need to log an additional incident against a company that was already created with create_custom_company — the company keeps its original linkedin, prior incidents, and other data; only the incident history and security score/band are updated. Parameters ---------- linkedin_id : The linkedin returned by create_custom_company for the company this incident belongs to. date : Incident date (YYYY-MM-DD). type : Must be exactly one of: Data Breach, Ransomware, Malware, Business Email Compromise, Phishing, DDoS, Insider Threat, Supply Chain Attack, Other. description : Free-text description of the incident. records_affected : Number of records affected. financial_loss : Direct financial loss in USD. severity : Severity score 0-100 (>=80 critical, >=60 high, >=40 medium, else low). ransomware_demanded : Ransom amount demanded in USD (if applicable). ransomware_paid : Ransom amount paid in USD (if applicable). Requires Underwriter or Enterprise MCP key.
get_premium_estimationCompute full cyber insurance premium estimates (v3.0 actuarial algorithm) for any company identified by its linkedin, along with all underwriter-relevant data: company profile, current risk score, score history, incidents, industry benchmark, and supply chain exposure. Pass the linkedin returned by create_custom_company to price a custom (non-registered) company, or any known company's linkedin_id for known companies. Parameters ---------- linkedin_id : Company identifier (linkedin_id for known companies, or the linkedin returned by create_custom_company). revenue : Declared annual revenue in USD. Overrides DB value. If omitted, the DB value is used; if not in DB, revenue is imputed from employee count and NAICS sector priors. naics_code : NAICS v2 code override (e.g. "5112", "541", "522"). policy_limit : Desired policy limit in USD (default $1M). retention : Deductible / retention in USD (default $10K). pol_agg : Policy aggregate in USD (optional). cov_agg : Coverage aggregate in USD (optional). coverages : Comma-separated coverage IDs to include. Defaults to the full comprehensive package (all available coverages). Available: security_liability, privacy_liability, media_liability, regulatory_proceedings, gdpr, pci, breach_cost, business_income_loss, dependent_business_income_loss, system_failure_bil, system_failure_dbil, digital_asset_replacement, computer_system_replacement, cyber_extortion_expense, cyber_extortion_payment, reward_payment, reputational_damage, social_engineering_funds_transfer, social_engineering_funds_held_trust, social_engineering_personal_funds, invoice_manipulation. waiting_hours : BIL waiting-period hours (default 12). bi_sir : BIL self-insured retention in USD (default $10K). retro_category : Retro date bucket: none|lte_1yr|lte_2yr|lte_3yr|gt_3yr. wj_overrides : JSON map of coverage_id -> custom weighting factor. quoted_sublimits : JSON map of coverage_id -> quoted sublimit (USD). reinstatement_1_free : Include a free 1st reinstatement (restores full limit). reinstatement_2_paid : Include a paid 2nd reinstatement (requires reinstatement_1_free). reinstatement_2_rate : Rate for the paid 2nd reinstatement, as a fraction of annual premium (default 0.33). excess_attachment : Excess layer attachment point in USD (defaults to policy_limit). excess_limit : Excess layer limit in USD. When set, prices an excess tower layer above the attachment point. Requires Underwriter or Enterprise MCP key.