Under MiCA, every crypto-asset service provider (CASP) authorised in the EU lands on ESMA's interim register, published as a CSV. ESMA also keeps a list of firms that are offering crypto services without authorisation. Both change every week, and nobody announces the changes.

NorthPoint reads that file every day, records each change with its date, and now serves the result to AI agents through two free MCP tools. No key, no account.

What it returned this morning

Calling get_latest_signal (default: last 7 days) on 9 November 2026 returned, among others:

  • Sparkasse Bank Malta Plc (MT, MFSA) — added to the ESMA interim register of authorised CASPs
  • Tatra banka, a.s. (SK, National Bank of Slovakia) — added
  • Capricorn Capital GmbH & Co. KG (DE, BaFin) — added
  • VR Bank Amberg-Sulzbach eG and VR-Bank Ostalb eG (DE, BaFin) — added
  • Renditanzia (IT, CONSOB) — listed on ESMA's list of non-compliant entities

Each entry carries the competent authority, the authorisation notification date as ESMA publishes it, the snapshot date, a link to ESMA's source file, and a link to the dated public record: https://northpoint.fi/regulations/mica/casp-register-changes?utm_source=devto&utm_medium=post&utm_campaign=np-signal-free-devto

Two more German cooperative banks in one week is not an accident: the Volksbank/Raiffeisenbank network has been arriving on the register in batches.

The feed also logs NorthPoint's own corrections to its rule records (this week: six citations fixed, e.g. a rule on CASP risk warnings re-cited from MiCA Art. 88 to Art. 66(3)), so an agent can see when an answer it relied on changed.

The two tools

tool arguments what it does
get_latest_signal days (1–90, default 7) every dated register change + rule-record correction in the window
search_signals query, days (default 30, max 365) text search over the same feed: an entity name, LEI, authority, country

Server: https://northpoint.fi/api/mcp (streamable HTTP, JSON-RPC). From a terminal:

curl -s -X POST https://northpoint.fi/api/mcp \ -H 'content-type: application/json' \ -H 'accept: application/json, text/event-stream' \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/call", "params":{"name":"search_signals","arguments":{"query":"BaFin","days":30}}}'

Or add the URL as a remote MCP server in Claude, ChatGPT or any MCP client and ask in plain words: "Did any Maltese firm get a MiCA licence this month?"

The same server has free rule tools too (lookup_regulation, get_regulation, get_lite_ruleset) for checking marketing copy against MiCA, the FCA's crypto promotion rules and others, each answer citing the article it rests on.

Information, not legal advice. The register itself is ESMA's; NorthPoint only dates the changes.