# Checking a provider's authorisation

“They told me they were authorised” is not a check. /v1/entreprise/{siren}/agrements queries three official registers by company number and returns authorisation dates, licensed services, European Economic Area passporting and withdrawals. 47,731 authorisations are in the database, from 9 authorities.

## Which register for which question

| Question | Route |
| --- | --- |
| Is this company a payment institution, e-money institution, account-information provider, agent or exempt entity? | `/v1/entreprise/{siren}/agrements` (EBA register, daily) |
| Is it an insurance undertaking? | same route (EIOPA register) |
| Is it an electronic-communications operator? | same route (ARCEP) |
| Is it an investment firm or a fund manager, anywhere in Europe? | `/v1/eu/agrements` (ESMA registers, by name or LEI) |
| Is it blacklisted or impersonating someone? Is it a registered digital-asset provider or a licensed French asset manager? | `/v1/regulateurs/fr/alertes` (French market authority open data, daily) |

## “Not authorised” is an answer, and it is billed

The absence of an authorisation is returned as `200`, not `404`. That is an explicit choice: knowing a company is **not** authorised is precisely the information that triggers a decision, and a `404` would be indistinguishable from a fault on our side. So you pay for a check, not for a hit.

> Same logic on the lobbying register: “not registered” is a full answer there, served as `200`.

## Passporting, the angle people forget

A provider authorised in another member state can operate in France without a French authorisation: that is passporting, and a check limited to national registers misses it. So the response returns both the licensed services **and** the passporting, letting you tell an unauthorised player from one authorised elsewhere.

## The useful neighbourhood: influence and industrial risk

Two routes complete the picture of a counterparty without costing much. `/v1/entreprise/{siren}/lobbying` returns the profile in the official interest-representatives register: status, category, expense brackets per year, recent subjects, clients for consultancies, declaration failures. Organisation level only, with no personal data.

`/v1/entreprise/{siren}/risques-industriels` links the company to regulated industrial sites: 138,020 installations are in the database, including Seveso classification — an environmental due-diligence angle standard company records ignore.

## How you pay

Every route is paid **per call**, in USDC or EURC on the Base network, over the x402 protocol: no account to create, no API key, no subscription. The first call returns a `402` quote your client settles, then replays the call. A failed call is never billed.

Would you rather have a euro invoice and prepaid credits? That is **in preparation**, and we will not announce a date until it is open. Write to [contact@sirenic.eu](mailto:contact@sirenic.eu?subject=Euro%20credit%20packs) and we will let you know when it opens.

Paid responses are **Ed25519-signed**: you can later prove what was served to you, and when. The whole catalogue is free to read in the [OpenAPI document](https://api.sirenic.eu/openapi.json) and in [llms.txt](https://api.sirenic.eu/llms.txt).

**One call, end to end**

```
# Client x402 (npm) — le devis 402 est réglé et l'appel rejoué automatiquement
npx x402-fetch https://api.sirenic.eu/v1/entreprise/552032534

# Ou en MCP, dans Claude Code / Cursor
claude mcp add --transport http sirenic https://api.sirenic.eu/mcp
```

## Routes used and pricing

| Route | Price | What it returns |
| --- | --- | --- |
| `/v1/entreprise/{siren}/agrements` | $0.02 | Regulatory authorisation and licences held by a French company, by SIREN: payment institution, e-money institution, account-information provider, payment agent or exempt entity from the EBA PSD2 register (daily), insurance undertaking from EIOPA, telecom operator (electronic-communications operator, ARCEP). Returns authorisation dates, licensed PSD2 services, EEA passporting and withdrawals — a compliance check across three official registers. Not authorised is a paid answer too (200). |
| `/v1/eu/agrements` | $0.01 | EU financial authorisation lookup in the official ESMA Registers: search ~14,000 MiFID-regulated entities across the EU/EEA (investment firms, UCITS/AIFM managers) by name or LEI — authorisation status of the regulated entity, home and host member states, competent authority, authorisation dates. One integration covers all 27+ countries of Europe: an investment firm and regulated entity KYB check for the whole single market. Data freely available at the source (ESMA). |
| `/v1/regulateurs/fr/alertes` | $0.01 | French financial regulator alerts and scam check against the official AMF blacklist: screen a name for unauthorized investment websites, scams and AMF impersonation, and look up PSAN crypto provider registrations and licensed asset management companies (SGP) by name or SIREN. A compliance screening of the regulator blacklists for agents vetting French counterparties in crypto and asset management. Official AMF open data (Licence Ouverte 2.0), refreshed daily. |
| `/v1/entreprise/{siren}/lobbying` | $0.01 | Lobbying and influence profile of a French company from the official HATVP register of interest representatives — a transparency, governance and ESG due diligence signal: registration status, category, lobbying-expense brackets per fiscal year, staff count, recent subjects with intervention domains and action types, clients (for consulting firms), affiliations, declaration defaults and deregistrations. Organisation-level only — no personal data. Not registered is a meaningful answer (still 200). |
| `/v1/entreprise/{siren}/risques-industriels` | $0.01 | Industrial risk and environment profile of a French company from the official ICPE register (Géorisques/DGPR): classified facilities with Seveso status (upper/lower tier), authorisation regime, activity state, IED flag, nomenclature rubrics and a risk synthesis per SIREN — an ESG and environmental compliance signal on hazardous sites operated by the company. A company with no classified facility returns level aucun (still 200) — the clean answer is the signal. |

## Frequently asked questions

### Are the registers queried live or from a copy?

From copies reloaded daily for registers publishing a full dataset, live for those exposing only a search. The date of the last successful load is shown in the footer.

### Does a withdrawn authorisation stay visible?

Yes, with its withdrawal date. That is often the most useful part of the check: a player still operating after a withdrawal is a strong signal.

## Take it further

- [See a real response (free)](https://api.sirenic.eu/exemples/entreprise-siren-agrements.json)
- [Get the quote for /v1/entreprise/{siren}/agrements](https://api.sirenic.eu/v1/entreprise/552032534/agrements)
- [Read the route reference](https://api.sirenic.eu/en/api)
- [Get notified about euro packs](mailto:contact@sirenic.eu?subject=Euro%20credit%20packs)

## Read next

- [Screening a counterparty against sanctions lists](https://api.sirenic.eu/en/use-cases/screen-name-against-6-official-sanctions-lists)
- [Automating business verification (KYB)](https://api.sirenic.eu/en/use-cases/kyb-automated-business-verification-with-per-block)

---

Volume figures on this page were measured in our database on 2026-08-19. They are dated snapshots, not live counters.

Full catalogue : https://api.sirenic.eu/