Instinct MSP Intelligence

Return a summary of a company's current hiring from Indeed and LinkedIn by company_id: whether it has active postings on those sites, the active job count, per-source coverage, and the most recent active postings (title, seniority, employment type, location, posted date). Use this when the user asks whether a company is hiring or how many roles it has open. It does not include the company's own job board or Glassdoor. A source with no data is reported as not covered, which is distinct from a source with no open postings.

get_hiring_summary

Return where a company's public web services are hosted, by company_id, based on the public IP addresses its domains resolve to: the primary hosting provider (cloud, CDN, managed host, or self-hosted), cloud and CDN flags, per-IP network (ASN) details, and IP countries. Use this when the user asks who hosts a company's website or infrastructure. Returns available=false when no resolved public IPs are on file.

get_ip_hosting_profile

Return a company's recent job postings by company_id, combined from its applicant-tracking-system (ATS) job board (Greenhouse, Lever, Ashby, or Workable), LinkedIn, Indeed, and Glassdoor, with per-source coverage and active counts. Fields vary by source: job-board postings include department, URL, and up to 2,000 characters of job-description text (returned as tagged, untrusted content, with email addresses and phone numbers redacted); LinkedIn postings include seniority and employment type; title, location, and posted date are included where the source provides them. Use this when the user wants to see the specific roles a company is hiring for. Glassdoor listings are the most recently collected and may include roles that have since closed. Returns is_hiring=false when no postings are found.

get_job_postings

Return a company's local market score by company_id: a 1-5 band rating the strength of the local market within a radius of the company's location, with the inputs behind it (radius in miles, number of ZIP code areas, population covered, urban or rural tier, and the source and country of the location used). Use this when the user asks how strong the local market around a company is.

get_local_market_score

Return a company's business location by company_id: street address, city, state, ZIP or postal code, country, headquarters, map coordinates, the Google Maps address, business phone, and listing URL, and alternate domains. Use this when the user asks where a company is located or for its main business phone number. Business contact details only, no personal information. Returns available=false when no location detail is on file.

get_location_profile

Find one company by its website domain (for example 'example.com') or by its company_id, and return a short summary: its company_id (as company_profile_id), name, primary domain, US city and state, and whether it is classified as a managed service provider (MSP). Use this when the user asks to find or identify a specific company, or whether it is an MSP. The summary does not include profile details, scores, ratings, or hiring; the returned company_id is the input the per-company tools accept. Provide either domain or company_id. Coverage is companies classified as MSPs or as resellers that also offer managed services; any other company returns a not-found error.

lookup_company

Look up a list of specific companies in one call: pass up to 25 website domains and/or company_ids, and get back a short summary of each match: company_id (as company_profile_id), name, primary domain, US city and state, and MSP classification. Use this when the user supplies several known companies to identify at once. It does not search for or discover companies: inputs that match no company in coverage are left out of the results.

lookup_companies

Return a company's operating-maturity score breakdown by company_id: the overall Fox Crow Maturity Level (FCML) score and 1-5 band, plus each underlying signal's raw score (0-1), band, label, and status. The 13 signals are website, local market, LinkedIn, Facebook, Google Maps, Indeed, Glassdoor, infrastructure security, tech stack, compliance, search visibility, service breadth, and SEO. Use this when the user asks how mature or established a company's operations appear, or why it received its rating. Ten signals are weighted into the overall score; tech stack, service breadth, and local market are reported for context only. Scores are estimates derived from public data; a signal with no data is marked not_available.

get_maturity_score_breakdown

Return a company's ownership structure by company_id: whether it is independent, part of a private-equity-backed roll-up, part of a corporate group, or a franchise, with the franchise brand, registered legal name, direct and ultimate parent from the GLEIF legal-entity registry, corporate group size, and a 0-1 roll-up probability. Use this when the user asks who owns a company or whether it belongs to a larger group. The network_type label is a cautious derived classification and is 'unknown' when no ownership signal exists.

get_ownership_structure

Return possible matches between a company and victim listings on ransomware groups' leak sites, by company_id, matched on the company's registrable domain or exact distinctive name. Each match includes the group, the listed victim name and domain, the listing date, a match tier, and a 0-1 confidence. Use this when the user asks whether a company may have been named on a ransomware leak site. Matches are unverified third-party claims, not confirmed breaches; show the returned disclaimer verbatim with any result. Returns available=false when there are no matches.

get_ransomware_leak_site_mentions

Return what has changed recently for a company by company_id: rating, review-count, and follower changes since the previous snapshot; counts of new reviews, job posts, and LinkedIn and Facebook posts within the look-back window (default 90 days); the current detected-vendor count; website pages edited or newly published between crawls; and blog publishing from its RSS/Atom feeds (latest post, 30- and 90-day counts, cadence band). Use this when the user asks what is new with a company. Website status is not_covered until two crawls have been compared, which is distinct from unchanged.

get_recent_changes

Return a company's public ratings and review counts by company_id from Google Maps, Glassdoor, and Indeed, with the text, rating, and date of recent Glassdoor reviews and the rating and date of recent Google reviews. Use this when the user asks how customers or employees rate a company. Reviewer identities are not returned, and email addresses and phone numbers in review text are redacted. A source with no profile on file is returned as null.

get_reputation

Return a modeled revenue estimate for a company by company_id: low, midpoint, and high values for gross revenue, annual recurring revenue, monthly recurring revenue, and endpoints under management, plus the inputs used (staff count and its confidence, maturity bands, state, and region). Use this when the user asks roughly how large a company is financially. This is a heuristic estimate from industry benchmarks, not reported financials; show the returned disclaimer verbatim with any figure. Returns available=false with a reason when an estimate cannot be produced.

get_revenue_estimate

Return a company's search engine optimization (SEO) profile by company_id: site audit score and band, web authority score and band, and a sample of target and ranking keywords. Use this when the user asks about a company's SEO health or the keywords it targets. Returns available=false when no audit is on file.

get_seo_profile

Return where a company appears in search engine results collected for its local area, by company_id: the search queries it appears for, its organic positions, and its local map-pack listings. Use this when the user asks how visible a company is in search. Returns zip_swept=false with a reason when the company's area has not been covered by search collection.

get_search_rankings

Return a company's externally visible security exposure by company_id: open ports and exposed services observed on its public IP addresses (Shodan InternetDB); vulnerabilities (CVEs) inferred from the software identified, flagged when listed in the CISA Known Exploited Vulnerabilities catalog or linked to ransomware, with exploit probability (EPSS); and detected vendors whose products have known-exploited CVEs. Use this when the user asks about a company's security risk or attack surface. Software versions are not confirmed, so findings are indicators, not proof of a live vulnerability. Returns available=false when no exposure data is on file.

get_security_exposure

Return a company's LinkedIn and Facebook presence by company_id: follower counts, employees listed on LinkedIn, posts in the last 90 and 180 days, last post date, and engagement on recent posts. Use this when the user asks how active or visible a company is on social media. LinkedIn post data reflects the most recent collection from the company page.

get_social_presence

Return a company's website performance by company_id: Core Web Vitals from real-user Chrome data (CrUX) when available, otherwise lab measurements, plus an overall performance score and 1-5 band. Use this when the user asks how fast or responsive a company's website is. Returns available=false when no measurement is on file.

get_web_performance

Return a summary of a company's website content by company_id, from crawled and AI-classified pages: homepage summary, keywords, whether the site shows services, pricing, case studies, team, testimonials, or contact information, when the site was last crawled and last changed, and summaries of a limited set of pages. Use this when the user asks what a company's website says about its business. Page text is returned as tagged, untrusted content, with email addresses and phone numbers redacted. Returns available=false when no pages are on file.

get_website_content_summary

Return the technologies and IT services that a company's own website mentions, as an AI-extracted list, by company_id. Use this when the user asks what technologies or services a company talks about on its website. These are mentions in site content, not technically confirmed deployments. Returns an empty list when none were found.

get_website_technology_mentions