Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

openfang-rail

REMOTE · HCRB.IN · SCANNED SEP 20

Deterministic banking, LEI, VAT, SWIFT & compliance checks via MCP with signed XDR-1 receipts.

Available components

+1 this week 67 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security51
Transport & Reachability100
Schema Quality & AI Usability92
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 6473 tokens (~102/item across 63 items; 63 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Tools include usage examples.Pass
Stability & Change Management13
  • Stability check failed: schema churn in the 8 days we've observed: 9 tool removals, 0 breaking changes, 0 auth/transport breaks, 7 additions. See how to fix → Fail
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 63 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 64 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the openfang-rail MCP server?

openfang-rail is a hosted endpoint at https://hcrb.in/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · hcrb.in

# add to Claude Code
claude mcp add --transport http 89rat-openfang-rail 'https://hcrb.in/mcp'
// .cursor/mcp.json
{
  "mcpServers": {
    "89rat-openfang-rail": {
      "url": "https://hcrb.in/mcp"
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "89rat-openfang-rail": {
      "type": "http",
      "url": "https://hcrb.in/mcp"
    }
  }
}
# ~/.codex/config.toml
[mcp_servers.89rat-openfang-rail]
url = "https://hcrb.in/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "89rat-openfang-rail": {
      "type": "remote",
      "url": "https://hcrb.in/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add 89rat-openfang-rail --url 'https://hcrb.in/mcp' --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  89rat-openfang-rail:
    url: "https://hcrb.in/mcp"
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "89rat-openfang-rail": {
      "Transport": "http",
      "Url": "https://hcrb.in/mcp"
    }
  }
}
# add to Vellum
assistant mcp add 89rat-openfang-rail -t streamable-http -u 'https://hcrb.in/mcp'
// mcp.json
{
  "mcpServers": {
    "89rat-openfang-rail": {
      "type": "http",
      "url": "https://hcrb.in/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 9 to 13.

  • 19 Sept 26 0
    • Tool “calculate_fx_savings” rewrote its description, which is the text the model reads security
  • 18 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 3 to 6.

  • 17 Sept 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Server version: 1.2.0 → 1.3.0 functional
    • New tool “receipt_verify” functional
  • 16 Sept 26 +8
    • Tool “iban-check” was removed security
    • Tool “lei-check” was removed security
    • Tool “swift-bic-check” was removed security
    • The server rewrote its instructions, which are the text every model session reads security
    • The server changed its declared name: juana-identifiers → code402 security
    • Schema quality: pass → fail functional
    • Tool coverage: 0% → 100% functional
    • Schema quality: fail → pass functional
    • MCP protocol: fail → pass functional
    • The server now declares the “prompts” capability functional
    • The server now declares the “resources” capability functional
    • Schema quality: good → excellent functional
    • MCP protocol version: 2025-06-18 → 2025-11-25 functional
    • Server version: 1.0.0 → 1.2.0 functional
    • New tool “aba_routing_check” functional
    • New tool “abn_check” functional
    • New tool “aci_trust_lookup” functional
    • New tool “africa_supplier_check” functional
    • New tool “balance_check” functional
    • New tool “batch_validate” functional
    • New tool “bind_insurance_policy” functional
    • New tool “block_info” functional
    • New tool “calculate_fx_savings” functional
    • New tool “china_supplier_check” functional
    • New tool “clean_markdown_scraper” functional
    • New tool “cnpj_check” functional
    • New tool “company_number_format” functional
    • New tool “context_distill” functional
    • New tool “create_ap2_pilot” functional
    • New tool “create_b2b_invoice” functional
    • New tool “crypto_ticker” functional
    • New tool “csp_commitment_create” functional
    • New tool “dip_file_dispute” functional
    • New tool “e164_check” functional
    • New tool “ean13_check” functional
    • New tool “ein_format_check” functional
    • New tool “erc20_balance” functional
    • New tool “fx_spot_price_oracle” functional
    • New tool “get_b2b_invoice” functional
    • New tool “gstin_check” functional
    • New tool “gulf_supplier_check” functional
    • New tool “iban_check” functional
    • New tool “ifsc_check” functional
    • New tool “india_supplier_check” functional
    • New tool “instant_json_schema_verifier” functional
    • New tool “isbn_check” functional
    • New tool “isin_check” functional
    • New tool “iso20022_to_x402_intent” functional
    • New tool “iso20022_validate” functional
    • New tool “iso4217_currency_check” functional
    • New tool “japan_corp_check” functional
    • New tool “japan_supplier_check” functional
    • New tool “kra_pin_check” functional
    • New tool “latam_supplier_check” functional
    • New tool “lei_check” functional
    • New tool “list_approved_insurers” functional
    • New tool “luhn_check” functional
    • New tool “ofac_sdn_check” functional
    • New tool “pan_format_check” functional
    • New tool “pod_verify_delivery” functional
    • New tool “pre_disbursement_guard” functional
    • New tool “quote_3rd_party_insurance” functional
    • New tool “rent_deposit_guard” functional
    • New tool “rental_listing_risk” functional
    • New tool “rental_verdict” functional
    • New tool “rfc_check” functional
    • New tool “sedol_check” functional
    • New tool “settlement_history_check” functional
    • New tool “simulate_spend_sentinel” functional
    • New tool “swift_bic_check” functional
    • New tool “tx_activity” functional
    • New tool “uae_trn_check” functional
    • New tool “upi_vpa_check” functional
    • New tool “uscc_check” functional
    • New tool “vat_mod97_check” functional
    • New tool “vendor_onboarding_pack” functional
  • 15 Sept 26 −9
    • Stability: 0.07 → fail security
    • Tool “aba_routing_check” was removed security
    • Tool “abn_check” was removed security
    • Tool “aci_trust_lookup” was removed security
    • Tool “autonomous_commercial_pipeline” was removed security
    • Tool “balance_check” was removed security
    • Tool “batch_validate” was removed security
    • Tool “bind_insurance_policy” was removed security
    • Tool “block_info” was removed security
    • Tool “browse_compute_clusters” was removed security
    • Tool “browse_technical_studios” was removed security
    • Tool “browse_top_guilds” was removed security
    • Tool “calculate_fx_savings” was removed security
    • Tool “clean_markdown_scraper” was removed security
    • Tool “cnpj_check” was removed security
    • Tool “company_number_format” was removed security
    • Tool “context_distill” was removed security
    • Tool “create_ap2_pilot” was removed security
    • Tool “create_b2b_invoice” was removed security
    • Tool “crypto_ticker” was removed security
    • Tool “csp_commitment_create” was removed security
    • Tool “dip_file_dispute” was removed security
    • Tool “e164_check” was removed security
    • Tool “ean13_check” was removed security
    • Tool “ein_format_check” was removed security
    • Tool “engine_benchmark” was removed security
    • Tool “erc20_balance” was removed security
    • Tool “fx_spot_price_oracle” was removed security
    • Tool “get_b2b_invoice” was removed security
    • Tool “get_guild_profile” was removed security
    • Tool “get_studio_profile” was removed security
    • Tool “gstin_check” was removed security
    • Tool “iban_check” was removed security
    • Tool “ifsc_check” was removed security
    • Tool “instant_json_schema_verifier” was removed security
    • Tool “isbn_check” was removed security
    • Tool “isin_check” was removed security
    • Tool “iso20022_to_x402_intent” was removed security
    • Tool “iso20022_validate” was removed security
    • Tool “iso4217_currency_check” was removed security
    • Tool “japan_corp_check” was removed security
    • Tool “kra_pin_check” was removed security
    • Tool “lei_check” was removed security
    • Tool “list_approved_insurers” was removed security
    • Tool “luhn_check” was removed security
    • Tool “ofac_sdn_check” was removed security
    • Tool “pan_format_check” was removed security
    • Tool “pod_verify_delivery” was removed security
    • Tool “pre_disbursement_guard” was removed security
    • Tool “quote_3rd_party_insurance” was removed security
    • Tool “quote_compute_slice” was removed security
    • Tool “rent_deposit_guard” was removed security
    • Tool “rental_listing_risk” was removed security
    • Tool “rental_verdict” was removed security
    • Tool “rfc_check” was removed security
    • Tool “sedol_check” was removed security
    • Tool “semantic_service_matchmaker” was removed security
    • Tool “settlement_history_check” was removed security
    • Tool “simulate_spend_sentinel” was removed security
    • Tool “swift_bic_check” was removed security
    • Tool “tx_activity” was removed security
    • Tool “uae_trn_check” was removed security
    • Tool “upi_vpa_check” was removed security
    • Tool “uscc_check” was removed security
    • Tool “vat_mod97_check” was removed security
    • Tool “vendor_onboarding_pack” was removed security
    • The server rewrote its instructions, which are the text every model session reads security
    • The server changed its declared name: code402 → juana-identifiers security
    • Tool coverage: 100% → 0% functional
    • Schema quality: pass → fail functional
    • MCP protocol: pass → fail functional
    • Schema quality: fail → pass functional
    • The server no longer declares the “prompts” capability functional
    • The server no longer declares the “resources” capability functional
    • Schema quality: excellent → good functional
    • MCP protocol version: 2025-11-25 → 2025-06-18 functional
    • Server version: 1.2.0 → 1.0.0 functional
    • New tool “iban-check” functional
    • New tool “lei-check” functional
    • New tool “swift-bic-check” functional
  • 13 Sept 26 +1
    • Tool “ofac_sdn_check” rewrote its description, which is the text the model reads security
    • Schema quality: pass → fail functional
    • Stability: unverified → 0.03 functional
  • 12 Sept 26 65

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Probed https://hcrb.in/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=hcrb.in CN=WE1,O=Google Trust Services,C=US 7 Sept 2026 6 Dec 2026 ECDSA 256 ECDSA-SHA256 7cac0e10ba3743ed13c6247a9d3a48b7
SANs: hcrb.in, rail.hcrb.in, *.rail.hcrb.in
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of hcrb.in. Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
in. present 10094 13 Verified
hcrb.in. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains; preload
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), geolocation=(), browsing-topics=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://hcrb.in/mcp Verified 200
http (plaintext) http://hcrb.in/mcp Served over HTTP 200
MCP tools · 63 exposed · ~6,364 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
aba_routing_check ~97

Validate a US ABA routing number by its (3,7,1)-weight mod-10 Fedwire/ACH checksum. Catches mistyped or invalid routing numbers before payment; does NOT prevent transfer reversals or establish the recipient. Returns signed XDR-1 receipt.

NameTypeReqDescription
aba_routingstring9-digit US bank routing number.
routingstring9-digit US bank routing number (alias).
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"aba_routing":"021000021"}
abn_check ~57

Validate an Australian Business Number by its mod-89 checksum (11 digits). Required before invoice payment to Australian contractors. Returns signed XDR-1 receipt.

NameTypeReqDescription
abnstringyes11-digit Australian Business Number; spaces allowed.
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"abn":"51 824 753 556"}
aci_trust_lookup ~205

Deterministic agent trust scoring and non-custodial unsettled exposure advisory evaluation (ACI-1). Quantifies counterparty grade (T0-T3), historical success rate, and maximum suggested settlement exposure without uncollateralized lending or float.

NameTypeReqDescription
dispute_loss_ratenumberHistorical dispute loss rate 0.0 to 1.0
first_seen_daysnumberDays since first active on-chain settlement
rolestringAgent role: 'payer' or 'seller' (default 'payer')
settled_calls_90dnumberNumber of settled transactions in the past 90 days
settlement_success_ratenumberHistorical settlement success rate 0.0 to 1.0
sponsor_attestationsarrayArray of signed sponsorship edges
subjectstringyesAgent wallet address (0x...) or canonical ANS identifier (c402:...) to evaluate
NameTypeReqDescription
evidenceobject
okbooleanyes
policy_noticestring
receipt_digeststring
score_bpnumberyes
standardstringyes
subjectstringyes
tierstringyes
unsettled_exposure_hint_minorstring
{"first_seen_days":120,"settled_calls_90d":1500,"settlement_success_rate":0.999,"subject":"0x1111111111111111111111111111111111111111"}
africa_supplier_check ~78

One call, one receipt: Kenya KRA PIN + settlement IBAN + SWIFT/BIC. Deterministic structural checks for East African trade corridors.

NameTypeReqDescription
ibanstringSettlement IBAN (optional)
kra_pinstringKRA PIN (optional)
swiftstringSWIFT/BIC (optional)
NameTypeReqDescription
all_validbooleanyes
checked_countnumberyes
corridorstring
next_stepsstring
resultsarray
scopestring
toolstring
verdictstring
{"iban":"GB82WEST12345698765432","kra_pin":"P051234567X","swift":"BARCKENX"}
balance_check ~87

PRE-PAYMENT SOLVENCY PROOF: Snapshot verified native ETH and USDC token balance on Base with raw units and decimals provenance. Preflighted so you never pay during an RPC outage.

NameTypeReqDescription
addressstringyesEVM address, 0x-prefixed.
token_addressstringERC-20 token contract address (optional; defaults to USDC on Base).
NameTypeReqDescription
addressstringyes
nativeobject
reasonstring
retryableboolean
scopestring
tokenobject
toolstring
validbooleanyes
{"address":"0xc59c85e661d34084a7769f955d17fd38254a6235"}
batch_validate ~139

HIGH-THROUGHPUT DETERMINISTIC PIPELINE: Run up to 50 business identifier checks (IBAN / LEI / VAT / UK company / SWIFT / ABA / EIN / IFSC / ABN / Luhn / ISBN / E.164 / SEDOL / ISIN / EAN-13 / GSTIN / context-distill) in ONE paid call: one voucher, one settlement, one signed XDR-1 receipt covering the whole batch. 10x cheaper per item; essential for autonomous batch invoice processing.

NameTypeReqDescription
itemsarrayyesList of {tool, value} checks (max 50).
NameTypeReqDescription
countnumberyes
invalid_countnumber
resultsarrayyes
scopestring
toolstring
valid_countnumber
{"items":[{"tool":"iban-check","value":"GB82 WEST 1234 5698 7654 32"},{"tool":"lei-check","value":"529900T8BM49AURSDO55"},{"tool":"vat-mod97-check","value":"BE0417497106"}]}
bind_insurance_policy ~218

Bind an insurance policy from a REGISTERED directory underwriter to a specific transaction, payment, or B2B invoice, generating an offline-verifiable POL-1 certificate. Bilateral non-custodial agreement with the named underwriter — the gateway neither underwrites nor accredits anyone.

NameTypeReqDescription
amountnumberAlias for amount_usdc
amount_usdcnumberTransaction coverage amount in USDC
beneficiary_addressstringBeneficiary Base EVM address for claim payouts (0x...)
coverage_typestringCoverage type override (optional)
invoice_idstringAssociated invoice identifier (optional)
policyholder_addressstringPolicyholder Base EVM address (0x...)
transaction_idstringTransaction reference ID (optional)
tx_hashstringTransaction hash being insured (optional)
underwriter_idstringyesUnderwriter id from the open self-registration directory (run list-approved-insurers for current ids; the directory ships empty)
NameTypeReqDescription
certificate_hashstringyes
coverage_amount_usdcnumber
invoice_idstring
pol1_certificateobject
policy_idstringyes
premium_usdcnumber
scopestring
statusstringyes
toolstring
tx_hashstring
underwriter_idstring
underwriter_namestring
validbooleanyes
{"amount_usdc":50000,"policyholder_address":"0x1111111111111111111111111111111111111111","underwriter_id":"euler_allianz_trade_credit"}
block_info ~70

Latest (or specified) Base block header: number, timestamp, transaction count, base fee. Preflighted before payment.

NameTypeReqDescription
blockstringBlock number as hex (0x…) or decimal, or a tag (latest/earliest/pending/finalized/safe); defaults to latest.
NameTypeReqDescription
base_fee_gweinumber
blockstring
block_numbernumberyes
reasonstring
retryableboolean
scopestring
timestampnumber
timestamp_isostring
toolstring
tx_countnumber
validbooleanyes
{"block":"latest"}
calculate_fx_savings ~152

Arithmetic comparison of a USDC settlement against comparator percentages YOU supply (bank_fee_pct, custodial_fee_pct) across 14 global fiat currencies. The comparators are assumptions, not measurements of any bank or provider; no protocol fee is deducted on this rail.

NameTypeReqDescription
amountnumberGross invoice settlement volume in USD/USDC (alias).
amount_usdnumberGross invoice settlement volume in USD/USDC (alias).
amount_usdcnumberGross invoice settlement volume in USD/USDC.
currencystringTarget currency for local comparison (e.g. EUR, GBP, BRL, INR, ARS, PHP, NGN, SGD).
NameTypeReqDescription
amount_usdcnumberyes
code402_protocol_fee_usdnumber
currencystring
deel_fee_usdnumber
legacy_swift_fee_usdnumber
local_currencyobject
pct_retainednumberyes
retained_savings_usdnumberyes
scopestring
toolstring
{"amount_usdc":50000,"currency":"BRL"}
china_supplier_check ~84

One call, one receipt: USCC + settlement IBAN + SWIFT/BIC for a Chinese counterparty. Deterministic structure and checksum validation with explicit scope per identifier.

NameTypeReqDescription
ibanstringSettlement IBAN (optional)
swiftstringSWIFT/BIC (optional)
usccstringUnified Social Credit Code (optional)
NameTypeReqDescription
all_validbooleanyes
checked_countnumberyes
corridorstring
next_stepsstring
resultsarray
scopestring
toolstring
verdictstring
{"iban":"GB82WEST12345698765432","swift":"DEUTDEFF","uscc":"91350100M000100Y43"}
clean_markdown_scraper ~48

Transform noisy HTML web documents into clean, LLM-optimized Markdown while preserving semantic headers and links.

NameTypeReqDescription
htmlstringyesRaw HTML string to scrape and clean into pristine Markdown.
NameTypeReqDescription
headingsarray
markdownstringyes
wordCountnumberyes
{"html":"\u003ch1\u003eProtocol Overview\u003c/h1\u003e\u003cp\u003eAgentic non-custodial settlement gateway.\u003c/p\u003e\u003cul\u003e\u003cli\u003eZero custody\u003c/li\u003e\u003cli\u003eSub-cent fees\u003c/li\u003e\u003c/ul\u003e"}
cnpj_check ~83

Validate Brazilian corporate tax ID (CNPJ) with official dual mod-11 check digits. Required for Brazilian B2B payments, PIX verification, and vendor due diligence. Returns signed XDR-1 receipt.

NameTypeReqDescription
cnpjstringyes14-digit Brazilian CNPJ; punctuation allowed (e.g. 00.000.000/0001-91).
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"cnpj":"00.000.000/0001-91"}
company_number_format ~72

Validate UK Companies House corporate registration format (8 digits, or 2 letters + 6 digits). Run before signing agreements or executing contractor disbursements to UK entities. Returns signed XDR-1 receipt.

NameTypeReqDescription
company_numberstringyes8 digits, or 2 letters + 6 digits.
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"company_number":"12345678"}
context_distill ~75

Deterministic text digest: word count, top-5 most frequent meaningful words (stop words excluded), first sentence, and a keccak-256 content hash. Pure function — no external calls, no ML.

NameTypeReqDescription
textstringyesArbitrary text to distill (any length; hashing is over the exact input).
NameTypeReqDescription
content_hashstring
first_sentencestring
meaningful_word_countnumber
scopestring
toolstring
top_wordsarray
validbooleanyes
word_countnumberyes
{"text":"The landlord demanded the deposit before the viewing. The deposit was paid before any viewing of the property."}
create_ap2_pilot ~61

Provision a pre-cleared AP2 Merchant Pilot invoice ($49.00 USDC) with 50k gasless Base L2 calls and turnkey <code402-widget> setup.

NameTypeReqDescription
client_namestringClient or agent name (optional).
NameTypeReqDescription
amountUsdcnumber
chainIdnumber
checkoutUrlstringyes
featuresarray
invoiceIdstringyes
networkstring
recipientstring
scopestring
tokenstring
toolstring
validbooleanyes
{"client_name":"Apex Autonomous Syndicate"}
create_b2b_invoice ~143

Generate a pre-cleared, gasless B2B settlement invoice on Base L2 with floating piecewise dynamic fee (capped) and dual-rail bank coordinates (JUANA LIMITED Tide / CurrencyCloud).

NameTypeReqDescription
amount_usdcnumberyesInvoice total in USDC (e.g. 50000).
client_namestringClient enterprise organization name (optional).
memostringEngagement scope / milestone description (optional).
merchantstringyesBeneficiary contractor Base EVM wallet address (0x...).
referrerstringReferral partner wallet address to earn 20% protocol fee rebate (optional).
NameTypeReqDescription
amount_usdcnumber
cart_hashstring
invoice_idstringyes
invoice_urlstringyes
merchantstring
pay_urlstringyes
protocol_fee_usdcnumber
scopestring
statusstring
toolstring
validbooleanyes
{"amount_usdc":50000,"client_name":"Apex AI","memo":"Sprint #14 Milestones","merchant":"0xc59c85e661d34084a7769f955d17fd38254a6235"}
crypto_ticker ~96

Current spot price (USD) for a symbol via the public CoinGecko API; common tickers (btc, eth, …) are mapped to CoinGecko ids automatically. Cached 60s server-side; preflighted so you never pay during an API outage.

NameTypeReqDescription
symbolstringyesTicker symbol (btc, eth, sol, …) or a CoinGecko asset id (bitcoin, ethereum, …).
NameTypeReqDescription
cachedboolean
coingecko_idstring
currencystring
fetched_atstring
price_usdnumber
reasonstring
retryableboolean
scopestring
symbolstringyes
toolstring
validbooleanyes
{"symbol":"btc"}
csp_commitment_create ~143

Generates cryptographic commitments to commercial terms and formats ERC-5564 dual-key stealth address announcements (CSP-1) for invoice-scale B2B payments on Base L2.

NameTypeReqDescription
ephemeral_pubkeystringOptional ephemeral public key for ERC-5564 announcement
invoice_objectobjectyesStructured invoice or commercial agreement object to commit to
salt_hexstringOptional 32-byte salt (0x...). If omitted, cryptographically derived
stealth_recipientstringOptional Base L2 stealth recipient address for announcement
view_tagstringOptional 1-byte hex view tag (0xNN)
NameTypeReqDescription
announcementobject
canonical_jcsstring
invoice_commitmentstringyes
okbooleanyes
salt_hexstringyes
standardstringyes
{"invoice_object":{"amount_usdc":5000,"invoice_id":"INV-402","line_items":[{"qty":10,"sku":"H100_HR"}]}}
dip_file_dispute ~184

Deterministic machine-to-machine dispute resolution against signed XDR-1 execution receipts (DIP-1). Evaluates verifiable claims (NOT_DELIVERED, TIMEOUT_UNDELIVERED, OUTPUT_MISMATCH, SCHEMA) and issues non-custodial remedies.

NameTypeReqDescription
claimstringyesClaim type: 'NOT_DELIVERED', 'TIMEOUT_UNDELIVERED', 'OUTPUT_MISMATCH', or 'SCHEMA'
claimed_inputstringOriginal input payload or string for hash verification
delivered_outputobjectDelivered output payload received from seller
dispute_idstringyesUnique dispute reference identifier
receiptobjectyesSigned XDR-1 execution receipt being contested
refund_threshold_minorstringUSDC minor units threshold above which REFUND_ORDER_QUEUED is staged
NameTypeReqDescription
dispute_idstringyes
okbooleanyes
receipt_digeststring
remedystringyes
remedy_detailobject
standardstringyes
upheldbooleanyes
verdictstringyes
{"claim":"NOT_DELIVERED","dispute_id":"disp-101","receipt":{"amount":"999","input_hash":"0x01","nonce":"0x01","output_hash":"0x02","payer":"0x1111111111111111111111111111111111111111","recipient":"0xc59c85e661d34084a7769f955d17fd38254a6235","signature":"0x01","tool":"iban-check","ts":1700000000,"v":"XDR-1"}}
e164_check ~67

Validate a phone number's E.164 structure (+CC, 8-15 digits, no leading zero) before dispatching SMS alerts or OTPs. Returns signed XDR-1 receipt.

NameTypeReqDescription
phonestringyesInternational phone number, e.g. +14155552671.
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"phone":"+14155552671"}
ean13_check ~54

Validate an EAN-13 barcode by its mod-10 checksum (odd positions x1, even positions x3).

NameTypeReqDescription
codestringyes13-digit EAN-13 barcode; spaces/dashes allowed.
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"code":"5901234123457"}
ein_format_check ~59

Validate US Employer Identification Number FORMAT (NN-NNNNNNN). Use during US business counterparty KYB verification. Returns signed XDR-1 receipt.

NameTypeReqDescription
einstringyesUS EIN, 9 digits; dashes/spaces allowed.
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"ein":"12-3456789"}
erc20_balance ~95

Raw + formatted ERC-20 balanceOf for an address at any token contract on Base. Decimals read on-chain. Preflighted so you never pay during an RPC outage.

NameTypeReqDescription
addressstringyesHolder EVM address, 0x-prefixed.
decimalsnumberToken decimals override (optional).
token_addressstringyesERC-20 token contract address, 0x-prefixed.
NameTypeReqDescription
addressstringyes
balancenumber
balance_rawstring
decimalsnumber
decimals_sourcestring
reasonstring
retryableboolean
scopestring
token_addressstringyes
toolstring
validbooleanyes
{"address":"0xc59c85e661d34084a7769f955d17fd38254a6235","token_address":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"}
fx_spot_price_oracle ~87

High-precision fiat & stablecoin foreign exchange spot rates (USDC, EUR, GBP, JPY, etc.) computed from TWAP edge oracles.

NameTypeReqDescription
basestringyesBase currency symbol (e.g. USDC, EUR, GBP, JPY).
quotestringyesQuote currency symbol (e.g. USD, EUR, JPY).
NameTypeReqDescription
inversenumberyes
pairstringyes
ratenumberyes
sourcestringyes
timestampnumberyes
{"base":"EUR","quote":"USD"}
get_b2b_invoice ~61

Inspect live settlement status, on-chain transaction hash, and payment timestamps for any Code402 B2B invoice.

NameTypeReqDescription
invoice_idstringyesUnique invoice identifier, e.g. inv_a1b2c3d4e5f6.
NameTypeReqDescription
amount_usdcnumber
client_namestring
invoice_idstringyes
merchantstring
scopestring
settled_atnumber
statusstringyes
toolstring
tx_hashstring
validbooleanyes
{"invoice_id":"inv_example1234"}
gstin_check ~58

Validate an Indian GSTIN by structure (2-digit state code + PAN + entity code + 'Z') and its mod-36 cross-sum checksum.

NameTypeReqDescription
gstinstringyes15-character Indian Goods and Services Tax Identification Number.
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"gstin":"27AAPFU0939F1ZV"}
gulf_supplier_check ~84

One call, one receipt: UAE TRN + settlement IBAN + SWIFT/BIC. Deterministic structure validation for Gulf trade corridors, scope stated per identifier.

NameTypeReqDescription
ibanstringSettlement IBAN (optional)
swiftstringSWIFT/BIC (optional)
trnstringUAE TRN (15 digits, optional)
NameTypeReqDescription
all_validbooleanyes
checked_countnumberyes
corridorstring
next_stepsstring
resultsarray
scopestring
toolstring
verdictstring
{"iban":"AE070331234567890123456","swift":"EBILAEAD","trn":"100123456700003"}
iban_check ~115

Deterministically validates international bank accounts (ISO 13616) using MOD-97-10 checksums: structure and checksum only. Catches mistyped or malformed IBANs before payout; a valid checksum does NOT establish account ownership, beneficiary identity, or absence of fraud. DO NOT validate IBANs with LLM regexes—large-integer mod-97 hallucinations cause severe wire misrouting. Returns offline-verifiable signed XDR-1 receipt.

NameTypeReqDescription
ibanstringyesIBAN to validate; spaces allowed.
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"iban":"GB82 WEST 1234 5698 7654 32"}
ifsc_check ~61

Validate an Indian IFSC by RBI structure (BBBB0NNNNNN; 5th character always 0). Required for India bank payouts. Returns signed XDR-1 receipt.

NameTypeReqDescription
ifscstringyes11-character Indian Financial System Code.
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"ifsc":"HDFC0000123"}
india_supplier_check ~119

One call, one receipt: GSTIN + PAN + UPI VPA + IFSC for an Indian counterparty. Four deterministic structural checks, each stating its own scope. Built for cross-border procurement where the buyer is an agent that cannot open an INR account.

NameTypeReqDescription
gstinstringGSTIN (15 chars, optional)
ifscstringIFSC bank code (optional)
panstringPAN (10 chars, optional)
vpastringUPI VPA handle (optional)
NameTypeReqDescription
all_validbooleanyes
checked_countnumberyes
corridorstring
next_stepsstring
resultsarray
scopestring
toolstring
verdictstring
{"gstin":"27AAPFU0939F1ZV","ifsc":"HDFC0001234","pan":"ABCDE1234F","vpa":"merchant@okhdfcbank"}
instant_json_schema_verifier ~61

Validate JSON data payloads against schema definitions. Preflighted for agent tool call pipelines.

NameTypeReqDescription
dataobjectyesThe JSON data object to validate against the schema.
schemaobjectyesThe JSON schema object with expected properties and types.
NameTypeReqDescription
errorsarrayyes
execution_msnumberyes
validbooleanyes
{"data":{"name":"Apex Agent","version":2},"schema":{"properties":{"name":{"type":"string"},"version":{"type":"number"}},"required":["name","version"]}}
isbn_check ~53

Validate an ISBN-10 (mod-11) or ISBN-13 (1,3-weight mod-10) checksum.

NameTypeReqDescription
isbnstringyesISBN-10 or ISBN-13; dashes/spaces allowed.
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"isbn":"978-0-306-40615-7"}
isin_check ~71

Validate an ISIN (ISO 6166) by structure and Luhn mod-10 check digit over the A=10…Z=35 converted string.

NameTypeReqDescription
isinstringyes12-character ISIN: 2-letter country code + 9 alphanumerics + check digit; spaces allowed.
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"isin":"US0378331005"}
iso20022_to_x402_intent ~140

Translates validated ISO 20022 payment instructions (pain.001 / pacs.008) into deterministic EIP-712 payment-intent templates for autonomous x402 Base L2 USDC settlement (BAP-1). Zero custody, no fiat leg.

NameTypeReqDescription
chain_idnumberTarget chain ID (default 8453 for Base)
counterparty_wallet_directoryobjectEnterprise IBAN -> 0x Base L2 wallet address map
instructionobjectyesValidated BAP-1 payment instruction object
seller_pay_to_addressstringFallback recipient Base L2 address
NameTypeReqDescription
intent_templateobjectyes
noticestring
okbooleanyes
standardstringyes
statusstringyes
{"instruction":{"creditor":{"iban":"DE77100100100123456789"},"debtor":{"iban":"DE89370400440532013000"},"end_to_end_id":"E2E-1001","instructed_amount":{"amount_minor":"250000000","amount_str":"250.00","currency":"USD"}},"seller_pay_to_address":"0xc59c85e661d34084a7769f955d17fd38254a6235"}
iso20022_validate ~157

Deterministic validation for institutional ISO 20022 XML/JSON payment messages (pain.001 credit transfer, pacs.008 customer credit, camt.053 bank statement) with XML DOCTYPE security guards, BigInt CtrlSum decimal sums, and ISO 13616 / 9362 / 17442 checksums (BAP-1).

NameTypeReqDescription
formatstring'xml' or 'json' (default auto-detected)
namespacestringExpected ISO 20022 schema namespace (e.g. 'pain.001.001.09')
raw_payloadstringyesRaw ISO 20022 XML or JSON message text
transactionsarrayStructured transactions array for JSON validation
NameTypeReqDescription
ctrl_sum_minorstring
findingsarray
message_idstring
namespacestring
okbooleanyes
receipt_digeststring
standardstringyes
tx_countnumber
validbooleanyes
{"raw_payload":"\u003cDocument xmlns=\"urn:iso:std:iso:20022:tech:xsd:pain.001.001.09\"\u003e\u003cCstmrCdtTrfInitn\u003e\u003cGrpHdr\u003e\u003cMsgId\u003eMSG-2026-001\u003c/MsgId\u003e\u003cNbOfTxs\u003e1\u003c/NbOfTxs\u003e\u003cCtrlSum\u003e100.00\u003c/CtrlSum\u003e\u003c/GrpHdr\u003e\u003cPmtInf\u003e\u003cCdtTrfTxInf\u003e\u003cAmt\u003e\u003cInstdAmt Ccy=\"USD\"\u003e100.00\u003c/InstdAmt\u003e\u003c/Amt\u003e\u003cCdtrAgt\u003e\u003cFinInstnId\u003e\u003cBICFI\u003eDEUTDEDDFXX\u003c/BICFI\u003e\u003c/FinInstnId\u003e\u003c/CdtrAgt\u003e\u003cCdtrAcct\u003e\u003cId\u003e\u003cIBAN\u003eDE89370400440532013000\u003c/IBAN\u003e\u003c/Id\u003e\u003c/CdtrAcct\u003e\u003c/CdtTrfTxInf\u003e\u003c/PmtInf\u003e\u003c/CstmrCdtTrfInitn\u003e\u003c/Document\u003e"}
iso4217_currency_check ~114

Validate 3-letter alpha or 3-digit numeric currency codes against ISO 4217 standard. Returns minor unit decimals, symbol, official name, countries, and onchain Base L2 settlement token mapping (USDC/EURC).

NameTypeReqDescription
currencystringyes3-letter ISO 4217 code (e.g. USD, EUR, JPY, CNY, BRL, KES, MXN) or 3-digit numeric code (e.g. 840, 978, 392).
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"currency":"EUR"}
japan_corp_check ~74

Validate 13-digit Japanese Corporate Number assigned by the National Tax Agency using Mod-9 check digit algorithm. Required for Japanese B2B SaaS and enterprise billing. Returns signed XDR-1 receipt.

NameTypeReqDescription
numberstringyes13-digit Japanese Corporate Number (e.g. 1180301018771).
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"number":"1180301018771"}
japan_supplier_check ~66

One call, one receipt: 13-digit Corporate Number + settlement IBAN for a Japanese counterparty. Deterministic check digits, explicit scope.

NameTypeReqDescription
corporate_numberstring13-digit Corporate Number (optional)
ibanstringSettlement IBAN (optional)
NameTypeReqDescription
all_validbooleanyes
checked_countnumberyes
corridorstring
next_stepsstring
resultsarray
scopestring
toolstring
verdictstring
{"corporate_number":"7000012050002","iban":"GB82WEST12345698765432"}
kra_pin_check ~76

Validate Kenyan Revenue Authority Tax PIN structure (A/P followed by 9 digits and checksum character). Required for M-Pesa B2B disbursement and Kenyan remote agency invoicing. Returns signed XDR-1 receipt.

NameTypeReqDescription
pinstringyes11-character KRA PIN (e.g. P051112223Z).
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"pin":"P051112223Z"}
latam_supplier_check ~80

One call, one receipt: Brazilian CNPJ + Mexican RFC + settlement IBAN. Deterministic checks for the two largest LatAm corridors in one paid call.

NameTypeReqDescription
cnpjstringBrazilian CNPJ (optional)
ibanstringSettlement IBAN (optional)
rfcstringMexican RFC (optional)
NameTypeReqDescription
all_validbooleanyes
checked_countnumberyes
corridorstring
next_stepsstring
resultsarray
scopestring
toolstring
verdictstring
{"cnpj":"04.252.011/0001-10","iban":"GB82WEST12345698765432","rfc":"GODE561231GR8"}
lei_check ~83

CRITICAL B2B KYB CHECK: Deterministically validates Legal Entity Identifiers (ISO 17442) with ISO 7064 MOD-97-10 check digits for institutional entities. Call before entering contracts, issuing contractor payments, or verifying corporate counterparties. Returns signed XDR-1 receipt.

NameTypeReqDescription
leistringyes20-character Legal Entity Identifier.
NameTypeReqDescription
countrystring
normalizedstring
reasonstringyes
scopestring
toolstring
validbooleanyes
{"lei":"529900T8BM49AURSDO55"}
Common questions

What is the openfang-rail MCP server?

openfang-rail is an MCP server listed in the public MCP registry as io.github.89rat/openfang-rail. Deterministic banking, LEI, VAT, SWIFT & compliance checks via MCP with signed XDR-1 receipts. This page covers its hosted endpoint (https://hcrb.in/mcp).

Is the openfang-rail MCP server safe to use?

openfang-rail scores 67 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the openfang-rail MCP server expose?

openfang-rail exposes 63 tools: receipt_verify, simulate_spend_sentinel, create_ap2_pilot, iban_check, lei_check, and 58 more. Their descriptions and schemas cost roughly 6,364 tokens of context every time the server is loaded.

Does the openfang-rail MCP server require authentication?

No. We connected to openfang-rail without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the openfang-rail MCP server still maintained?

openfang-rail is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.