# openfang-rail (remote · hcrb.in)

Deterministic banking, LEI, VAT, SWIFT & compliance checks via MCP with signed XDR-1 receipts.

- Trust score: 67/100 (medium)
- Change this week: +1
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-21

## Components

- remote · `hcrb.in`: 67/100 (this document), [markdown](https://verifymcp.io/servers/89rat-openfang-rail/hcrb.md), [page](https://verifymcp.io/servers/89rat-openfang-rail/hcrb)

## Channel facts

- Endpoint: `https://hcrb.in/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.2.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-21.

- **Endpoint Security**: 51/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 63 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS check failed: the endpoint is reachable over plaintext HTTP.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 92/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 6473 tokens (~102/item across 63 items; 63 tools + 0 resources), over budget; trim descriptions and params.
  - Tools include usage examples.
- **Stability & Change Management**: 16/100
  - Stability check failed: schema churn in the 9 days we've observed: 9 tool removals, 0 breaking changes, 0 auth/transport breaks, 7 additions.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 63 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 64 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the openfang-rail MCP server?

openfang-rail is a hosted endpoint at https://hcrb.in/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http 89rat-openfang-rail 'https://hcrb.in/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "89rat-openfang-rail": {
      "url": "https://hcrb.in/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "89rat-openfang-rail": {
      "type": "http",
      "url": "https://hcrb.in/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.89rat-openfang-rail]
url = "https://hcrb.in/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "89rat-openfang-rail": {
      "type": "remote",
      "url": "https://hcrb.in/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add 89rat-openfang-rail --url 'https://hcrb.in/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  89rat-openfang-rail:
    url: "https://hcrb.in/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "89rat-openfang-rail": {
      "Transport": "http",
      "Url": "https://hcrb.in/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add 89rat-openfang-rail -t streamable-http -u 'https://hcrb.in/mcp'
```

### Other

```json
{
  "mcpServers": {
    "89rat-openfang-rail": {
      "type": "http",
      "url": "https://hcrb.in/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-20 (score 67, +1)

No change was recorded against any check on this day. Stability & Change Management went from 9 to 13.

### 2026-09-19 (score 66, 0)

- [security] Tool “calculate_fx_savings” rewrote its description, which is the text the model reads

### 2026-09-18 (score 66, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 6.

### 2026-09-17 (score 65, 0)

- [security] The server rewrote its instructions, which are the text every model session reads
- [functional] Server version: 1.2.0 → 1.3.0
- [functional] New tool “receipt_verify”

### 2026-09-16 (score 65, +8)

- [security regression] Tool “iban-check” was removed
- [security regression] Tool “lei-check” was removed
- [security regression] Tool “swift-bic-check” was removed
- [security] The server rewrote its instructions, which are the text every model session reads
- [security] The server changed its declared name: juana-identifiers → code402
- [functional regression] Schema quality: pass → fail
- [functional improvement] Tool coverage: 0% → 100%
- [functional improvement] Schema quality: fail → pass
- [functional improvement] MCP protocol: fail → pass
- [functional] The server now declares the “prompts” capability
- [functional] The server now declares the “resources” capability
- [functional] Schema quality: good → excellent
- [functional] MCP protocol version: 2025-06-18 → 2025-11-25
- [functional] Server version: 1.0.0 → 1.2.0
- [functional] New tool “aba_routing_check”
- [functional] New tool “abn_check”
- [functional] New tool “aci_trust_lookup”
- [functional] New tool “africa_supplier_check”
- [functional] New tool “balance_check”
- [functional] New tool “batch_validate”
- [functional] New tool “bind_insurance_policy”
- [functional] New tool “block_info”
- [functional] New tool “calculate_fx_savings”
- [functional] New tool “china_supplier_check”
- [functional] New tool “clean_markdown_scraper”
- [functional] New tool “cnpj_check”
- [functional] New tool “company_number_format”
- [functional] New tool “context_distill”
- [functional] New tool “create_ap2_pilot”
- [functional] New tool “create_b2b_invoice”
- [functional] New tool “crypto_ticker”
- [functional] New tool “csp_commitment_create”
- [functional] New tool “dip_file_dispute”
- [functional] New tool “e164_check”
- [functional] New tool “ean13_check”
- [functional] New tool “ein_format_check”
- [functional] New tool “erc20_balance”
- [functional] New tool “fx_spot_price_oracle”
- [functional] New tool “get_b2b_invoice”
- [functional] New tool “gstin_check”
- [functional] New tool “gulf_supplier_check”
- [functional] New tool “iban_check”
- [functional] New tool “ifsc_check”
- [functional] New tool “india_supplier_check”
- [functional] New tool “instant_json_schema_verifier”
- [functional] New tool “isbn_check”
- [functional] New tool “isin_check”
- [functional] New tool “iso20022_to_x402_intent”
- [functional] New tool “iso20022_validate”
- [functional] New tool “iso4217_currency_check”
- [functional] New tool “japan_corp_check”
- [functional] New tool “japan_supplier_check”
- [functional] New tool “kra_pin_check”
- [functional] New tool “latam_supplier_check”
- [functional] New tool “lei_check”
- [functional] New tool “list_approved_insurers”
- [functional] New tool “luhn_check”
- [functional] New tool “ofac_sdn_check”
- [functional] New tool “pan_format_check”
- [functional] New tool “pod_verify_delivery”
- [functional] New tool “pre_disbursement_guard”
- [functional] New tool “quote_3rd_party_insurance”
- [functional] New tool “rent_deposit_guard”
- [functional] New tool “rental_listing_risk”
- [functional] New tool “rental_verdict”
- [functional] New tool “rfc_check”
- [functional] New tool “sedol_check”
- [functional] New tool “settlement_history_check”
- [functional] New tool “simulate_spend_sentinel”
- [functional] New tool “swift_bic_check”
- [functional] New tool “tx_activity”
- [functional] New tool “uae_trn_check”
- [functional] New tool “upi_vpa_check”
- [functional] New tool “uscc_check”
- [functional] New tool “vat_mod97_check”
- [functional] New tool “vendor_onboarding_pack”

### 2026-09-15 (score 57, −9)

- [security regression] Stability: 0.07 → fail
- [security regression] Tool “aba_routing_check” was removed
- [security regression] Tool “abn_check” was removed
- [security regression] Tool “aci_trust_lookup” was removed
- [security regression] Tool “autonomous_commercial_pipeline” was removed
- [security regression] Tool “balance_check” was removed
- [security regression] Tool “batch_validate” was removed
- [security regression] Tool “bind_insurance_policy” was removed
- [security regression] Tool “block_info” was removed
- [security regression] Tool “browse_compute_clusters” was removed
- [security regression] Tool “browse_technical_studios” was removed
- [security regression] Tool “browse_top_guilds” was removed
- [security regression] Tool “calculate_fx_savings” was removed
- [security regression] Tool “clean_markdown_scraper” was removed
- [security regression] Tool “cnpj_check” was removed
- [security regression] Tool “company_number_format” was removed
- [security regression] Tool “context_distill” was removed
- [security regression] Tool “create_ap2_pilot” was removed
- [security regression] Tool “create_b2b_invoice” was removed
- [security regression] Tool “crypto_ticker” was removed
- [security regression] Tool “csp_commitment_create” was removed
- [security regression] Tool “dip_file_dispute” was removed
- [security regression] Tool “e164_check” was removed
- [security regression] Tool “ean13_check” was removed
- [security regression] Tool “ein_format_check” was removed
- [security regression] Tool “engine_benchmark” was removed
- [security regression] Tool “erc20_balance” was removed
- [security regression] Tool “fx_spot_price_oracle” was removed
- [security regression] Tool “get_b2b_invoice” was removed
- [security regression] Tool “get_guild_profile” was removed
- [security regression] Tool “get_studio_profile” was removed
- [security regression] Tool “gstin_check” was removed
- [security regression] Tool “iban_check” was removed
- [security regression] Tool “ifsc_check” was removed
- [security regression] Tool “instant_json_schema_verifier” was removed
- [security regression] Tool “isbn_check” was removed
- [security regression] Tool “isin_check” was removed
- [security regression] Tool “iso20022_to_x402_intent” was removed
- [security regression] Tool “iso20022_validate” was removed
- [security regression] Tool “iso4217_currency_check” was removed
- [security regression] Tool “japan_corp_check” was removed
- [security regression] Tool “kra_pin_check” was removed
- [security regression] Tool “lei_check” was removed
- [security regression] Tool “list_approved_insurers” was removed
- [security regression] Tool “luhn_check” was removed
- [security regression] Tool “ofac_sdn_check” was removed
- [security regression] Tool “pan_format_check” was removed
- [security regression] Tool “pod_verify_delivery” was removed
- [security regression] Tool “pre_disbursement_guard” was removed
- [security regression] Tool “quote_3rd_party_insurance” was removed
- [security regression] Tool “quote_compute_slice” was removed
- [security regression] Tool “rent_deposit_guard” was removed
- [security regression] Tool “rental_listing_risk” was removed
- [security regression] Tool “rental_verdict” was removed
- [security regression] Tool “rfc_check” was removed
- [security regression] Tool “sedol_check” was removed
- [security regression] Tool “semantic_service_matchmaker” was removed
- [security regression] Tool “settlement_history_check” was removed
- [security regression] Tool “simulate_spend_sentinel” was removed
- [security regression] Tool “swift_bic_check” was removed
- [security regression] Tool “tx_activity” was removed
- [security regression] Tool “uae_trn_check” was removed
- [security regression] Tool “upi_vpa_check” was removed
- [security regression] Tool “uscc_check” was removed
- [security regression] Tool “vat_mod97_check” was removed
- [security regression] Tool “vendor_onboarding_pack” was removed
- [security] The server rewrote its instructions, which are the text every model session reads
- [security] The server changed its declared name: code402 → juana-identifiers
- [functional regression] Tool coverage: 100% → 0%
- [functional regression] Schema quality: pass → fail
- [functional regression] MCP protocol: pass → fail
- [functional improvement] Schema quality: fail → pass
- [functional] The server no longer declares the “prompts” capability
- [functional] The server no longer declares the “resources” capability
- [functional] Schema quality: excellent → good
- [functional] MCP protocol version: 2025-11-25 → 2025-06-18
- [functional] Server version: 1.2.0 → 1.0.0
- [functional] New tool “iban-check”
- [functional] New tool “lei-check”
- [functional] New tool “swift-bic-check”

### 2026-09-13 (score 66, +1)

- [security] Tool “ofac_sdn_check” rewrote its description, which is the text the model reads
- [functional regression] Schema quality: pass → fail
- [functional improvement] Stability: unverified → 0.03

### 2026-09-12 (score 65)

First indexed and scored.

## MCP tools (63)

### `receipt_verify` (~133 tokens)

Verify any XDR-1 receipt — free, stateless, any issuer

Verifies a signed XDR-1 receipt from ANY x402 service: recomputes the canonical digest and recovers the signer, then compares it to the declared signer. Free forever — no account, no quota, no storage (stateless). A valid receipt proves the signer signed that tool call at that timestamp; it does NOT prove funds moved or any business claim.

Input parameters:

- `receipt` (string, required): The full XDR-1 receipt object: v, tool, tool_version, input_hash, output_hash, payer, recipient, amount, nonce, ts, tier, signer, signature (optional successor/stream_state).

Output parameters:

- `canonical` (string)
- `declared_signer` (string)
- `digest` (string)
- `scope` (string)
- `signer_recovered` (string)
- `valid` (boolean)

### `simulate_spend_sentinel` (~79 tokens)

Simulate Spend Sentinel policy defense and escrow reversal

Simulate prompt-injection spend halts, hallucinated subagent delivery escrow reversals, and verified bounded spend under AP2 envelopes.

Input parameters:

- `scenario` (string): Simulation scenario: 'injection' (prompt attack), 'garbage' (bad subagent output), or 'provable' (verified settlement). Default 'injection'.

Output parameters:

- `action_taken` (string)
- `actual_wallet_loss_usdc` (number)
- `code` (string)
- `requested_amount_usdc` (number)
- `scenario` (string)
- `scope` (string)
- `status` (number)
- `telemetry` (string)
- `tool` (string)
- `valid` (boolean)
- `verdict` (string)

### `create_ap2_pilot` (~61 tokens)

Create AP2 pilot retainer

Provision a pre-cleared AP2 Merchant Pilot invoice ($49.00 USDC) with 50k gasless Base L2 calls and turnkey <code402-widget> setup.

Input parameters:

- `client_name` (string): Client or agent name (optional).

Output parameters:

- `amountUsdc` (number)
- `chainId` (number)
- `checkoutUrl` (string)
- `features` (array)
- `invoiceId` (string)
- `network` (string)
- `recipient` (string)
- `scope` (string)
- `token` (string)
- `tool` (string)
- `valid` (boolean)

### `iban_check` (~115 tokens)

IBAN Check & Wire Fraud Shield

Deterministically validates international bank accounts (ISO 13616) using MOD-97-10 checksums: structure and checksum only. Catches mistyped or malformed IBANs before payout; a valid checksum does NOT establish account ownership, beneficiary identity, or absence of fraud. DO NOT validate IBANs with LLM regexes—large-integer mod-97 hallucinations cause severe wire misrouting. Returns offline-verifiable signed XDR-1 receipt.

Input parameters:

- `iban` (string, required): IBAN to validate; spaces allowed.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `lei_check` (~83 tokens)

Legal Entity Identifier (LEI) KYB Check

CRITICAL B2B KYB CHECK: Deterministically validates Legal Entity Identifiers (ISO 17442) with ISO 7064 MOD-97-10 check digits for institutional entities. Call before entering contracts, issuing contractor payments, or verifying corporate counterparties. Returns signed XDR-1 receipt.

Input parameters:

- `lei` (string, required): 20-character Legal Entity Identifier.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `vat_mod97_check` (~82 tokens)

VAT Check & Tax Invoicing Shield

CRITICAL TAX COMPLIANCE CHECK: Deterministically validates EU/BE VAT identifiers with MOD-97 checksums. Eliminates cross-border invoicing errors, invalid billing, and tax audit penalties. Returns signed XDR-1 receipt for accounting defense.

Input parameters:

- `vat_number` (string, required): EU VAT id; BE mod-97 checksum (BE prefix optional).

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `company_number_format` (~72 tokens)

UK Companies House Number Verifier

Validate UK Companies House corporate registration format (8 digits, or 2 letters + 6 digits). Run before signing agreements or executing contractor disbursements to UK entities. Returns signed XDR-1 receipt.

Input parameters:

- `company_number` (string, required): 8 digits, or 2 letters + 6 digits.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `rent_deposit_guard` (~112 tokens)

Rental Deposit Safety Guard

CRITICAL ESCROW DEFENSE: Validates rental deposit safety by checking recipient IBAN checksum, matching property/deposit country jurisdiction, and flagging advance pre-viewing payment demands to prevent escrow theft.

Input parameters:

- `deposit_before_viewing` (boolean): True if a deposit is demanded before any viewing.
- `deposit_iban` (string, required): IBAN the deposit would be paid to.
- `property_country` (string): ISO 3166-1 alpha-2 country of the property, e.g. DE.

Output parameters:

- `band` (string)
- `flags` (array)
- `flags_fired` (array)
- `recommendation` (string)
- `risk_score` (number)
- `scope` (string)
- `tool` (string)

### `rental_listing_risk` (~183 tokens)

Rental Listing Risk & Fraud Engine

Explainable tenancy fraud risk score evaluated across irreversible payment demands, off-platform pressure, stolen photos, and advance wire signals. Deterministic rule engine.

Input parameters:

- `contact_moves_offplatform` (boolean): Pushed off the listing platform.
- `identity_docs_requested_upfront` (boolean): Full ID/bank docs demanded upfront.
- `landlord_abroad_cannot_meet` (boolean): Landlord 'abroad', can't meet in person.
- `no_in_person_viewing` (boolean): No viewing before payment.
- `payment_irreversible` (boolean): Paid via crypto/gift-card/wire-only.
- `photos_reverse_image_hit` (boolean): Listing photos found elsewhere (stolen).
- `price_below_market_pct` (number): How far below local market the rent is asked, in percent.
- `urgency_pressure` (boolean): Pressure to secure today.

Output parameters:

- `band` (string)
- `flags` (array)
- `flags_fired` (array)
- `recommendation` (string)
- `risk_score` (number)
- `scope` (string)
- `tool` (string)

### `rental_verdict` (~232 tokens)

Tenancy Due-Diligence & Anti-Scam Verdict

INSTITUTIONAL TENANCY SHIELD: Single combined, signed rental due-diligence verdict combining deposit IBAN checksum, cross-border jurisdiction, pre-viewing advance wire flags, landlord entity verification, and listing fraud heuristics. Outputs cover-your-agent verification proof.

Input parameters:

- `contact_moves_offplatform` (boolean): Contact pushed off the listing platform.
- `deposit_before_viewing` (boolean): True if a deposit is demanded before any viewing.
- `deposit_iban` (string, required): Deposit IBAN.
- `landlord_company_no` (string): Landlord UK company number (optional).
- `landlord_lei` (string): Landlord LEI (optional).
- `no_in_person_viewing` (boolean): No in-person or video viewing before payment.
- `payment_irreversible` (boolean): Payment demanded via crypto/gift-card/wire-only.
- `price_below_market_pct` (number): How far below local market the rent is asked, in percent.
- `property_country` (string): Property country, ISO alpha-2.
- `urgency_pressure` (boolean): Pressure to secure the property today.

Output parameters:

- `band` (string)
- `components` (object)
- `flags` (array)
- `risk_score` (number)
- `scope` (string)
- `summary` (string)
- `tool` (string)
- `verdict` (string)

### `batch_validate` (~139 tokens)

Batch Identifier Pipeline (up to 50 checks, 1 payment)

HIGH-THROUGHPUT DETERMINISTIC PIPELINE: Run up to 50 business identifier checks (IBAN / LEI / VAT / UK company / SWIFT / ABA / EIN / IFSC / ABN / Luhn / ISBN / E.164 / SEDOL / ISIN / EAN-13 / GSTIN / context-distill) in ONE paid call: one voucher, one settlement, one signed XDR-1 receipt covering the whole batch. 10x cheaper per item; essential for autonomous batch invoice processing.

Input parameters:

- `items` (array, required): List of {tool, value} checks (max 50).

Output parameters:

- `count` (number)
- `invalid_count` (number)
- `results` (array)
- `scope` (string)
- `tool` (string)
- `valid_count` (number)

### `swift_bic_check` (~78 tokens)

SWIFT/BIC Structure & Country Code Check

Validate a SWIFT/BIC code by ISO 9362 structure (bank code, ISO country, location, optional branch). Run before foreign wire transfer dispatch to prevent routing rejection. Returns signed XDR-1 receipt.

Input parameters:

- `bic` (string, required): SWIFT/BIC code, 8 or 11 characters; spaces/dashes allowed.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `aba_routing_check` (~97 tokens)

ABA Routing Number Check (US Fedwire/ACH)

Validate a US ABA routing number by its (3,7,1)-weight mod-10 Fedwire/ACH checksum. Catches mistyped or invalid routing numbers before payment; does NOT prevent transfer reversals or establish the recipient. Returns signed XDR-1 receipt.

Input parameters:

- `aba_routing` (string): 9-digit US bank routing number.
- `routing` (string): 9-digit US bank routing number (alias).

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `ein_format_check` (~59 tokens)

EIN Format Check (US)

Validate US Employer Identification Number FORMAT (NN-NNNNNNN). Use during US business counterparty KYB verification. Returns signed XDR-1 receipt.

Input parameters:

- `ein` (string, required): US EIN, 9 digits; dashes/spaces allowed.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `ifsc_check` (~61 tokens)

IFSC Check (India NEFT/RTGS)

Validate an Indian IFSC by RBI structure (BBBB0NNNNNN; 5th character always 0). Required for India bank payouts. Returns signed XDR-1 receipt.

Input parameters:

- `ifsc` (string, required): 11-character Indian Financial System Code.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `abn_check` (~57 tokens)

ABN Check (Australia)

Validate an Australian Business Number by its mod-89 checksum (11 digits). Required before invoice payment to Australian contractors. Returns signed XDR-1 receipt.

Input parameters:

- `abn` (string, required): 11-digit Australian Business Number; spaces allowed.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `luhn_check` (~59 tokens)

Luhn Check Digit Verifier

Validate any 12-19 digit number by the Luhn mod-10 algorithm. Never submit real payment card numbers. Returns signed XDR-1 receipt.

Input parameters:

- `number` (string, required): 12-19 digit number; spaces/dashes allowed.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `isbn_check` (~53 tokens)

ISBN Check

Validate an ISBN-10 (mod-11) or ISBN-13 (1,3-weight mod-10) checksum.

Input parameters:

- `isbn` (string, required): ISBN-10 or ISBN-13; dashes/spaces allowed.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `e164_check` (~67 tokens)

E.164 International Phone Check

Validate a phone number's E.164 structure (+CC, 8-15 digits, no leading zero) before dispatching SMS alerts or OTPs. Returns signed XDR-1 receipt.

Input parameters:

- `phone` (string, required): International phone number, e.g. +14155552671.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `sedol_check` (~60 tokens)

SEDOL Check (UK/Ireland Securities)

Validate a UK/Ireland security identifier by its (1,3,1,7,3,9)-weight mod-10 checksum. Returns signed XDR-1 receipt.

Input parameters:

- `sedol` (string, required): 7-character SEDOL code.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `cnpj_check` (~83 tokens)

Brazil CNPJ Check (Cadastro Nacional da Pessoa Jurídica)

Validate Brazilian corporate tax ID (CNPJ) with official dual mod-11 check digits. Required for Brazilian B2B payments, PIX verification, and vendor due diligence. Returns signed XDR-1 receipt.

Input parameters:

- `cnpj` (string, required): 14-digit Brazilian CNPJ; punctuation allowed (e.g. 00.000.000/0001-91).

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `uscc_check` (~86 tokens)

China USCC Check (Unified Social Credit Code / 统一社会信用代码)

Validate 18-character Chinese business registration and tax code using GB 32100-2015 ISO 7064 Mod-31-3 checksum. Required for B2B supply chain trade with Chinese manufacturers. Returns signed XDR-1 receipt.

Input parameters:

- `uscc` (string, required): 18-character Chinese Unified Social Credit Code (e.g. 91330100799655058B).

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `japan_corp_check` (~74 tokens)

Japan Corporate Number Check (法人番号 - Houjin Bangou)

Validate 13-digit Japanese Corporate Number assigned by the National Tax Agency using Mod-9 check digit algorithm. Required for Japanese B2B SaaS and enterprise billing. Returns signed XDR-1 receipt.

Input parameters:

- `number` (string, required): 13-digit Japanese Corporate Number (e.g. 1180301018771).

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `kra_pin_check` (~76 tokens)

Kenya KRA PIN Check (Kenya Revenue Authority)

Validate Kenyan Revenue Authority Tax PIN structure (A/P followed by 9 digits and checksum character). Required for M-Pesa B2B disbursement and Kenyan remote agency invoicing. Returns signed XDR-1 receipt.

Input parameters:

- `pin` (string, required): 11-character KRA PIN (e.g. P051112223Z).

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `rfc_check` (~79 tokens)

Mexico RFC Check (Registro Federal de Contribuyentes)

Validate Mexican SAT RFC corporate (12-char) or individual (13-char) tax code and homoclave. Required for Mexican contractor invoicing and SPEI cross-border settlements. Returns signed XDR-1 receipt.

Input parameters:

- `rfc` (string, required): 12 or 13 character Mexican RFC (e.g. BBA830831LJ2).

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `iso4217_currency_check` (~114 tokens)

ISO 4217 Currency Standard Check & Settlement Mapping

Validate 3-letter alpha or 3-digit numeric currency codes against ISO 4217 standard. Returns minor unit decimals, symbol, official name, countries, and onchain Base L2 settlement token mapping (USDC/EURC).

Input parameters:

- `currency` (string, required): 3-letter ISO 4217 code (e.g. USD, EUR, JPY, CNY, BRL, KES, MXN) or 3-digit numeric code (e.g. 840, 978, 392).

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `pre_disbursement_guard` (~246 tokens)

Pre-Disbursement Due Diligence Guard (Check Before You Send)

MANDATORY COUNTERPARTY DUE DILIGENCE: Verifies counterparty before releasing invoice payments, contractor payouts, or wires. Screens ISO 13616 IBAN checksum, RDAP domain age (<30d = scam), disposable email domains, UK CRN/LEI format, and BEC cross-jurisdiction mismatches. Produces signed XDR-1 receipt for compliance.

Input parameters:

- `company_number` (string): Official corporate registration number, e.g. UK Companies House 8 digits/chars (optional).
- `declared_country` (string): 2-letter ISO country code where vendor claims to be registered (optional, e.g. 'GB', 'US', 'DE').
- `invoice_amount_usd` (number): Disbursement transaction amount in USD (optional).
- `lei` (string): ISO 17442 Legal Entity Identifier (optional).
- `physical_address` (string): Vendor physical office address (optional).
- `recipient_iban` (string): Recipient bank IBAN (optional).
- `vat_number` (string): EU VAT number (optional).
- `vendor_domain` (string): Vendor website domain or invoicing email address (optional).

Output parameters:

- `checks` (object)
- `clear_to_disburse` (boolean)
- `decision` (string)
- `flags_triggered` (array)
- `inspected_counterparty` (object)
- `recommendations` (array)
- `risk_level` (string)
- `risk_score` (number)
- `scope` (string)
- `summary` (string)
- `tool` (string)

### `vendor_onboarding_pack` (~126 tokens)

All-in-One Vendor Onboarding & Clearing Shield

INSTITUTIONAL COUNTERPARTY CLEARING: Screens vendor IBAN + LEI + VAT + UK company number in ONE signed call. Saves 50% vs individual checks. Produces an audit-ready compliance report and signed XDR-1 receipt to defend against invoice fraud before funds move.

Input parameters:

- `company_number` (string): Vendor UK company number (optional).
- `iban` (string): Vendor IBAN (optional).
- `lei` (string): Vendor LEI (optional).
- `vat_number` (string): Vendor VAT number, BE mod-97 (optional).

Output parameters:

- `all_valid` (boolean)
- `checked_count` (number)
- `results` (array)
- `scope` (string)
- `tool` (string)
- `verdict` (string)

### `india_supplier_check` (~119 tokens)

India Supplier Verification Pack

One call, one receipt: GSTIN + PAN + UPI VPA + IFSC for an Indian counterparty. Four deterministic structural checks, each stating its own scope. Built for cross-border procurement where the buyer is an agent that cannot open an INR account.

Input parameters:

- `gstin` (string): GSTIN (15 chars, optional)
- `ifsc` (string): IFSC bank code (optional)
- `pan` (string): PAN (10 chars, optional)
- `vpa` (string): UPI VPA handle (optional)

Output parameters:

- `all_valid` (boolean)
- `checked_count` (number)
- `corridor` (string)
- `next_steps` (string)
- `results` (array)
- `scope` (string)
- `tool` (string)
- `verdict` (string)

### `china_supplier_check` (~84 tokens)

China Supplier Verification Pack

One call, one receipt: USCC + settlement IBAN + SWIFT/BIC for a Chinese counterparty. Deterministic structure and checksum validation with explicit scope per identifier.

Input parameters:

- `iban` (string): Settlement IBAN (optional)
- `swift` (string): SWIFT/BIC (optional)
- `uscc` (string): Unified Social Credit Code (optional)

Output parameters:

- `all_valid` (boolean)
- `checked_count` (number)
- `corridor` (string)
- `next_steps` (string)
- `results` (array)
- `scope` (string)
- `tool` (string)
- `verdict` (string)

### `japan_supplier_check` (~66 tokens)

Japan Supplier Verification Pack

One call, one receipt: 13-digit Corporate Number + settlement IBAN for a Japanese counterparty. Deterministic check digits, explicit scope.

Input parameters:

- `corporate_number` (string): 13-digit Corporate Number (optional)
- `iban` (string): Settlement IBAN (optional)

Output parameters:

- `all_valid` (boolean)
- `checked_count` (number)
- `corridor` (string)
- `next_steps` (string)
- `results` (array)
- `scope` (string)
- `tool` (string)
- `verdict` (string)

### `latam_supplier_check` (~80 tokens)

LatAm Supplier Verification Pack

One call, one receipt: Brazilian CNPJ + Mexican RFC + settlement IBAN. Deterministic checks for the two largest LatAm corridors in one paid call.

Input parameters:

- `cnpj` (string): Brazilian CNPJ (optional)
- `iban` (string): Settlement IBAN (optional)
- `rfc` (string): Mexican RFC (optional)

Output parameters:

- `all_valid` (boolean)
- `checked_count` (number)
- `corridor` (string)
- `next_steps` (string)
- `results` (array)
- `scope` (string)
- `tool` (string)
- `verdict` (string)

### `gulf_supplier_check` (~84 tokens)

Gulf Supplier Verification Pack

One call, one receipt: UAE TRN + settlement IBAN + SWIFT/BIC. Deterministic structure validation for Gulf trade corridors, scope stated per identifier.

Input parameters:

- `iban` (string): Settlement IBAN (optional)
- `swift` (string): SWIFT/BIC (optional)
- `trn` (string): UAE TRN (15 digits, optional)

Output parameters:

- `all_valid` (boolean)
- `checked_count` (number)
- `corridor` (string)
- `next_steps` (string)
- `results` (array)
- `scope` (string)
- `tool` (string)
- `verdict` (string)

### `africa_supplier_check` (~78 tokens)

Africa Supplier Verification Pack

One call, one receipt: Kenya KRA PIN + settlement IBAN + SWIFT/BIC. Deterministic structural checks for East African trade corridors.

Input parameters:

- `iban` (string): Settlement IBAN (optional)
- `kra_pin` (string): KRA PIN (optional)
- `swift` (string): SWIFT/BIC (optional)

Output parameters:

- `all_valid` (boolean)
- `checked_count` (number)
- `corridor` (string)
- `next_steps` (string)
- `results` (array)
- `scope` (string)
- `tool` (string)
- `verdict` (string)

### `settlement_history_check` (~69 tokens)

On-Chain Counterparty Settlement History

ON-CHAIN COUNTERPARTY PROOF: Audit USDC transfers sent and received by any EVM address over the last ~48h of Base blocks. Preflighted so you never pay during an RPC outage.

Input parameters:

- `address` (string, required): EVM address, 0x-prefixed.

Output parameters:

- `address` (string)
- `scope` (string)
- `tool` (string)
- `usdc_received` (object)
- `usdc_sent` (object)
- `valid` (boolean)

### `balance_check` (~87 tokens)

Base Balance & Solvency Snapshot

PRE-PAYMENT SOLVENCY PROOF: Snapshot verified native ETH and USDC token balance on Base with raw units and decimals provenance. Preflighted so you never pay during an RPC outage.

Input parameters:

- `address` (string, required): EVM address, 0x-prefixed.
- `token_address` (string): ERC-20 token contract address (optional; defaults to USDC on Base).

Output parameters:

- `address` (string)
- `native` (object)
- `reason` (string)
- `retryable` (boolean)
- `scope` (string)
- `token` (object)
- `tool` (string)
- `valid` (boolean)

### `erc20_balance` (~95 tokens)

ERC-20 Token Balance Snapshot

Raw + formatted ERC-20 balanceOf for an address at any token contract on Base. Decimals read on-chain. Preflighted so you never pay during an RPC outage.

Input parameters:

- `address` (string, required): Holder EVM address, 0x-prefixed.
- `decimals` (number): Token decimals override (optional).
- `token_address` (string, required): ERC-20 token contract address, 0x-prefixed.

Output parameters:

- `address` (string)
- `balance` (number)
- `balance_raw` (string)
- `decimals` (number)
- `decimals_source` (string)
- `reason` (string)
- `retryable` (boolean)
- `scope` (string)
- `token_address` (string)
- `tool` (string)
- `valid` (boolean)

### `tx_activity` (~52 tokens)

Tx Activity & Contract Detection

On-chain activity snapshot: total outbound nonce, bytecode check (is_contract), and funded status on Base. Preflighted before payment.

Input parameters:

- `address` (string, required): EVM address, 0x-prefixed.

Output parameters:

- `address` (string)
- `first_funded_heuristic` (boolean)
- `is_contract` (boolean)
- `scope` (string)
- `tool` (string)
- `tx_count` (number)
- `valid` (boolean)

### `block_info` (~70 tokens)

Base Block Header Info

Latest (or specified) Base block header: number, timestamp, transaction count, base fee. Preflighted before payment.

Input parameters:

- `block` (string): Block number as hex (0x…) or decimal, or a tag (latest/earliest/pending/finalized/safe); defaults to latest.

Output parameters:

- `base_fee_gwei` (number)
- `block` (string)
- `block_number` (number)
- `reason` (string)
- `retryable` (boolean)
- `scope` (string)
- `timestamp` (number)
- `timestamp_iso` (string)
- `tool` (string)
- `tx_count` (number)
- `valid` (boolean)

### `isin_check` (~71 tokens)

ISIN check

Validate an ISIN (ISO 6166) by structure and Luhn mod-10 check digit over the A=10…Z=35 converted string.

Input parameters:

- `isin` (string, required): 12-character ISIN: 2-letter country code + 9 alphanumerics + check digit; spaces allowed.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `ean13_check` (~54 tokens)

EAN-13 check

Validate an EAN-13 barcode by its mod-10 checksum (odd positions x1, even positions x3).

Input parameters:

- `code` (string, required): 13-digit EAN-13 barcode; spaces/dashes allowed.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `gstin_check` (~58 tokens)

GSTIN check (India)

Validate an Indian GSTIN by structure (2-digit state code + PAN + entity code + 'Z') and its mod-36 cross-sum checksum.

Input parameters:

- `gstin` (string, required): 15-character Indian Goods and Services Tax Identification Number.

Output parameters:

- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `crypto_ticker` (~96 tokens)

Crypto ticker

Current spot price (USD) for a symbol via the public CoinGecko API; common tickers (btc, eth, …) are mapped to CoinGecko ids automatically. Cached 60s server-side; preflighted so you never pay during an API outage.

Input parameters:

- `symbol` (string, required): Ticker symbol (btc, eth, sol, …) or a CoinGecko asset id (bitcoin, ethereum, …).

Output parameters:

- `cached` (boolean)
- `coingecko_id` (string)
- `currency` (string)
- `fetched_at` (string)
- `price_usd` (number)
- `reason` (string)
- `retryable` (boolean)
- `scope` (string)
- `symbol` (string)
- `tool` (string)
- `valid` (boolean)

### `context_distill` (~75 tokens)

Context distill

Deterministic text digest: word count, top-5 most frequent meaningful words (stop words excluded), first sentence, and a keccak-256 content hash. Pure function — no external calls, no ML.

Input parameters:

- `text` (string, required): Arbitrary text to distill (any length; hashing is over the exact input).

Output parameters:

- `content_hash` (string)
- `first_sentence` (string)
- `meaningful_word_count` (number)
- `scope` (string)
- `tool` (string)
- `top_words` (array)
- `valid` (boolean)
- `word_count` (number)

### `instant_json_schema_verifier` (~61 tokens)

Instant JSON schema verifier

Validate JSON data payloads against schema definitions. Preflighted for agent tool call pipelines.

Input parameters:

- `data` (object, required): The JSON data object to validate against the schema.
- `schema` (object, required): The JSON schema object with expected properties and types.

Output parameters:

- `errors` (array)
- `execution_ms` (number)
- `valid` (boolean)

### `clean_markdown_scraper` (~48 tokens)

Clean markdown scraper

Transform noisy HTML web documents into clean, LLM-optimized Markdown while preserving semantic headers and links.

Input parameters:

- `html` (string, required): Raw HTML string to scrape and clean into pristine Markdown.

Output parameters:

- `headings` (array)
- `markdown` (string)
- `wordCount` (number)

### `fx_spot_price_oracle` (~87 tokens)

FX spot price oracle

High-precision fiat & stablecoin foreign exchange spot rates (USDC, EUR, GBP, JPY, etc.) computed from TWAP edge oracles.

Input parameters:

- `base` (string, required): Base currency symbol (e.g. USDC, EUR, GBP, JPY).
- `quote` (string, required): Quote currency symbol (e.g. USD, EUR, JPY).

Output parameters:

- `inverse` (number)
- `pair` (string)
- `rate` (number)
- `source` (string)
- `timestamp` (number)

### `create_b2b_invoice` (~143 tokens)

Create B2B contractor invoice

Generate a pre-cleared, gasless B2B settlement invoice on Base L2 with floating piecewise dynamic fee (capped) and dual-rail bank coordinates (JUANA LIMITED Tide / CurrencyCloud).

Input parameters:

- `amount_usdc` (number, required): Invoice total in USDC (e.g. 50000).
- `client_name` (string): Client enterprise organization name (optional).
- `memo` (string): Engagement scope / milestone description (optional).
- `merchant` (string, required): Beneficiary contractor Base EVM wallet address (0x...).
- `referrer` (string): Referral partner wallet address to earn 20% protocol fee rebate (optional).

Output parameters:

- `amount_usdc` (number)
- `cart_hash` (string)
- `invoice_id` (string)
- `invoice_url` (string)
- `merchant` (string)
- `pay_url` (string)
- `protocol_fee_usdc` (number)
- `scope` (string)
- `status` (string)
- `tool` (string)
- `valid` (boolean)

### `get_b2b_invoice` (~61 tokens)

Get B2B invoice status

Inspect live settlement status, on-chain transaction hash, and payment timestamps for any Code402 B2B invoice.

Input parameters:

- `invoice_id` (string, required): Unique invoice identifier, e.g. inv_a1b2c3d4e5f6.

Output parameters:

- `amount_usdc` (number)
- `client_name` (string)
- `invoice_id` (string)
- `merchant` (string)
- `scope` (string)
- `settled_at` (number)
- `status` (string)
- `tool` (string)
- `tx_hash` (string)
- `valid` (boolean)

### `calculate_fx_savings` (~152 tokens)

Calculate cross-border FX savings

Arithmetic comparison of a USDC settlement against comparator percentages YOU supply (bank_fee_pct, custodial_fee_pct) across 14 global fiat currencies. The comparators are assumptions, not measurements of any bank or provider; no protocol fee is deducted on this rail.

Input parameters:

- `amount` (number): Gross invoice settlement volume in USD/USDC (alias).
- `amount_usd` (number): Gross invoice settlement volume in USD/USDC (alias).
- `amount_usdc` (number): Gross invoice settlement volume in USD/USDC.
- `currency` (string): Target currency for local comparison (e.g. EUR, GBP, BRL, INR, ARS, PHP, NGN, SGD).

Output parameters:

- `amount_usdc` (number)
- `code402_protocol_fee_usd` (number)
- `currency` (string)
- `deel_fee_usd` (number)
- `legacy_swift_fee_usd` (number)
- `local_currency` (object)
- `pct_retained` (number)
- `retained_savings_usd` (number)
- `scope` (string)
- `tool` (string)

### `aci_trust_lookup` (~205 tokens)

ACI-1 Agent Credit & Trust Rating Lookup

Deterministic agent trust scoring and non-custodial unsettled exposure advisory evaluation (ACI-1). Quantifies counterparty grade (T0-T3), historical success rate, and maximum suggested settlement exposure without uncollateralized lending or float.

Input parameters:

- `dispute_loss_rate` (number): Historical dispute loss rate 0.0 to 1.0
- `first_seen_days` (number): Days since first active on-chain settlement
- `role` (string): Agent role: 'payer' or 'seller' (default 'payer')
- `settled_calls_90d` (number): Number of settled transactions in the past 90 days
- `settlement_success_rate` (number): Historical settlement success rate 0.0 to 1.0
- `sponsor_attestations` (array): Array of signed sponsorship edges
- `subject` (string, required): Agent wallet address (0x...) or canonical ANS identifier (c402:...) to evaluate

Output parameters:

- `evidence` (object)
- `ok` (boolean)
- `policy_notice` (string)
- `receipt_digest` (string)
- `score_bp` (number)
- `standard` (string)
- `subject` (string)
- `tier` (string)
- `unsettled_exposure_hint_minor` (string)

### `dip_file_dispute` (~184 tokens)

DIP-1 Deterministic Dispute Adjudication

Deterministic machine-to-machine dispute resolution against signed XDR-1 execution receipts (DIP-1). Evaluates verifiable claims (NOT_DELIVERED, TIMEOUT_UNDELIVERED, OUTPUT_MISMATCH, SCHEMA) and issues non-custodial remedies.

Input parameters:

- `claim` (string, required): Claim type: 'NOT_DELIVERED', 'TIMEOUT_UNDELIVERED', 'OUTPUT_MISMATCH', or 'SCHEMA'
- `claimed_input` (string): Original input payload or string for hash verification
- `delivered_output` (object): Delivered output payload received from seller
- `dispute_id` (string, required): Unique dispute reference identifier
- `receipt` (object, required): Signed XDR-1 execution receipt being contested
- `refund_threshold_minor` (string): USDC minor units threshold above which REFUND_ORDER_QUEUED is staged

Output parameters:

- `dispute_id` (string)
- `ok` (boolean)
- `receipt_digest` (string)
- `remedy` (string)
- `remedy_detail` (object)
- `standard` (string)
- `upheld` (boolean)
- `verdict` (string)

### `pod_verify_delivery` (~122 tokens)

POD-1 Proof-of-Delivery Attestation Verifier

Physical IoT and off-chain service delivery verification using integer E7 point-in-polygon geometry and hardware sensor threshold validation (POD-1). Deterministic integer arithmetic avoids floating-point coordinate drift; verification only, no custody or escrow.

Input parameters:

- `attestation` (object, required): Signed IoT device delivery attestation with coordinates, counter, and signatures
- `last_seen_counter` (number): Anti-replay counter from previous delivery attestations
- `mandate` (object, required): Delivery mandate with geofence polygon (lat_e7/lon_e7) and time window

Output parameters:

- `attestation_receipt_digest` (string)
- `details` (object)
- `mandate_id` (string)
- `ok` (boolean)
- `standard` (string)
- `verdict` (string)
- `verified` (boolean)

### `csp_commitment_create` (~143 tokens)

CSP-1 Confidential Terms Commitment & Stealth Announce

Generates cryptographic commitments to commercial terms and formats ERC-5564 dual-key stealth address announcements (CSP-1) for invoice-scale B2B payments on Base L2.

Input parameters:

- `ephemeral_pubkey` (string): Optional ephemeral public key for ERC-5564 announcement
- `invoice_object` (object, required): Structured invoice or commercial agreement object to commit to
- `salt_hex` (string): Optional 32-byte salt (0x...). If omitted, cryptographically derived
- `stealth_recipient` (string): Optional Base L2 stealth recipient address for announcement
- `view_tag` (string): Optional 1-byte hex view tag (0xNN)

Output parameters:

- `announcement` (object)
- `canonical_jcs` (string)
- `invoice_commitment` (string)
- `ok` (boolean)
- `salt_hex` (string)
- `standard` (string)

### `iso20022_validate` (~157 tokens)

BAP-1 ISO 20022 Banking Message Validator

Deterministic validation for institutional ISO 20022 XML/JSON payment messages (pain.001 credit transfer, pacs.008 customer credit, camt.053 bank statement) with XML DOCTYPE security guards, BigInt CtrlSum decimal sums, and ISO 13616 / 9362 / 17442 checksums (BAP-1).

Input parameters:

- `format` (string): 'xml' or 'json' (default auto-detected)
- `namespace` (string): Expected ISO 20022 schema namespace (e.g. 'pain.001.001.09')
- `raw_payload` (string, required): Raw ISO 20022 XML or JSON message text
- `transactions` (array): Structured transactions array for JSON validation

Output parameters:

- `ctrl_sum_minor` (string)
- `findings` (array)
- `message_id` (string)
- `namespace` (string)
- `ok` (boolean)
- `receipt_digest` (string)
- `standard` (string)
- `tx_count` (number)
- `valid` (boolean)

### `iso20022_to_x402_intent` (~140 tokens)

BAP-1 ISO 20022 to x402 Intent Mapper

Translates validated ISO 20022 payment instructions (pain.001 / pacs.008) into deterministic EIP-712 payment-intent templates for autonomous x402 Base L2 USDC settlement (BAP-1). Zero custody, no fiat leg.

Input parameters:

- `chain_id` (number): Target chain ID (default 8453 for Base)
- `counterparty_wallet_directory` (object): Enterprise IBAN -> 0x Base L2 wallet address map
- `instruction` (object, required): Validated BAP-1 payment instruction object
- `seller_pay_to_address` (string): Fallback recipient Base L2 address

Output parameters:

- `intent_template` (object)
- `notice` (string)
- `ok` (boolean)
- `standard` (string)
- `status` (string)

### `list_approved_insurers` (~119 tokens)

List registered 3rd-party transaction insurers

List underwriters in the open insurance referral directory. The directory ships EMPTY: an underwriter appears only after it self-registers via /api/insurance/register, and self-registration is not vetting — buyers must perform their own due diligence on any listed counterparty.

Input parameters:

- `coverage_type` (string): Optional filter: 'smart_contract_execution', 'commercial_trade_credit', 'wire_fraud_bec_defense', or 'subagent_sla_delivery'
- `min_coverage_usdc` (number): Minimum desired coverage limit in USDC

Output parameters:

- `open_access_policy` (string)
- `tool` (string)
- `total_count` (number)
- `underwriters` (array)
- `valid` (boolean)

### `quote_3rd_party_insurance` (~196 tokens)

Quote 3rd-party transaction & payment insurance

Compare insurance quotes from underwriters registered in the open referral directory (coverage for transaction, smart-contract, trade-credit, and BEC wire-fraud risk). Returns zero quotes until an underwriter has self-registered; this gateway never underwrites risk itself.

Input parameters:

- `amount` (number): Alias for amount_usdc.
- `amount_usdc` (number): Transaction or invoice settlement amount in USDC (e.g. 50000).
- `counterparty_address` (string): Counterparty Base EVM wallet address (optional).
- `coverage_type` (string): Desired coverage type: 'smart_contract_execution', 'commercial_trade_credit', 'wire_fraud_bec_defense', 'subagent_sla_delivery'
- `invoice_id` (string): Associated invoice identifier (optional).
- `transaction_id` (string): Transaction identifier (optional).
- `tx_hash` (string): On-chain transaction hash to insure (optional).

Output parameters:

- `amount_usdc` (number)
- `invoice_id` (string)
- `plain_english_summary` (string)
- `quotes` (array)
- `recommended_underwriter` (object)
- `scope` (string)
- `tool` (string)
- `total_quotes` (number)
- `transaction_id` (string)
- `tx_hash` (string)
- `valid` (boolean)

### `bind_insurance_policy` (~218 tokens)

Bind 3rd-party insurance policy to transaction

Bind an insurance policy from a REGISTERED directory underwriter to a specific transaction, payment, or B2B invoice, generating an offline-verifiable POL-1 certificate. Bilateral non-custodial agreement with the named underwriter — the gateway neither underwrites nor accredits anyone.

Input parameters:

- `amount` (number): Alias for amount_usdc
- `amount_usdc` (number): Transaction coverage amount in USDC
- `beneficiary_address` (string): Beneficiary Base EVM address for claim payouts (0x...)
- `coverage_type` (string): Coverage type override (optional)
- `invoice_id` (string): Associated invoice identifier (optional)
- `policyholder_address` (string): Policyholder Base EVM address (0x...)
- `transaction_id` (string): Transaction reference ID (optional)
- `tx_hash` (string): Transaction hash being insured (optional)
- `underwriter_id` (string, required): Underwriter id from the open self-registration directory (run list-approved-insurers for current ids; the directory ships empty)

Output parameters:

- `certificate_hash` (string)
- `coverage_amount_usdc` (number)
- `invoice_id` (string)
- `pol1_certificate` (object)
- `policy_id` (string)
- `premium_usdc` (number)
- `scope` (string)
- `status` (string)
- `tool` (string)
- `tx_hash` (string)
- `underwriter_id` (string)
- `underwriter_name` (string)
- `valid` (boolean)

### `upi_vpa_check` (~89 tokens)

India UPI Virtual Payment Address (VPA) Validator

Deterministic validation of Indian UPI Virtual Payment Address (VPA / handle) against NPCI guidelines and accredited PSP handle registry (okhdfcbank, okaxis, paytm, ybl, etc.).

Input parameters:

- `vpa` (string, required): UPI Virtual Payment Address (e.g. 'merchant@okhdfcbank', '9876543210@paytm')

Output parameters:

- `accredited_psp` (boolean)
- `country` (string)
- `handle` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `username` (string)
- `valid` (boolean)

### `pan_format_check` (~70 tokens)

India Permanent Account Number (PAN) Format Validator

Deterministic validation of Indian Permanent Account Number (PAN) issued by CBDT / Income Tax Department with 4th-character entity type classification (Individual, Company, Firm, Trust, HUF).

Input parameters:

- `pan` (string, required): 10-character PAN string (e.g. 'ABCDE1234F')

Output parameters:

- `country` (string)
- `entity_code` (string)
- `entity_type` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `valid` (boolean)

### `uae_trn_check` (~60 tokens)

UAE Tax Registration Number (TRN) Format Validator

Deterministic validation of UAE 15-digit Tax Registration Number (TRN) issued by the Federal Tax Authority (FTA) for VAT purposes.

Input parameters:

- `trn` (string, required): 15-digit UAE TRN string (starts with 100)

Output parameters:

- `authority` (string)
- `country` (string)
- `normalized` (string)
- `reason` (string)
- `scope` (string)
- `tool` (string)
- `trn_type` (string)
- `valid` (boolean)

### `ofac_sdn_check` (~105 tokens)

OFAC SDN & Sanctions List Edge Screener

Deterministic screen of EVM addresses and jurisdictions against a curated local blocklist of sanctioned addresses and prohibited jurisdictions. Address- and jurisdiction-level only — this is NOT name-based screening and NOT a complete OFAC SDN check. Absence of a match is not a sanctions clearance; use as one informational input alongside your own compliance process.

Input parameters:

- `subject` (string, required): EVM address (0x...) or ISO 3166-1 country code / jurisdiction name

Output parameters:

- `is_sanctioned` (boolean)
- `match_type` (string)
- `reason` (string)
- `sanction_program` (string)
- `scope` (string)
- `subject` (string)
- `tool` (string)
- `valid` (boolean)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/89rat-openfang-rail/hcrb#diagnostics

## Score history

- 2026-09-21: 67
- 2026-09-20: 67
- 2026-09-19: 66
- 2026-09-18: 66
- 2026-09-17: 65
- 2026-09-16: 65
- 2026-09-15: 57
- 2026-09-14: 66
- 2026-09-13: 66
- 2026-09-12: 65

## Common questions

### What is the openfang-rail MCP server?

openfang-rail is an MCP server listed in the public MCP registry as io.github.89rat/openfang-rail. Deterministic banking, LEI, VAT, SWIFT & compliance checks via MCP with signed XDR-1 receipts. This page covers its hosted endpoint (https://hcrb.in/mcp).

### Is the openfang-rail MCP server safe to use?

openfang-rail scores 67 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the openfang-rail MCP server expose?

openfang-rail exposes 63 tools: receipt_verify, simulate_spend_sentinel, create_ap2_pilot, iban_check, lei_check, and 58 more. Their descriptions and schemas cost roughly 6,364 tokens of context every time the server is loaded.

### Does the openfang-rail MCP server require authentication?

No. We connected to openfang-rail without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the openfang-rail MCP server still maintained?

openfang-rail is still listed as active in the MCP registry. We last reached this channel on 21 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://hcrb.in/mcp
- Website: https://hcrb.in/
- Changelog RSS feed: https://verifymcp.io/servers/89rat-openfang-rail/hcrb.xml
- Changelog JSON feed: https://verifymcp.io/servers/89rat-openfang-rail/hcrb.json
- HTML version of this page: https://verifymcp.io/servers/89rat-openfang-rail/hcrb