# facts402: x402 API finder + fact checks (pypi · facts402-mcp)

Find the right paid x402 API, plus fact checks: IBAN, EU VAT, OFAC sanctions, LEI, FX

- Trust score: 71/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- pypi · `facts402-mcp`: 71/100 (this document), [markdown](https://verifymcp.io/servers/com-facts402-facts402-mcp/facts402-mcp.md), [page](https://verifymcp.io/servers/com-facts402-facts402-mcp/facts402-mcp)

## Channel facts

- Registry: `pypi`
- Package: `facts402-mcp`
- Version: `0.1.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Supply Chain Security**: 100/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - Runs hatchling.build at install time, a recognised build step with no custom scripting around it.
  - 2 of 51 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 3 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 69/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 2146 tokens (~153/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 13/100
  - Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 14 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the facts402: x402 API finder + fact checks MCP server?

facts402: x402 API finder + fact checks runs locally as a PyPI package, launched with uvx facts402-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add com-facts402-facts402-mcp -- uvx facts402-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "com-facts402-facts402-mcp": {
      "command": "uvx",
      "args": [
        "facts402-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-facts402-facts402-mcp": {
      "command": "uvx",
      "args": [
        "facts402-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add com-facts402-facts402-mcp -- uvx facts402-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-facts402-facts402-mcp": {
      "type": "local",
      "command": [
        "uvx",
        "facts402-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-facts402-facts402-mcp --command uvx --arg facts402-mcp
```

### Hermes

```yaml
mcp_servers:
  com-facts402-facts402-mcp:
    command: "uvx"
    args: ["facts402-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "com-facts402-facts402-mcp": {
      "Transport": "stdio",
      "Command": "uvx",
      "Arguments": [
        "facts402-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-facts402-facts402-mcp -t stdio -c uvx -a facts402-mcp
```

### Other

```json
{
  "mcpServers": {
    "com-facts402-facts402-mcp": {
      "command": "uvx",
      "args": [
        "facts402-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-04 (score 71, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-02 (score 70, +1)

No change was recorded against any check on this day. Stability & Change Management went from 0 to 3. That category is still filling its 30-day observation window: 0 days of observed history at the previous scan, 1 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-01 (score 69)

First indexed and scored.

## MCP tools (14)

### `x402_recommend` (~269 tokens)

Find the right paid x402 API

Which paid API should I call for this task? Describe the need in plain words (e.g. 'web search', 'honeypot check base token', 'IBAN validation') and get the top-k x402 endpoints across the ecosystem: url, method, price, payment network, 30-day on-chain buyers, live 402 probe, risk flags and score, ranked by relevance, real buyers, recency and liveness (x402-list.com catalog, CC BY 4.0, plus sellers' own 402 quotes). Use it before paying an unknown API. No match = 404, not charged. Price: $0.005 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `k` (integer): number of picks (default 5)
- `max_price` (number): max price per call in USD (default 0.05)
- `need` (string, required): what you want to do, in plain words, e.g. 'web search' or 'IBAN validation'
- `network` (string): CAIP-2 payment network (default eip155:8453 = Base) or 'any'

### `x402_recommend_preview` (~84 tokens)

x402 API finder preview

Free teaser of x402_recommend: the single top pick (host, price, 30-day payers) for a need, without url, risk flags or ranking details. FREE: no wallet or payment needed.

Input parameters:

- `need` (string, required): what you want to do, in plain words, e.g. 'web search' or 'IBAN validation'

### `iban_check` (~113 tokens)

IBAN and BIC validation

Validate an IBAN (structure, mod-97 and national BBAN checksum) and return country, bank code, account code, bank name, BIC/SWIFT and SEPA membership. Use before a payout, invoice or SEPA transfer. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `iban` (string, required): IBAN, spaces allowed

### `eu_vat_check` (~123 tokens)

EU VAT number check (VIES)

Validate an EU VAT number: offline format and check-digit test plus a live lookup in the European Commission VIES, returning registration status, company name and address. For B2B invoicing, reverse charge, KYB and onboarding. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `vat_number` (string, required): EU VAT number with country prefix, e.g. IE6388047V

### `sanctions_screen` (~157 tokens)

OFAC sanctions screening

Fuzzy-screen a person, company, vessel or aircraft name against the US Treasury OFAC SDN sanctions list including aliases (refreshed every 6 h): matches with score, type, sanctions programs and remarks, plus the closest near-miss. AML / KYC / KYB compliance screening aid. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `entity_type`: Optional filter on the SDN entry type
- `min_score` (integer): Minimum similarity score 70-100
- `name` (string, required): Person, company, vessel or aircraft name

### `lei_lookup` (~132 tokens)

LEI company lookup (GLEIF)

Look up a legal entity in the official GLEIF LEI index: by 20-character LEI get legal name, status, jurisdiction, addresses, registration dates and direct/ultimate parent; or search by company name for up to 5 candidates. For KYB, onboarding and finance agents. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `lei`: 20-character LEI code
- `name`: Legal name to search for

### `phone_check` (~139 tokens)

Phone number validation

Validate and normalise any phone number worldwide: valid/possible, E.164 and national formats, country, line type (mobile, fixed line, toll-free, VoIP), original carrier, location and time zones. For CRM, outreach, KYC and calling agents. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `default_region`: ISO country used when the number has no +prefix
- `number` (string, required): Phone number, ideally in +E.164 form

### `email_check` (~114 tokens)

Email address check

Check an email address before sending: RFC syntax and normalisation, live DNS and MX records, null MX, disposable/throwaway domain and role-account (info@, support@) flags. No SMTP probing. For lead-gen, signup and outreach agents. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `email` (string, required): Email address to check

### `fx_convert` (~161 tokens)

ECB currency conversion

Convert an amount between ~30 currencies at official European Central Bank (ECB) reference exchange rates, latest or any day in the last 90 days, with the publication date used and exact decimal results. For pricing, invoicing, travel-budget and accounting agents. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `amount` (required): Amount in the source currency
- `date`: Optional YYYY-MM-DD, last 90 days
- `from` (string, required): ISO 4217 code, e.g. USD
- `to` (string, required): ISO 4217 code, e.g. EUR

### `domain_check` (~125 tokens)

Domain age and RDAP/WHOIS

Registration facts for any domain via RDAP (the WHOIS successor): registered or not, creation and expiry dates, domain age in days, registrar, EPP status, nameservers and DNSSEC. For fraud, phishing link-safety, lead-qualification and KYB agents. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `domain` (string, required): Domain or host name, e.g. www.example.com

### `business_days` (~163 tokens)

Business days and public holidays

Count business days between two dates for a country (optionally a state/region) and list the public holidays and weekends in the range. For payment deadlines, SLAs, delivery dates and scheduling. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `country` (string, required): ISO 3166-1 alpha-2 country code
- `end` (string, required): Last day of the range (inclusive), YYYY-MM-DD
- `start` (string, required): First day of the range (inclusive), YYYY-MM-DD
- `subdivision`: Optional ISO 3166-2 subdivision, e.g. CA

### `weather_forecast` (~152 tokens)

Weather forecast

Weather forecast for any latitude/longitude: current conditions plus up to 7 local-day summaries (min/max temperature, precipitation, wind, weather symbol) in the place's own time zone. Data from MET Norway. For travel, events and logistics agents. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `days` (integer): Number of local calendar days to summarise (1-7)
- `lat` (number, required): Latitude in decimal degrees (WGS84)
- `lon` (number, required): Longitude in decimal degrees (WGS84)

### `sun_times` (~136 tokens)

Sunrise and sunset times

Sunrise, sunset, solar noon, civil dawn/dusk, golden hour and day length for any coordinates and date, in local time; polar day/night flagged. For travel, photography, events and outdoor planning. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `date`: YYYY-MM-DD; default: today locally
- `lat` (number, required): Latitude in decimal degrees (WGS84)
- `lon` (number, required): Longitude in decimal degrees (WGS84)

### `base_token_check` (~132 tokens)

Base token contract facts

Raw on-chain facts for a Base mainnet ERC-20 token contract, read at one block: is it a contract, EIP-1967 proxy / implementation / admin, name, symbol, decimals, totalSupply, owner, and whether mint, pause or blacklist function selectors appear in the bytecode. Facts only, no rating. Price: $0.01 USDC per call via x402 on Base, paid from your own wallet (X402_PRIVATE_KEY) within your per-call cap and session budget; charged only for a successful answer.

Input parameters:

- `token` (string, required): Base mainnet contract address

## Diagnostics

Captured diagnostic sections: Provenance, Install scripts, Dependencies. The full working is on the page: https://verifymcp.io/servers/com-facts402-facts402-mcp/facts402-mcp#diagnostics

## Score history

- 2026-11-05: 71
- 2026-11-04: 71
- 2026-11-03: 70
- 2026-11-02: 70
- 2026-11-01: 69

## Common questions

### What is the facts402: x402 API finder + fact checks MCP server?

facts402: x402 API finder + fact checks is an MCP server listed in the public MCP registry as com.facts402/facts402-mcp. Find the right paid x402 API, plus fact checks: IBAN, EU VAT, OFAC sanctions, LEI, FX. This page covers its PyPI package (facts402-mcp).

### Is the facts402: x402 API finder + fact checks MCP server safe to use?

facts402: x402 API finder + fact checks scores 71 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the facts402: x402 API finder + fact checks MCP server expose?

facts402: x402 API finder + fact checks exposes 14 tools: x402_recommend, x402_recommend_preview, iban_check, eu_vat_check, sanctions_screen, and 9 more. Their descriptions and schemas cost roughly 2,000 tokens of context every time the server is loaded.

### Is the facts402: x402 API finder + fact checks MCP server still maintained?

facts402: x402 API finder + fact checks is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the facts402: x402 API finder + fact checks MCP server under?

facts402: x402 API finder + fact checks declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

### What did VerifyMCP test on the facts402: x402 API finder + fact checks MCP server?

VerifyMCP ran 16 checks on facts402: x402 API finder + fact checks, covering Malware scan, Known CVEs, Install scripts, Dependency health and 12 more. Endpoint Security and Transport & Reachability do not apply to a PyPI package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.

## Links

- PyPI project: https://pypi.org/project/facts402-mcp/
- Socket report: https://socket.dev/pypi/package/facts402-mcp
- Repository: https://github.com/veselin9931/facts402-mcp
- Website: https://api.facts402.com/
- Changelog RSS feed: https://verifymcp.io/servers/com-facts402-facts402-mcp/facts402-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-facts402-facts402-mcp/facts402-mcp/changelog.json
- Trust report (JSON): https://verifymcp.io/servers/com-facts402-facts402-mcp/facts402-mcp.json
- HTML version of this page: https://verifymcp.io/servers/com-facts402-facts402-mcp/facts402-mcp