# IBAN Validation MCP (remote · www.iban-test.eu)

Validate IBANs in 111 countries; bank directory checks for DE, AT, BE, FR, LU, NL, PT and ES.

- Trust score: 36/100 (low)
- Change this week: −29
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `www.iban-test.eu`: 36/100 (this document), [markdown](https://verifymcp.io/servers/eu-iban-test-www-iban-validation/www.md), [page](https://verifymcp.io/servers/eu-iban-test-www-iban-validation/www)

## Channel facts

- Endpoint: `https://www.iban-test.eu/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 91/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 0/100
  - Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http.
- **Schema Quality & AI Usability**: 0/100
  - Schema blocked by authentication: the endpoint requires auth we don't have to read it.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.
- **Capabilities**: 0/100
  - Capabilities blocked by authentication: the endpoint requires auth we don't have to read them.

**Unverified: 5 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add --transport http eu-iban-test-www-iban-validation https://www.iban-test.eu/mcp
```

### Codex

```toml
[mcp_servers.eu-iban-test-www-iban-validation]
url = "https://www.iban-test.eu/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "eu-iban-test-www-iban-validation": {
      "type": "remote",
      "url": "https://www.iban-test.eu/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add eu-iban-test-www-iban-validation --url https://www.iban-test.eu/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  eu-iban-test-www-iban-validation:
    url: "https://www.iban-test.eu/mcp"
```

### Other

```json
{
  "mcpServers": {
    "eu-iban-test-www-iban-validation": {
      "type": "http",
      "url": "https://www.iban-test.eu/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 36, −31)

- [security regression] Endpoint reachability: reachable → behind authorisation
- [security regression] Stability: 0.20 → unverified
- [security regression] Transport: pass → unverified
- [security improvement] Authorization: unverified → pass
- [functional regression] Capabilities: pass → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Schema quality: 100 → unverified

### 2026-07-31 (score 67, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 67, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-29 (score 67, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-28 (score 66, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-27 (score 65, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 65)

First indexed and scored.

## MCP tools (9)

### `validate_iban` (~106 tokens)

Validate a single IBAN. Spaces, including leading and trailing spaces, are accepted and removed before checking the IBAN format, checksum and available bank/account details. Required parameter: iban. Authentication is required for execution; anonymous clients may discover this tool. Register or log in to create an API key: https://www.iban-test.eu/Registration. Configured free limit: 10 API requests per 24-hour period.

Input parameters:

- `iban` (string, required): The IBAN to validate.

### `generate_test_iban` (~136 tokens)

Generate an IBAN for testing from an ISO-2 country code, bank code and account number. Required parameters: countrycode, bankcode, accountnumber. Counts as one IBAN-Test API request. Authentication is required for execution; anonymous clients may discover this tool. Register or log in to create an API key: https://www.iban-test.eu/Registration. Configured free limit: 10 API requests per 24-hour period.

Input parameters:

- `accountnumber` (string, required): Account number.
- `bankcode` (string, required): Bank code.
- `countrycode` (string, required): ISO-2 country code, for example DE.

### `validate_iban_batch` (~131 tokens)

Validate multiple IBANs in one call. Spaces, including leading and trailing spaces, are removed from every IBAN before checking its format, checksum and available bank/account details. Required parameter: ibans, an array of IBAN strings. Each IBAN counts as one IBAN-Test API request. Authentication is required for execution; anonymous clients may discover this tool. Register or log in to create an API key: https://www.iban-test.eu/Registration. Configured free limit: 10 API requests per 24-hour period.

Input parameters:

- `ibans` (array, required): IBANs to validate.

### `get_usage_info` (~91 tokens)

Return API key usage information for the authenticated IBAN-Test MCP user. Returns current request limit, requests used today and total requests. This does not increment the request count. Authentication is required for execution; anonymous clients may discover this tool. Register or log in to create an API key: https://www.iban-test.eu/Registration. Configured free limit: 10 API requests per 24-hour period.

### `ibantest_bank_account_validate` (~109 tokens)

Validate a German bank code and account number. Required parameters: blz, ktn. Counts as one IBAN-Test API request. Authentication is required for execution; anonymous clients may discover this tool. Register or log in to create an API key: https://www.iban-test.eu/Registration. Configured free limit: 10 API requests per 24-hour period.

Input parameters:

- `blz` (string, required): German bank code.
- `ktn` (string, required): German account number.

### `ibantest_bic_validate` (~94 tokens)

Validate a BIC and return validation details. Required parameter: bic. Counts as one IBAN-Test API request. Authentication is required for execution; anonymous clients may discover this tool. Register or log in to create an API key: https://www.iban-test.eu/Registration. Configured free limit: 10 API requests per 24-hour period.

Input parameters:

- `bic` (string, required): BIC to validate.

### `hello` (~16 tokens)

Returns a hello message from the MCP server

### `quiqqer_mcp_session_user_get` (~30 tokens)

Returns the current MCP session user as a tool fallback for clients without resource support.

### `quiqqer_mcp_server_get` (~33 tokens)

Returns general information about the QUIQQER MCP server as a tool fallback for clients without resource support.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/eu-iban-test-www-iban-validation/www#diagnostics

## Score history

- 2026-08-03: 36
- 2026-08-02: 36
- 2026-08-01: 67
- 2026-07-31: 67
- 2026-07-30: 67
- 2026-07-29: 67
- 2026-07-28: 66
- 2026-07-27: 65
- 2026-07-26: 65

## Links

- Remote endpoint: https://www.iban-test.eu/mcp
- Website: https://www.iban-test.eu/
- Changelog RSS feed: https://verifymcp.io/servers/eu-iban-test-www-iban-validation/www/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/eu-iban-test-www-iban-validation/www/changelog.json
- HTML version of this page: https://verifymcp.io/servers/eu-iban-test-www-iban-validation/www