# io.github.freshfos/dropcoin-validation (remote · validation-api.dropcoin.workers.dev)

EU compliance checks for AI agents: sanctions, company, VAT ID, IBAN, email. Pay per call.

- Trust score: 53/100 (low)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-09

## Components

- remote · `validation-api.dropcoin.workers.dev`: 53/100 (this document), [markdown](https://verifymcp.io/servers/freshfos-dropcoin-validation/validation-api.md), [page](https://verifymcp.io/servers/freshfos-dropcoin-validation/validation-api)

## Channel facts

- Endpoint: `https://validation-api.dropcoin.workers.dev/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-09.

- **Endpoint Security**: 46/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to call this server, and 6 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.
  - HTTPS not yet verified: we couldn't determine whether a plaintext access path exists.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 71/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 434 tokens (~72/item across 6 items; 6 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 7/100
  - Stability observed for 2 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 67/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
- **Capabilities**: 60/100
  - Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http freshfos-dropcoin-validation https://validation-api.dropcoin.workers.dev/mcp
```

### Codex

```toml
[mcp_servers.freshfos-dropcoin-validation]
url = "https://validation-api.dropcoin.workers.dev/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "freshfos-dropcoin-validation": {
      "type": "remote",
      "url": "https://validation-api.dropcoin.workers.dev/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add freshfos-dropcoin-validation --url https://validation-api.dropcoin.workers.dev/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  freshfos-dropcoin-validation:
    url: "https://validation-api.dropcoin.workers.dev/mcp"
```

### Other

```json
{
  "mcpServers": {
    "freshfos-dropcoin-validation": {
      "type": "http",
      "url": "https://validation-api.dropcoin.workers.dev/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-08 (score 53, +1)

- [functional improvement] Stability: unverified → 0.03

### 2026-08-07 (score 52)

First indexed and scored.

## MCP tools (6)

### `validate_vatid_format` (~61 tokens)

Free EU VAT-ID FORMAT check (syntax only, no registry lookup), rate-limited per IP, no API key needed. For a live VIES registry check use the paid validate_vatid tool (5 credits).

Input parameters:

- `vatId` (string, required)

### `validate_email` (~49 tokens)

Validate an email address: syntax, disposable-domain check, MX record via DNS-over-HTTPS. Returns a deliverability verdict. 2 credits, requires an API key.

Input parameters:

- `email` (string, required)

### `validate_vatid` (~62 tokens)

Validate an EU VAT ID against the live VIES registry (format check first — an invalid format still costs the full price, it never reaches VIES but you got an answer). 5 credits, requires an API key.

Input parameters:

- `vatId` (string, required)

### `validate_iban` (~43 tokens)

Validate an IBAN (ISO 13616 check digits) incl. SEPA membership. 2 credits, requires an API key.

Input parameters:

- `iban` (string, required)

### `screen_sanctions` (~99 tokens)

Screen a person or company against the official EU, US (OFAC SDN) and UK (OFSI) sanctions lists. Fuzzy name matching with an auditable reason per hit — review every hit yourself; a clean result is not legal clearance and covers no PEP data. 15 credits, requires an API key.

Input parameters:

- `minScore` (number)
- `name` (string, required)
- `type` (string)

### `verify_company` (~120 tokens)

Verify a business partner in one call: EU VAT registration (VIES), LEI register (GLEIF), IBAN checksum and country consistency — one verdict (pass|fail|inconclusive) with an auditable check log. Provide at least one of name, vatId, lei. Does not include commercial-register existence checks. 150 credits, requires an API key.

Input parameters:

- `country` (string)
- `iban` (string)
- `lei` (string)
- `name` (string)
- `vatId` (string)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/freshfos-dropcoin-validation/validation-api#diagnostics

## Score history

- 2026-08-09: 53
- 2026-08-08: 53
- 2026-08-07: 52

## Links

- Remote endpoint: https://validation-api.dropcoin.workers.dev/mcp
- Changelog RSS feed: https://verifymcp.io/servers/freshfos-dropcoin-validation/validation-api.xml
- Changelog JSON feed: https://verifymcp.io/servers/freshfos-dropcoin-validation/validation-api.json
- HTML version of this page: https://verifymcp.io/servers/freshfos-dropcoin-validation/validation-api