{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:20:49.128Z","url":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp","markdownUrl":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp.md","server":{"slug":"offx366-ibangen-mcp","name":"io.github.offx366/ibangen-mcp","registryName":"io.github.offx366/ibangen-mcp","description":"Validate IBANs, generate test IBANs with real bank codes, look up BICs and bank codes (IBANgen).","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"api-mcp","type":"remote","identifier":"https://ibangen.com/api/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp","version":"0.2.0","transport":null,"scoredAt":"2026-11-05T02:35:17.614Z"},"score":{"total":71,"tier":"medium","status":"scored","weekDelta":null,"history":[{"date":"2026-11-05","total":71},{"date":"2026-11-04","total":70},{"date":"2026-11-03","total":70},{"date":"2026-11-02","total":69},{"date":"2026-11-01","total":69},{"date":"2026-10-31","total":68}]},"categories":[{"name":"Endpoint Security","score":74,"verdict":"fail","reasons":["The endpoint's TLS certificate is valid, in date, and uses a strong key.","No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation.","HTTPS is enforced; there's no plaintext access path.","HSTS check failed: the Strict-Transport-Security header is absent.","DNSSEC check failed: this domain isn't protected by DNSSEC."],"codes":[{"code":"tls.valid","args":{}},{"code":"auth.none_no_destructive","args":{}},{"code":"https.enforced","args":{}},{"code":"headers.hsts_absent","args":{}},{"code":"dnssec.absent","args":{}}]},{"name":"Transport & Reachability","score":100,"verdict":"pass","reasons":["Verified streamable-http transport via a live MCP handshake."],"codes":[{"code":"transport.verified","args":{"transport":"streamable-http"}}]},{"name":"Schema Quality & AI Usability","score":73,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Tool/resource definitions use about 595 tokens (~119/item across 5 items; 5 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"119","items":"5","tools":"5","tokens":"595","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":17,"verdict":"partial","reasons":["Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"5"}}]},{"name":"Tool Coverage","score":89,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","67% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"67"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"5"}},{"code":"toolsafety.manipulation_clean","args":{"units":"6","judged":"6"}}]},{"name":"Capabilities","score":60,"verdict":"fail","reasons":["Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28."],"codes":[{"code":"protocol.outdated","args":{"latest":"2026-07-28","version":"2025-06-18"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"api-mcp","type":"remote","identifier":"https://ibangen.com/api/mcp","withdrawn":false,"score":71,"current":true,"url":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp","markdownUrl":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp.md"},{"slug":"ibangen-mcp","type":"pypi","identifier":"ibangen-mcp","withdrawn":false,"score":61,"current":false,"url":"https://verifymcp.io/servers/offx366-ibangen-mcp/ibangen-mcp","markdownUrl":"https://verifymcp.io/servers/offx366-ibangen-mcp/ibangen-mcp.md"}],"facts":[{"label":"Endpoint","value":"https://ibangen.com/api/mcp"},{"label":"Transports","value":"streamable-http"},{"label":"Auth","value":"none"},{"label":"Version","value":"0.2.0"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"validate_ibans","title":"Validate IBANs","description":"Check IBANs: country format, length, MOD-97 check digits and, where the country has one, the national check digit of the account number. Up to 10 IBANs per call without an API key. A valid IBAN is well-formed; it does not prove the account exists.","inputs":[{"name":"ibans","type":"array","required":true,"description":"IBANs, spaces allowed"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":86},{"name":"generate_test_ibans","title":"Generate test IBANs","description":"Generate synthetic, checksum-valid test IBANs for a country (119 countries, real bank codes). Without an API key: up to 10 a day per user. Name a bank to get IBANs of that bank: free samples without a key, any number with a paid key. Test data only, never for payments.","inputs":[{"name":"bank","type":"string","required":false,"description":"Optional bank name, BIC or bank code, e.g. \"Deutsche Bank\""},{"name":"country","type":"string","required":true,"description":"Country name or ISO code, e.g. \"Germany\", \"DE\", \"UK\""},{"name":"quantity","type":"integer","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":132},{"name":"bank_test_ibans","title":"Test IBANs for one bank","description":"A bank's BIC, domestic bank code and free sample test IBANs that carry the bank's real code, plus the bank page and the Bank Target Pack link for up to 250 IBANs of that bank.","inputs":[{"name":"bank","type":"string","required":true,"description":"Bank name, BIC or domestic bank code"},{"name":"country","type":"string","required":true,"description":"Country name or ISO code"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":84},{"name":"iban_format","title":"IBAN format of a country","description":"A country's IBAN length, structure (bank code, branch, account and check digit positions), SEPA membership, currency, national check digit, regex and one example test IBAN.","inputs":[{"name":"country","type":"string","required":true,"description":"Country name or ISO code"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":57},{"name":"calculate_iban","title":"Calculate an IBAN","description":"Build an IBAN from national bank details (bank code, branch code, account number). Adds the IBAN check digits and, where the country has them, the national check digits such as the French RIB key or the Italian CIN. Use iban_format to see which parts a country needs.","inputs":[{"name":"account_number","type":"string","required":true,"description":null},{"name":"bank_code","type":"string","required":false,"description":null},{"name":"branch_code","type":"string","required":false,"description":null},{"name":"check_digits","type":"string","required":false,"description":"National check digits, only where they are not computed"},{"name":"country","type":"string","required":true,"description":"Country name or ISO code"}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":122}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T02:35:17.000Z","track":"remote","endpoint":"https://ibangen.com/api/mcp","declaredUrl":null,"truncated":false,"tls":{"outcome":"valid","label":"Valid","version":"TLS 1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","chainError":null,"certificates":[{"subject":"CN=ibangen.com","issuer":"CN=WE1,O=Google Trust Services,C=US","notBefore":"2026-11-01T14:54:25Z","notAfter":"2027-01-30T15:54:12Z","keyType":"ECDSA","keyBits":256,"isCa":false},{"subject":"CN=WE1,O=Google Trust Services,C=US","issuer":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","notBefore":"2023-12-13T09:00:00Z","notAfter":"2029-02-20T14:00:00Z","keyType":"ECDSA","keyBits":256,"isCa":true},{"subject":"CN=GTS Root R4,O=Google Trust Services LLC,C=US","issuer":"CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE","notBefore":"2023-11-15T03:43:21Z","notAfter":"2028-01-28T00:00:42Z","keyType":"ECDSA","keyBits":384,"isCa":true}]},"dnssec":{"result":"insecure","label":"Not signed","name":"ibangen.com.","steps":[{"zone":".","outcome":"verified","label":"Verified"},{"zone":"com.","outcome":"verified","label":"Verified"},{"zone":"ibangen.com.","outcome":"insecure_proven","label":"Unsigned (proven)"}]},"auth":{"outcome":"none","label":"No authorisation required","gate":null,"gateLabel":null,"status":200,"authorizationServers":[]},"httpsRedirect":{"outcome":"https_enforced","label":"HTTPS enforced","status":301},"transports":[{"transport":"streamable-http","outcome":"verified","label":"Verified","status":200,"followed":false}],"provenance":null,"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-31","recent":[{"id":"chg_01a1a98f-8508-71c8-bf03-2357e9af2a2b","kind":"score.total_changed","summary":"Trust score (70 → 71)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp#chg-chg_01a1a98f-8508-71c8-bf03-2357e9af2a2b"},{"id":"chg_01a19f41-04b5-7185-bb23-14fcf8b753ba","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-03","url":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp#chg-chg_01a19f41-04b5-7185-bb23-14fcf8b753ba"},{"id":"chg_01a194f4-07e7-7cae-a6e5-911b1eda892f","kind":"check.reverified","summary":"Stability (unverified → 0.03)","materiality":"functional","direction":"improvement","scoreDelta":null,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp#chg-chg_01a194f4-07e7-7cae-a6e5-911b1eda892f"},{"id":"chg_01a194f4-07e8-7d76-89b0-4d13d128b011","kind":"score.total_changed","summary":"Trust score (68 → 69)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-01","url":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp#chg-chg_01a194f4-07e8-7d76-89b0-4d13d128b011"},{"id":"chg_01a18f99-6e53-7e6f-bcca-c5686d53ed3c","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp#chg-chg_01a18f99-6e53-7e6f-bcca-c5686d53ed3c"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp","markdown":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp.md","changelogJson":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/offx366-ibangen-mcp/api-mcp.xml","external":[{"label":"Remote endpoint","href":"https://ibangen.com/api/mcp"},{"label":"Repository","href":"https://github.com/offx366/ibangen-mcp"},{"label":"Website","href":"https://ibangen.com/"}]}}