Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

Qiniso

NPM · @QINISOLABS/QINISO · 2 COMPONENTS · SCANNED AUG 3

Deterministic fact verification for AI agents — checksums & curated data, not guesses.

+21 this week 67 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security88
  • No malware found by supply-chain analysis.Pass
  • Only part of the dependency tree could be resolved (114 of 118), so this covers what we could see, not the whole tree.Partial
  • No install/post-install scripts declared.Pass
  • Only part of the dependency tree could be resolved (114 of 118), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability83
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 5152 tokens (~92/item across 56 items; 56 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @qinisolabs/qiniso

# add to Claude Code
claude mcp add qinisolabs-qiniso -- npx -y @qinisolabs/qiniso
# add to Codex CLI
codex mcp add qinisolabs-qiniso -- npx -y @qinisolabs/qiniso
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "qinisolabs-qiniso": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@qinisolabs/qiniso"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add qinisolabs-qiniso --command npx --arg -y --arg @qinisolabs/qiniso
# ~/.hermes/config.yaml
mcp_servers:
  qinisolabs-qiniso:
    command: "npx"
    args: ["-y", "@qinisolabs/qiniso"]
// mcp.json
{
  "mcpServers": {
    "qinisolabs-qiniso": {
      "command": "npx",
      "args": [
        "-y",
        "@qinisolabs/qiniso"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Aug 26 +62
    • Provenance: unverified → fail security
    • Install scripts: unverified → pass security
    • Known CVEs: unverified → partial security
    • Malware scan: unverified → pass security
    • Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
    • Security disclosure: fail → unverified functional
    • License: unverified → pass functional
    • Dependency health: unverified → partial functional
    • Maintenance: unverified → pass functional
    • Schema quality: unverified → excellent functional
    • Tool coverage: unverified → 100 functional
    • MCP protocol: unverified → pass functional
    • Licence: Apache-2.0 functional
  • 1 Aug 26 −16
    • Tool coverage: 100 → unverified functional
  • 31 Jul 26 +15
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 −18
    • Malware scan: pass → unverified security
  • 28 Jul 26 −22
    • Tool coverage: 100 → unverified functional
    • First check of Schema quality: unverified functional
  • 27 Jul 26 46

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@qinisolabs/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 114 packages

114 packages in the resolved dependency tree · 104 deprecated · 37 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 56 exposed · ~5,152 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
format_currency ~111

USE THIS to format a money amount the way a reader in a locale expects (symbol position, separators) before showing it in a price, invoice or email. e.g. 1234.5 GBP en-GB → '£1,234.50'.

NameTypeReqDescription
amountstringyesThe numeric amount.
currencystringISO 4217 currency code (default GBP).
localestringBCP-47 locale (e.g. en-GB). Defaults from the currency.

No output schema declared.

No examples provided.

is_holiday ~149

USE THIS to check whether a date is a public/bank holiday when computing business-day deadlines, delivery SLAs or 'next working day'. Supports ~200 countries (ISO code, e.g. GB, US, ZA, DE, IN); GB defaults to England — pass a subdivision ('SCT'/'WLS'/'NIR', or a US state) to narrow.

NameTypeReqDescription
countrystringISO country code (default GB), e.g. GB, US, ZA, DE.
datestringyesThe date (YYYY-MM-DD).
subdivstringSubdivision code (e.g. UK nation SCT/WLS/NIR, or a US state).

No output schema declared.

No examples provided.

next_holiday ~138

USE THIS to find the next public/bank holiday on or after a date (default today) — e.g. to find the next working day. Supports ~200 countries (ISO code, e.g. GB, US, ZA, DE); subdivision narrows to a region.

NameTypeReqDescription
afterstringFind the next holiday on/after this date (YYYY-MM-DD); default today.
countrystringISO country code (default GB), e.g. GB, US, ZA, DE.
subdivstringSubdivision code (e.g. UK nation SCT/WLS/NIR, or a US state).

No output schema declared.

No examples provided.

parse_address ~72

USE THIS to extract structured {country, postcode, city, state} from a free-text UK or US address — when onboarding a user, running a KYC/fraud check, or storing an address — instead of splitting the string yourself. Returns a confidence flag.

NameTypeReqDescription
inputstringyesThe free-text address.

No output schema declared.

No examples provided.

parse_date ~115

USE THIS to interpret a human-written date into ISO 8601 (YYYY-MM-DD), especially ambiguous numeric dates like 03/04/2025 which mean different things in the UK (day-first) vs US (month-first). Pass locale 'en-GB' or 'en-US'. Returns valid:false for impossible dates.

NameTypeReqDescription
inputstringyesThe date text to parse.
localestring'en-GB' (day-first) or 'en-US' (month-first); default en-GB.

No output schema declared.

No examples provided.

tax_rate ~134

USE THIS before calculating VAT or sales tax on an invoice/quote — never recall the rate from memory, it is DATE-SENSITIVE. GB returns the UK standard VAT rate that applied on the given date (handles historical/temporary changes). US has no national VAT (returns 0); pass a state code for the state base sales-tax rate. Always pass the invoice date for GB.

NameTypeReqDescription
countrystringGB or US (default GB).
datestringThe invoice date (YYYY-MM-DD); default today.
statestringUS state code (e.g. CA) for sales tax.

No output schema declared.

No examples provided.

validate_aadhaar ~76

USE THIS to verify the format and checksum of an Indian Aadhaar number — never assume 12 digits are valid. Checks the Verhoeff check digit and the leading-digit rule. Validates structure only; does NOT look the number up.

NameTypeReqDescription
aadhaarstringyesThe 12-digit Aadhaar number (spaces ignored).

No output schema declared.

No examples provided.

validate_be_nrn ~86

USE THIS to verify a Belgian National Register Number (Rijksregisternummer / Numéro de Registre National) before relying on it. Checks the 11-digit form and the mod-97 check (handling the born-from-2000 rule). Validates structure only.

NameTypeReqDescription
nrnstringyesThe 11-digit Belgian National Register Number (punctuation ignored).

No output schema declared.

No examples provided.

validate_bg_egn ~69

USE THIS to verify a Bulgarian EGN (Единен граждански номер) before relying on it. Checks the 10-digit form and the weighted mod-11 check digit. Validates structure only.

NameTypeReqDescription
egnstringyesThe 10-digit Bulgarian EGN (spaces ignored).

No output schema declared.

No examples provided.

validate_bsn ~90

USE THIS to verify a Dutch BSN (burgerservicenummer / citizen service number) before relying on it. Checks the 8–9 digit form and the '11-test' (elfproef) checksum. Validates structure only; does NOT confirm the number is issued.

NameTypeReqDescription
bsnstringyesThe 8- or 9-digit BSN (spaces/dots ignored).

No output schema declared.

No examples provided.

validate_btc_address ~113

USE THIS to verify a Bitcoin address before sending funds or storing it — do not assume it is valid. Checks Base58Check (P2PKH/P2SH, double-SHA256 checksum) and Bech32/Bech32m SegWit (bc1…, incl. Taproot), and returns the address type and network. A bad checksum means a mistyped address.

NameTypeReqDescription
addressstringyesThe Bitcoin address (legacy 1…/3… or bech32 bc1…).

No output schema declared.

No examples provided.

validate_card ~103

USE THIS to check a payment card number's structure before using it — never assume a card number is valid or guess its brand. Verifies the Luhn checksum, detects the brand (Visa, Mastercard, Amex, Discover, Diners, JCB, UnionPay) from its BIN, and checks the length. Does NOT check whether the card is real, active or has funds.

NameTypeReqDescription
numberstringyesThe card number; spaces and dashes are ignored.

No output schema declared.

No examples provided.

validate_ch_ahv ~82

USE THIS to verify a Swiss social-insurance number (AHV/AVS, 756.…) before relying on it. Checks the 13-digit form starting 756 and the EAN-13 check digit. Validates structure only.

NameTypeReqDescription
ahvstringyesThe 13-digit Swiss AHV/AVS number (dots ignored).

No output schema declared.

No examples provided.

validate_china_ric ~101

USE THIS to verify a Chinese Resident Identity Card number (居民身份证) before relying on it — do not guess the check character. Checks the 18-character form and the ISO 7064 MOD 11-2 check character (which may be 'X'). Validates structure only; does NOT confirm the number is registered.

NameTypeReqDescription
idstringyesThe 18-character Chinese Resident ID (17 digits + check 0-9 or X).

No output schema declared.

No examples provided.

validate_cnpj ~63

USE THIS to verify a Brazilian CNPJ (company registration number) instead of trusting 14 digits. Checks the two mod-11 check digits. Call this for onboarding Brazilian businesses.

NameTypeReqDescription
cnpjstringyesThe CNPJ (14 digits; punctuation is ignored).

No output schema declared.

No examples provided.

validate_codice_fiscale ~98

USE THIS to verify an Italian Codice Fiscale (personal tax code) before relying on it — do not guess the final check letter. Checks the 16-character format and the mod-26 check character. Validates structure only; does NOT confirm the code is registered with the Agenzia delle Entrate.

NameTypeReqDescription
codestringyesThe 16-character Codice Fiscale (spaces ignored, case-insensitive).

No output schema declared.

No examples provided.

validate_cpf ~80

USE THIS to verify a Brazilian CPF (individual taxpayer ID) before relying on it — never assume 11 digits are valid. Checks the two mod-11 check digits and rejects all-identical sentinels. Call this for KYC/onboarding of Brazilian individuals.

NameTypeReqDescription
cpfstringyesThe CPF (11 digits; dots and dash are ignored).

No output schema declared.

No examples provided.

validate_cusip ~73

USE THIS to verify a CUSIP (North American securities identifier) instead of trusting 9 characters. Checks the CUSIP mod-10 check digit and returns the expected digit when it fails.

NameTypeReqDescription
cusipstringyesThe 9-character CUSIP, e.g. 037833100.

No output schema declared.

No examples provided.

validate_cz_rc ~82

USE THIS to verify a Czech or Slovak rodné číslo (birth number) before relying on it. Checks the modern 10-digit form's mod-11 rule (9-digit pre-1954 numbers have no check digit). Validates structure only.

NameTypeReqDescription
rcstringyesThe 10-digit rodné číslo (slash/spaces ignored).

No output schema declared.

No examples provided.

validate_de_steuer_id ~88

USE THIS to verify a German tax ID (Steuer-Identifikationsnummer / IdNr) before relying on it — never assume 11 digits are valid. Checks the ISO 7064 product-method check digit. Validates structure only; does NOT confirm it is registered.

NameTypeReqDescription
idstringyesThe 11-digit German Steuer-IdNr (spaces/slashes ignored).

No output schema declared.

No examples provided.

validate_dni ~75

USE THIS to verify a Spanish DNI or NIE before relying on it — do not guess the control letter. Checks the mod-23 control letter and returns whether it is a DNI or NIE.

NameTypeReqDescription
idstringyesThe Spanish DNI (8 digits + letter) or NIE (X/Y/Z + 7 digits + letter).

No output schema declared.

No examples provided.

validate_domain ~85

USE THIS to verify a domain name's structure AND that its TLD is a real IANA-delegated suffix — instead of assuming a domain is legitimate. Catches invalid labels and made-up TLDs (e.g. example.corp). Returns the TLD and whether it is known.

NameTypeReqDescription
domainstringyesThe domain name, e.g. 'example.com'.

No output schema declared.

No examples provided.

validate_ee_isikukood ~78

USE THIS to verify an Estonian isikukood (personal identification code) before relying on it. Checks the 11-digit form and the two-stage mod-11 check digit. Validates structure only.

NameTypeReqDescription
isikukoodstringyesThe 11-digit Estonian isikukood (spaces ignored).

No output schema declared.

No examples provided.

validate_email ~80

USE THIS to check an email address's syntax AND that its domain TLD is real, before saving or sending — instead of trusting raw input. Validates the local part and domain (RFC 5321/5322 subset) and flags made-up TLDs. Does NOT check deliverability.

NameTypeReqDescription
emailstringyesThe email address to validate.

No output schema declared.

No examples provided.

validate_eth_address ~95

USE THIS to verify an Ethereum address before sending funds or storing it — never trust that a 0x… string is correct. Validates the format and the EIP-55 mixed-case checksum (catches typos), and returns the correctly-checksummed form. A wrong character makes a different address — funds sent there are lost.

NameTypeReqDescription
addressstringyesThe Ethereum address (0x + 40 hex chars).

No output schema declared.

No examples provided.

validate_fodselsnummer ~79

USE THIS to verify a Norwegian fødselsnummer (national identity number) before relying on it. Checks the 11-digit form and both mod-11 control digits. Validates structure only; does NOT confirm the number is registered.

NameTypeReqDescription
fodselsnummerstringyesThe 11-digit Norwegian fødselsnummer (spaces ignored).

No output schema declared.

No examples provided.

validate_fr_nir ~96

USE THIS to verify a French social-security number (NIR / numéro de sécurité sociale, INSEE) before relying on it — do not guess the key. Checks the 13-digit body (Corsica 2A/2B handled) and the mod-97 two-digit key. Validates structure only.

NameTypeReqDescription
nirstringyesThe French NIR: 13 digits + 2-digit key (spaces ignored).

No output schema declared.

No examples provided.

validate_gln ~96

USE THIS to verify a GLN (GS1 Global Location Number — identifies a company/site/location in supply chains and EDI) before relying on it. Checks the 13-digit GS1 mod-10 check digit and returns the GS1 prefix's issuing country. Validates structure only; does not confirm the location is registered.

NameTypeReqDescription
glnstringyesThe 13-digit GLN; spaces and dashes are ignored.

No output schema declared.

No examples provided.

validate_gtin ~157

USE THIS to verify a product barcode — GTIN/EAN/UPC — before trusting it, instead of guessing the check digit. Handles EAN-8, UPC-A (12), EAN-13 and GTIN-14, verifies the GS1 mod-10 check digit, and returns the barcode type plus the GS1 prefix's issuing country (e.g. 50 = UK, 690-699 = China, 978 = Bookland/ISBN). Validates structure only — it does NOT confirm the barcode maps to a real, registered product.

NameTypeReqDescription
gtinstringyesThe barcode digits (EAN-8/UPC-A/EAN-13/GTIN-14); spaces and hyphens are ignored.

No output schema declared.

No examples provided.

validate_hetu ~91

USE THIS to verify a Finnish henkilötunnus (HETU / personal identity code) before relying on it — do not guess the check character. Checks the DDMMYY + century sign + individual number + mod-31 check character. Validates structure only.

NameTypeReqDescription
hetustringyesThe Finnish HETU, e.g. 131052-308T (case-insensitive).

No output schema declared.

No examples provided.

validate_hr_oib ~80

USE THIS to verify a Croatian OIB (Osobni identifikacijski broj / personal identification number) before relying on it. Checks the 11-digit form and the ISO 7064 MOD 11,10 check digit. Validates structure only.

NameTypeReqDescription
oibstringyesThe 11-digit Croatian OIB (spaces ignored).

No output schema declared.

No examples provided.

validate_iban ~99

USE THIS to verify an IBAN (international bank account number) before relying on it — instead of guessing whether it looks right. Checks the country, the country-specific length, and the ISO 7064 mod-97 checksum, and returns the country, check digits and BBAN. Call this whenever a user supplies a bank account for a payment, payout or invoice.

NameTypeReqDescription
ibanstringyesThe IBAN to validate; spaces are ignored.

No output schema declared.

No examples provided.

validate_imei ~120

USE THIS to verify a phone/device IMEI before relying on it — never assume a 15-digit string is valid or guess its check digit. Checks the Luhn check digit (and recognises the 16-digit IMEISV form), and returns the TAC (device-model code). Validates the number only — does NOT check whether the device is real, active, or blocklisted/stolen.

NameTypeReqDescription
imeistringyesThe 15-digit IMEI (or 16-digit IMEISV); spaces and dashes are ignored.

No output schema declared.

No examples provided.

validate_ip ~91

USE THIS to verify an IP address before relying on it — do not assume a dotted or colon string is valid. Strictly checks IPv4 (RFC 791, rejects leading zeros / out-of-range octets) and IPv6 (RFC 4291, including '::' compression and embedded IPv4), and returns the version.

NameTypeReqDescription
ipstringyesThe IPv4 or IPv6 address to validate.

No output schema declared.

No examples provided.

validate_isbn ~74

USE THIS to verify an ISBN-13 book identifier instead of trusting that 13 digits are correct. Checks the 978/979 prefix and the mod-10 weighted check digit, and returns the expected check digit when it fails.

NameTypeReqDescription
isbnstringyesThe ISBN-13; hyphens and spaces are ignored.

No output schema declared.

No examples provided.

validate_isbn10 ~73

USE THIS to verify an ISBN-10 (older book identifier) instead of trusting 10 characters. Checks the mod-11 check digit (which may be 'X'). For 13-digit ISBNs use validate_isbn.

NameTypeReqDescription
isbnstringyesThe ISBN-10 (hyphens/spaces ignored).

No output schema declared.

No examples provided.

validate_isin ~90

USE THIS to verify an ISIN (international securities identifier) before relying on it — never assume a 12-character code is valid. Checks the format and the ISO 6166 Luhn check digit, and returns the country code. Call this when a user supplies a security/instrument identifier.

NameTypeReqDescription
isinstringyesThe 12-character ISIN, e.g. US0378331005.

No output schema declared.

No examples provided.

validate_issn ~69

USE THIS to verify an ISSN (serial/journal identifier) before relying on it. Checks the mod-11 check digit (which may be 'X') and returns the expected digit when it fails.

NameTypeReqDescription
issnstringyesThe ISSN (8 chars; hyphen ignored).

No output schema declared.

No examples provided.

validate_lei ~87

USE THIS to verify a Legal Entity Identifier (LEI) before relying on it — do not assume a 20-character code is valid. Checks the ISO 17442 / ISO 7064 MOD 97-10 check digits.

NameTypeReqDescription
leistringyesThe 20-character LEI, e.g. 5493001KJTIIGC8Y1R12.

No output schema declared.

No examples provided.

validate_mx_curp ~79

USE THIS to verify a Mexican CURP (Clave Única de Registro de Población) before relying on it — do not guess the check digit. Checks the 18-character format and the base-37 check digit. Validates structure only.

NameTypeReqDescription
curpstringyesThe 18-character CURP (case-insensitive).

No output schema declared.

No examples provided.

validate_nif_pt ~77

USE THIS to verify a Portuguese NIF (Número de Identificação Fiscal / tax number) before invoicing or onboarding — never assume 9 digits are valid. Checks the mod-11 check digit. For the Spanish tax ID use validate_dni.

NameTypeReqDescription
nifstringyesThe 9-digit Portuguese NIF (spaces ignored).

No output schema declared.

No examples provided.

validate_orcid ~90

USE THIS to verify an ORCID researcher identifier instead of trusting 16 digits. Checks the ISO 7064 MOD 11-2 check digit (which may be 'X'); accepts the bare ID or an orcid.org URL.

NameTypeReqDescription
orcidstringyesThe ORCID (e.g. 0000-0002-1825-0097, or an orcid.org URL).

No output schema declared.

No examples provided.

validate_personnummer ~89

USE THIS to verify a Swedish personnummer (personal identity number) before relying on it — never assume the digits are valid. Accepts the 10- or 12-digit form and checks the Luhn check digit. Validates structure only; does NOT confirm the number is registered.

NameTypeReqDescription
personnummerstringyesThe Swedish personnummer (10 or 12 digits; +/-/spaces ignored).

No output schema declared.

No examples provided.

validate_pesel ~75

USE THIS to verify a Polish PESEL (national identification number) before relying on it — never assume 11 digits are valid. Checks the weighted mod-10 check digit. Call this for KYC/onboarding of Polish individuals.

NameTypeReqDescription
peselstringyesThe 11-digit PESEL (spaces/dashes ignored).

No output schema declared.

No examples provided.

validate_phone ~146

USE THIS to check a phone number is correctly formatted for its country and normalise it to E.164 before saving, dialling or texting. You MUST pass the ISO country the number ACTUALLY belongs to (e.g. GB, US, ZA) — the result depends on it, so don't reuse an unrelated country field. 'valid' means it conforms to that country's numbering plan (plausible, well-formed), NOT that the line is live or reachable. Returns E.164, national/international formats and line type.

NameTypeReqDescription
numberstringyesThe phone number to validate.
regionstringISO country code the number belongs to (default GB).

No output schema declared.

No examples provided.

validate_ro_cnp ~68

USE THIS to verify a Romanian CNP (Cod Numeric Personal) before relying on it — never assume 13 digits are valid. Checks the weighted mod-11 check digit. Validates structure only.

NameTypeReqDescription
cnpstringyesThe 13-digit Romanian CNP (spaces ignored).

No output schema declared.

No examples provided.

validate_routing ~75

USE THIS to verify a US bank routing / ABA transit number before relying on it for a payment or direct deposit. Checks the 9-digit weighted (3,7,1) mod-10 checksum. Does NOT check whether the bank or account is real.

NameTypeReqDescription
routingstringyesThe 9-digit ABA routing number.

No output schema declared.

No examples provided.

validate_sa_id ~67

USE THIS to verify a South African ID number before relying on it. Checks the Luhn check digit and date-of-birth validity, and returns the date of birth, gender and citizenship status encoded in the number.

NameTypeReqDescription
idstringyesThe 13-digit South African ID number.

No output schema declared.

No examples provided.

validate_sedol ~69

USE THIS to verify a SEDOL (LSE securities identifier) before relying on it. Checks the no-vowels alphabet and the weighted mod-10 check digit.

NameTypeReqDescription
sedolstringyesThe 7-character SEDOL, e.g. B0YBKJ7.

No output schema declared.

No examples provided.

validate_sscc ~91

USE THIS to verify an SSCC (GS1 Serial Shipping Container Code — identifies a pallet/carton/logistics unit) from a shipping label before relying on it. Checks the 18-digit GS1 mod-10 check digit and returns the extension digit and GS1 prefix country. Validates structure only.

NameTypeReqDescription
ssccstringyesThe 18-digit SSCC; spaces and dashes are ignored.

No output schema declared.

No examples provided.