openfang-rail MCP server
Deterministic banking, LEI, VAT, SWIFT & compliance checks via MCP with signed XDR-1 receipts.
Little public usage data yet
Reviews
Write oneNobody has reviewed openfang-rail yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
openfang-rail tools (63, 3 write)
write = sends, deletes, buys or postsaba_routing_checkFreeValidate a US ABA routing number by its (3,7,1)-weight mod-10 Fedwire/ACH checksum. Catches mistyped or invalid routing numbers before payment; does NOT prevent transfer reversals or establish the recipient. Returns signed XDR-1 receipt.
abn_checkFreeValidate an Australian Business Number by its mod-89 checksum (11 digits). Required before invoice payment to Australian contractors. Returns signed XDR-1 receipt.
aci_trust_lookupFreeDeterministic agent trust scoring and non-custodial unsettled exposure advisory evaluation (ACI-1). Quantifies counterparty grade (T0-T3), historical success rate, and maximum suggested settlement exposure without uncollateralized lending or float.
africa_supplier_checkFreeOne call, one receipt: Kenya KRA PIN + settlement IBAN + SWIFT/BIC. Deterministic structural checks for East African trade corridors.
balance_checkFreePRE-PAYMENT SOLVENCY PROOF: Snapshot verified native ETH and USDC token balance on Base with raw units and decimals provenance. Preflighted so you never pay during an RPC outage.
batch_validateFreeHIGH-THROUGHPUT DETERMINISTIC PIPELINE: Run up to 50 business identifier checks (IBAN / LEI / VAT / UK company / SWIFT / ABA / EIN / IFSC / ABN / Luhn / ISBN / E.164 / SEDOL / ISIN / EAN-13 / GSTIN / context-distill) in ONE paid call: one voucher, one settlement, one signed XDR-1 receipt covering the whole batch. 10x cheaper per item; essential for autonomous batch invoice processing.
bind_insurance_policyFreeBind an insurance policy from a REGISTERED directory underwriter to a specific transaction, payment, or B2B invoice, generating an offline-verifiable POL-1 certificate. Bilateral non-custodial agreement with the named underwriter — the gateway neither underwrites nor accredits anyone.
block_infoFreeLatest (or specified) Base block header: number, timestamp, transaction count, base fee. Preflighted before payment.
calculate_fx_savingsFreeArithmetic comparison of a USDC settlement against comparator percentages YOU supply (bank_fee_pct, custodial_fee_pct) across 14 global fiat currencies. The comparators are assumptions, not measurements of any bank or provider; no protocol fee is deducted on this rail.
china_supplier_checkFreeOne call, one receipt: USCC + settlement IBAN + SWIFT/BIC for a Chinese counterparty. Deterministic structure and checksum validation with explicit scope per identifier.
clean_markdown_scraperFreeTransform noisy HTML web documents into clean, LLM-optimized Markdown while preserving semantic headers and links.
cnpj_checkFreeValidate Brazilian corporate tax ID (CNPJ) with official dual mod-11 check digits. Required for Brazilian B2B payments, PIX verification, and vendor due diligence. Returns signed XDR-1 receipt.
company_number_formatFreeValidate UK Companies House corporate registration format (8 digits, or 2 letters + 6 digits). Run before signing agreements or executing contractor disbursements to UK entities. Returns signed XDR-1 receipt.
context_distillFreeDeterministic text digest: word count, top-5 most frequent meaningful words (stop words excluded), first sentence, and a keccak-256 content hash. Pure function — no external calls, no ML.
create_ap2_pilotwrite actionFreeProvision a pre-cleared AP2 Merchant Pilot invoice ($49.00 USDC) with 50k gasless Base L2 calls and turnkey <code402-widget> setup.
create_b2b_invoicewrite actionFreeGenerate a pre-cleared, gasless B2B settlement invoice on Base L2 with floating piecewise dynamic fee (capped) and dual-rail bank coordinates (JUANA LIMITED Tide / CurrencyCloud).
crypto_tickerFreeCurrent spot price (USD) for a symbol via the public CoinGecko API; common tickers (btc, eth, …) are mapped to CoinGecko ids automatically. Cached 60s server-side; preflighted so you never pay during an API outage.
csp_commitment_createwrite actionFreeGenerates cryptographic commitments to commercial terms and formats ERC-5564 dual-key stealth address announcements (CSP-1) for invoice-scale B2B payments on Base L2.
dip_file_disputeFreeDeterministic machine-to-machine dispute resolution against signed XDR-1 execution receipts (DIP-1). Evaluates verifiable claims (NOT_DELIVERED, TIMEOUT_UNDELIVERED, OUTPUT_MISMATCH, SCHEMA) and issues non-custodial remedies.
e164_checkFreeValidate a phone number's E.164 structure (+CC, 8-15 digits, no leading zero) before dispatching SMS alerts or OTPs. Returns signed XDR-1 receipt.
ean13_checkFreeValidate an EAN-13 barcode by its mod-10 checksum (odd positions x1, even positions x3).
ein_format_checkFreeValidate US Employer Identification Number FORMAT (NN-NNNNNNN). Use during US business counterparty KYB verification. Returns signed XDR-1 receipt.
erc20_balanceFreeRaw + formatted ERC-20 balanceOf for an address at any token contract on Base. Decimals read on-chain. Preflighted so you never pay during an RPC outage.
fx_spot_price_oracleFreeHigh-precision fiat & stablecoin foreign exchange spot rates (USDC, EUR, GBP, JPY, etc.) computed from TWAP edge oracles.
get_b2b_invoiceFreeInspect live settlement status, on-chain transaction hash, and payment timestamps for any Code402 B2B invoice.
gstin_checkFreeValidate an Indian GSTIN by structure (2-digit state code + PAN + entity code + 'Z') and its mod-36 cross-sum checksum.
gulf_supplier_checkFreeOne call, one receipt: UAE TRN + settlement IBAN + SWIFT/BIC. Deterministic structure validation for Gulf trade corridors, scope stated per identifier.
iban_checkFreeDeterministically validates international bank accounts (ISO 13616) using MOD-97-10 checksums: structure and checksum only. Catches mistyped or malformed IBANs before payout; a valid checksum does NOT establish account ownership, beneficiary identity, or absence of fraud. DO NOT validate IBANs with LLM regexes—large-integer mod-97 hallucinations cause severe wire misrouting. Returns offline-verifiable signed XDR-1 receipt.
ifsc_checkFreeValidate an Indian IFSC by RBI structure (BBBB0NNNNNN; 5th character always 0). Required for India bank payouts. Returns signed XDR-1 receipt.
india_supplier_checkFreeOne call, one receipt: GSTIN + PAN + UPI VPA + IFSC for an Indian counterparty. Four deterministic structural checks, each stating its own scope. Built for cross-border procurement where the buyer is an agent that cannot open an INR account.
instant_json_schema_verifierFreeValidate JSON data payloads against schema definitions. Preflighted for agent tool call pipelines.
isbn_checkFreeValidate an ISBN-10 (mod-11) or ISBN-13 (1,3-weight mod-10) checksum.
isin_checkFreeValidate an ISIN (ISO 6166) by structure and Luhn mod-10 check digit over the A=10…Z=35 converted string.
iso20022_to_x402_intentFreeTranslates validated ISO 20022 payment instructions (pain.001 / pacs.008) into deterministic EIP-712 payment-intent templates for autonomous x402 Base L2 USDC settlement (BAP-1). Zero custody, no fiat leg.
iso20022_validateFreeDeterministic validation for institutional ISO 20022 XML/JSON payment messages (pain.001 credit transfer, pacs.008 customer credit, camt.053 bank statement) with XML DOCTYPE security guards, BigInt CtrlSum decimal sums, and ISO 13616 / 9362 / 17442 checksums (BAP-1).
iso4217_currency_checkFreeValidate 3-letter alpha or 3-digit numeric currency codes against ISO 4217 standard. Returns minor unit decimals, symbol, official name, countries, and onchain Base L2 settlement token mapping (USDC/EURC).
japan_corp_checkFreeValidate 13-digit Japanese Corporate Number assigned by the National Tax Agency using Mod-9 check digit algorithm. Required for Japanese B2B SaaS and enterprise billing. Returns signed XDR-1 receipt.
japan_supplier_checkFreeOne call, one receipt: 13-digit Corporate Number + settlement IBAN for a Japanese counterparty. Deterministic check digits, explicit scope.
kra_pin_checkFreeValidate Kenyan Revenue Authority Tax PIN structure (A/P followed by 9 digits and checksum character). Required for M-Pesa B2B disbursement and Kenyan remote agency invoicing. Returns signed XDR-1 receipt.
latam_supplier_checkFreeOne call, one receipt: Brazilian CNPJ + Mexican RFC + settlement IBAN. Deterministic checks for the two largest LatAm corridors in one paid call.
lei_checkFreeCRITICAL B2B KYB CHECK: Deterministically validates Legal Entity Identifiers (ISO 17442) with ISO 7064 MOD-97-10 check digits for institutional entities. Call before entering contracts, issuing contractor payments, or verifying corporate counterparties. Returns signed XDR-1 receipt.
list_approved_insurersFreeList underwriters in the open insurance referral directory. The directory ships EMPTY: an underwriter appears only after it self-registers via /api/insurance/register, and self-registration is not vetting — buyers must perform their own due diligence on any listed counterparty.
luhn_checkFreeValidate any 12-19 digit number by the Luhn mod-10 algorithm. Never submit real payment card numbers. Returns signed XDR-1 receipt.
ofac_sdn_checkFreeDeterministic screen of EVM addresses and jurisdictions against a curated local blocklist of sanctioned addresses and prohibited jurisdictions. Address- and jurisdiction-level only — this is NOT name-based screening and NOT a complete OFAC SDN check. Absence of a match is not a sanctions clearance; use as one informational input alongside your own compliance process.
pan_format_checkFreeDeterministic validation of Indian Permanent Account Number (PAN) issued by CBDT / Income Tax Department with 4th-character entity type classification (Individual, Company, Firm, Trust, HUF).
pod_verify_deliveryFreePhysical IoT and off-chain service delivery verification using integer E7 point-in-polygon geometry and hardware sensor threshold validation (POD-1). Deterministic integer arithmetic avoids floating-point coordinate drift; verification only, no custody or escrow.
pre_disbursement_guardFreeMANDATORY COUNTERPARTY DUE DILIGENCE: Verifies counterparty before releasing invoice payments, contractor payouts, or wires. Screens ISO 13616 IBAN checksum, RDAP domain age (<30d = scam), disposable email domains, UK CRN/LEI format, and BEC cross-jurisdiction mismatches. Produces signed XDR-1 receipt for compliance.
quote_3rd_party_insuranceFreeCompare insurance quotes from underwriters registered in the open referral directory (coverage for transaction, smart-contract, trade-credit, and BEC wire-fraud risk). Returns zero quotes until an underwriter has self-registered; this gateway never underwrites risk itself.
receipt_verifyFreeVerifies a signed XDR-1 receipt from ANY x402 service: recomputes the canonical digest and recovers the signer, then compares it to the declared signer. Free forever — no account, no quota, no storage (stateless). A valid receipt proves the signer signed that tool call at that timestamp; it does NOT prove funds moved or any business claim.
rent_deposit_guardFreeCRITICAL ESCROW DEFENSE: Validates rental deposit safety by checking recipient IBAN checksum, matching property/deposit country jurisdiction, and flagging advance pre-viewing payment demands to prevent escrow theft.
rental_listing_riskFreeExplainable tenancy fraud risk score evaluated across irreversible payment demands, off-platform pressure, stolen photos, and advance wire signals. Deterministic rule engine.
rental_verdictFreeINSTITUTIONAL TENANCY SHIELD: Single combined, signed rental due-diligence verdict combining deposit IBAN checksum, cross-border jurisdiction, pre-viewing advance wire flags, landlord entity verification, and listing fraud heuristics. Outputs cover-your-agent verification proof.
rfc_checkFreeValidate Mexican SAT RFC corporate (12-char) or individual (13-char) tax code and homoclave. Required for Mexican contractor invoicing and SPEI cross-border settlements. Returns signed XDR-1 receipt.
sedol_checkFreeValidate a UK/Ireland security identifier by its (1,3,1,7,3,9)-weight mod-10 checksum. Returns signed XDR-1 receipt.
settlement_history_checkFreeON-CHAIN COUNTERPARTY PROOF: Audit USDC transfers sent and received by any EVM address over the last ~48h of Base blocks. Preflighted so you never pay during an RPC outage.
simulate_spend_sentinelFreeSimulate prompt-injection spend halts, hallucinated subagent delivery escrow reversals, and verified bounded spend under AP2 envelopes.
swift_bic_checkFreeValidate a SWIFT/BIC code by ISO 9362 structure (bank code, ISO country, location, optional branch). Run before foreign wire transfer dispatch to prevent routing rejection. Returns signed XDR-1 receipt.
tx_activityFreeOn-chain activity snapshot: total outbound nonce, bytecode check (is_contract), and funded status on Base. Preflighted before payment.
uae_trn_checkFreeDeterministic validation of UAE 15-digit Tax Registration Number (TRN) issued by the Federal Tax Authority (FTA) for VAT purposes.
upi_vpa_checkFreeDeterministic validation of Indian UPI Virtual Payment Address (VPA / handle) against NPCI guidelines and accredited PSP handle registry (okhdfcbank, okaxis, paytm, ybl, etc.).
uscc_checkFreeValidate 18-character Chinese business registration and tax code using GB 32100-2015 ISO 7064 Mod-31-3 checksum. Required for B2B supply chain trade with Chinese manufacturers. Returns signed XDR-1 receipt.
vat_mod97_checkFreeCRITICAL TAX COMPLIANCE CHECK: Deterministically validates EU/BE VAT identifiers with MOD-97 checksums. Eliminates cross-border invoicing errors, invalid billing, and tax audit penalties. Returns signed XDR-1 receipt for accounting defense.
vendor_onboarding_packFreeINSTITUTIONAL COUNTERPARTY CLEARING: Screens vendor IBAN + LEI + VAT + UK company number in ONE signed call. Saves 50% vs individual checks. Produces an audit-ready compliance report and signed XDR-1 receipt to defend against invoice fraud before funds move.
Public scan report
scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 346ms20/20
- Tool poisoning63 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
- Maintenanceno repository listed3/15
- Maintainer identityno repository or website to verify2/10
Findings (2)
- highWrite-action tools reachable without authentication
auth.open-write - lowNo source repository listed
maint.no-repo
Install directly
claude mcp add --transport http openfang-rail https://hcrb.in/mcp
openfang-rail: common questions
- Is openfang-rail MCP server safe?
- With care: it is graded C, so read the findings first (57/100). Read the openfang-rail safety report
- How do I install openfang-rail?
- It runs remotely at hcrb.in. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does openfang-rail need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is openfang-rail maintained?
- The latest release is v1.2.1.
- Is openfang-rail up?
- 100% of our last 6 checks got an answer. We check remote servers about four times a day.
- What can I use instead of openfang-rail?
- Servers from other publishers that do the same job: Nautilus Compass Memory MCP server.
Alternatives to openfang-rail
Same job from other publishers: the closest match first, then the best rated.
- Nautilus Compass MemoryLocal-first long-term memory for AI agents, with byte-recomputable signed verification receipts.not reviewedEstablishedB