Mmcp.market

openfang-rail MCP server

by 89rat·io.github.89rat/openfang-rail·v1.2.1

Deterministic banking, LEI, VAT, SWIFT & compliance checks via MCP with signed XDR-1 receipts.

C57/100grade C
What users say
No reviews yet
Be the first
Safety scan
C57/100

full report

Adoption
New

Little public usage data yet

Reviews

Write one

Nobody has reviewed openfang-rail yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

openfang-rail tools (63, 3 write)

write = sends, deletes, buys or posts
  • aba_routing_checkFree

    Validate a US ABA routing number by its (3,7,1)-weight mod-10 Fedwire/ACH checksum. Catches mistyped or invalid routing numbers before payment; does NOT prevent transfer reversals or establish the recipient. Returns signed XDR-1 receipt.

  • abn_checkFree

    Validate an Australian Business Number by its mod-89 checksum (11 digits). Required before invoice payment to Australian contractors. Returns signed XDR-1 receipt.

  • aci_trust_lookupFree

    Deterministic agent trust scoring and non-custodial unsettled exposure advisory evaluation (ACI-1). Quantifies counterparty grade (T0-T3), historical success rate, and maximum suggested settlement exposure without uncollateralized lending or float.

  • africa_supplier_checkFree

    One call, one receipt: Kenya KRA PIN + settlement IBAN + SWIFT/BIC. Deterministic structural checks for East African trade corridors.

  • balance_checkFree

    PRE-PAYMENT SOLVENCY PROOF: Snapshot verified native ETH and USDC token balance on Base with raw units and decimals provenance. Preflighted so you never pay during an RPC outage.

  • batch_validateFree

    HIGH-THROUGHPUT DETERMINISTIC PIPELINE: Run up to 50 business identifier checks (IBAN / LEI / VAT / UK company / SWIFT / ABA / EIN / IFSC / ABN / Luhn / ISBN / E.164 / SEDOL / ISIN / EAN-13 / GSTIN / context-distill) in ONE paid call: one voucher, one settlement, one signed XDR-1 receipt covering the whole batch. 10x cheaper per item; essential for autonomous batch invoice processing.

  • bind_insurance_policyFree

    Bind an insurance policy from a REGISTERED directory underwriter to a specific transaction, payment, or B2B invoice, generating an offline-verifiable POL-1 certificate. Bilateral non-custodial agreement with the named underwriter — the gateway neither underwrites nor accredits anyone.

  • block_infoFree

    Latest (or specified) Base block header: number, timestamp, transaction count, base fee. Preflighted before payment.

  • calculate_fx_savingsFree

    Arithmetic comparison of a USDC settlement against comparator percentages YOU supply (bank_fee_pct, custodial_fee_pct) across 14 global fiat currencies. The comparators are assumptions, not measurements of any bank or provider; no protocol fee is deducted on this rail.

  • china_supplier_checkFree

    One call, one receipt: USCC + settlement IBAN + SWIFT/BIC for a Chinese counterparty. Deterministic structure and checksum validation with explicit scope per identifier.

  • clean_markdown_scraperFree

    Transform noisy HTML web documents into clean, LLM-optimized Markdown while preserving semantic headers and links.

  • cnpj_checkFree

    Validate Brazilian corporate tax ID (CNPJ) with official dual mod-11 check digits. Required for Brazilian B2B payments, PIX verification, and vendor due diligence. Returns signed XDR-1 receipt.

  • company_number_formatFree

    Validate UK Companies House corporate registration format (8 digits, or 2 letters + 6 digits). Run before signing agreements or executing contractor disbursements to UK entities. Returns signed XDR-1 receipt.

  • context_distillFree

    Deterministic text digest: word count, top-5 most frequent meaningful words (stop words excluded), first sentence, and a keccak-256 content hash. Pure function — no external calls, no ML.

  • create_ap2_pilotwrite actionFree

    Provision a pre-cleared AP2 Merchant Pilot invoice ($49.00 USDC) with 50k gasless Base L2 calls and turnkey <code402-widget> setup.

  • create_b2b_invoicewrite actionFree

    Generate a pre-cleared, gasless B2B settlement invoice on Base L2 with floating piecewise dynamic fee (capped) and dual-rail bank coordinates (JUANA LIMITED Tide / CurrencyCloud).

  • crypto_tickerFree

    Current spot price (USD) for a symbol via the public CoinGecko API; common tickers (btc, eth, …) are mapped to CoinGecko ids automatically. Cached 60s server-side; preflighted so you never pay during an API outage.

  • csp_commitment_createwrite actionFree

    Generates cryptographic commitments to commercial terms and formats ERC-5564 dual-key stealth address announcements (CSP-1) for invoice-scale B2B payments on Base L2.

  • dip_file_disputeFree

    Deterministic machine-to-machine dispute resolution against signed XDR-1 execution receipts (DIP-1). Evaluates verifiable claims (NOT_DELIVERED, TIMEOUT_UNDELIVERED, OUTPUT_MISMATCH, SCHEMA) and issues non-custodial remedies.

  • e164_checkFree

    Validate a phone number's E.164 structure (+CC, 8-15 digits, no leading zero) before dispatching SMS alerts or OTPs. Returns signed XDR-1 receipt.

  • ean13_checkFree

    Validate an EAN-13 barcode by its mod-10 checksum (odd positions x1, even positions x3).

  • ein_format_checkFree

    Validate US Employer Identification Number FORMAT (NN-NNNNNNN). Use during US business counterparty KYB verification. Returns signed XDR-1 receipt.

  • erc20_balanceFree

    Raw + formatted ERC-20 balanceOf for an address at any token contract on Base. Decimals read on-chain. Preflighted so you never pay during an RPC outage.

  • fx_spot_price_oracleFree

    High-precision fiat & stablecoin foreign exchange spot rates (USDC, EUR, GBP, JPY, etc.) computed from TWAP edge oracles.

  • get_b2b_invoiceFree

    Inspect live settlement status, on-chain transaction hash, and payment timestamps for any Code402 B2B invoice.

  • gstin_checkFree

    Validate an Indian GSTIN by structure (2-digit state code + PAN + entity code + 'Z') and its mod-36 cross-sum checksum.

  • gulf_supplier_checkFree

    One call, one receipt: UAE TRN + settlement IBAN + SWIFT/BIC. Deterministic structure validation for Gulf trade corridors, scope stated per identifier.

  • iban_checkFree

    Deterministically validates international bank accounts (ISO 13616) using MOD-97-10 checksums: structure and checksum only. Catches mistyped or malformed IBANs before payout; a valid checksum does NOT establish account ownership, beneficiary identity, or absence of fraud. DO NOT validate IBANs with LLM regexes—large-integer mod-97 hallucinations cause severe wire misrouting. Returns offline-verifiable signed XDR-1 receipt.

  • ifsc_checkFree

    Validate an Indian IFSC by RBI structure (BBBB0NNNNNN; 5th character always 0). Required for India bank payouts. Returns signed XDR-1 receipt.

  • india_supplier_checkFree

    One call, one receipt: GSTIN + PAN + UPI VPA + IFSC for an Indian counterparty. Four deterministic structural checks, each stating its own scope. Built for cross-border procurement where the buyer is an agent that cannot open an INR account.

  • instant_json_schema_verifierFree

    Validate JSON data payloads against schema definitions. Preflighted for agent tool call pipelines.

  • isbn_checkFree

    Validate an ISBN-10 (mod-11) or ISBN-13 (1,3-weight mod-10) checksum.

  • isin_checkFree

    Validate an ISIN (ISO 6166) by structure and Luhn mod-10 check digit over the A=10…Z=35 converted string.

  • iso20022_to_x402_intentFree

    Translates validated ISO 20022 payment instructions (pain.001 / pacs.008) into deterministic EIP-712 payment-intent templates for autonomous x402 Base L2 USDC settlement (BAP-1). Zero custody, no fiat leg.

  • iso20022_validateFree

    Deterministic validation for institutional ISO 20022 XML/JSON payment messages (pain.001 credit transfer, pacs.008 customer credit, camt.053 bank statement) with XML DOCTYPE security guards, BigInt CtrlSum decimal sums, and ISO 13616 / 9362 / 17442 checksums (BAP-1).

  • iso4217_currency_checkFree

    Validate 3-letter alpha or 3-digit numeric currency codes against ISO 4217 standard. Returns minor unit decimals, symbol, official name, countries, and onchain Base L2 settlement token mapping (USDC/EURC).

  • japan_corp_checkFree

    Validate 13-digit Japanese Corporate Number assigned by the National Tax Agency using Mod-9 check digit algorithm. Required for Japanese B2B SaaS and enterprise billing. Returns signed XDR-1 receipt.

  • japan_supplier_checkFree

    One call, one receipt: 13-digit Corporate Number + settlement IBAN for a Japanese counterparty. Deterministic check digits, explicit scope.

  • kra_pin_checkFree

    Validate Kenyan Revenue Authority Tax PIN structure (A/P followed by 9 digits and checksum character). Required for M-Pesa B2B disbursement and Kenyan remote agency invoicing. Returns signed XDR-1 receipt.

  • latam_supplier_checkFree

    One call, one receipt: Brazilian CNPJ + Mexican RFC + settlement IBAN. Deterministic checks for the two largest LatAm corridors in one paid call.

  • lei_checkFree

    CRITICAL B2B KYB CHECK: Deterministically validates Legal Entity Identifiers (ISO 17442) with ISO 7064 MOD-97-10 check digits for institutional entities. Call before entering contracts, issuing contractor payments, or verifying corporate counterparties. Returns signed XDR-1 receipt.

  • list_approved_insurersFree

    List underwriters in the open insurance referral directory. The directory ships EMPTY: an underwriter appears only after it self-registers via /api/insurance/register, and self-registration is not vetting — buyers must perform their own due diligence on any listed counterparty.

  • luhn_checkFree

    Validate any 12-19 digit number by the Luhn mod-10 algorithm. Never submit real payment card numbers. Returns signed XDR-1 receipt.

  • ofac_sdn_checkFree

    Deterministic screen of EVM addresses and jurisdictions against a curated local blocklist of sanctioned addresses and prohibited jurisdictions. Address- and jurisdiction-level only — this is NOT name-based screening and NOT a complete OFAC SDN check. Absence of a match is not a sanctions clearance; use as one informational input alongside your own compliance process.

  • pan_format_checkFree

    Deterministic validation of Indian Permanent Account Number (PAN) issued by CBDT / Income Tax Department with 4th-character entity type classification (Individual, Company, Firm, Trust, HUF).

  • pod_verify_deliveryFree

    Physical IoT and off-chain service delivery verification using integer E7 point-in-polygon geometry and hardware sensor threshold validation (POD-1). Deterministic integer arithmetic avoids floating-point coordinate drift; verification only, no custody or escrow.

  • pre_disbursement_guardFree

    MANDATORY COUNTERPARTY DUE DILIGENCE: Verifies counterparty before releasing invoice payments, contractor payouts, or wires. Screens ISO 13616 IBAN checksum, RDAP domain age (<30d = scam), disposable email domains, UK CRN/LEI format, and BEC cross-jurisdiction mismatches. Produces signed XDR-1 receipt for compliance.

  • quote_3rd_party_insuranceFree

    Compare insurance quotes from underwriters registered in the open referral directory (coverage for transaction, smart-contract, trade-credit, and BEC wire-fraud risk). Returns zero quotes until an underwriter has self-registered; this gateway never underwrites risk itself.

  • receipt_verifyFree

    Verifies a signed XDR-1 receipt from ANY x402 service: recomputes the canonical digest and recovers the signer, then compares it to the declared signer. Free forever — no account, no quota, no storage (stateless). A valid receipt proves the signer signed that tool call at that timestamp; it does NOT prove funds moved or any business claim.

  • rent_deposit_guardFree

    CRITICAL ESCROW DEFENSE: Validates rental deposit safety by checking recipient IBAN checksum, matching property/deposit country jurisdiction, and flagging advance pre-viewing payment demands to prevent escrow theft.

  • rental_listing_riskFree

    Explainable tenancy fraud risk score evaluated across irreversible payment demands, off-platform pressure, stolen photos, and advance wire signals. Deterministic rule engine.

  • rental_verdictFree

    INSTITUTIONAL TENANCY SHIELD: Single combined, signed rental due-diligence verdict combining deposit IBAN checksum, cross-border jurisdiction, pre-viewing advance wire flags, landlord entity verification, and listing fraud heuristics. Outputs cover-your-agent verification proof.

  • rfc_checkFree

    Validate Mexican SAT RFC corporate (12-char) or individual (13-char) tax code and homoclave. Required for Mexican contractor invoicing and SPEI cross-border settlements. Returns signed XDR-1 receipt.

  • sedol_checkFree

    Validate a UK/Ireland security identifier by its (1,3,1,7,3,9)-weight mod-10 checksum. Returns signed XDR-1 receipt.

  • settlement_history_checkFree

    ON-CHAIN COUNTERPARTY PROOF: Audit USDC transfers sent and received by any EVM address over the last ~48h of Base blocks. Preflighted so you never pay during an RPC outage.

  • simulate_spend_sentinelFree

    Simulate prompt-injection spend halts, hallucinated subagent delivery escrow reversals, and verified bounded spend under AP2 envelopes.

  • swift_bic_checkFree

    Validate a SWIFT/BIC code by ISO 9362 structure (bank code, ISO country, location, optional branch). Run before foreign wire transfer dispatch to prevent routing rejection. Returns signed XDR-1 receipt.

  • tx_activityFree

    On-chain activity snapshot: total outbound nonce, bytecode check (is_contract), and funded status on Base. Preflighted before payment.

  • uae_trn_checkFree

    Deterministic validation of UAE 15-digit Tax Registration Number (TRN) issued by the Federal Tax Authority (FTA) for VAT purposes.

  • upi_vpa_checkFree

    Deterministic validation of Indian UPI Virtual Payment Address (VPA / handle) against NPCI guidelines and accredited PSP handle registry (okhdfcbank, okaxis, paytm, ybl, etc.).

  • uscc_checkFree

    Validate 18-character Chinese business registration and tax code using GB 32100-2015 ISO 7064 Mod-31-3 checksum. Required for B2B supply chain trade with Chinese manufacturers. Returns signed XDR-1 receipt.

  • vat_mod97_checkFree

    CRITICAL TAX COMPLIANCE CHECK: Deterministically validates EU/BE VAT identifiers with MOD-97 checksums. Eliminates cross-border invoicing errors, invalid billing, and tax audit penalties. Returns signed XDR-1 receipt for accounting defense.

  • vendor_onboarding_packFree

    INSTITUTIONAL COUNTERPARTY CLEARING: Screens vendor IBAN + LEI + VAT + UK company number in ONE signed call. Saves 50% vs individual checks. Produces an audit-ready compliance report and signed XDR-1 receipt to defend against invoice fraud before funds move.

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high1 low
  • Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 346ms20/20
  • Tool poisoning63 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
  • Maintenanceno repository listed3/15
  • Maintainer identityno repository or website to verify2/10

Findings (2)

  • highWrite-action tools reachable without authenticationauth.open-write
  • lowNo source repository listedmaint.no-repo
Overall 57/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add --transport http openfang-rail https://hcrb.in/mcp
Add to Cursor

openfang-rail: common questions

Is openfang-rail MCP server safe?
With care: it is graded C, so read the findings first (57/100). Read the openfang-rail safety report
How do I install openfang-rail?
It runs remotely at hcrb.in. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does openfang-rail need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is openfang-rail maintained?
The latest release is v1.2.1.
Is openfang-rail up?
100% of our last 6 checks got an answer. We check remote servers about four times a day.
What can I use instead of openfang-rail?
Servers from other publishers that do the same job: Nautilus Compass Memory MCP server.

Alternatives to openfang-rail

Same job from other publishers: the closest match first, then the best rated.

  • Nautilus Compass Memory
    Local-first long-term memory for AI agents, with byte-recomputable signed verification receipts.
    B

More from 89rat