MCP.Market

Iso20022 Evidence Pack MCP server

by sebastienrousseau·io.github.sebastienrousseau/iso20022-evidence-pack-mcp·v0.0.6·1 stars
No reviews yet

MCP server: seal & sign ISO 20022 readiness evidence into tamper-evident audit packs.

A92/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

1 stars49 downloads/wk

Reviews

Write one

Nobody has reviewed Iso20022 Evidence Pack yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Iso20022 Evidence Pack tools (11, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • build_evidence_pack

    Fold readiness, remediation, and simulations into a sealed pack.

  • export_pack_to_s3write action

    Upload a signed evidence pack to Amazon S3.

  • render_markdown

    Render an evidence pack as a markdown compliance report.

  • seal_pack

    Compute the deterministic SHA-256 seal for an evidence pack.

  • sign_pack

    Sign a pack's canonical content with the server's Ed25519 key.

  • sign_pack_aws_kms

    Sign a pack's SHA-256 canonical digest with AWS KMS.

  • sign_pack_vault

    Sign a pack's canonical bytes with HashiCorp Vault Transit.

  • verify_cosign_signature

    Verify a container image signature with ``cosign``.

  • verify_pack_signature

    Verify a detached Ed25519 signature over a pack's canonical content.

  • verify_seal

    Recompute a pack's seal and compare it to an expected digest.

  • verify_slsa_provenance

    Verify an artifact's SLSA provenance with ``slsa-verifier``.

Public scan report

scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it

no findings
  • Code scan18 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 3 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Iso20022 Evidence Pack compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 95% of 48,255 servers
Tools
11
the typical server has 7
Tools that change things
9%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 28,688 servers
Downloads a week
49
more than 41% of 12,191 servers with a package

What its tools let an agent do: 10 read · 1 change

Release history: 2 versions in the registry since 2026-08-29, latest 2026-10-04, typically one every 36 days.

Install Iso20022 Evidence Pack in Claude Code, Cursor or VS Code

claude mcp add iso20022-evidence-pack-mcp -- uvx iso20022-evidence-pack-mcp
Add to Cursor

What the publisher says

From the Iso20022 Evidence Pack repository's README, as published. We do not edit it. Read it on GitHub

iso20022-evidence-pack-mcp: Sealed ISO 20022 Audit Evidence Packs

[![PyPI Version][pypi-badge]][07] [![Python Versions][python-versions-badge]][07] [![License][license-badge]][01] [![Tests][tests-badge]][tests-url] [![Quality][quality-badge]][quality-url] [![OpenSSF Scorecard][scorecard-badge]][scorecard-url] [![Documentation][docs-badge]][docs-url] [![Glama MCP server score][glama-badge]][glama-url]

A fully local, closed-world [Model Context Protocol (MCP)][mcp] server that compiles ISO 20022 readiness findings, remediation diffs, and simulated bank responses into one sealed, exportable audit evidence pack. It is the audit and certification sibling of iso20022-readiness-suite-mcp (which produces those findings) and iso20022-bank-profile-mcp in the ISO 20022 MCP Suite.

Tamper-evident by construction. The pack's seal is a deterministic

SHA-256 digest over the pack's canonical JSON (the digest field excluded).

Re-sealing identical content yields the identical digest, and changing any

field breaks verification — so an auditor can detect undetected change. There

is no network surface, no sub-servers, and no XML: every tool is a pure,

local, deterministic transform over the JSON structures it is handed.

v0.0.5, stdio, streamable HTTP, SSE or authenticated streamable HTTP,

11 tools including Ed25519 pack signing, Python 3.10+.

Contents

  • Overview
  • The ISO 20022 MCP Suite
  • Install
  • Quick Start
  • Transports — stdio, streamable HTTP (2026-07-28 and 2025-11-25), SSE and authenticated HTTP from one command line
  • Tools
  • HTTP transport & authentication
  • Signing evidence packs
  • Examples
  • How it fits the suite
  • Open-core vs premium
  • Seal vs signature

Overview

The [Model Context Protocol][mcp] (MCP) is an open standard that lets AI agents and assistants discover and call external tools in a uniform way. iso20022-evidence-pack-mcp is the audit/certification end of the ISO 20022 MCP Suite: it takes the results that iso20022-readiness-suite-mcp produces — a readiness score with findings, an optional remediation result, and any simulated bank responses — and folds them into one strongly-typed, graded, sealed evidence pack that can be exported, verified, and rendered as a compliance report.

An EvidencePack folds three loosely-typed inputs into one self-describing document: a readiness result (message type, validity, score, findings), an optional remediation result (fixes applied, residual findings), and any simulated bank responses (accepted / rejected statuses). The pack is graded (A / B / C / F from the readiness score) and sealed.

The seal is the point: it is a deterministic SHA-256 digest computed over the pack's canonical JSON form (sorted keys, tight separators, with the digest field itself excluded). Sealing the same content always yields the same value, which is exactly what makes the pack tamper-evident — recomputing the seal and comparing it to the one carried in the pack tells an auditor whether any byte changed since it was sealed.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Iso20022 Evidence Pack: common questions

Is Iso20022 Evidence Pack MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Iso20022 Evidence Pack safety report
How do I install Iso20022 Evidence Pack?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Iso20022 Evidence Pack need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Iso20022 Evidence Pack maintained?
The last commit was 8 days ago (2026-10-27). The latest release is v0.0.6.
What can I use instead of Iso20022 Evidence Pack?
Servers from other publishers that do the same job: Tradememory Protocol MCP server.
How does Iso20022 Evidence Pack compare with other MCP servers?
safety score 92/100 (higher than 95% of 48,255 servers); tools 11 (the typical server has 7); tools that change things 9% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Iso20022 Evidence Pack

Same job from other publishers: the closest match first, then the best rated.

  • Tradememory Protocol
    Tamper-evident decision audit trail and outcome-weighted memory for AI trading agents.
    B

More from sebastienrousseau →