io.github.freshfos/dropcoin-validation

MCPcommunitylive
v1.0.0io.github.freshfosUnknownUpdated 1mo ago

EU compliance checks for AI agents: sanctions, company, VAT ID, IBAN, email. Pay per call.

Endpoint healthlive
checked 9 days ago · 366ms
100% of the last 5 checks reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
1mo agoLast update
Package
Authorio.github.freshfos
LicenseUnknown
Version1.0.0
Sourcemcp-registry
Trust Status
B
60/100Good
✓Listed in Forge index+10/10
—Publisher identity verified+0/30
→ Publisher: this listing has no repository on file, so `forge publish` cannot verify ownership automatically. Use "Claim this listing" above — Forge reviews these by hand.
—Domain verification+0/10
→ Not currently available for this listing type — the domain-verification check only runs for npm-backed packages today, so this row cannot be earned here yet regardless of what's hosted at the domain.
✓Prompt-injection scan · clean+30/30
✓Obfuscation / exfil scan · clean+20/20
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain—
Provenance—
DependenciesNot audited
Tool surface6 tools · none privileged
Security scan✓ Cleanvlive · 9d agoHow well does this scan work?
EvalsNone
IndexedAug 11, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

6 tools · none privileged
Observed live from the vendor's endpoint9d ago

Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.

  • https://validation-api.dropcoin.workers.dev/mcp6 tools · 366ms
validate_vatid_formatFree EU VAT-ID FORMAT check (syntax only, no registry lookup), rate-limited per IP, no API key needed. For a live VIES registry check use the paid validate_vatid tool (5 credits).

Free EU VAT-ID FORMAT check (syntax only, no registry lookup), rate-limited per IP, no API key needed. For a live VIES registry check use the paid validate_vatid tool (5 credits).

ParameterTypeDescription
vatId*string—
validate_emailValidate an email address: syntax, disposable-domain check, MX record via DNS-over-HTTPS. Returns a deliverability verdict. 2 credits, requires an API key.

Validate an email address: syntax, disposable-domain check, MX record via DNS-over-HTTPS. Returns a deliverability verdict. 2 credits, requires an API key.

ParameterTypeDescription
email*string—
validate_vatidValidate an EU VAT ID against the live VIES registry (format check first — an invalid format still costs the full price, it never reaches VIES but you got an answer). 5 credits, requires an API key.

Validate an EU VAT ID against the live VIES registry (format check first — an invalid format still costs the full price, it never reaches VIES but you got an answer). 5 credits, requires an API key.

ParameterTypeDescription
vatId*string—
validate_ibanValidate an IBAN (ISO 13616 check digits) incl. SEPA membership. 2 credits, requires an API key.

Validate an IBAN (ISO 13616 check digits) incl. SEPA membership. 2 credits, requires an API key.

ParameterTypeDescription
iban*string—
screen_sanctionsScreen a person or company against the official EU, US (OFAC SDN) and UK (OFSI) sanctions lists. Fuzzy name matching with an auditable reason per hit — review every hit yourself; a clean result is not legal clearance and covers no PEP data. 15 credits, requires an API key.

Screen a person or company against the official EU, US (OFAC SDN) and UK (OFSI) sanctions lists. Fuzzy name matching with an auditable reason per hit — review every hit yourself; a clean result is not legal clearance and covers no PEP data. 15 credits, requires an API key.

ParameterTypeDescription
name*string—
typestring—
minScorenumber—
verify_companyVerify a business partner in one call: EU VAT registration (VIES), LEI register (GLEIF), IBAN checksum and country consistency — one verdict (pass|fail|inconclusive) with an auditable check log. Provide at least one of name, vatId, lei. Does not include commercial-register existence checks. 150 cre…

Verify a business partner in one call: EU VAT registration (VIES), LEI register (GLEIF), IBAN checksum and country consistency — one verdict (pass|fail|inconclusive) with an auditable check log. Provide at least one of name, vatId, lei. Does not include commercial-register existence checks. 150 cre…

ParameterTypeDescription
namestring—
vatIdstring—
leistring—
countrystring—
ibanstring—

6 of 6 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

EU compliance checks for AI agents: sanctions, company, VAT ID, IBAN, email. Pay per call.

Keywords
mcp
Alternatives
Comparing tool surfaces…

No dependency coverage

This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.