io.github.zvmzaretsky/validation-suite

Est-ce que io.github.zvmzaretsky/validation-suite est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.zvmzaretsky/validation-suite » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 5 outils

• decode_vin≈ 248 tokens

  PAID $0.002 (x402, USDC on Base). Decode a Vehicle Identification Number: give {vin} and get a 17-char format + North-American check-digit validation and a full decode via NHTSA's public vPIC API — make, model, year, body class, engine, plant country and more. VIN-only (never plate→owner). Without payment returns the x402 challenge; pass x_payment to settle.

  Paramètres, retour & exemple (2)

  Paramètres

  • vin · string · requis
    A 17-character Vehicle Identification Number (excludes I, O, Q).
  • x_payment · string · optionnel
    x402 payment payload (base64) for this PAID validation. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.

  Exemple d'appel

  {"name": "decode_vin", "arguments": {"vin": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• geo_lookup≈ 323 tokens

  PAID $0.002 (x402, USDC on Base). Resolve a place against a bundled open dataset (no per-day API limits). Give {query:"Munich, Bavaria, Germany"} OR {country, state, city} and get normalized names, ISO 3166-1/-2 codes, the country→subdivision→city hierarchy, population and coordinates, and confirmation the place exists. Without payment returns the x402 challenge; pass x_payment to settle.

  Paramètres, retour & exemple (5)

  Paramètres

  • city · string · optionnel
    City name.
  • query · string · optionnel
    Free-text place, e.g. "Munich, Bavaria, Germany" or "France".
  • state · string · optionnel
    State/province/subdivision name or code (within the country).
  • country · string · optionnel
    Country name or ISO 3166-1 alpha-2/alpha-3 code.
  • x_payment · string · optionnel
    x402 payment payload (base64) for this PAID validation. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.

  Exemple d'appel

  {"name": "geo_lookup", "arguments": {"city": "texte", "query": "texte", "state": "texte", "country": "texte", "x_payment": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• validate_email≈ 258 tokens

  PAID $0.002 (x402, USDC on Base). Validate an email address: give {email} and get RFC-ish syntax validation, a LIVE MX-record (DNS) existence check, disposable/throwaway-domain detection (bundled blocklist), and a role-address flag (info@, admin@…). STATELESS and non-PII — the address is never stored and no SMTP mailbox is probed. Without payment returns the x402 challenge; pass x_payment to settle.

  Paramètres, retour & exemple (2)

  Paramètres

  • email · string · requis
    The email address to validate.
  • x_payment · string · optionnel
    x402 payment payload (base64) for this PAID validation. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.

  Exemple d'appel

  {"name": "validate_email", "arguments": {"email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• validate_iban≈ 250 tokens

  PAID $0.001 (x402, USDC on Base). Validate an IBAN: give {iban} and get ISO 13616 length + mod-97 checksum validation, the country, the human-formatted grouping, and the bank identifier (e.g. German Bankleitzahl, UK bank code + sort code) extracted from the BBAN where derivable. Pure-offline. Without payment returns the x402 challenge.

  Paramètres, retour & exemple (2)

  Paramètres

  • iban · string · requis
    The IBAN (spaces/dashes tolerated), e.g. DE89 3704 0044 0532 0130 00.
  • x_payment · string · optionnel
    x402 payment payload (base64) for this PAID validation. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.

  Exemple d'appel

  {"name": "validate_iban", "arguments": {"iban": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• validate_vat≈ 312 tokens

  PAID $0.003 (x402, USDC on Base). FLAGSHIP. Validate an EU/EEA VAT number: give {country_code, vat_number} and get a per-country format + checksum pre-check AND a LIVE lookup against the official VIES service — returning valid/registered plus the registered company name & address when VIES provides them (cached ~1h to shield the flaky VIES). Without payment returns the x402 challenge; pass x_payment to settle.

  Paramètres, retour & exemple (3)

  Paramètres

  • x_payment · string · optionnel
    x402 payment payload (base64) for this PAID validation. If supplied it is forwarded as the X-PAYMENT header to settle the call and return the real result instead of a 402 challenge. Omit to get the price challenge first.
  • vat_number · string · requis
    The VAT number without the country prefix (prefix is tolerated and stripped).
  • country_code · string · requis
    2-letter EU VAT country code (e.g. IE, DE, FR; GB/XI for Northern Ireland; GR accepted as EL).

  Exemple d'appel

  {"name": "validate_vat", "arguments": {"vat_number": "texte", "country_code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://valid.fabtally.com/mcp