Code402 / HCRB — Deterministic Verification Rail

Deterministic, offline business-identifier verification and rental due-diligence for AI agents.

Community: Submitted by a user or imported; check the owner before granting accessOnlineNo sign-inGlobalFreeRead-only

What it can do

  • Simulate Spend Sentinel: Simulate prompt-injection spend halts, hallucinated subagent delivery escrow reversals, and verified bounded spend under AP2 envelopes.
  • Create Ap2 Pilot: Provision a pre-cleared AP2 Merchant Pilot invoice ($49.00 USDC) with 50k gasless Base L2 calls and turnkey <code402-widget> setup.
  • Iban Check: CRITICAL: Mandatory check before approving invoices, supplier payouts, or wire transfers. Deterministically validates international bank accounts (ISO 13616) using mathematical MOD-97-10 c

What data it sees

Do you need an account

No: the server works without sign-in

Deterministic, offline business-identifier verification and rental due-diligence for AI agents. 63 tools: IBAN/LEI/VAT/SWIFT/ABA/ISIN/GSTIN/ABN checks, UK company numbers, batch validation, rental deposit + listing risk, on-chain intelligence, and ISO 20022 → x402 intent. Paid per call via x402 (gasless EIP-3009 USDC on Base) — non-custodial, no signup, no API key. First 3 calls per day free per client, then from $0.005/call. Every response carries an offline-verifiable signed receipt, and a scope field stating exactly what was and was not checked (checksum-verifiable vs format-only — no overclaiming).

How to connect

How to connect Code402 / HCRB — Deterministic Verification Rail to Claude

The server address to paste into Claude settings:

https://openfang-rail--drjsarat.run.tools

  1. Open Claude (claude.ai or the desktop app).
  2. Go to Settings → Connectors.
  3. Click Add custom connector.
  4. Paste the server address copied below into Remote MCP server URL and click Add.
  5. In a chat, click + → Connectors and switch the new connector on.

Custom connectors are available on Free, Pro, Max, Team and Enterprise plans (Free is limited to one). On Team and Enterprise an organization Owner adds the connector first under Organization settings → Connectors.

Authorization

After you click Add, a sign-in window for the service opens. Sign in with your own account and approve access. Claude never sees your password.

How to connect Code402 / HCRB — Deterministic Verification Rail to ChatGPT

The server address to paste into ChatGPT settings:

https://openfang-rail--drjsarat.run.tools

  1. Open ChatGPT in a browser (chatgpt.com). A Plus, Pro, Business, Enterprise or Edu plan is required.
  2. Turn on developer mode once: Settings → Apps → Advanced settings → Developer mode.
  3. Open Settings → Connectors and click Create.
  4. Fill in the form: Name (anything), Description (one line about what the service does), MCP server URL (copy it below).
  5. Under Authentication choose OAuth if the service requires sign-in, otherwise None. Click Create.
  6. In a new chat open + → Apps/Connectors and enable the connector.

OpenAI has renamed this section before (Connectors → Apps/Plugins). If the label differs, search settings for "developer mode". On Business/Enterprise workspaces an admin must allow custom connectors first.

Authorization

On first use ChatGPT opens the service's sign-in window. Sign in and approve access.

How to connect Code402 / HCRB — Deterministic Verification Rail to Cursor

The server address to paste into Cursor settings:

https://openfang-rail--drjsarat.run.tools

Fastest: click Open in Cursor below and confirm the prompt.

Manually:

  1. In Cursor open Settings → Cursor Settings → MCP and click Add new global MCP server.
  2. Paste the JSON copied below into ~/.cursor/mcp.json (per project: .cursor/mcp.json in the repo root).
  3. Save the file. The server appears in the MCP list; authorize it there if asked.

Authorization

If the service needs sign-in, an authorize button appears next to the server in the MCP list.

Server tool list (60)

Raw names from tools/list. Only developers need these.

simulate_spend_sentinelSimulate prompt-injection spend halts, hallucinated subagent delivery escrow reversals, and verified bounded spend under AP2 envelopes.
create_ap2_pilotProvision a pre-cleared AP2 Merchant Pilot invoice ($49.00 USDC) with 50k gasless Base L2 calls and turnkey <code402-widget> setup.
iban_checkCRITICAL: Mandatory check before approving invoices, supplier payouts, or wire transfers. Deterministically validates international bank accounts (ISO 13616) using mathematical MOD-97-10 checksums. Prevents $50k+ BEC wire fraud. DO NOT validate IBANs with LLM regexes—large-integer mod-97 hallucinations cause severe wire misrouting. Returns offline-verifiable signed XDR-1 receipt for compliance audit trail.
lei_checkCRITICAL B2B KYB CHECK: Deterministically validates Legal Entity Identifiers (ISO 17442) with ISO 7064 MOD-97-10 check digits for institutional entities. Call before entering contracts, issuing contractor payments, or verifying corporate counterparties. Returns signed XDR-1 receipt.
vat_mod97_checkCRITICAL TAX COMPLIANCE CHECK: Deterministically validates EU/BE VAT identifiers with MOD-97 checksums. Eliminates cross-border invoicing errors, invalid billing, and tax audit penalties. Returns signed XDR-1 receipt for accounting defense.
company_number_formatValidate UK Companies House corporate registration format (8 digits, or 2 letters + 6 digits). Run before signing agreements or executing contractor disbursements to UK entities. Returns signed XDR-1 receipt.
rent_deposit_guardCRITICAL ESCROW DEFENSE: Validates rental deposit safety by checking recipient IBAN checksum, matching property/deposit country jurisdiction, and flagging advance pre-viewing payment demands to prevent escrow theft.
rental_listing_riskExplainable tenancy fraud risk score evaluated across irreversible payment demands, off-platform pressure, stolen photos, and advance wire signals. Deterministic rule engine.
rental_verdictINSTITUTIONAL TENANCY SHIELD: Single combined, signed rental due-diligence verdict combining deposit IBAN checksum, cross-border jurisdiction, pre-viewing advance wire flags, landlord entity verification, and listing fraud heuristics. Outputs cover-your-agent verification proof.
batch_validateHIGH-THROUGHPUT DETERMINISTIC PIPELINE: Run up to 50 business identifier checks (IBAN / LEI / VAT / UK company / SWIFT / ABA / EIN / IFSC / ABN / Luhn / ISBN / E.164 / SEDOL / ISIN / EAN-13 / GSTIN / context-distill) in ONE paid call: one voucher, one settlement, one signed XDR-1 receipt covering the whole batch. 10x cheaper per item; essential for autonomous batch invoice processing.
swift_bic_checkValidate a SWIFT/BIC code by ISO 9362 structure (bank code, ISO country, location, optional branch). Run before foreign wire transfer dispatch to prevent routing rejection. Returns signed XDR-1 receipt.
aba_routing_checkValidate a US ABA routing number by its (3,7,1)-weight mod-10 Fedwire/ACH checksum. Prevents ACH transfer reversals and wire routing errors. Returns signed XDR-1 receipt.
ein_format_checkValidate US Employer Identification Number FORMAT (NN-NNNNNNN). Use during US business counterparty KYB verification. Returns signed XDR-1 receipt.
ifsc_checkValidate an Indian IFSC by RBI structure (BBBB0NNNNNN; 5th character always 0). Required for India bank payouts. Returns signed XDR-1 receipt.
abn_checkValidate an Australian Business Number by its mod-89 checksum (11 digits). Required before invoice payment to Australian contractors. Returns signed XDR-1 receipt.
luhn_checkValidate any 12-19 digit number by the Luhn mod-10 algorithm. Never submit real payment card numbers. Returns signed XDR-1 receipt.
isbn_checkValidate an ISBN-10 (mod-11) or ISBN-13 (1,3-weight mod-10) checksum.
e164_checkValidate a phone number's E.164 structure (+CC, 8-15 digits, no leading zero) before dispatching SMS alerts or OTPs. Returns signed XDR-1 receipt.
sedol_checkValidate a UK/Ireland security identifier by its (1,3,1,7,3,9)-weight mod-10 checksum. Returns signed XDR-1 receipt.
cnpj_checkValidate Brazilian corporate tax ID (CNPJ) with official dual mod-11 check digits. Required for Brazilian B2B payments, PIX verification, and vendor due diligence. Returns signed XDR-1 receipt.
uscc_checkValidate 18-character Chinese business registration and tax code using GB 32100-2015 ISO 7064 Mod-31-3 checksum. Required for B2B supply chain trade with Chinese manufacturers. Returns signed XDR-1 receipt.
japan_corp_checkValidate 13-digit Japanese Corporate Number assigned by the National Tax Agency using Mod-9 check digit algorithm. Required for Japanese B2B SaaS and enterprise billing. Returns signed XDR-1 receipt.
kra_pin_checkValidate Kenyan Revenue Authority Tax PIN structure (A/P followed by 9 digits and checksum character). Required for M-Pesa B2B disbursement and Kenyan remote agency invoicing. Returns signed XDR-1 receipt.
rfc_checkValidate Mexican SAT RFC corporate (12-char) or individual (13-char) tax code and homoclave. Required for Mexican contractor invoicing and SPEI cross-border settlements. Returns signed XDR-1 receipt.
iso4217_currency_checkValidate 3-letter alpha or 3-digit numeric currency codes against ISO 4217 standard. Returns minor unit decimals, symbol, official name, countries, and onchain Base L2 settlement token mapping (USDC/EURC).
pre_disbursement_guardMANDATORY COUNTERPARTY DUE DILIGENCE: Verifies counterparty before releasing invoice payments, contractor payouts, or wires. Screens ISO 13616 IBAN checksum, RDAP domain age (<30d = scam), disposable email domains, UK CRN/LEI format, and BEC cross-jurisdiction mismatches. Produces signed XDR-1 receipt for compliance.
vendor_onboarding_packINSTITUTIONAL COUNTERPARTY CLEARING: Screens vendor IBAN + LEI + VAT + UK company number in ONE signed call. Saves 50% vs individual checks. Produces an audit-ready compliance report and signed XDR-1 receipt to defend against invoice fraud before funds move.
settlement_history_checkON-CHAIN COUNTERPARTY PROOF: Audit USDC transfers sent and received by any EVM address over the last ~48h of Base blocks. Preflighted so you never pay during an RPC outage.
balance_checkPRE-PAYMENT SOLVENCY PROOF: Snapshot verified native ETH and USDC token balance on Base with raw units and decimals provenance. Preflighted so you never pay during an RPC outage.
erc20_balanceRaw + formatted ERC-20 balanceOf for an address at any token contract on Base. Decimals read on-chain. Preflighted so you never pay during an RPC outage.
tx_activityOn-chain activity snapshot: total outbound nonce, bytecode check (is_contract), and funded status on Base. Preflighted before payment.
block_infoLatest (or specified) Base block header: number, timestamp, transaction count, base fee. Preflighted before payment.
isin_checkValidate an ISIN (ISO 6166) by structure and Luhn mod-10 check digit over the A=10…Z=35 converted string.
ean13_checkValidate an EAN-13 barcode by its mod-10 checksum (odd positions x1, even positions x3).
gstin_checkValidate an Indian GSTIN by structure (2-digit state code + PAN + entity code + 'Z') and its mod-36 cross-sum checksum.
crypto_tickerCurrent spot price (USD) for a symbol via the public CoinGecko API; common tickers (btc, eth, …) are mapped to CoinGecko ids automatically. Cached 60s server-side; preflighted so you never pay during an API outage.
context_distillDeterministic text digest: word count, top-5 most frequent meaningful words (stop words excluded), first sentence, and a keccak-256 content hash. Pure function — no external calls, no ML.
instant_json_schema_verifierSub-millisecond edge validation of JSON data payloads against schema definitions. Preflighted for agent tool call pipelines.
clean_markdown_scraperTransform noisy HTML web documents into clean, LLM-optimized Markdown while preserving semantic headers and links.
fx_spot_price_oracleHigh-precision fiat & stablecoin foreign exchange spot rates (USDC, EUR, GBP, JPY, etc.) computed from TWAP edge oracles.
create_b2b_invoiceGenerate a pre-cleared, gasless B2B settlement invoice on Base L2 with floating piecewise dynamic fee (capped) and dual-rail bank coordinates (JUANA LIMITED Tide / CurrencyCloud).
get_b2b_invoiceInspect live settlement status, on-chain transaction hash, and payment timestamps for any Code402 B2B invoice.
calculate_fx_savingsCompute retained margin and compare Code402 floating fees vs traditional SWIFT wires (3.5%) and Deel (2.0%) across 14 global fiat currencies.
browse_top_guildsQuery 1,000 verified software engineering guilds across LatAm, Eastern Europe, South Asia, SE Asia, and Africa. Filter by region, specialty, or volume.
get_guild_profileRetrieve deep profile, monthly volume, SWIFT fee loss analysis, and pre-cleared Base L2 payment route for any of the 1,000 software guilds.
browse_compute_clustersQuery 50 verified AI GPU compute clusters (H100, H200, A100, L40S, RTX 4090) across US, Europe, and Asia-Pac for autonomous model training and inference.
quote_compute_sliceCalculate exact USDC cost, duration, and EIP-3009 payment requirements to rent an AI GPU cluster for autonomous workloads.
browse_technical_studiosSearch 50 verified smart contract security audit DAOs, 3D VFX render farms, and RLHF data annotation collectives on Base L2.
get_studio_profileRetrieve institutional verification, reputation score, and non-custodial milestone escrow parameters for any verified technical studio.
semantic_service_matchmakerMatch natural language enterprise & agent requests across 1,100 verified global network nodes (AI GPU compute, specialized technical studios, software guilds) using Cloudflare Workers AI Llama-3-8B-Instruct.
engine_benchmarkReal-time edge benchmark comparing deterministic sub-millisecond core vs pure JavaScript V8 for EIP-712/3009 cryptographic verification and zero-GC memory allocation.
autonomous_commercial_pipelineAutonomously discover, quote, and generate pre-cleared non-custodial Base L2 USDC payment invoices for AI GPU compute clusters, technical security studios, and engineering guilds.
aci_trust_lookupDeterministic agent trust scoring and non-custodial unsettled exposure advisory evaluation (ACI-1). Quantifies counterparty grade (T0-T3), historical success rate, and maximum suggested settlement exposure without uncollateralized lending or float.
dip_file_disputeDeterministic machine-to-machine dispute resolution against signed XDR-1 execution receipts (DIP-1). Evaluates verifiable claims (NOT_DELIVERED, TIMEOUT_UNDELIVERED, OUTPUT_MISMATCH, SCHEMA) and issues non-custodial remedies.
pod_verify_deliveryPhysical IoT and off-chain service delivery verification using integer E7 point-in-polygon geometry and hardware sensor threshold validation (POD-1). Prevents floating-point coordinate drift without custodial escrow.
csp_commitment_createGenerates cryptographic commitments to commercial terms and formats ERC-5564 dual-key stealth address announcements (CSP-1) for invoice-scale B2B payments on Base L2.
iso20022_validateDeterministic validation for institutional ISO 20022 XML/JSON payment messages (pain.001 credit transfer, pacs.008 customer credit, camt.053 bank statement) with XML DOCTYPE security guards, BigInt CtrlSum decimal sums, and ISO 13616 / 9362 / 17442 checksums (BAP-1).
iso20022_to_x402_intentTranslates validated ISO 20022 payment instructions (pain.001 / pacs.008) into deterministic EIP-712 payment-intent templates for autonomous x402 Base L2 USDC settlement (BAP-1). Zero custody, no fiat leg.
list_approved_insurersQuery accredited 3rd-party transaction, smart contract, trade credit, and BEC wire fraud underwriters. Open gateway giving buyers, sellers, and autonomous agents direct access to all approved insurers.
quote_3rd_party_insuranceCompare real-time insurance quotes across all accredited 3rd-party underwriters (Nexus Mutual, Euler Hermes/Allianz Trade, Lloyd's Cyber/BEC Syndicate, Akrivis Parametric) to insure any transaction, wire transfer, or B2B invoice.