openfang-rail

Deterministic banking, LEI, VAT, SWIFT & compliance checks via MCP with signed XDR-1 receipts.

CommunityOnlineNo sign-inGlobalFreeRead-only

What it can do

    What data it sees

    Do you need an account

    No: the server works without sign-in

    Deterministic banking, LEI, VAT, SWIFT & compliance checks via MCP with signed XDR-1 receipts.

    How to connect

    How to connect openfang-rail to Claude

    The server address to paste into Claude settings:

    https://hcrb.in/mcp

    1. Open Claude (claude.ai or the desktop app).
    2. Go to Settings → Connectors.
    3. Click Add custom connector.
    4. Paste the server address copied below into Remote MCP server URL and click Add.
    5. In a chat, click + → Connectors and switch the new connector on.

    Custom connectors are available on Free, Pro, Max, Team and Enterprise plans (Free is limited to one). On Team and Enterprise an organization Owner adds the connector first under Organization settings → Connectors.

    Authorization

    After you click Add, a sign-in window for the service opens. Sign in with your own account and approve access. Claude never sees your password.

    How to connect openfang-rail to ChatGPT

    The server address to paste into ChatGPT settings:

    https://hcrb.in/mcp

    1. Open ChatGPT in a browser (chatgpt.com). A Plus, Pro, Business, Enterprise or Edu plan is required.
    2. Turn on developer mode once: Settings → Apps → Advanced settings → Developer mode.
    3. Open Settings → Connectors and click Create.
    4. Fill in the form: Name (anything), Description (one line about what the service does), MCP server URL (copy it below).
    5. Under Authentication choose OAuth if the service requires sign-in, otherwise None. Click Create.
    6. In a new chat open + → Apps/Connectors and enable the connector.

    OpenAI has renamed this section before (Connectors → Apps/Plugins). If the label differs, search settings for "developer mode". On Business/Enterprise workspaces an admin must allow custom connectors first.

    Authorization

    On first use ChatGPT opens the service's sign-in window. Sign in and approve access.

    How to connect openfang-rail to Cursor

    The server address to paste into Cursor settings:

    https://hcrb.in/mcp

    Fastest: click Open in Cursor below and confirm the prompt.

    Manually:

    1. In Cursor open Settings → Cursor Settings → MCP and click Add new global MCP server.
    2. Paste the JSON copied below into ~/.cursor/mcp.json (per project: .cursor/mcp.json in the repo root).
    3. Save the file. The server appears in the MCP list; authorize it there if asked.

    Authorization

    If the service needs sign-in, an authorize button appears next to the server in the MCP list.

    Server tool list (63)

    Raw names from tools/list. Only developers need these.

    receipt_verifyVerifies a signed XDR-1 receipt from ANY x402 service: recomputes the canonical digest and recovers the signer, then compares it to the declared signer. Free forever — no account, no quota, no storage (stateless). A valid receipt proves the signer signed that tool call at that timestamp; it does NOT prove funds moved or any business claim.
    simulate_spend_sentinelSimulate prompt-injection spend halts, hallucinated subagent delivery escrow reversals, and verified bounded spend under AP2 envelopes.
    create_ap2_pilotProvision a pre-cleared AP2 Merchant Pilot invoice ($49.00 USDC) with 50k gasless Base L2 calls and turnkey <code402-widget> setup.
    iban_checkDeterministically validates international bank accounts (ISO 13616) using MOD-97-10 checksums: structure and checksum only. Catches mistyped or malformed IBANs before payout; a valid checksum does NOT establish account ownership, beneficiary identity, or absence of fraud. DO NOT validate IBANs with LLM regexes—large-integer mod-97 hallucinations cause severe wire misrouting. Returns offline-verifiable signed XDR-1 receipt.
    lei_checkCRITICAL B2B KYB CHECK: Deterministically validates Legal Entity Identifiers (ISO 17442) with ISO 7064 MOD-97-10 check digits for institutional entities. Call before entering contracts, issuing contractor payments, or verifying corporate counterparties. Returns signed XDR-1 receipt.
    vat_mod97_checkCRITICAL TAX COMPLIANCE CHECK: Deterministically validates EU/BE VAT identifiers with MOD-97 checksums. Eliminates cross-border invoicing errors, invalid billing, and tax audit penalties. Returns signed XDR-1 receipt for accounting defense.
    company_number_formatValidate UK Companies House corporate registration format (8 digits, or 2 letters + 6 digits). Run before signing agreements or executing contractor disbursements to UK entities. Returns signed XDR-1 receipt.
    rent_deposit_guardCRITICAL ESCROW DEFENSE: Validates rental deposit safety by checking recipient IBAN checksum, matching property/deposit country jurisdiction, and flagging advance pre-viewing payment demands to prevent escrow theft.
    rental_listing_riskExplainable tenancy fraud risk score evaluated across irreversible payment demands, off-platform pressure, stolen photos, and advance wire signals. Deterministic rule engine.
    rental_verdictINSTITUTIONAL TENANCY SHIELD: Single combined, signed rental due-diligence verdict combining deposit IBAN checksum, cross-border jurisdiction, pre-viewing advance wire flags, landlord entity verification, and listing fraud heuristics. Outputs cover-your-agent verification proof.
    batch_validateHIGH-THROUGHPUT DETERMINISTIC PIPELINE: Run up to 50 business identifier checks (IBAN / LEI / VAT / UK company / SWIFT / ABA / EIN / IFSC / ABN / Luhn / ISBN / E.164 / SEDOL / ISIN / EAN-13 / GSTIN / context-distill) in ONE paid call: one voucher, one settlement, one signed XDR-1 receipt covering the whole batch. 10x cheaper per item; essential for autonomous batch invoice processing.
    swift_bic_checkValidate a SWIFT/BIC code by ISO 9362 structure (bank code, ISO country, location, optional branch). Run before foreign wire transfer dispatch to prevent routing rejection. Returns signed XDR-1 receipt.
    aba_routing_checkValidate a US ABA routing number by its (3,7,1)-weight mod-10 Fedwire/ACH checksum. Catches mistyped or invalid routing numbers before payment; does NOT prevent transfer reversals or establish the recipient. Returns signed XDR-1 receipt.
    ein_format_checkValidate US Employer Identification Number FORMAT (NN-NNNNNNN). Use during US business counterparty KYB verification. Returns signed XDR-1 receipt.
    ifsc_checkValidate an Indian IFSC by RBI structure (BBBB0NNNNNN; 5th character always 0). Required for India bank payouts. Returns signed XDR-1 receipt.
    abn_checkValidate an Australian Business Number by its mod-89 checksum (11 digits). Required before invoice payment to Australian contractors. Returns signed XDR-1 receipt.
    luhn_checkValidate any 12-19 digit number by the Luhn mod-10 algorithm. Never submit real payment card numbers. Returns signed XDR-1 receipt.
    isbn_checkValidate an ISBN-10 (mod-11) or ISBN-13 (1,3-weight mod-10) checksum.
    e164_checkValidate a phone number's E.164 structure (+CC, 8-15 digits, no leading zero) before dispatching SMS alerts or OTPs. Returns signed XDR-1 receipt.
    sedol_checkValidate a UK/Ireland security identifier by its (1,3,1,7,3,9)-weight mod-10 checksum. Returns signed XDR-1 receipt.
    cnpj_checkValidate Brazilian corporate tax ID (CNPJ) with official dual mod-11 check digits. Required for Brazilian B2B payments, PIX verification, and vendor due diligence. Returns signed XDR-1 receipt.
    uscc_checkValidate 18-character Chinese business registration and tax code using GB 32100-2015 ISO 7064 Mod-31-3 checksum. Required for B2B supply chain trade with Chinese manufacturers. Returns signed XDR-1 receipt.
    japan_corp_checkValidate 13-digit Japanese Corporate Number assigned by the National Tax Agency using Mod-9 check digit algorithm. Required for Japanese B2B SaaS and enterprise billing. Returns signed XDR-1 receipt.
    kra_pin_checkValidate Kenyan Revenue Authority Tax PIN structure (A/P followed by 9 digits and checksum character). Required for M-Pesa B2B disbursement and Kenyan remote agency invoicing. Returns signed XDR-1 receipt.
    rfc_checkValidate Mexican SAT RFC corporate (12-char) or individual (13-char) tax code and homoclave. Required for Mexican contractor invoicing and SPEI cross-border settlements. Returns signed XDR-1 receipt.
    iso4217_currency_checkValidate 3-letter alpha or 3-digit numeric currency codes against ISO 4217 standard. Returns minor unit decimals, symbol, official name, countries, and onchain Base L2 settlement token mapping (USDC/EURC).
    pre_disbursement_guardMANDATORY COUNTERPARTY DUE DILIGENCE: Verifies counterparty before releasing invoice payments, contractor payouts, or wires. Screens ISO 13616 IBAN checksum, RDAP domain age (<30d = scam), disposable email domains, UK CRN/LEI format, and BEC cross-jurisdiction mismatches. Produces signed XDR-1 receipt for compliance.
    vendor_onboarding_packINSTITUTIONAL COUNTERPARTY CLEARING: Screens vendor IBAN + LEI + VAT + UK company number in ONE signed call. Saves 50% vs individual checks. Produces an audit-ready compliance report and signed XDR-1 receipt to defend against invoice fraud before funds move.
    india_supplier_checkOne call, one receipt: GSTIN + PAN + UPI VPA + IFSC for an Indian counterparty. Four deterministic structural checks, each stating its own scope. Built for cross-border procurement where the buyer is an agent that cannot open an INR account.
    china_supplier_checkOne call, one receipt: USCC + settlement IBAN + SWIFT/BIC for a Chinese counterparty. Deterministic structure and checksum validation with explicit scope per identifier.
    japan_supplier_checkOne call, one receipt: 13-digit Corporate Number + settlement IBAN for a Japanese counterparty. Deterministic check digits, explicit scope.
    latam_supplier_checkOne call, one receipt: Brazilian CNPJ + Mexican RFC + settlement IBAN. Deterministic checks for the two largest LatAm corridors in one paid call.
    gulf_supplier_checkOne call, one receipt: UAE TRN + settlement IBAN + SWIFT/BIC. Deterministic structure validation for Gulf trade corridors, scope stated per identifier.
    africa_supplier_checkOne call, one receipt: Kenya KRA PIN + settlement IBAN + SWIFT/BIC. Deterministic structural checks for East African trade corridors.
    settlement_history_checkON-CHAIN COUNTERPARTY PROOF: Audit USDC transfers sent and received by any EVM address over the last ~48h of Base blocks. Preflighted so you never pay during an RPC outage.
    balance_checkPRE-PAYMENT SOLVENCY PROOF: Snapshot verified native ETH and USDC token balance on Base with raw units and decimals provenance. Preflighted so you never pay during an RPC outage.
    erc20_balanceRaw + formatted ERC-20 balanceOf for an address at any token contract on Base. Decimals read on-chain. Preflighted so you never pay during an RPC outage.
    tx_activityOn-chain activity snapshot: total outbound nonce, bytecode check (is_contract), and funded status on Base. Preflighted before payment.
    block_infoLatest (or specified) Base block header: number, timestamp, transaction count, base fee. Preflighted before payment.
    isin_checkValidate an ISIN (ISO 6166) by structure and Luhn mod-10 check digit over the A=10…Z=35 converted string.
    ean13_checkValidate an EAN-13 barcode by its mod-10 checksum (odd positions x1, even positions x3).
    gstin_checkValidate an Indian GSTIN by structure (2-digit state code + PAN + entity code + 'Z') and its mod-36 cross-sum checksum.
    crypto_tickerCurrent spot price (USD) for a symbol via the public CoinGecko API; common tickers (btc, eth, …) are mapped to CoinGecko ids automatically. Cached 60s server-side; preflighted so you never pay during an API outage.
    context_distillDeterministic text digest: word count, top-5 most frequent meaningful words (stop words excluded), first sentence, and a keccak-256 content hash. Pure function — no external calls, no ML.
    instant_json_schema_verifierValidate JSON data payloads against schema definitions. Preflighted for agent tool call pipelines.
    clean_markdown_scraperTransform noisy HTML web documents into clean, LLM-optimized Markdown while preserving semantic headers and links.
    fx_spot_price_oracleHigh-precision fiat & stablecoin foreign exchange spot rates (USDC, EUR, GBP, JPY, etc.) computed from TWAP edge oracles.
    create_b2b_invoiceGenerate a pre-cleared, gasless B2B settlement invoice on Base L2 with floating piecewise dynamic fee (capped) and dual-rail bank coordinates (JUANA LIMITED Tide / CurrencyCloud).
    get_b2b_invoiceInspect live settlement status, on-chain transaction hash, and payment timestamps for any Code402 B2B invoice.
    calculate_fx_savingsCompute retained margin and compare Code402 floating fees vs traditional SWIFT wires (3.5%) and Deel (2.0%) across 14 global fiat currencies.
    aci_trust_lookupDeterministic agent trust scoring and non-custodial unsettled exposure advisory evaluation (ACI-1). Quantifies counterparty grade (T0-T3), historical success rate, and maximum suggested settlement exposure without uncollateralized lending or float.
    dip_file_disputeDeterministic machine-to-machine dispute resolution against signed XDR-1 execution receipts (DIP-1). Evaluates verifiable claims (NOT_DELIVERED, TIMEOUT_UNDELIVERED, OUTPUT_MISMATCH, SCHEMA) and issues non-custodial remedies.
    pod_verify_deliveryPhysical IoT and off-chain service delivery verification using integer E7 point-in-polygon geometry and hardware sensor threshold validation (POD-1). Deterministic integer arithmetic avoids floating-point coordinate drift; verification only, no custody or escrow.
    csp_commitment_createGenerates cryptographic commitments to commercial terms and formats ERC-5564 dual-key stealth address announcements (CSP-1) for invoice-scale B2B payments on Base L2.
    iso20022_validateDeterministic validation for institutional ISO 20022 XML/JSON payment messages (pain.001 credit transfer, pacs.008 customer credit, camt.053 bank statement) with XML DOCTYPE security guards, BigInt CtrlSum decimal sums, and ISO 13616 / 9362 / 17442 checksums (BAP-1).
    iso20022_to_x402_intentTranslates validated ISO 20022 payment instructions (pain.001 / pacs.008) into deterministic EIP-712 payment-intent templates for autonomous x402 Base L2 USDC settlement (BAP-1). Zero custody, no fiat leg.
    list_approved_insurersList underwriters in the open insurance referral directory. The directory ships EMPTY: an underwriter appears only after it self-registers via /api/insurance/register, and self-registration is not vetting — buyers must perform their own due diligence on any listed counterparty.
    quote_3rd_party_insuranceCompare insurance quotes from underwriters registered in the open referral directory (coverage for transaction, smart-contract, trade-credit, and BEC wire-fraud risk). Returns zero quotes until an underwriter has self-registered; this gateway never underwrites risk itself.
    bind_insurance_policyBind an insurance policy from a REGISTERED directory underwriter to a specific transaction, payment, or B2B invoice, generating an offline-verifiable POL-1 certificate. Bilateral non-custodial agreement with the named underwriter — the gateway neither underwrites nor accredits anyone.
    upi_vpa_checkDeterministic validation of Indian UPI Virtual Payment Address (VPA / handle) against NPCI guidelines and accredited PSP handle registry (okhdfcbank, okaxis, paytm, ybl, etc.).
    pan_format_checkDeterministic validation of Indian Permanent Account Number (PAN) issued by CBDT / Income Tax Department with 4th-character entity type classification (Individual, Company, Firm, Trust, HUF).
    uae_trn_checkDeterministic validation of UAE 15-digit Tax Registration Number (TRN) issued by the Federal Tax Authority (FTA) for VAT purposes.
    ofac_sdn_checkDeterministic screen of EVM addresses and jurisdictions against a curated local blocklist of sanctioned addresses and prohibited jurisdictions. Address- and jurisdiction-level only — this is NOT name-based screening and NOT a complete OFAC SDN check. Absence of a match is not a sanctions clearance; use as one informational input alongside your own compliance process.