Skip to content

io.github.freshfos/dropcoin-validation

by freshfos · remote · no sign-in to list tools · v1.0.0 · published by GitHub user freshfos

EU compliance checks for AI agents: sanctions, company, VAT ID, IBAN, email. Pay per call.

Changes · 2
CompareRegistry entry

6 tools: 2 change things and 4 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http dropcoin-validation https://validation-api.dropcoin.workers.dev/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 2Claude Code: ask
  • screen_sanctionsScreen a person or company against the official EU, US (OFAC SDN) and UK (OFSI) sanctions lists.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Screen a person or company against the official EU, US (OFAC SDN) and UK (OFSI) sanctions lists. Fuzzy name matching with an auditable reason per hit — review every hit yourself; a clean result is not legal clearance and covers no PEP data. 15 credits, requires an API key.
  • verify_companyVerify a business partner in one call: EU VAT registration (VIES), LEI register (GLEIF), IBAN checksum and country consistency — one verdict (pass|fail|inconclusive) with an audita…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify a business partner in one call: EU VAT registration (VIES), LEI register (GLEIF), IBAN checksum and country consistency — one verdict (pass|fail|inconclusive) with an auditable check log. Provide at least one of name, vatId, lei. Does not include commercial-register existence checks. 150 credits, requires an API key.
Only reads 4Claude Code: allow
  • validate_emailValidate an email address: syntax, disposable-domain check, MX record via DNS-over-HTTPS.No findings

    Why it is in this group

    • The name "validate_email" says "validate": a word for reading.
    Description, as the server wrote it
    Validate an email address: syntax, disposable-domain check, MX record via DNS-over-HTTPS. Returns a deliverability verdict. 2 credits, requires an API key.
  • validate_ibanValidate an IBAN (ISO 13616 check digits) incl.No findings

    Why it is in this group

    • The name "validate_iban" says "validate": a word for reading.
    Description, as the server wrote it
    Validate an IBAN (ISO 13616 check digits) incl. SEPA membership. 2 credits, requires an API key.
  • validate_vatidValidate an EU VAT ID against the live VIES registry (format check first — an invalid format still costs the full price, it never reaches VIES but you got an answer).No findings

    Why it is in this group

    • The name "validate_vatid" says "validate": a word for reading.
    Description, as the server wrote it
    Validate an EU VAT ID against the live VIES registry (format check first — an invalid format still costs the full price, it never reaches VIES but you got an answer). 5 credits, requires an API key.
  • validate_vatid_formatFree EU VAT-ID FORMAT check (syntax only, no registry lookup), rate-limited per IP, no API key needed.No findings

    Why it is in this group

    • The name "validate_vatid_format" says "validate": a word for reading.
    Description, as the server wrote it
    Free EU VAT-ID FORMAT check (syntax only, no registry lookup), rate-limited per IP, no API key needed. For a live VIES registry check use the paid validate_vatid tool (5 credits).

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http dropcoin-validation https://validation-api.dropcoin.workers.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__dropcoin-validation__validate_vatid_format",
      "mcp__dropcoin-validation__validate_email",
      "mcp__dropcoin-validation__validate_vatid",
      "mcp__dropcoin-validation__validate_iban"
    ],
    "ask": [
      "mcp__dropcoin-validation__screen_sanctions",
      "mcp__dropcoin-validation__verify_company"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as dropcoin-validation. Review it before you use it.