toll402 – EU & Nordic Data (x402)
io.toll402/toll402toll402.iostreamable-httpv1.0.0Scanned
Pay-per-call EU & Nordic data for AI agents: VAT/VIES, MiCA, ECB FX, holidays, DK power. x402.
18 tools: 3 do something that can't be undone, 12 change things and 3 only read.
- Reads private data · 0
- Reads text others write · 0
- Can send data out · 2
- No findings
Anlyon alternative
15 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
18 tools
Can't be undone 3Claude Code: ask
eu_working_daysWorking days in EU/EEA/Nordic countries: count working days between two dates (inclusive) and/or compute date + N working days, excluding weekends and national holidays.Can send data outNo findings
Why it is in this group
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it Working days in EU/EEA/Nordic countries: count working days between two dates (inclusive) and/or compute date + N working days, excluding weekends and national holidays. Price 0.005 USD per call via x402.
fx_dkkDanmarks Nationalbank official DKK exchange rates (DKK per 100 units) for ~30 currencies; optionally convert an amount to/from DKK.No findings
Why it is in this group
- The input carries an amount (input.amount) and a currency, so it moves money.
Description, as the server wrote it Danmarks Nationalbank official DKK exchange rates (DKK per 100 units) for ~30 currencies; optionally convert an amount to/from DKK. Price 0.005 USD per call via x402.
fx_ecbConvert an amount between any two of ~30 currencies using official ECB euro reference rates, for today or any date in the last 90 days (falls back to the previous ECB business day)…Can send data outNo findings
Why it is in this group
- The description's first verb is "convert": a word for a change.
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it Convert an amount between any two of ~30 currencies using official ECB euro reference rates, for today or any date in the last 90 days (falls back to the previous ECB business day). Price 0.005 USD per call via x402.
Changes things 12Claude Code: ask
dk_bank_daysDanish banking days: is a date a Danish banking day, why it is closed, the next banking day, and date + N banking days (payment deadlines).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Danish banking days: is a date a Danish banking day, why it is closed, the next banking day, and date + N banking days (payment deadlines). Price 0.005 USD per call via x402.
dk_co2CO2 intensity of Danish electricity (g CO2/kWh) for DK1/DK2: latest 5-minute value, last-hour average, and the forecast with the greenest upcoming hour.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it CO2 intensity of Danish electricity (g CO2/kWh) for DK1/DK2: latest 5-minute value, last-hour average, and the forecast with the greenest upcoming hour. Source: Energinet. Price 0.005 USD per call via x402.
dk_companyDanish company lookup by CVR number or name: legal name, address, status, industry, company type, employees.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Danish company lookup by CVR number or name: legal name, address, status, industry, company type, employees. Data from the Danish CVR register (via cvrapi.dk). Price 0.01 USD per call via x402.
dk_power_cheapest_windowCheapest contiguous window of N hours to run a load (EV charging, heat pump, batch job) on a given day in Denmark (DK1/DK2), based on day-ahead spot prices.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Cheapest contiguous window of N hours to run a load (EV charging, heat pump, batch job) on a given day in Denmark (DK1/DK2), based on day-ahead spot prices. Price 0.005 USD per call via x402.
dk_power_priceDanish day-ahead electricity spot prices per 15 minutes for DK1 (West) or DK2 (East) for a date, in DKK and EUR per MWh, with average, cheapest and most expensive quarter.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Danish day-ahead electricity spot prices per 15 minutes for DK1 (West) or DK2 (East) for a date, in DKK and EUR per MWh, with average, cheapest and most expensive quarter. Source: Energinet. Price 0.005 USD per call via x402.
dk_sea_levelLatest sea level (cm relative to DVR90) and water temperature at Danish ports/tide gauges by port name (e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Latest sea level (cm relative to DVR90) and water temperature at Danish ports/tide gauges by port name (e.g. Esbjerg, Aarhus, Skagen). Useful for port calls, draught and storm surge checks. Source: DMI. Price 0.005 USD per call via x402.
dk_weatherLatest observed weather in Denmark from the nearest DMI station to a lat/lon (or a station id): temperature, wind, gusts, pressure, precipitation, visibility.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Latest observed weather in Denmark from the nearest DMI station to a lat/lon (or a station id): temperature, wind, gusts, pressure, precipitation, visibility. Source: DMI Open Data. Price 0.005 USD per call via x402.
eu_holidaysNational public holidays for a year in EU/EEA/Nordic countries (plus CH, GB).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it National public holidays for a year in EU/EEA/Nordic countries (plus CH, GB). Denmark computed locally, others via Nager.Date. Price 0.005 USD per call via x402.
eu_sanctionsScreen a person or company name against the EU consolidated financial sanctions list (all aliases).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Screen a person or company name against the EU consolidated financial sanctions list (all aliases). Returns exact/partial matches with programme, EU reference and regulation link. Screening aid only; human review required. Price 0.02 USD per call via x402.
eu_vat_ratesCurrent VAT rates for EU member states: standard, reduced, super-reduced and parking rates with category notes.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Current VAT rates for EU member states: standard, reduced, super-reduced and parking rates with category notes. One country or all. Price 0.005 USD per call via x402.
mica_caspCheck whether a crypto company (exchange, broker, custodian) holds a MiCA CASP authorisation in the EU, its home state, regulator, services and passporting, and whether it is on ES…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check whether a crypto company (exchange, broker, custodian) holds a MiCA CASP authorisation in the EU, its home state, regulator, services and passporting, and whether it is on ESMA's non-compliant warning list. Price 0.01 USD per call via x402.
stablecoin_receiptAccounting voucher data for a stablecoin payment received by an EU/Danish business: value in DKK and EUR on the receipt date using ECB rates (assuming 1:1 peg), with tx reference a…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Accounting voucher data for a stablecoin payment received by an EU/Danish business: value in DKK and EUR on the receipt date using ECB rates (assuming 1:1 peg), with tx reference and booking note. Not tax advice. Price 0.01 USD per call via x402.
Only reads 3Show 3 read-only tools
dk_addressValidate and geocode a Danish address: normalised address, postcode, city, municipality and coordinates (OpenStreetMap data).No findings
Why it is in this group
- The description's first verb is "validate": a word for reading.
Description, as the server wrote it Validate and geocode a Danish address: normalised address, postcode, city, municipality and coordinates (OpenStreetMap data). Price 0.005 USD per call via x402.
eu_vat_checkValidate an EU VAT number live against the European Commission VIES service; returns validity, registered name and address where the member state discloses them.No findings
Why it is in this group
- The description's first verb is "validate": a word for reading.
Description, as the server wrote it Validate an EU VAT number live against the European Commission VIES service; returns validity, registered name and address where the member state discloses them. Price 0.01 USD per call via x402.
mica_token_statusMiCA status of a stablecoin/e-money token (e.g.No findings
Why it is in this group
- The name "mica_token_status" says "status": a word for reading.
Description, as the server wrote it MiCA status of a stablecoin/e-money token (e.g. USDC, EURC, RLUSD, USDT): is a MiCA e-money token white paper notified in ESMA's register, by which issuer, home state and regulator. Key for EU CASPs ahead of the ESMA remediation deadline (8 Jan 2027). Price 0.01 USD per call via x402.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write0
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out2
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http toll402 https://toll402.io/mcpclaude mcp add --transport http toll402 https://toll402.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__toll402__dk_address",
"mcp__toll402__eu_vat_check",
"mcp__toll402__mica_token_status"
],
"ask": [
"mcp__toll402__dk_bank_days",
"mcp__toll402__dk_power_price",
"mcp__toll402__dk_power_cheapest_window",
"mcp__toll402__dk_co2",
"mcp__toll402__eu_holidays",
"mcp__toll402__eu_working_days",
"mcp__toll402__fx_dkk",
"mcp__toll402__fx_ecb",
"mcp__toll402__stablecoin_receipt",
"mcp__toll402__dk_company",
"mcp__toll402__dk_weather",
"mcp__toll402__dk_sea_level",
"mcp__toll402__eu_vat_rates",
"mcp__toll402__eu_sanctions",
"mcp__toll402__mica_casp"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as toll402. Review it before you use it.
Capability tags behind 2 rules
- mcp__toll402__eu_working_days outbound
- mcp__toll402__fx_ecb outbound
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.toll402/toll402/verify?hash=94b476556195d393eddcf353427d2d0d3b86b08a3242e9930fb4ed3f1a78657f" | jq -e '.changed == false'Pinned hash 94b476556195, from Oct 29, 2026, 12:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.toll402/toll402/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.toll402/toll402)Source: MCP Registry · repository. Synced Oct 29, 2026, 12:18 UTC.