← Back to search

MadTaco

madtaco-dev Scanned 14d ago

Validate tax IDs, IBANs, and Chilean indicators via MadTaco. Some free tools, no API key required.

MCP Registry ↗ npm
C
71.2 / 100

Versions

1.0.2latest
first seen Jul 22, 2026
1.1.4
first seen Jul 21, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 13

validate_tax_id
annotations: none low

Validate a tax ID format and checksum. Supports CL RUT, MX RFC, and more. Free — no API key required.

id string country string
validate_iban
annotations: none low

Validate an IBAN checksum and parse country and bank code. Free — no API key required.

iban string
lookup_instrument
annotations: none low

Map a ticker, ISIN, CUSIP, or other identifier to FIGI and instrument metadata via OpenFIGI. Free — no API key required.

id_type string currency string id_value string mic_code string exchange_code string
validate_email
annotations: none low

Validate an email address. mode "syntax" is free; mode "full" costs 0.005 credits (tier 2).

mode enum address string
validate_phone
annotations: none low

Validate a phone number. mode "format" is free; mode "full" costs 0.005 credits (tier 2).

mode enum number string
screen_sanctions
annotations: none low

Screen a name against OFAC SDN, EU, UK, and UN sanctions lists. Costs 0.10 credits (tier 2).

name string country string idempotency_key string
verify_company
annotations: none low

Verify a company against an official registry (GB only in v1). Costs 0.15 credits (tier 2).

name string country string idempotency_key string registration_number string
inspect_domain
annotations: none low

Inspect domain age, DNS posture, and lookalike risk. Costs 0.05 credits (tier 2).

domain string idempotency_key string
screen
annotations: none low

Run a composite trust screen across sanctions, registry, domain, email, and phone checks. Only completed checks are charged. Optionally long-polls when still running.

name string email string phone string checks array domain string country string max_credits number idempotency_key string registration_number string
propose_check
annotations: none low

Propose a new check capability MadTaco does not offer yet. Optionally pledge credits (held, not charged).

capability string pledge_credits number expected_monthly_volume number willing_to_pay_per_call number
create_account
annotations: none low

Create a MadTaco account (agent-native signup). A 6-digit verification code is emailed — no API key yet.

name string email string
verify_account
annotations: none low

Verify the emailed 6-digit code and receive an API key (tier registered).

code string account_id string
get_usage
annotations: none low

Get today usage totals, per-operation counts, credits spent, and balance. Optional period=7d|30d for daily breakdown.

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 39

low
Tool 'validate_tax_id' has no annotations annotation_checker · 100%
low
Tool 'validate_iban' has no annotations annotation_checker · 100%
low
Tool 'lookup_instrument' has no annotations annotation_checker · 100%
low
Tool 'validate_email' has no annotations annotation_checker · 100%
low
Tool 'validate_phone' has no annotations annotation_checker · 100%
low
Tool 'screen_sanctions' has no annotations annotation_checker · 100%
low
Tool 'verify_company' has no annotations annotation_checker · 100%
low
Tool 'inspect_domain' has no annotations annotation_checker · 100%
low
Tool 'screen' has no annotations annotation_checker · 100%
low
Tool 'propose_check' has no annotations annotation_checker · 100%
low
Tool 'create_account' has no annotations annotation_checker · 100%
low
Tool 'verify_account' has no annotations annotation_checker · 100%
low
Tool 'get_usage' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.1.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: validate_tax_id manifest_parser · 85%
info
Tool: validate_iban manifest_parser · 85%
info
Tool: lookup_instrument manifest_parser · 85%
info
Tool: validate_email manifest_parser · 85%
info
Tool: validate_phone manifest_parser · 85%
info
Tool: screen_sanctions manifest_parser · 85%
info
Tool: verify_company manifest_parser · 85%
info
Tool: inspect_domain manifest_parser · 85%
info
Tool: screen manifest_parser · 85%
info
Tool: propose_check manifest_parser · 85%
info
Tool: create_account manifest_parser · 85%
info
Tool: verify_account manifest_parser · 85%
info
Tool: get_usage manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 194 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%