🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

@qinisolabs/qiniso

Package Overview
Dependencies
Maintainers
1
Versions
7
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@qinisolabs/qiniso

The deterministic fact-verification layer for AI agents — verify identifiers, locale and more against authoritative ground truth.

latest
Source
npmnpm
Version
0.6.0
Version published
Maintainers
1
Created
Source
Qiniso

Qiniso

The deterministic fact-verification layer for AI agents.

Verified, trustworthy data tools for AI agents. "Qiniso" means "truth" in Zulu.

Website · npm · GitHub · MCP Registry

Agents confidently emit IBANs, phone numbers, domains, VAT numbers and crypto addresses that are subtly — and silently — wrong. Qiniso checks the structured facts an agent produces against checksums and curated authoritative data, so a bad value is caught instead of trusted.

On arbitrary identifiers, a frontier LLM validates them wrong ~91% of the time, cold and silently. Qiniso: 0%.

Install

npm i @qinisolabs/qiniso

Use as a library

Every check is a typed function — validate locally in one pass, no MCP required:

import { validateIban, validateVat, validatePhone } from "@qinisolabs/qiniso";

validateIban("GB82 WEST 1234 5698 7654 32");
// { valid: true, country: "United Kingdom", checkDigits: "82", ... }

validateVat("DE136695976");          // { valid: true, country: "Germany", ... }
validatePhone("020 7946 0123", "GB"); // { valid: true, e164: "+442079460123", ... }

Use as an MCP server (in Claude and other agents)

No install needed — add the hosted endpoint as a custom connector:

https://qiniso.qinisolabs.workers.dev/mcp

Or run it locally over stdio. Add this to your client's MCP config (e.g. claude_desktop_config.json):

{
  "mcpServers": {
    "qiniso": {
      "command": "npx",
      "args": ["-y", "-p", "@qinisolabs/qiniso", "qiniso-mcp"]
    }
  }
}

What it verifies — 56 tools across 8 domains

DomainChecks
IdentifiersIBAN, payment card (Luhn + brand), ISBN-13, VIN, GTIN/UPC/EAN barcodes (+ GS1 country)
Web / networkTLD & domain (IANA root zone), IP, UUID, URL, email
FinanceISIN, CUSIP, SEDOL, LEI, US ABA routing
CryptoEthereum (EIP-55), Bitcoin (Base58Check / Bech32) addresses
National & tax IDsBrazil CPF/CNPJ, South Africa ID, Spain DNI/NIE, India Aadhaar, Italy, Poland, Netherlands, Belgium, Nordics, Portugal, Turkey, China, Germany Steuer-IdNr, France NIR, Switzerland AHV, Mexico CURP, Croatia OIB, Romania CNP, Bulgaria EGN, Estonia, Czech/Slovak rodné číslo, EU/UK VAT
AcademicISBN-10, ISSN, ORCID
LocalePhone (global), date parsing, currency, holidays (~200 countries), UK VAT-by-date
AddressesUK/US address parsing

What it is not

  • Not a live-data provider — it verifies facts you give it; it does not return the current time, weather, or live FX.
  • Not a credential sink — it never asks for secrets or keys.
  • Not a registration check — it validates a VAT number's checksum, not whether it is live-registered (VIES); it confirms a TLD is real, not that a domain is registered.

Privacy

This tool runs locally on your machine and is built not to collect, store, or transmit your data — no analytics, no telemetry, no account. All reference data is bundled — no network calls, and nothing leaves your device. Full policy: https://qinisolabs.github.io/privacy.html.

License

Apache-2.0

Keywords

mcp

FAQs

Package last updated on 22 Jun 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts