@readystack/hmrc-fraud-prevention-header-lint

HMRC Fraud Prevention Header Lint for Making Tax Digital (VAT and Income Tax)

Finds the Gov-Client and Gov-Vendor header mistakes HMRC rejects, in your editor, offline, before you send the request.

Install

npx @readystack/hmrc-fraud-prevention-header-lint file

Node 18+. The same 34 rules as the VS Code extension, from a terminal or CI.

Free

• Check the file you have open, or just the lines you select, against all 34 HMRC fraud prevention header rules, offline, and get the exact spelling HMRC accepts for every problem found.
• --rules lists every rule

With a licence ($29 once)

• Scans every file in the workspace, exports a CSV, JSON or HTML report, prints machine-readable output so CI can fail the build, and auto-corrects the header names that have exactly one correct spelling.

@readystack/hmrc-fraud-prevention-header-lint --dir ./templates --report html --out report.html

HMRC charges a 200 pound penalty once a filer crosses the points threshold for late MTD quarterly updates, and HMRC's own header validator only grades a live request you have already sent.

Use from an AI agent (MCP)

Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:

{ "mcpServers": { "hmrc-fraud-prevention-header-lint": { "command": "npx", "args": ["-y", "@readystack/hmrc-fraud-prevention-header-lint", "--mcp"] } } }

Tools: check_text and check_file (free) · check_dir (licence). The agent gets every finding with the line number.

Use in CI

- name: HMRC Fraud Prevention Header Lint for Making Tax Digital (VAT and Income Tax)
  run: npx -y @readystack/hmrc-fraud-prevention-header-lint --dir . --ci

(container: docker run --rm -v "$PWD:/work" getreadystack/hmrc-fraud-prevention-header-lint --dir /work --ci)

The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set READYSTACK_LICENSE=<key> or run --license <key> once.

Get a licence