
Security News
White House Authorizes Private Companies to Conduct Offensive Cyber Operations
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.
@toolstop/check-digits
Advanced tools
MCP server that catches mistyped bank accounts, payment cards, barcodes, VINs and other structured identifiers before a bad one causes a failed payment, a rejected claim or a corrupted record.
An MCP server that validates check digits for structured identifiers.
Assistants are bad at modular arithmetic and good at sounding confident about it. This server does the arithmetic exactly, so a wrong IBAN or a mistyped VIN gets caught instead of confirmed.
Supported: IBAN, LEI, ISBN-10, ISBN-13, GTIN/UPC/EAN, VIN, NPI, ISIN, ABA routing numbers, and payment cards.
Remote. No install, no account:
{
"mcpServers": {
"check-digits": {
"type": "url",
"url": "https://check-digits.toolstop.dev"
}
}
}
Local, over stdio:
{
"mcpServers": {
"check-digits": {
"command": "npx",
"args": ["-y", "@toolstop/check-digits"]
}
}
}
| Tool | Does |
|---|---|
validate_identifier | Verify one identifier against a named format. Returns whether the checksum passes and, when it fails, why. |
identify_format | Given a bare number, report every supported format whose check digit it satisfies. |
compute_luhn_digit | Given digits without their check digit, return the digit that makes them Luhn-valid. |
All three are read-only and carry complete input and output schemas. Spaces and dashes in input are ignored.
What a pass means. A check digit is arithmetic. A valid IBAN is not a real bank account, a valid card number is not a live card, and a valid ISBN is not a book that was ever printed. These tools tell you an identifier is internally consistent, which is what catches transposed digits and truncated copies. They cannot tell you the thing it names exists.
Identifiers you submit are never recorded. Telemetry captures the kind of
identifier checked and whether it passed, never the value. That boundary is
enforced by a test rather than a promise: see
packages/_shared/transport.test.mjs in the
repo.
Running over stdio, nothing leaves your machine at all.
A passing check digit means the identifier is well-formed, not that it exists, is active, or belongs to anyone in particular. A valid IBAN checksum does not mean the account is real.
MIT
FAQs
MCP server that catches mistyped barcodes, ISBNs, VINs and other public structured identifiers before a bad one causes a rejected listing, a bounced claim or a corrupted record.
The npm package @toolstop/check-digits receives a total of 665 weekly downloads. As such, @toolstop/check-digits popularity was classified as not popular.
We found that @toolstop/check-digits demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.