Sign In

@toolstop/check-digits

Package Overview
Dependencies
Maintainers
1
Versions
4
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@toolstop/check-digits

MCP server that catches mistyped bank accounts, payment cards, barcodes, VINs and other structured identifiers before a bad one causes a failed payment, a rejected claim or a corrupted record.

Source
npmnpm
Version
0.1.1
Version published
Weekly downloads
665
Maintainers
1
Weekly downloads
 
Created
Source

mcp-check-digits

An MCP server that validates check digits for structured identifiers.

Assistants are bad at modular arithmetic and good at sounding confident about it. This server does the arithmetic exactly, so a wrong IBAN or a mistyped VIN gets caught instead of confirmed.

Supported: IBAN, LEI, ISBN-10, ISBN-13, GTIN/UPC/EAN, VIN, NPI, ISIN, ABA routing numbers, and payment cards.

Use it

Remote. No install, no account:

{
  "mcpServers": {
    "check-digits": {
      "type": "url",
      "url": "https://check-digits.toolstop.dev"
    }
  }
}

Local, over stdio:

{
  "mcpServers": {
    "check-digits": {
      "command": "npx",
      "args": ["-y", "@toolstop/check-digits"]
    }
  }
}

Tools

ToolDoes
validate_identifierVerify one identifier against a named format. Returns whether the checksum passes and, when it fails, why.
identify_formatGiven a bare number, report every supported format whose check digit it satisfies.
compute_luhn_digitGiven digits without their check digit, return the digit that makes them Luhn-valid.

All three are read-only and carry complete input and output schemas. Spaces and dashes in input are ignored.

What a pass means. A check digit is arithmetic. A valid IBAN is not a real bank account, a valid card number is not a live card, and a valid ISBN is not a book that was ever printed. These tools tell you an identifier is internally consistent, which is what catches transposed digits and truncated copies. They cannot tell you the thing it names exists.

Privacy

Identifiers you submit are never recorded. Telemetry captures the kind of identifier checked and whether it passed, never the value. That boundary is enforced by a test rather than a promise: see packages/_shared/transport.test.mjs in the repo.

Running over stdio, nothing leaves your machine at all.

What it does not do

A passing check digit means the identifier is well-formed, not that it exists, is active, or belongs to anyone in particular. A valid IBAN checksum does not mean the account is real.

License

MIT

Keywords

mcp

FAQs

Package last updated on 07 Aug 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts