Security & Testing

madtaco.dev

Validates tax IDs, IBANs, VAT numbers, emails, and maps financial instruments to metadata.

1 endpoint15 known toolsFirst detected July 25, 2026Last detected September 6, 2026

ENDPOINT 1

https://api.madtaco.dev/mcp

No auth detected

MCP server metadata

Name: MadTaco
Version: 1.2.0

Capabilities

toolsresourcesprompts

Server instructions

Verification and trust checks for AI agents. Authenticate using X-Api-Key or Authorization: Bearer on MCP HTTP requests. Free validators work without a key. Every API response includes credits_charged; failed checks are never charged. Read /skills/madtaco-api on the web domain for integration guidance.

Known tools 15

validate_tax_id

Validate a tax ID format and checksum (CL RUT, MX RFC, and more).

Inferred read-only

validate_iban

Validate an IBAN checksum and parse bank metadata.

Inferred read-only

validate_vat

Validate an EU VAT number format (country prefix + structure).

Inferred read-only

lookup_instrument

Map a ticker, ISIN, CUSIP, or other identifier to FIGI and instrument metadata via OpenFIGI.

Inferred read-only

validate_email

Validate an email address.

Potential side effects

validate_phone

Validate a phone number.

Inferred read-only

screen_sanctions

Screen a name against OFAC SDN, EU, UK, and UN sanctions lists.

Inferred read-only

verify_company

Verify a company against an official registry (GB only in v1).

Inferred read-only

inspect_domain

Inspect domain age, DNS posture, and lookalike risk.

Inferred read-only

screen

Run a composite trust screen across sanctions, registry, domain, email, and phone checks.

Potential side effects

propose_check

Propose a new check capability MadTaco does not offer yet.

Inferred read-only

report_bug

Report a bug in MadTaco.

Inferred read-only

create_account

Create a MadTaco account (agent-native signup).

Potential side effects

verify_account

Verify the emailed 6-digit code and receive an API key (tier registered).

Inferred read-only

get_usage

Get today usage totals, per-operation counts, credits spent, and balance.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.madtaco]
url = "https://api.madtaco.dev/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "madtaco": {
      "type": "http",
      "url": "https://api.madtaco.dev/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: madtaco
Remote MCP URL: https://api.madtaco.dev/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "madtaco": {
      "url": "https://api.madtaco.dev/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "madtaco": {
      "type": "http",
      "url": "https://api.madtaco.dev/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "madtaco",
  "transport": "streamable-http",
  "url": "https://api.madtaco.dev/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for madtaco.dev was fetched 2026-08-21T14:38:18.922Z.

Trust status Neutral

madtaco.dev is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.