/ 100

9 days ago

glama

ibanforge

IBAN validation, BIC/SWIFT lookup, SEPA compliance, issuer classification and risk indicators for AI agents. 39K+ bank entries from GLEIF. Supports 75+ countries.

→ cammac-creator/ibanforge · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

2 flows detected: ADMIN_SECRET. We can’t prove the destination matches the brand the credential belongs to.

🚨

Known vulnerabilities in dependencies: 2 critical, 10 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

⚠️

Tests do not pass

Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.

🔐

You'll be asked for 8 credentials: ADMIN_SECRET, CDP_API_KEY_SECRET, DASHBOARD_PASSWORD, IBANFORGE_API_KEY, IP_HASH_SECRET, PLAYGROUND_API_KEY, SESSION_SECRET, STATS_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretADMIN_SECRET

configAPI_URL

configBASE_RPC_URL

configBIC_DB_PATH

configCDP_API_KEY_ID

🔐 secretCDP_API_KEY_SECRET

configCOMPLIANCE_DB_PATH

configCORS_ORIGIN

🔐 secretDASHBOARD_PASSWORD

configDB_PATH

configFACILITATOR_URL— Yes (prod) x402 facilitator endpoint

configGLEIF_API_BASE

configIBANFORGE_ADMIN_TEST_KEYS

configIBANFORGE_API_BASE

🔐 secretIBANFORGE_API_KEY— Optional: set =ifk_... in env for the free tier (200 req/month). Without it the server uses the public/demo surface; combine with x402 micropayments for unlimited pay-per-call access without signup.

configIBANFORGE_API_URL

configIBANFORGE_FREE_MODE

🔐 secretIP_HASH_SECRET

configNEXT_PUBLIC_API_URL

🔐 secretPLAYGROUND_API_KEY

configPORT— No Server port (default: 3000)

configRATE_LIMIT_PER_MIN

configRPC_LOG_CHUNK_SIZE

🔐 secretSESSION_SECRET

configSTATS_DB_PATH

🔐 secretSTATS_TOKEN

configWALLET_ADDRESS— Yes (prod) x402 USDC wallet address

configX402_ENABLED

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/cammac-creator-ibanforge-1mler6)](https://m8ven.ai/mcp/cammac-creator-ibanforge-1mler6)

commit: 63b88ba1a08dd66e681852c9725d9f1551f0dbe5

code hash: 3e90470a9fb92e121dd4c64bbaa5567d79e8fd634a215236a7c6d1f42eb2ba77

verified: 6/12/2026, 11:09:30 AM

view raw JSON →