Back to MCP Trust Indexm8ven
41
/ 100
3 days ago
glama

VAT Validator MCP

Validates EU, UK, and AU VAT numbers against live sources and uses AI pattern analysis to detect invoice fraud.

→ OjasKord/vat-validator-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

GlamaSmithery

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
6 flows detected: UPSTASH_REDIS_REST_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 7 credentials: ANTHROPIC_API_KEY, OWNER_KEY, RESEND_API_KEY, STATS_KEY, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, UPSTASH_REDIS_REST_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configABR_GUID
🔐 secretANTHROPIC_API_KEY
🔐 secretOWNER_KEY
configPORT
🔐 secretRESEND_API_KEY
🔐 secretSTATS_KEY
🔐 secretSTRIPE_SECRET_KEY
🔐 secretSTRIPE_WEBHOOK_SECRET
🔐 secretUPSTASH_REDIS_REST_TOKEN
configUPSTASH_REDIS_REST_URL
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/ojaskord-vat-validator-mcp-g0d204)](https://m8ven.ai/mcp/ojaskord-vat-validator-mcp-g0d204)
commit: f2c6eda614702573faa033f4a250182da5c62a3f
code hash: e655888715c50595f9296a9b7f35e75ebdd510329f882254a0aae564dc767722
verified: 7/28/2026, 9:11:54 AM
view raw JSON →