APIValidator MCP Server

APIValidator is a Model Context Protocol (MCP) server designed to empower AI assistants (like Claude, Cursor, and others) with local and cloud-based data validation capabilities, static OpenAPI security auditing, and live premium verification tools.

With this server, LLMs can instantly decode JWTs, validate localized national identity numbers (RUT, CUIT, NIF), generate valid mock profiles for QA testing, inspect OpenAPI specs for security vulnerabilities, and call global premium verification databases for phone and bank (IBAN) records.

Features

1. Local Validation Tools (No Configuration Required)

• validate_format: Instantly checks standard format strings like UUID, Semver, and Base64.
• decode_jwt: Decodes JSON Web Tokens (JWT) locally to inspect header and payload data.
• validate_national_id: Validates checksum calculations for localized national identification and tax numbers:
  • CL (Chilean RUT)
  • AR (Argentine CUIT/CUIL)
  • ES (Spanish NIF/NIE)
• generate_mock_data: Generates mock user profiles with mathematically valid RUT, CUIT, or NIF numbers for database seeding and testing.
• get_validation_code: Returns dependency-free, production-ready copy-pasteable source code snippets (in JS, Python, Go, PHP) for regional validation routines.

2. Local Static Auditing

• audit_openapi_security: Analyzes OpenAPI (Swagger) specifications locally to flag security vulnerabilities (missing authentication schemes, unencrypted protocols, exposed debug paths, unbounded parameters, etc.).

3. Premium Cloud Validation (Requires RapidAPI Key)

• validate_phone_live: Calls international carrier databases to verify E.164 phone numbers (structure, status, country, carrier name).
• validate_iban_live: Performs live lookup of IBAN bank accounts to check bank validity, BIC codes, and SEPA routing parameters using secure POST payloads to prevent data leakage in URL logs.

Installation

You can run this server directly using npx:

npx apivalidator-mcp-server

Configuration

To use the Premium Cloud Validation tools (validate_phone_live and validate_iban_live), you need to supply a RapidAPI key from AutomatorLabs.

How to Authenticate

Run the setup tool to save your RapidAPI key locally:

npx apivalidator-mcp-server auth YOUR_RAPIDAPI_KEY

Your key will be securely saved in ~/.config/apivalidator/config.json with owner-only access permissions (0600).

AI Assistant Configuration

Claude Desktop

Add the server to your Claude Desktop configuration file (typically at ~/Library/Application Support/Claude/claude_desktop_config.json on macOS or %APPDATA%\Claude\claude_desktop_config.json on Windows):

{
  "mcpServers": {
    "apivalidator-mcp-server": {
      "command": "npx",
      "args": ["-y", "apivalidator-mcp-server"]
    }
  }
}

Cursor

1. Go to Cursor Settings > Features > MCP.
2. Click + Add New MCP Server.
3. Fill in the fields:
   • Name: apivalidator
   • Type: command
   • Command: npx -y apivalidator-mcp-server

License

This project is licensed under the MIT License - see the LICENSE file for details.