Skip to main content
Glama

Contents

Getting started

  • Install — pip extras per family, uvx, MCP client config

  • Requirements — toolchain floor, platforms

  • Quick Start — search, describe, validate, generate and parse from one server

The iso20022-mcp ecosystem

Library reference

Operational


Related MCP server: pain001-mcp

Install

As a Python library

pip install "iso20022-mcp[all]"

Latest release: v0.0.18: 7 routing meta-tools over stdio, streamable HTTP or SSE (optionally over HTTPS), light core (only mcp), backing family servers as optional extras, actionable structured errors on every validate/generate failure, for Python 3.10+.

The core is light. Add the families you need as extras:

pip install "iso20022-mcp[pacs,camt]" # just interbank + statements
pip install iso20022-mcp              # core only; families report as not installed
uvx --from "iso20022-mcp[all]" iso20022-mcp   # run without installing

MCP client config (e.g. Claude Desktop):

{
  "mcpServers": {
    "iso20022": {
      "command": "iso20022-mcp"
    }
  }
}

Requirements

  • Python 3.10 or newer, tested in CI on 3.10, 3.11, 3.12, 3.13 and 3.14 on Linux (toolchain policy).

  • mcp 1.30 or newer on the 1.x line, or 2.2 or newer on the 2.x line. Releases affected by GHSA-84m7-p3x7-pcfv cannot be resolved.

  • The family servers are optional extras: pain, pacs, camt, acmt, or all.


Quick Start

search(query="reconciliation")
  → [{ "message_type": "camt.053", "family": "camt", "package": "camt053-mcp" }]

describe(message_type="pacs.008")           # required fields + input schema
validate(message_type="pacs.008", records=[…])
generate(message_type="pain.001", records=[…])   # → { "xml": "<Document>…" }
  # bare "pain.001" resolves to pain.001.001.09; on failure the payload is
  # { "error": "Missing required fields for pain.001.001.09: …" } listing
  # every missing or invalid field at once — fix them all and retry once
parse(message_type="camt.053", xml="<Document>…")
  # parse covers pacs + camt only; pain and acmt are outbound-only

Start with search or list_families to find a message type, describe it for its required fields and input schema, then validate, generate or parse. Each call is routed to the family server for that message type's prefix.


The iso20022-mcp ecosystem

iso20022-mcp is the generic message toolkit of the ISO 20022 MCP Suite: eight coordinated, vendor-neutral MCP servers that cover the ISO 20022 bank-statement workflow and the November 2026 structured-address cutover, plus an orchestration layer for readiness scoring, clearing-profile linting and audit evidence. Dependency ranges are kept aligned across the suite, so the servers co-install cleanly in one Python environment: start with one, add the rest as your workflow grows.

Component

Purpose

Use case

camt053-mcp

ISO 20022 camt.053/camt.052 bank statements: parse, validate, filter, reverse; MT940/MT942 migration; CBPR+ readiness; journal export (24 tools, 4 prompts, 3 resources)

You work with bank-to-customer statements end to end; the suite's flagship

iso20022-mcp

Unified gateway: search / describe / validate / generate / parse meta-tools routed across the pain · pacs · camt · acmt families (7 meta-tools)

You want one entry point to every message family: this package

reconcile-mcp

Matches expected pain.001 payments against observed camt.053 entries: exact, partial, one-to-many, many-to-one, every match scored and explained (7 tools)

You need explainable statement/payment reconciliation

bankstatementparser-mcp

Multi-format statement ingestion: ISO 20022 CAMT.053 and pain.001, SWIFT MT940, OFX/QFX, CSV (5 tools, 1 prompt, 1 resource)

Your statements arrive in mixed or legacy formats

structured-address-fix-mcp

ISO 20022 postal-address classification, assessment and remediation for the November 2026 structured-address cutover (9 tools)

You need debtor/creditor addresses ready before 14 Nov 2026

iso20022-readiness-suite-mcp

Orchestration: detect, validate, clearing-profile lint and readiness score, plus remediation and pacs.002 response simulation (4 tools)

You want one high-level readiness entry point over the suite

iso20022-bank-profile-mcp

Manages, validates and serves bank clearing profiles and rule packs (CBPR+, SEPA_Instant, FedNow, Generic) (4 tools)

You lint payments against your institution's market practice

iso20022-evidence-pack-mcp

Compiles findings, remediation diffs and simulated responses into a sealed, Ed25519-signable audit evidence pack (6 tools)

You need tamper-evident audit or certification artifacts

pain001-mcp, pacs008-mcp, acmt001-mcp, camt-exceptions

The per-family servers this gateway routes to, installed as extras

Installed for you by iso20022-mcp[all]; see Features


Capabilities at a glance

Area

Capability

Status

Discovery

search, list_families, list_servers over the whole catalogue

Released; works with the core install

Schemas

describe returns required fields and the input JSON Schema

Released; needs the family's extra

Validation

validate checks records against a message type's schema

Released; every family

Generation

generate builds validated XML for pain, pacs, acmt and camt.056/camt.029

Released

Parsing

parse reads inbound pacs and camt XML

Released; pain and acmt are outbound-only

Transports

stdio, streamable HTTP and SSE, with optional HTTPS

Released; HTTPS since 0.0.18


Ecosystem comparison

The alternative to this gateway is connecting an agent to each family server directly. Measured over stdio with list_tools on 2026-10-20:

Project

Servers to configure

Tools the agent sees

Estimated catalogue tokens

iso20022-mcp

1

7

~2,200

All four family servers directly

4

73

~36,400

See docs/COMPARISON.md for the evidence and complete matrix.


Benchmarks

Routing costs microseconds; the first call into a family pays its lazy import once per process. Measured with benches/bench_gateway.py --quick.

Scenario

Result

Environment

family_for routing

0.54 µs

Apple A18 Pro, Python 3.12.15, mcp 2.3.0

search_catalog

7.29 µs

Apple A18 Pro, Python 3.12.15, mcp 2.3.0

First pain.001 call (cold import)

528 ms

Apple A18 Pro, Python 3.12.15, fresh interpreter

Later pain.001 call (warm)

5.04 µs

Apple A18 Pro, Python 3.12.15

See docs/BENCHMARKS.md for methodology and full results.


Features

The 7 routing meta-tools:

  • search — Find message types by use-case / keyword ("reconciliation", "pacs.008"). (families: all — catalogue)

  • list_families — List families, their capabilities, and which backing packages are installed. (families: all)

  • list_servers — Full suite map: families + E&I messages + specialized servers (reconcile, agent-payment bridge). (families: all)

  • describe — Required fields + input JSON Schema for a message type. (families: all)

  • validate — Validate records against a message type's schema. (families: all)

  • generate — Generate a validated ISO 20022 XML message from records. (families: pain · pacs · acmt)

  • parse — Parse an inbound ISO 20022 XML message into structured data. (families: pacs · camt)

Operations are capability-aware: generate on a camt.053 statement (an inbound format) returns a clear, explanatory error rather than failing obscurely, and every "package not installed" case tells you exactly what to pip install.

Three ergonomics guarantees hold across the routed families:

  • Actionable structured errors. Any error a backing server raises — not just the ones it returns — reaches the agent as an {"error": "<Type>: <message>"} payload instead of an opaque tool-execution failure. For pain generation the error lists every missing or invalid field at once, so one fix-and-retry suffices.

  • Family aliases for message_type. Bare family names resolve to a concrete version via the backing server: pain.001 → pain.001.001.09, pain.008 → pain.008.001.02. Fully-versioned types are still preferred where you know them.

  • Per-family parse coverage, stated up front. parse covers the inbound families only: pacs (e.g. pacs.008) and camt (e.g. camt.053). The initiation families pain and acmt are outbound-only — they have no parser here, so don't attempt a generate→parse round-trip for pain.001 or acmt.001; use validate (or the backing server's XSD validation) instead.

Routing

Prefix

Family

Backing server

generate

parse

pain

Customer Credit Transfer Initiation

pain001-mcp

✅

—

pacs

FI-to-FI Customer Credit Transfer

pacs008-mcp

✅

✅

camt

Bank-to-Customer Statement

camt053-mcp

—

✅

acmt

Account Opening Instruction

acmt001-mcp

✅

—

camt.056/camt.029

Cancellation / Resolution (E&I)

camt-exceptions

✅

—

generate("camt.056.001.12", …) routes to camt-exceptions. The gateway also surfaces the specialized servers — reconcile-mcp and ap2-iso20022 — via search and list_servers for discovery (they're invoked through their own tools).

The gateway imports each backing server lazily and optionally — the core depends only on mcp, and a family's server is loaded on first use. Message types are matched on their prefix (pacs.008.001.08 → pacs). The pain extra requires pain001-mcp >= 0.0.56, the release that carries the LLM-ergonomic generate surface (field aliases, computed nb_of_txs / ctrl_sum, all-at-once field errors) the gateway's guarantees build on.


Configuration

One command line, three transports:

Command

Transport

Endpoint

Protocol revisions

iso20022-mcp

stdio

the client spawns the process

2026-07-28, 2025-11-25

iso20022-mcp --transport streamable-http

Streamable HTTP

http://127.0.0.1:8000/mcp

2026-07-28 (stateless, server/discover) and 2025-11-25 (initialize, Mcp-Session-Id) on the same endpoint; responses stream as server-sent events, GET opens the server-to-client stream

iso20022-mcp --transport sse

HTTP+SSE (2024-11-05)

http://127.0.0.1:8000/sse and /messages/

for clients that still expect the older transport

--host and --port change the bind address (defaults 127.0.0.1 and 8000). --ssl-certfile cert.pem --ssl-keyfile key.pem serves either HTTP transport over HTTPS instead, on mcp 1.x and 2.x alike. The HTTP transports carry no authentication of their own: bind loopback, or put the server behind a gateway you trust before binding a routable address. Every release is verified over streamable HTTP with passmcp in both protocol eras and over SSE with the MCP SDK client; see ADR 0001.

{
  "mcpServers": {
    "iso20022": { "url": "http://127.0.0.1:8000/mcp" }
  }
}

Run iso20022-mcp --help for every option.


Examples

  • examples/mcp_tools.py: discovery with the core install, then routed describe, validate, generate and parse calls (python examples/mcp_tools.py after pip install -e ".[all]").

  • benches/bench_gateway.py: what the gateway adds on top of each family server.

  • For the dedicated engine that matches camt.053 statements against expected pain.001 payments, see reconcile-mcp.


When not to use iso20022-mcp

  • You need a family's specialist tools. The gateway exposes the operations every family shares. camt053-mcp's MT940 migration or journal export, for example, are only on that server: connect it directly.

  • You need to round-trip pain or acmt. They are outbound-only here, with no parser.

  • You need a bank, a settlement engine or a payment approver. This routes and validates messages; it sends nothing anywhere and is not bank certification.

  • You need authentication on the HTTP transports. There is none built in; put an authenticating gateway in front.


Development

git clone https://github.com/sebastienrousseau/iso20022-mcp
cd iso20022-mcp
python -m venv .venv && . .venv/bin/activate
make dev
make check                         # lint, mypy strict, tests, version agreement
python benches/bench_gateway.py --quick

make check runs ruff, black, mypy in strict mode, pytest with a 100% line and branch coverage gate (backends faked), and the version-agreement check. CI also runs CodeQL, OpenSSF Scorecard, reuse lint, the MCP Inspector, Hypothesis property tests, and Atheris fuzzing of every tool (two minutes per change, 30 minutes weekly). See DEVELOPMENT.md and CONTRIBUTING.md.


Security

Tools are read-only, idempotent and closed-world: no tool opens a path, a URL or a socket, and every call is routed through one registry table, so no caller input reaches an import. Stdio is the default; the HTTP transports bind loopback, can serve HTTPS, and carry no authentication of their own. Releases are built reproducibly from a signed tag, with SLSA provenance and sigstore signatures you can verify. The threat model and evidence are in the assurance case and the security review. The project holds the OpenSSF Best Practices passing badge.

Report vulnerabilities according to SECURITY.md.


Documentation

User manual · API reference: the tools · Developer guide · Architecture · Family map · Changelog · Roadmap


Stability guarantees

The project is pre-1.0 and versions advance in 0.0.1 steps. The breaking axis is the MCP surface an agent sees: tool names, their arguments, and the shape of what they return, including the {"error": ...} payload. A change to any of these is breaking even when no Python signature moves, and is called out in the changelog. Generated XML comes from the family servers and follows their own stability rules. The Python floor moves only as described in the toolchain policy.


License

This project is dual-licensed under either:

at your option. Dependencies keep their own licences.

The logo is "Computer connected" by glyph.faisalovers from Noun Project, licensed under CC BY 3.0 and recoloured for light and dark themes.


mcp-name: io.github.sebastienrousseau/iso20022-mcp

Available Tools

7 tools
describeA
Read-onlyIdempotent

Describe a message type: its required fields and input JSON Schema, resolved from the family's backing server. When to use: After 'search', to obtain the schema and required field names for the flat records that 'validate' and 'generate' take. Not for: Raw XML payloads; 'parse' reads those. Behavior: Read-only, idempotent resolution from local schemas. Errors return a structured {'error': ...} payload rather than raising.

NameRequiredDescriptionDefault
message_typeYesISO 20022 message type, e.g. 'pain.001.001.09', 'pacs.008' or 'camt.053'. For pain messages a fully-versioned type is preferred; the bare family name 'pain.001' resolves to 'pain.001.001.09'.

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false, and openWorldHint=false. The description usefully adds that resolution comes from local schemas and that errors return a structured {"error": ...} payload instead of raising, which is behavior beyond the annotations. It does not detail return shape, but that is covered by the output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded: core purpose first, then When to use, Not for, and Behavior. Every sentence carries distinct routing or behavioral information without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema exists, the description need not explain return values. It covers purpose, usage timing, exclusions, resolution behavior, and error handling, leaving no meaningful gap for an agent selecting or invoking this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single parameter is fully documented in the schema, including examples and the bare-family-name resolution rule. The description does not add parameter syntax beyond what the schema already provides, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Describe a message type: its required fields and input JSON Schema.' It also names the backing source and clearly differentiates itself from siblings by explaining that it feeds 'validate' and 'generate' and is not the tool for raw XML (that is 'parse').

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit usage timing ('After search, to obtain the schema...') and an explicit exclusion ('Not for: Raw XML payloads; parse reads those'). An agent can decide when to call this versus its siblings without inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generateA
Read-onlyIdempotent

Generate a validated ISO 20022 XML message from records; the XML document is returned in the 'xml' key. On failure the 'error' value lists every missing or invalid field at once — fix them all and retry once. When to use: Outbound initiation and interbank messages (pain.001, pacs.008, acmt.001, camt.056). Not for: Inbound statements (camt.053); they have no generator and return an explanatory error. Behavior: Pure transformation; read-only and idempotent.

NameRequiredDescriptionDefault
recordsYesList of flat record objects (field name → value). Field names come from the family's input schema — call describe(message_type) for the required fields. For pain.001 credit transfers the key fields are: id, date ('YYYY-MM-DD' accepted), initiator_name, payment_id, requested_execution_date ('YYYY-MM-DD'), debtor_name, debtor_account_IBAN, debtor_agent_BIC, creditor_name, creditor_account_IBAN, creditor_agent_BIC, payment_amount (alias 'amount'), currency (alias 'payment_currency'), remittance_information; batch_booking takes JSON true/false, and nb_of_txs/ctrl_sum are computed automatically. IBAN and BIC values are strictly validated, never coerced.
message_typeYesISO 20022 message type, e.g. 'pain.001.001.09', 'pacs.008' or 'camt.053'. For pain messages a fully-versioned type is preferred; the bare family name 'pain.001' resolves to 'pain.001.001.09'.

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/destructive=false, so 'pure transformation; read-only and idempotent' is largely redundant. However, the description adds genuinely new behavior: errors list every missing/invalid field at once and the caller should fix all and retry once. That error/retry contract is valuable context not present in annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose and return value, then clearly labeled 'When to use', 'Not for', and 'Behavior' segments. Dense but every clause carries signal; no filler sentences.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be fully re-explained, yet the 'xml'/'error' keys are still surfaced. Purpose, routing, failure behavior, and validation strictness are all covered for a 2-parameter transformation tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented in depth (fields, aliases, validation). The description adds little parameter-specific meaning beyond reiterating validation behavior, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Generate a validated ISO 20022 XML message from records') and immediately names the return key. It is clearly distinguishable from siblings like parse and validate, and the message-family examples make the scope concrete.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Has explicit 'When to use' (outbound initiation and interbank messages) and 'Not for' (inbound camt.053, which has no generator). Both inclusion and exclusion conditions are spelled out, leaving nothing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_familiesA
Read-onlyIdempotent

List every ISO 20022 family the gateway routes to (pain, pacs, camt, acmt): its capabilities, backing package, and whether that package is installed in this environment. When to use: Use to check environment readiness and verify whether optional backing packages (pain001-mcp, pacs008-mcp, camt053-mcp, acmt001-mcp) are installed. Not for: Searching specific schemas; 'search' and 'describe' cover those. Behavior: Pure in-memory introspection; read-only and idempotent.

NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so the safety profile is covered; the description's 'read-only and idempotent' restates that. What it adds beyond the annotations is the operational nature — 'pure in-memory introspection' — which tells the agent there is no network I/O or external side effect, plus the fact that it reports installation status per backing package.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the action and resource, then organized into clearly labeled 'When to use', 'Not for', and 'Behavior' segments. Every sentence carries routing or behavioral information; no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Zero parameters, rich annotations, and an output schema that carries the return shape, so the description's job is primarily routing and readiness semantics — both delivered. An agent has everything it needs to decide to call this and to interpret the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is nothing for the description to disambiguate and the baseline is 4. Describing the return contents (capabilities, backing package, installed flag) is useful but belongs to output semantics rather than parameter meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('List every ISO 20022 family the gateway routes to') and enumerates the concrete families covered (pain, pacs, camt, acmt) plus what each entry contains. It clearly distinguishes itself from the schema-oriented siblings by naming 'search' and 'describe' as the tools for a different job.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit 'When to use' (check environment readiness, verify optional backing packages are installed) and an explicit 'Not for' that routes searching specific schemas to 'search' and 'describe'. Both the condition and the alternative are stated, leaving nothing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_serversA
Read-onlyIdempotent

List the whole ISO 20022 suite the gateway knows: the message families (pain/pacs/camt/acmt), the Exceptions & Investigations messages (camt.056/camt.029), and the specialized servers (reconciliation, agent-payment bridge) with what each does. When to use: Use to discover available specialized servers across the suite and route cross-cutting payments workflows. Not for: Building or reading messages; the gateway tools 'generate', 'parse' and 'validate' do that. Behavior: Pure in-memory catalog listing; read-only and idempotent.

NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description adds useful context by calling it a 'pure in-memory catalog listing', but mostly repeats the read-only and idempotent traits rather than adding deeper operational detail.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the scope, then uses labeled 'When to use', 'Not for' and 'Behavior' sections. Every sentence contributes to routing or behavioral understanding, with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the empty input schema, comprehensive annotations and existing output schema, the description supplies the remaining needed context: what is listed, when to use it, what it is not for, and that it is a read-only in-memory catalog. Nothing essential for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the baseline is 4. There are no parameter semantics to explain, and the empty schema is fully consistent with the description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb, 'List', and a specific resource: the whole ISO 20022 suite, including message families and specialized servers, with those contents enumerated. It also explicitly separates itself from generate/parse/validate for building or reading messages, so an agent can tell what this tool is for.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides an explicit 'When to use' section about discovering specialized servers and routing cross-cutting payments workflows. It also includes a clear 'Not for' section naming the alternative tools 'generate', 'parse' and 'validate' for message building and reading.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

parseA
Read-onlyIdempotent

Parse an inbound ISO 20022 XML message into structured data. Parse coverage is per-family: pacs (e.g. pacs.008) and camt (e.g. camt.053) only. The initiation families pain and acmt are outbound-only — they have NO parser here, so a generate→parse round-trip for pain.001 or acmt.001 fails; 'validate' or the backing server's XSD validation checks those instead. When to use: Use to extract structured transactions, entries, debtor/creditor data, and balances from inbound messages (pacs.008 customer credit transfers, camt.053 statements). Not for: Outbound initiation families (pain.001, acmt.001). Behavior: Pure in-memory XML parsing; read-only and idempotent.

NameRequiredDescriptionDefault
xmlYesRaw ISO 20022 XML to parse.
message_typeYesISO 20022 message type, e.g. 'pain.001.001.09', 'pacs.008' or 'camt.053'. For pain messages a fully-versioned type is preferred; the bare family name 'pain.001' resolves to 'pain.001.001.09'.

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations cover read-only/idempotent/non-destructive, and the description goes well beyond them: it discloses the per-family parser coverage limit, that pain/acmt round-trips fail, and that parsing is pure in-memory. These are consequential behavioral constraints an agent cannot derive from the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action and structured with 'When to use / Not for / Behavior' labels. There is mild redundancy between the coverage sentence and the 'Not for' line, both restating that pain/acmt are outbound-only with no parser.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter parsing tool with an output schema and full annotations, the description covers coverage limits, usage boundaries, alternatives, and execution behavior. No material gap remains for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description meaningfully constrains the valid domain of message_type by stating only pacs and camt families are parseable. It adds practical meaning beyond the schema's example values without restating syntax.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Parse an inbound ISO 20022 XML message into structured data') and immediately bounds scope to inbound messages. It clearly distinguishes itself from siblings like validate and generate, which the 'Not for' section reinforces.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Has explicit 'When to use' and 'Not for' sections naming the exact conditions (pacs.008, camt.053 inbound) and the excluded families (pain.001, acmt.001), routing the agent to 'validate' or XSD validation as the alternative. Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

validateA
Read-onlyIdempotent

Validate records for a message type against its JSON Schema, via the family's backing server. When to use: Ahead of 'generate', to verify record field types, required fields, date formats (YYYY-MM-DD), and IBAN/BIC constraints without generating XML. Not for: Raw XML documents; the backing server's XSD validation tools and 'parse' handle those. Behavior: Pure deterministic validation; read-only and idempotent with zero network I/O.

NameRequiredDescriptionDefault
recordsYesList of flat record objects (field name → value). Field names come from the family's input schema — call describe(message_type) for the required fields. For pain.001 credit transfers the key fields are: id, date ('YYYY-MM-DD' accepted), initiator_name, payment_id, requested_execution_date ('YYYY-MM-DD'), debtor_name, debtor_account_IBAN, debtor_agent_BIC, creditor_name, creditor_account_IBAN, creditor_agent_BIC, payment_amount (alias 'amount'), currency (alias 'payment_currency'), remittance_information; batch_booking takes JSON true/false, and nb_of_txs/ctrl_sum are computed automatically. IBAN and BIC values are strictly validated, never coerced.
message_typeYesISO 20022 message type, e.g. 'pain.001.001.09', 'pacs.008' or 'camt.053'. For pain messages a fully-versioned type is preferred; the bare family name 'pain.001' resolves to 'pain.001.001.09'.

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint and closed-world behavior, so the 'read-only and idempotent' phrasing is partially redundant. It nonetheless adds real context beyond the annotations: 'pure deterministic validation' and 'zero network I/O', plus the specific class of checks performed (types, required fields, date formats, IBAN/BIC).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded, then cleanly labeled 'When to use:', 'Not for:' and 'Behavior:' blocks. It is dense but every clause carries information an agent needs, with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need no explanation, and the description covers prerequisites, the validation scope, side-effect profile and sibling alternatives. Nothing an agent needs to invoke this two-parameter tool is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the records parameter is exhaustively documented, so the schema does the heavy lifting. The description still adds meaning by framing the parameters as validation targets: it names the accepted date format (YYYY-MM-DD) and the IBAN/BIC constraints enforced, telling the agent what the two inputs are scrutinized against.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence states a specific verb (validate) and resource (records for a message type against its JSON Schema), and even names the mechanism (the family's backing server). It clearly separates itself from 'generate' and 'parse' by describing validation-before-generation rather than XML production or parsing.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit 'When to use' (ahead of 'generate' to verify types, required fields, date formats and IBAN/BIC) and an explicit 'Not for' boundary (raw XML, XSD tools, and 'parse'). Both the triggering condition and the excluded cases are stated, leaving nothing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 7 tool updatesv0.0.5
    • First observeddescribe
    • First observedgenerate
    • First observedlist_families
    • First observedlist_servers
    • First observedparse
    • First observedsearch
    • First observedvalidate

TDQS

A4.5/5.0

Scored across 7 tools

Disambiguation4/5

The core transform tools (search, describe, validate, generate, parse) each target a distinct action and are hard to confuse. However, list_families and list_servers both perform catalogue-style listing and could be misselected, and search overlaps with them at the discovery level. The explicit 'When to use / Not for' notes mitigate this, but the boundary between the three listing/discovery tools is not perfectly crisp.

Naming Consistency4/5

Most names are single imperatives (search, describe, validate, generate, parse) with a consistent snake_case, verb-first pattern for the two listing tools (list_families, list_servers). The mix of bare verbs and verb_noun is a minor deviation but remains predictable and readable.

Tool Count5/5

Seven tools is well-scoped for an ISO 20022 gateway spanning discovery, schema description, validation, generation, and parsing. Each tool earns its place with no redundant entries.

Completeness4/5

The surface covers the discovery-to-transform lifecycle (search, describe, validate, generate, parse) and documents direction-specific limits. Minor gaps exist—pain/acmt messages have no parser and camt.053 has no generator—but these are intentional, documented, and covered by backing-server XSD validation, so agents are not left at a dead end.

Maintenance

ActivityActive
ResponsivenessSyncing

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    MCP server that enables AI agents to parse, validate, and reverse ISO 20022 bank statements, with tools for discovering message types and return reasons.
    24
    333 PyPI
    2
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    A Model Context Protocol server that exposes the pain001 ISO 20022 Customer Credit Transfer Initiation library as agent tools, enabling AI assistants to generate and validate standardized payment XML messages.
    26
    171 PyPI
    1
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    MCP server for ISO 20022 acmt.001 Account Opening (and companion acmt.* messages): message-type discovery, required-field lookup, JSON Schema introspection, IBAN/BIC/LEI validation, flat-record validation, and validated acmt XML generation.
    7
    202 PyPI
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    A local-first MCP server for financial wire message forensics, providing read-only tools to parse, validate, and detect SR2026 address compliance in ISO 8583, SWIFT MT, and ISO 20022 messages.
    Apache 2.0