Home / MCP registry index / io.github.qinisolabs/qiniso

Qiniso

io.github.qinisolabs/qiniso in the official MCP registry. Endpoint https://qiniso.qinisolabs.workers.dev/mcp. Source: github.com/qinisolabs/qiniso.

The registry describes it as: Deterministic fact verification for AI agents — checksums & curated data, not guesses.

We read its 56 tools on 2026-10-21. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.

A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.

Tools it advertises

validate_iban validate_card validate_isbn validate_vin validate_gtin validate_imei validate_gln validate_sscc validate_tld validate_domain validate_ip validate_uuid validate_url validate_email validate_isin validate_cusip validate_sedol validate_lei validate_routing validate_eth_address validate_btc_address validate_cpf validate_cnpj validate_sa_id validate_dni validate_aadhaar validate_codice_fiscale validate_pesel validate_bsn validate_be_nrn validate_personnummer validate_fodselsnummer validate_hetu validate_nif_pt validate_tckn validate_china_ric validate_de_steuer_id validate_fr_nir validate_ch_ahv validate_mx_curp validate_hr_oib validate_ro_cnp validate_bg_egn validate_ee_isikukood validate_cz_rc validate_isbn10 validate_issn validate_orcid validate_phone parse_date format_currency is_holiday next_holiday tax_rate parse_address validate_vat

Run this server? Show the check in your README

The badge reflects the latest weekly read: MCP tool check badge

Markdown
[![MCP tool check](https://lazaretto.dev/mcp-registry/io-github-qinisolabs-qiniso/badge.svg)](https://lazaretto.dev/mcp-registry/io-github-qinisolabs-qiniso)

How this was checked

Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.

To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.