IBAN, ISIN, VAT/tax ID and GTIN barcode validation plus 29 more utilities for AI agents. Pay per call ($0.05 USDC on Base via x402), no API key, no signup.
Timezone and DST, geo distance and geohash, hashes and JWT decoding, airport, country, currency and NUTS lookups, money split, base conversion and more. Every call is one HTTP GET, paid per request.
Install
npm install duo-data-utilities viem
viem creates the wallet account that pays. This package also depends on it. Node.js 20 or later.
Python (not on PyPI, install from GitHub):
pip install "git+https://github.com/hiesem/duo-data-utilities#subdirectory=python"
Quick start
import { privateKeyToAccount } from "viem/accounts";
import { createClient } from "duo-data-utilities";
const client = createClient({ account: privateKeyToAccount(process.env.DUO_PAYER_KEY as `0x${string}`) });
const iban = await client.iban.validate({ iban: "NL91 ABNA 0417 1643 00" });
console.log(iban.valid, iban.country);
Counterparty check
checkCounterparty runs three checks in one call: IBAN (/v1/id/iban), tax ID (/v1/id/national) and country (/v1/ref/country). It costs $0.15.
const check = await client.checkCounterparty({
iban: "NL91 ABNA 0417 1643 00",
country: "NL",
taxIdType: "bsn",
taxId: "111222333",
});
console.log(check.verdict, check.reasons);
fail: the IBAN or the tax ID fails its checksum, the country is not an ISO 3166-1 country, or the API rejects an input as malformed.
review: the IBAN country differs from the tax ID country, or the API does not cover that country or tax ID kind.
pass: every check passed.
Structure and checksum only. The check does not query a company register, a bank or a tax authority, and it does not confirm that an account exists. UK is read as GB.
Methods
Every method costs $0.05 per call. Each method's JSDoc gives the route and the parameters. client.call(path, params) calls any route, and client.callWithReceipt(path, params) also returns the settlement receipt.
| Method | Route | What it does |
|---|
iban.validate | /v1/id/iban | IBAN validator: length, mod-97 check digits, bank/branch/account breakdown (89 countries) |
iban.generate | /v1/id/iban-build | IBAN generator: build an IBAN from country and BBAN or bank/branch/account, computing check digits |
taxId.validate | /v1/id/national | VAT, tax ID and national ID validator: 23 countries, checksum only (VAT formats BE, DE, FR, IT, PL, AT, CH, IE) |
isin.validate | /v1/id/security | ISIN validator plus CUSIP, SEDOL and FIGI check-digit validation; builds an ISIN from an NSIN |
barcode.validate | /v1/id/gs1 | GTIN barcode validator: EAN-13, UPC-A (GTIN-12), GTIN-8/14, GLN and SSCC check digits |
timezone.convert | /v1/time/zone | Timezone converter: instant to local time in an IANA time zone and back, with UTC offset and DST state |
timezone.dstTransitions | /v1/time/dst | DST transitions: next daylight-saving time changes for an IANA time zone |
businessDays.calculate | /v1/time/business-days | Business days calculator: add or count working days with your weekend mask and holiday list |
rrule.expand | /v1/time/rrule | RRULE expander: RFC 5545 recurrence rule to concrete occurrence dates |
calendar.convert | /v1/time/calendar | Calendar converter: Gregorian to Hijri, Hebrew, Japanese era, Persian and more, plus Easter date |
text.similarity | /v1/text/similarity | String similarity: Levenshtein, Jaro-Winkler distance and Soundex/Metaphone phonetic keys |
text.slug | /v1/text/slug | Slug generator: Unicode-aware URL slug with transliteration |
text.transliterate | /v1/text/transliterate | Cyrillic transliteration to Latin (ISO 9:1995, BGN/PCGN Russian) |
text.unicode | /v1/text/unicode | Unicode normalization (NFC/NFKC), script detection and homoglyph/confusable check |
hash.generate | /v1/code/hash | Hash generator: SHA-256, SHA-512, SHA-3, Keccak-256, BLAKE2 and HMAC digests |
punycode.convert | /v1/code/idn | Punycode converter: IDN domain to ASCII and back, with IDNA2008 label validation |
jwt.decode | /v1/code/jwt | JWT decoder: header, claims and expiry state (no signature verification) |
semver.compare | /v1/code/semver | Semver parser: parse and compare versions, check range satisfaction |
url.parse | /v1/code/url | URL parser: parse, canonicalize and extract the registrable domain (eTLD+1) |
geohash.encodeDecode | /v1/geo/geohash | Geohash encoder and decoder with neighbour cells |
plusCode.encodeDecode | /v1/geo/pluscode | Plus code (Open Location Code) encoder and decoder |
polygon.check | /v1/geo/polygon | Point in polygon check, plus bounding box, centroid and area for GeoJSON |
distance.calculate | /v1/geo/distance | Distance calculator: geodesic distance, bearing and destination point on WGS-84 |
cryptoAddress.validate | /v1/chain/address | Crypto address validator: detect the blockchain and verify the checksum (EVM, Bitcoin, Solana and more) |
solidity.selector | /v1/chain/selector | Solidity function selector: Keccak-256, 4-byte selector and event topic from a signature |
airport.lookup | /v1/ref/airport | Airport lookup by IATA or ICAO code: name, coordinates, elevation, time zone; nearest airports |
country.lookup | /v1/ref/country | Country lookup: ISO 3166 codes, currency, TLD, UN region and ISO 3166-2 subdivisions |
currency.lookup | /v1/ref/currency | Currency lookup: ISO 4217 codes, names, minor units and cash rounding |
nuts.lookup | /v1/ref/nuts | NUTS region lookup: EU statistical region codes, names and hierarchy |
money.split | /v1/num/allocate | Money split: allocate an amount into shares with no rounding loss |
base.convert | /v1/num/radix | Base converter: integers between number bases 2 to 36 (hex, binary, octal) |
statistics.calculate | /v1/num/stats | Statistics calculator: mean, median, standard deviation, quartiles and percentiles |
numberWords.convert | /v1/num/words | Number to words in 12 languages, with ordinal and currency forms |
MCP
The MCP server is at https://api.duoleads.com/mcp (Streamable HTTP). tools/list is free. Each tools/call costs $0.05 and needs an x402-capable client or wallet bridge. See mcp/README.md for Claude Code, Claude Desktop, Cursor, VS Code and AgentCash.
Python
Python 3.10 or later. The client is typed (py.typed) and uses requests with x402's EVM signer. Routes and method names match the TypeScript client, in snake_case.
import os
from eth_account import Account
from duo_data_utilities import DuoClient
client = DuoClient(Account.from_key(os.environ["DUO_PAYER_KEY"]))
print(client.iban.validate(iban="NL91 ABNA 0417 1643 00")["valid"])
check = client.check_counterparty(iban="NL91 ABNA 0417 1643 00", country="NL", tax_id_type="bsn", tax_id="111222333")
print(check.verdict, check.reasons)
DuoClient(account, *, max_price_usd=0.05, timeout=None, pay_to=<service address>) applies the same price guard. Pass session= with a requests.Session that already pays to skip the guard. from_ is the Python name for the from query parameter.
Pricing and the price guard
- Every route costs $0.05 per call, paid in USDC on Base (
eip155:8453) with x402 v2.
maxPriceUsd defaults to 0.05. Before anything is signed, the client refuses a payment requirement that asks for more than that, a network other than Base, an asset other than Base USDC, or another payee. A refused call makes no payment and throws PriceGuardError.
- The client only signs payments to the service's public address
0xCD673f7e1daD254347AEab6be0DEFe8b9C6b3A39 (payTo option; pay_to in Python). Set it if you point baseUrl at another deployment.
- The client never retries a paid call on its own.
- Plain
http:// is refused except for loopback addresses (localhost, 127.0.0.1, [::1]).
- With
fetch instead of account, you pass a fetch that already pays. The price guard cannot check payments made inside it, so use account to keep the guard.
What this is not
- Not a registry lookup. IBAN, tax ID and VAT checks are structure and checksum only.
- Not financial, legal or tax advice. Each response carries a disclaimer.
Links
The HTTP routes also work without this SDK. An unpaid GET returns 402 Payment Required with a PAYMENT-REQUIRED header, and any x402 v2 client can pay that challenge.
Development
npm install
npm run generate
npm run typecheck
npm test
npm run build
spec/ holds the snapshots the code is generated from. See spec/README.md.
License
MIT. See LICENSE.