io.github.sebastienrousseau/pain001-mcp — MCP server for ISO 20022 pain.001/pain.008

This Model Context Protocol (MCP) server provides payment-file generation and validation for ISO 20022 “pain.001/pain.008”. It exposes the underlying pain001 library as 17 first-class agent tools, with focus areas including SEPA, payment processing, and related banking identifiers.

🛠️ Key Features

MCP server for ISO 20022 pain.001/pain.008 payment-file generation and validation
17 first-class agent tools exposing the pain001 payment library
Tooling topics include SEPA, IBAN, BIC, and validation workflows

🚀 Use Cases

Generate ISO 20022 payment files for pain.001 and pain.008
Validate payment files prior to downstream processing
Integrate banking/payment-processing steps into an MCP agent workflow

⚡ Developer Benefits

Standardized Model Context Protocol access to pain001 functionality
First-class agent tools for automation of generation and validation
Relevant for Python-based fintech and payment-processing development

⚠️ Limitations

Coverage is specifically described for ISO 20022 pain.001/pain.008 files only

--- ## When not to use pain001-mcp - **You're not driving an MCP-aware agent.** Use the CLI (`pain001 …`) or the REST API (`pain001 serve`) directly — both expose the same surface with less indirection. - **You need editor diagnostics, not agent tools.** Use [`pain001-lsp`](https://pypi.org/project/pain001-lsp/) — it speaks the Language Server Protocol to VS Code, Neovim, Helix, Emacs, etc. - **You need to extend the tool surface in-tree.** The companion [`pain001[mcp]`](https://github.com/sebastienrousseau/pain001) extra exposes the same FastMCP instance and is easier to fork inside an organisation's pain001 install. --- ## Development `pain001-mcp` uses [Poetry](https://python-poetry.org/) and [mise](https://mise.jdx.dev/). ```bash git clone https://github.com/sebastienrousseau/pain001-mcp.git cd pain001-mcp mise install poetry install

Target

What it runs

make check

All gates (REQUIRED before commit)

make test

pytest --cov=pain001_mcp --cov-branch --cov-fail-under=100

make lint

ruff check + black --check

make type-check

mypy --strict

make docs

interrogate --fail-under=100 (docstring coverage)

Security

No filesystem writes from tools. generate_message and generate_message_from_file return the XML as a string; no tool writes to disk.

XML parsing of camt.053 and pain.002 is routed through defusedxml (via the core pain001 library); XXE and entity expansion are rejected.

Validation failures are returned as structured {"error": ...} payloads — never as stack traces — so the agent never sees an internal path leak.

Dependencies are pinned via poetry.lock and audited by pip-audit and Bandit in CI.

To report a vulnerability, please use GitHub private vulnerability reporting rather than a public issue.

Related MCP Servers

Part of the ISO 20022 MCP Suite — open-source, Apache-2.0 licensed MCP servers for banking and financial-services AI agents:

Server

Purpose

pacs008-mcp

Generate, validate, parse & scheme-check ISO 20022 pacs.008 FI-to-FI credit transfers + Nov-2026 address linting

camt053-mcp

Parse & reconcile ISO 20022 camt.053 bank-to-customer statements — CBPR+/HVPS+ ready

acmt001-mcp

Generate & validate ISO 20022 acmt account-management messages

bankstatementparser-mcp

Parse bank statements (BAI2, MT940/MT942, CAMT.053, OFX, CSV) into structured transactions

noyalib-mcp

Lossless YAML 1.2 parsing, formatting & validation (Rust, 100% spec compliance)

io.github.sebastienrousseau/pain001-mcp