# Aether Layer: EU VAT number validation (VIES)

> Validates EU VAT numbers: local format/checksum for 27 states + XI, then VIES (cached 24 h).

- name: com.aether-layer/eu-vat-validate
- version: 0.3.1
- connection class: R1 (autonomous)
- trust: 83/100 flags: no-repository
- quality: 85/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.aether-layer%2Feu-vat-validate
- tools: https://api.protogrid.dev/v1/servers/com.aether-layer%2Feu-vat-validate/tools

**An agent can connect on its own if it already holds `X_API_KEY`, `X_API_KEY`.** Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "eu-vat-validate": {
      "type": "http",
      "url": "https://aether-layer.com/api/mcp?src=mcpreg",
      "headers": {
        "X-Api-Key": "${X_API_KEY}",
        "Authorization": "${X_API_KEY}"
      }
    }
  }
}
```

Placeholders to fill: `${X_API_KEY}`, `${X_API_KEY}`.

## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-100% +updated-1d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 85/100 (new)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 94 (weight 30)

- pass `tools.descriptions`: every tool has a description
- warn `tools.description_length`: 1 tools have descriptions over 1,024 characters, which crowds the context
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 2 of 2 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 992 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump
- pass `tools.hidden_text`: no hidden text in tool names, descriptions, schemas or annotations

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`, `stability.new_links`: tool history recorded for 1 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 2, about 992 tokens to load them all
- tool set hash: acc9f3fd1e389cc7b918e4a0d9313d7f
- badge: [![protogrid quality](https://protogrid.dev/badge/com.aether-layer/eu-vat-validate.svg)](https://protogrid.dev/servers/com.aether-layer/eu-vat-validate)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://aether-layer.com/api/mcp?src=mcpreg (streamable-http, auth api_key ${X_API_KEY}, reachable true, uptime30d 1)

## Packages

_none_

## Tools (2)

- `agent_readiness_check`: Deterministically grade an MCP tool catalog or a third-party x402 endpoint. Provide exactly one of: mcp_url (public https MCP server; initialize + tools/list), x402_url (public https resource; the gateway requests it WITHOUT an X-PAYMENT header and reads the 402), or tools (a JSON tool manifest). Never pays or signs a payment. No LLM is used. Requires an API key in Authorization: Bearer or X-Api-Key.
- `validate_vat`: Validate an EU VAT number (27 member states + XI Northern Ireland). Normalizes the input, checks the national format and checksum locally, then queries VIES (European Commission) live with limited retries. status: valid | invalid (local checksum/format failed, or VIES answered valid=false) | unverified_ms_down (the member state system is down) | unverified. Results are cached across instances to respect VIES rules: valid/invalid 24 h, unverified 10 min; checked_at = time of the original VIES check, cache_age_s = its age in seconds. Never returns invalid because VIES is unavailable. The VIES name/address are never returned: pass your own name and/or address to get name_match / address_match booleans, computed locally (not sent to VIES; null when VIES has no data). Requires an API key in Authorization: Bearer or X-Api-Key. Controllo automatico: regole locali di formato e checksum più una consultazione live del VIES (Commissione europea). Non è un'attestazione fiscale né una consulenza legale; i dati VIES provengono dalle banche dati degli Stati membri. Conserva una tua traccia della consultazione VIES. / Automated check: local format/checksum rules plus a live query of VIES (European Commission). Not a tax attestation and not legal advice; VIES data come from the member states' databases. Keep your own record of the VIES consultation. / Automatische Prüfung: lokale Format- und Prüfziffernregeln plus eine Live-Abfrage von VIES (Europäische Kommission). Keine steuerliche Bescheinigung und keine Rechtsberatung; die VIES-Daten stammen aus den Datenbanken der Mitgliedstaaten. Bewahren Sie einen eigenen Nachweis der VIES-Abfrage auf.
