Server data from the Official MCP Registry
ISO 20022 / SWIFT finance bridge — parse, validate, modernise, govern (DORA/NIS2/AML).
About
ISO 20022 / SWIFT finance bridge — parse, validate, modernise, govern (DORA/NIS2/AML).
Security Report
The ISO 20022 Bridge MCP server has a clear purpose (parse and govern payment messages) with appropriate dependencies and tool design. However, it contains a critical vulnerability: the `_sigil()` function logs operation details and body content to a local file with a path derivable from environment variables, creating a local information disclosure risk. Additionally, the server lacks input validation on XML parsing (potential XXE attack surface) and has weak authentication/authorization—no API keys, scopes, or access controls on sensitive governance operations. The governance tool, which flags AML/sanctions concerns, is publicly accessible without authentication. Supply chain analysis found 6 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.
5 files analyzed · 13 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-csoai-org-iso20022-bridge-mcp": {
"args": [
"iso20022-bridge-mcp"
],
"command": "uvx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
ISO 20022 / SWIFT Bridge MCP
mcp-name: io.github.CSOAI-ORG/iso20022-bridge-mcp
Part of the CSOAI Layer-0 legacy-bridge family (sibling of cobol-bridge-mcp). Bridges the financial-messaging legacy world — ISO 20022 (pacs/pain/camt) and SWIFT MT — to ONE OS / CSOAI, and governs every payment.
Tools
parse_iso20022(xml)— message type + key payment fields (amount, currency, debtor/creditor, agents, EndToEndId).validate_iso20022(xml)— well-formedness + required-field checks.map_to_modern(xml)— flat modern JSON for downstream systems.govern_payment(xml)— AML/sanctions surface, large-value thresholds, frameworks (ISO 20022 · DORA · NIS2 · FATF · PSD2); attestable on the CSOAI ledger.
Run
pip install -e .
python server.py # stdio MCP server
The win: legacy payment message → CSOAI governance/attestation → ONE OS, without disruption. Pairs with dora-compliance-mcp + dora-nis2-crosswalk-mcp.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption