Model Context Protocol (MCP) server exposing the pain001 ISO 20022 Customer Credit Transfer Initiation library as agent tools.
Project description
pain001-mcp
Model Context Protocol server exposing the pain001 ISO 20022 payment library as 16 first-class agent tools.
Contents
Getting started
- What is pain001-mcp? — the problem it solves
- Install — PyPI, virtualenv, Docker
- Quick start — register with Claude Desktop in 30 seconds
Library reference
- Tools — the 16 tools, one resource, one prompt
- Using the tools — call them in-process from Python
- The pain001 suite — core lib, MCP server, LSP server
Operational
- When not to use pain001-mcp — honest boundaries
- Development — gates, make targets
- Security — sandboxing posture
- Documentation — examples, guides
- Contributing — how to get changes in
- License — Apache-2.0
What is pain001-mcp?
The Model Context Protocol (MCP) is
an open standard that lets AI agents discover and call external tools in
a uniform way. pain001-mcp is the MCP server that turns the
pain001 ISO 20022
payment library into 16 first-class agent tools — so an assistant can
generate and validate pain.001 Customer Credit Transfer Initiation
and pain.008 Customer Direct Debit Initiation messages (the
standardised payment instructions behind SEPA and cross-border credit
transfers) directly from a conversation.
Every tool is a thin, typed wrapper over the pain001 public API
(validators, schema loaders, generate_xml_string, parsers, the version
mapper, the ISO 20022 charset sanitiser), so all interfaces behave
identically to the CLI, REST API, and in-tree MCP server. Tools return
JSON-serialisable data; on a validation error they return an
{"error": ...} payload rather than raising.
| Concern | How pain001-mcp handles it |
|---|---|
| Transport | stdio (FastMCP default); zero config beyond the client manifest |
| Schema fidelity | Tools delegate to pain001's XSD-validated generator |
| Identifier validation | validate_identifier checks IBAN (ISO 13616 / mod-97) and BIC |
| Cross-version mapping | migrate_records round-trips data between pain.001.001.03 and .12 |
| Charset compliance | sanitize_to_iso20022_charset transliterates outside-set characters |
| Error surface | Validation failures return structured {"error": ...}, never tracebacks |
Install
| Channel | Command | Notes |
|---|---|---|
| PyPI | pip install pain001-mcp |
Pulls in pain001 >= 0.0.53 + MCP SDK |
| Source | git clone https://github.com/sebastienrousseau/pain001-mcp && cd pain001-mcp && poetry install |
For development |
| Docker (GHCR) | docker pull ghcr.io/sebastienrousseau/pain001-mcp:latest |
Multi-arch (linux/amd64, linux/arm64); runs pain001-mcp over stdio |
Requires Python 3.10 or later. Works on macOS, Linux, and Windows.
Using an isolated virtual environment (recommended)
python -m venv venv
source venv/bin/activate # macOS/Linux
venv\Scripts\activate # Windows
python -m pip install -U pain001-mcp
Quick start
Register the server with any MCP client (Claude Desktop shown):
{
"mcpServers": {
"pain001": { "command": "pain001-mcp" }
}
}
That's it. Restart the client and the 16 tools are available to the agent. To check the server starts cleanly before wiring an editor:
pain001-mcp --help
# -> usage: pain001-mcp [-h] ...
The server speaks LSP-style JSON-RPC over stdin/stdout — it is meant to be launched by an MCP client, not used interactively.
Tools
All 16 tools delegate to the pain001 public API, so they behave
identically to the CLI and REST API.
| Tool | Purpose |
|---|---|
list_supported_versions |
List the supported pain.001 / pain.008 message versions |
get_required_fields |
Required input fields for a message type |
get_input_schema |
Full input JSON Schema for a message type |
inspect_template |
Template metadata + accepted formats for a message type |
validate_records |
Validate flat records against a message type |
validate_payment_data |
Same as above, JSON-RPC-friendly signature |
validate_payment_scheme |
Run a scheme rulebook (sepa-sct, sepa-sdd, sepa-inst, sepa-b2b, xborder-ct) |
validate_identifier |
Validate an IBAN or BIC |
validate_xml_against_schema |
Validate an XML payload against its bundled XSD without writing to disk |
generate_payment_file |
Generate a payment XML file from records + a path |
generate_message |
Generate a validated XML message and return the string |
generate_message_async |
Async variant of generate_message for long batches |
generate_message_from_file |
Render directly from a CSV path on disk |
list_supported_formats |
List the data formats pain001 can load (CSV, SQLite, JSON, JSONL, Parquet) |
parse_camt053 |
Parse a camt.053 bank statement XML into structured data |
parse_pain002 |
Parse a pain.002 payment-status report XML into structured data |
migrate_records |
Migrate flat records between pain.001 schema versions |
sanitize_to_iso20022_charset |
Transliterate text to the ISO 20022 Latin set |
Plus one resource and one prompt:
| Kind | Name | Purpose |
|---|---|---|
| Resource | pain001://schema/{message_type} |
Read-only access to the bundled XSD for any supported message type |
| Prompt | build_payment_batch |
Guided multi-step prompt that walks an agent through building a valid batch |
Using the tools
You can invoke the tools in-process — without a transport — straight through the FastMCP instance. This mirrors what an agent receives over stdio:
import asyncio
from pain001_mcp.server import server
# A single flat payment record satisfying pain.001.001.09.
record = [
{
"id": "MSG-0001",
"date": "2026-01-15T10:30:00",
"nb_of_txs": 1,
"ctrl_sum": 100.00,
"initiator_name": "Acme Embedded Finance Ltd",
"payment_information_id": "PMT-INFO-0001",
"payment_method": "TRF",
"batch_booking": False,
"service_level_code": "SEPA",
"requested_execution_date": "2026-01-20",
"debtor_name": "Acme Embedded Finance Ltd",
"debtor_account_IBAN": "DE89370400440532013000",
"debtor_agent_BIC": "DEUTDEFFXXX",
"charge_bearer": "SLEV",
"payment_id": "PAY-0001",
"payment_amount": 100.00,
"currency": "EUR",
"creditor_agent_BIC": "NWBKGB2LXXX",
"creditor_name": "National Westminster Bank",
"creditor_account_IBAN": "GB29NWBK60161331926819",
"remittance_information": "Invoice 0001",
}
]
async def main() -> None:
async def call(name, args):
result = await server.call_tool(name, args)
content = result[0] if isinstance(result, tuple) else result
return content[0].text if content else ""
# 1. Validate an identifier.
print(await call("validate_identifier",
{"kind": "iban", "value": "DE89370400440532013000"}))
# -> {"kind": "iban", "value": "DE89370400440532013000", "valid": true}
# 2. Sanitise text to the ISO 20022 Latin set.
print(await call("sanitize_to_iso20022_charset",
{"value": "Café Müller"}))
# -> {"value": "Café Müller", "sanitised": "Cafe Muller",
# "was_valid": false, "changed": true}
# 3. Generate a validated Customer Credit Transfer Initiation.
xml = await call("generate_message",
{"message_type": "pain.001.001.09", "records": record})
print(xml[:46])
# -> <?xml version="1.0" encoding="UTF-8"?>
# <Document ...
asyncio.run(main())
The runnable version of this snippet lives in
examples/01_mcp_tools.py. See the
examples/ folder for a validation pipeline
(02_validate_pipeline.py) and a
bank-reply parser walkthrough
(03_parse_bank_replies.py).
The pain001 suite
pain001-mcp is part of a set of independently installable packages
built around the pain001
library — pick whichever ones your stack needs:
| Package | Role |
|---|---|
pain001 |
Core library + CLI + FastAPI REST API |
pain001-mcp |
MCP server for AI agents (this package) |
pain001-lsp |
Language Server Protocol server for editors |
flowchart LR
A["MCP client<br/>(Claude Desktop, IDE, agent)"] -->|stdio| B["pain001-mcp"]
B -->|delegates to| C["pain001"]
C -->|render + validate| D["ISO 20022 pain.001 XML"]
When not to use pain001-mcp
- You're not driving an MCP-aware agent. Use the CLI
(
pain001 …) or the REST API (pain001 serve) directly — both expose the same surface with less indirection. - You need editor diagnostics, not agent tools. Use
pain001-lsp— it speaks the Language Server Protocol to VS Code, Neovim, Helix, Emacs, etc. - You need to extend the tool surface in-tree. The companion
pain001[mcp]extra exposes the same FastMCP instance and is easier to fork inside an organisation's pain001 install.
Development
pain001-mcp uses Poetry and
mise.
git clone https://github.com/sebastienrousseau/pain001-mcp.git
cd pain001-mcp
mise install
poetry install
A Makefile orchestrates the quality gates (kept in lockstep with CI):
| Target | What it runs |
|---|---|
make check |
All gates (REQUIRED before commit) |
make test |
pytest --cov=pain001_mcp --cov-branch --cov-fail-under=100 |
make lint |
ruff check + black --check |
make type-check |
mypy --strict |
make docs |
interrogate --fail-under=100 (docstring coverage) |
Current state (v0.0.53): 54 tests passing, 100% line + branch
coverage against a 100% enforced floor, mypy --strict clean,
interrogate 100%.
Security
- No filesystem writes from tools.
generate_messagereturns the XML as a string; onlygenerate_payment_filewrites, and only to a caller-supplied path. - XML parsing of
camt.053andpain.002is routed throughdefusedxml(via the corepain001library); XXE and entity expansion are rejected. - Validation failures are returned as structured
{"error": ...}payloads — never as stack traces — so the agent never sees an internal path leak. - Dependencies are pinned via
poetry.lockand audited bypip-auditand Bandit in CI.
To report a vulnerability, please use GitHub private vulnerability reporting rather than a public issue.
Documentation
- Runnable examples:
examples/ - Release history: CHANGELOG.md
- Core library docs: docs.pain001.com
- MCP specification: modelcontextprotocol.io
Contributing
Contributions are welcome — see the
contributing instructions.
Thanks to all the
contributors
who have helped build pain001-mcp.
License
Licensed under the Apache License, Version 2.0. Any contribution submitted for inclusion shall be licensed as above, without additional terms.
pain001.com · PyPI · GitHub
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file pain001_mcp-0.0.53.tar.gz.
File metadata
- Download URL: pain001_mcp-0.0.53.tar.gz
- Upload date:
- Size: 19.9 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
4dac5dd0821e0925e48bba771c983035646d7fdd1f4ad8f3c1e01b5213423147
|
|
| MD5 |
9f0a91764e8d0b38862c1cb56956e7ff
|
|
| BLAKE2b-256 |
aba2d7e0e9a1fad70f01bdba923690d438a778e3695978341f186570835792aa
|
Provenance
The following attestation bundles were made for pain001_mcp-0.0.53.tar.gz:
Publisher:
release.yml on sebastienrousseau/pain001-mcp
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
pain001_mcp-0.0.53.tar.gz -
Subject digest:
4dac5dd0821e0925e48bba771c983035646d7fdd1f4ad8f3c1e01b5213423147 - Sigstore transparency entry: 1880795068
- Sigstore integration time:
-
Permalink:
sebastienrousseau/pain001-mcp@48c4b6a1d513b1fdb1c685301ad7f79cbb87baa8 -
Branch / Tag:
refs/tags/v0.0.53 - Owner: https://github.com/sebastienrousseau
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@48c4b6a1d513b1fdb1c685301ad7f79cbb87baa8 -
Trigger Event:
push
-
Statement type:
File details
Details for the file pain001_mcp-0.0.53-py3-none-any.whl.
File metadata
- Download URL: pain001_mcp-0.0.53-py3-none-any.whl
- Upload date:
- Size: 17.1 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
6a69a4eddaeccb07dd923a0096f152c5f53dc3797bafca435a2f57de7fd84b9c
|
|
| MD5 |
8a1f0cb1c95df13b257774e19f9e2323
|
|
| BLAKE2b-256 |
90cbaf34f10214098193f6bf073c2201c66f29389caffc784e3864f4213ea6db
|
Provenance
The following attestation bundles were made for pain001_mcp-0.0.53-py3-none-any.whl:
Publisher:
release.yml on sebastienrousseau/pain001-mcp
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
pain001_mcp-0.0.53-py3-none-any.whl -
Subject digest:
6a69a4eddaeccb07dd923a0096f152c5f53dc3797bafca435a2f57de7fd84b9c - Sigstore transparency entry: 1880795303
- Sigstore integration time:
-
Permalink:
sebastienrousseau/pain001-mcp@48c4b6a1d513b1fdb1c685301ad7f79cbb87baa8 -
Branch / Tag:
refs/tags/v0.0.53 - Owner: https://github.com/sebastienrousseau
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@48c4b6a1d513b1fdb1c685301ad7f79cbb87baa8 -
Trigger Event:
push
-
Statement type: