Official MCP server: EU VAT validation via VIES, plus offline rates and format checks.
Risky behavior the analysis could not rule out.
The sample .mcp.json launches the server via `npx -y vatnode-mcp` with no version pin, so each launch fetches whatever the latest published package is without confirmation; this is the standard install pattern for an npm-distributed MCP server and is not shown to be malicious.
"command": "npx",
The API base URL can be overridden by the VATNODE_API_URL environment variable, so the VATNODE_API_KEY bearer token and the VAT IDs would be sent to whatever host is configured; this needs a user-controlled environment and is otherwise a documented core flow.
const API_BASE = process.env.VATNODE_API_URL ?? 'https://api.vatnode.dev'
