POST /v1/validateis live. No API key. 30 validations per IP per hour, 200 per UTC day, 2 MB maximum. The JSON report isvalid,format,version,errors, andwarnings. Over the limit: HTTP 429 withRetry-AfterandX-RateLimit-*headers.- API docs, OpenAPI, llms.txt, and llms-full.txt describe that free tier. Higher limits and API keys stay on the waitlist, planned from EUR 79/month.
POST /api/validateis unchanged. robots.txt still disallows/api/and disallows crawling/v1/validate. Docs pages stay allowed.- Sample pain.001 files with dummy IBANs, plus this changelog.
- Supported / not supported table on the homepage and /validate. pain.001.001.11, pain.008, and camt are not supported yet.
- FAQ on the homepage, with WebAPI and FAQPage structured data.
- security.txt and robots.txt groups that allow AI crawlers on the public pages.
Changelog
What changed
Dated from the site history. Validation rules themselves last changed on 12 September 2026.
- Robots, sitemap, self-referencing canonicals, unique titles and descriptions, and homepage JSON-LD.
- Homepage canonical uses a relative path.
- First-party page-view events. The Google Ads tag was removed. /favicon.ico redirects to the icon.
- First public release: free pain.001.001.03 and pain.001.001.09 checks, CSV to pain.001.001.03, and the API / Batch waitlist.