ai.duvera/gateway
REMOTE · APP.DUVERA.AI · SCANNED SEP 20
Governed AI actions with signed, verifiable receipts: free keyless reads, human-approved writes.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 52 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability80
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 3630 tokens (~69/item across 52 items; 52 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 52 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 52 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities40
- Spec-recency check failed: implements MCP spec 2025-03-26; the latest is 2026-07-28. See how to fix → Fail
How do I install the ai.duvera/gateway MCP server?
ai.duvera/gateway is a hosted endpoint at https://app.duvera.ai/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · app.duvera.ai
claude mcp add --transport http ai-duvera-gateway 'https://app.duvera.ai/mcp'
{
"mcpServers": {
"ai-duvera-gateway": {
"url": "https://app.duvera.ai/mcp"
}
}
} {
"servers": {
"ai-duvera-gateway": {
"type": "http",
"url": "https://app.duvera.ai/mcp"
}
}
} [mcp_servers.ai-duvera-gateway] url = "https://app.duvera.ai/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ai-duvera-gateway": {
"type": "remote",
"url": "https://app.duvera.ai/mcp",
"enabled": true
}
}
} openclaw mcp add ai-duvera-gateway --url 'https://app.duvera.ai/mcp' --transport streamable-http
mcp_servers:
ai-duvera-gateway:
url: "https://app.duvera.ai/mcp" {
"McpServers": {
"ai-duvera-gateway": {
"Transport": "http",
"Url": "https://app.duvera.ai/mcp"
}
}
} assistant mcp add ai-duvera-gateway -t streamable-http -u 'https://app.duvera.ai/mcp'
{
"mcpServers": {
"ai-duvera-gateway": {
"type": "http",
"url": "https://app.duvera.ai/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 26 Aug 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Aug 26 +1
- Stability: 0.97 → pass security
- 23 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Aug 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 31 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 27 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Jul 26 0
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Probed https://app.duvera.ai/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=app.duvera.ai | CN=YE1,O=Let's Encrypt,C=US | 27 Jul 2026 | 25 Oct 2026 | ECDSA 256 | ECDSA-SHA384 | 68237eb991bf56bc3ce6b44b1cde6fc0a70 |
| SANs: app.duvera.ai | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of app.duvera.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 3799 | 8 | Verified |
| duvera.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://app.duvera.ai/mcp | Verified | 200 | |
| http (plaintext) | http://app.duvera.ai/mcp | HTTPS enforced | 301 | https://app.duvera.ai/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
amazon__package_track ~51
[amazon · risk:low] Look up the delivery status of an Amazon order (read-only)
| Name | Type | Req | Description |
|---|---|---|---|
| order_id | string | – | The order or tracking id to look up (defaults to most recent) |
No output schema declared.
No examples provided.
applehealth__heart_rate_read ~68
[applehealth · risk:medium] Read heart-rate data from Apple Health
| Name | Type | Req | Description |
|---|---|---|---|
| end | string | – | ISO-8601 end of the query window (defaults to now) |
| start | string | – | ISO-8601 start of the query window (defaults to today) |
No output schema declared.
No examples provided.
applehealth__sleep_read ~68
[applehealth · risk:medium] Read sleep-analysis data from Apple Health
| Name | Type | Req | Description |
|---|---|---|---|
| end | string | – | ISO-8601 end of the query window (defaults to now) |
| start | string | – | ISO-8601 start of the query window (defaults to last night) |
No output schema declared.
No examples provided.
applehealth__steps_read ~67
[applehealth · risk:medium] Read step-count data from Apple Health
| Name | Type | Req | Description |
|---|---|---|---|
| end | string | – | ISO-8601 end of the query window (defaults to now) |
| start | string | – | ISO-8601 start of the query window (defaults to today) |
No output schema declared.
No examples provided.
bluesky__trending_get ~51
[bluesky · risk:low] Fetch the current trending topics on Bluesky. Returns topic names, display labels, and links to the topic feed. No account or API key required.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
chase__balance_check ~46
[chase · risk:low] Read the current balance of a Chase account (read-only)
| Name | Type | Req | Description |
|---|---|---|---|
| account | string | – | The Chase account to check (defaults to primary) |
No output schema declared.
No examples provided.
datadog__logs_view ~85
[datadog · risk:low] Search and read logs from Datadog over a time range
| Name | Type | Req | Description |
|---|---|---|---|
| from | string | – | Start of the time range (ISO 8601 or relative) |
| query | string | yes | Datadog log search query |
| to | string | – | End of the time range (ISO 8601 or relative) |
No output schema declared.
No examples provided.
delta__boardingpass_show ~49
[delta · risk:low] Pull up the boarding pass for a Delta flight
| Name | Type | Req | Description |
|---|---|---|---|
| confirmation_code | string | yes | Booking confirmation code |
| passenger | string | – | Passenger last name |
No output schema declared.
No examples provided.
duvera__dev_npm_package ~76
[duvera · risk:low] Look up the latest version, description, license, and dependencies of an npm package. Works for scoped packages too (e.g. "@types/node"). No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| package | string | yes | npm package name, e.g. "express" or "@types/node". |
No output schema declared.
No examples provided.
duvera__dev_pypi_package ~68
[duvera · risk:low] Look up the current version, summary, license, and homepage of a Python package on PyPI. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| package | string | yes | PyPI package name, e.g. "requests" or "fastapi". |
No output schema declared.
No examples provided.
duvera__dev_stackoverflow_search ~75
[duvera · risk:low] Search Stack Overflow questions by keyword. Returns top 5 by relevance with title, link, score, and answer status. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search terms, e.g. "goroutine leak detection" or "pandas merge on index". |
No output schema declared.
No examples provided.
duvera__finance_crypto_price ~117
[duvera · risk:low] Current spot price for one or more cryptocurrencies (CoinGecko ids like "bitcoin,ethereum,solana") in a fiat currency (default USD). Read-only market data. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| ids | string | yes | Comma-separated CoinGecko coin ids, e.g. "bitcoin" or "bitcoin,ethereum,solana". |
| vs_currencies | string | – | Comma-separated fiat/quote currencies (default "usd"), e.g. "usd,eur". |
No output schema declared.
No examples provided.
duvera__finance_exchange_rates ~35
[duvera · risk:low] Live USD exchange rates against major currencies. Read-only, no account required.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
duvera__food_recipe_search ~71
[duvera · risk:low] Search recipes by dish name (e.g. "arrabiata", "pad thai"). Returns ingredients, instructions, category, and cuisine. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Dish name to search for, e.g. "carbonara". |
No output schema declared.
No examples provided.
duvera__food_restaurant_search ~68
[duvera · risk:low] Search for restaurants and food places by name or location using OpenStreetMap. Read-only, no account required.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search query, e.g. "pizza in San Francisco" or "sushi near me". |
No output schema declared.
No examples provided.
duvera__geo_geocode ~95
[duvera · risk:low] Convert a city or place name (e.g. "Berlin", "San Francisco") to latitude/longitude, country, timezone, and population. Use this before weather.current or weather.air-quality when you only have a place name. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Place name to look up, e.g. "Berlin" or "Springfield, Illinois". |
No output schema declared.
No examples provided.
duvera__github_latest_release ~86
[duvera · risk:low] Get the latest published release (tag, name, notes, date) of a public GitHub repository. Returns 404 for repos that publish no releases. No auth required.
| Name | Type | Req | Description |
|---|---|---|---|
| owner | string | yes | Repository owner, e.g. "expressjs". |
| repo | string | yes | Repository name, e.g. "express". |
No output schema declared.
No examples provided.
duvera__github_read_file ~94
[duvera · risk:low] Read a file from a public GitHub repository. Read-only.
| Name | Type | Req | Description |
|---|---|---|---|
| owner | string | yes | Repository owner (username or org), e.g. "octocat". |
| path | string | – | File path within the repository, e.g. "README.md". Defaults to README.md. |
| repo | string | yes | Repository name, e.g. "Hello-World". |
No output schema declared.
No examples provided.
duvera__github_search_repos ~63
[duvera · risk:low] Search public GitHub repositories by keyword. Returns top 5 results by stars. No auth required.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search query (e.g. "machine learning python", "react component library"). |
No output schema declared.
No examples provided.
duvera__news_search ~69
[duvera · risk:low] Search Hacker News stories by keyword, ranked by relevance. Returns title, URL, points, author, and comment count. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search terms, e.g. "model context protocol" or "postgres performance". |
No output schema declared.
No examples provided.
duvera__news_top_stories ~34
[duvera · risk:low] Top stories from Hacker News. Read-only, no account required.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
duvera__reference_dictionary ~58
[duvera · risk:low] Definitions, phonetics, part of speech, and examples for an English word. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| word | string | yes | English word to define, e.g. "governance". |
No output schema declared.
No examples provided.
duvera__reference_public_holidays ~102
[duvera · risk:low] Public holidays for a given year and ISO country code (e.g. 2026 + "US"). Includes national and regional holidays with dates and names. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | yes | ISO 3166-1 alpha-2 country code, e.g. "US", "DE", "JP". |
| year | number | yes | Calendar year, e.g. 2026. |
No output schema declared.
No examples provided.
duvera__time_now ~88
[duvera · risk:low] Current date and time in an IANA timezone (e.g. "America/New_York", "Asia/Tokyo"). Includes day of week and DST status. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| timezone | string | yes | IANA timezone name, e.g. "America/New_York", "Europe/Berlin", "Asia/Tokyo". |
No output schema declared.
No examples provided.
duvera__travel_flight_search ~133
[duvera · risk:low] List aircraft currently airborne within a radius of a point (adsb.lol ADS-B data). Use geo.geocode to get a city's coordinates first. Returns callsign, altitude, speed, and position. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| latitude | number | yes | Latitude of the search center (e.g. 40.64 for JFK). |
| longitude | number | yes | Longitude of the search center (e.g. -73.78 for JFK). |
| radius_nm | number | yes | Search radius in nautical miles (1-250), e.g. 50. |
No output schema declared.
No examples provided.
duvera__weather_air_quality ~105
[duvera · risk:low] Current air quality (US AQI, PM2.5, PM10, ozone) for a latitude/longitude. Use geo.geocode first if you only have a place name. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| latitude | number | yes | Latitude of the location (e.g. 37.77 for San Francisco). |
| longitude | number | yes | Longitude of the location (e.g. -122.42 for San Francisco). |
No output schema declared.
No examples provided.
duvera__weather_current ~102
[duvera · risk:low] Current temperature, conditions, wind, and humidity for a latitude/longitude (Open-Meteo). Use geo.geocode first if you only have a city or place name. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| latitude | number | yes | Latitude of the location (e.g. 37.77 for San Francisco). |
| longitude | number | yes | Longitude of the location (e.g. -122.42 for San Francisco). |
No output schema declared.
No examples provided.
duvera__wiki_search ~76
[duvera · risk:low] Search Wikipedia articles by keyword. Returns matching page titles, keys, and excerpts. Pass a result's key to wiki.summary for the article summary. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search terms, e.g. "zero trust architecture" or "Ada Lovelace". |
No output schema declared.
No examples provided.
duvera__wiki_summary ~90
[duvera · risk:low] Get the lead summary of a Wikipedia article by title (e.g. "Zero_trust_architecture"). Use wiki.search first to find the exact page key. No account required.
| Name | Type | Req | Description |
|---|---|---|---|
| title | string | yes | Article title or page key, e.g. "Ada Lovelace" or "Zero_trust_architecture" (from wiki.search results). |
No output schema declared.
No examples provided.
gmail__mail_read ~44
[gmail · risk:low] Read recent emails from the Gmail inbox
| Name | Type | Req | Description |
|---|---|---|---|
| label | string | – | Optional label/folder to read from (defaults to INBOX) |
No output schema declared.
No examples provided.
google_workspace__mail_search ~51
[google-workspace · risk:low] Search Mail via Gmail, governed by Duvera.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search query, e.g. 'invoices from Acme last month'. |
No output schema declared.
No examples provided.
googlecalendar__availability_find ~80
[googlecalendar · risk:low] Find open time slots within a date range in Google Calendar
| Name | Type | Req | Description |
|---|---|---|---|
| duration_minutes | number | – | Desired slot length in minutes |
| end | string | yes | End of the search window in ISO 8601 format |
| start | string | yes | Start of the search window in ISO 8601 format |
No output schema declared.
No examples provided.
grubhub__order_track ~47
[grubhub · risk:low] Check the live status and ETA of a Grubhub order
| Name | Type | Req | Description |
|---|---|---|---|
| order_id | string | yes | Identifier of the order to track |
No output schema declared.
No examples provided.
hackernews__stories_top ~66
[hackernews · risk:low] Fetch the current list of top-story ids on Hacker News. Returns an array of item ids (resolve details via the item endpoint). No account or API key required; the hacker-news.firebaseio.com endpoint is open and unmetered.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
instacart__menu_search ~65
[instacart · risk:low] Search for grocery items and stores in the Instacart app
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search terms, e.g. "organic bananas" |
| store | string | – | Store name or id to scope the search |
No output schema declared.
No examples provided.
maps__eta_share ~61
[maps · risk:low] Share your estimated time of arrival with a contact from Apple Maps
| Name | Type | Req | Description |
|---|---|---|---|
| contact | string | yes | Contact name or number to share ETA with |
| destination | string | – | Destination address or place name for the active trip |
No output schema declared.
No examples provided.
microsoft365__calendar_list ~47
[microsoft365 · risk:low] List Calendar via Outlook Calendar, governed by Duvera.
| Name | Type | Req | Description |
|---|---|---|---|
| range | string | – | Date range, e.g. 'this week'. |
No output schema declared.
No examples provided.
microsoft365__mail_search ~53
[microsoft365 · risk:low] Search Mail via Outlook / Exchange, governed by Duvera.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search query, e.g. 'invoices from Acme last month'. |
No output schema declared.
No examples provided.
notion__notes_search ~38
[notion · risk:low] Search pages and notes in Notion by query
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search query string |
No output schema declared.
No examples provided.
obsidian__notes_search ~40
[obsidian · risk:low] Search notes in an Obsidian vault by query
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search query string |
No output schema declared.
No examples provided.
open_meteo__weather_forecast ~89
[open-meteo · risk:low] Current temperature, conditions, humidity, and wind for a latitude/longitude, from Open-Meteo.
| Name | Type | Req | Description |
|---|---|---|---|
| latitude | number | yes | Latitude of the place (e.g. 37.77 for San Francisco). |
| longitude | number | yes | Longitude of the place (e.g. -122.42 for San Francisco). |
No output schema declared.
No examples provided.
opensky__flights_live ~143
[opensky · risk:low] List aircraft currently airborne within a latitude/longitude box, from OpenSky's live ADS-B feed.
| Name | Type | Req | Description |
|---|---|---|---|
| lamax | number | yes | North edge of the box — maximum latitude (e.g. 40.9 for NYC). |
| lamin | number | yes | South edge of the box — minimum latitude (e.g. 40.6 for NYC). |
| lomax | number | yes | East edge of the box — maximum longitude (e.g. -73.7 for NYC). |
| lomin | number | yes | West edge of the box — minimum longitude (e.g. -74.1 for NYC). |
No output schema declared.
No examples provided.
postgres__sql_read ~55
[postgres · risk:low] Execute a read-only SQL query against a Postgres database
| Name | Type | Req | Description |
|---|---|---|---|
| database | string | yes | Target database name |
| query | string | yes | Read-only SQL query (SELECT) to execute |
No output schema declared.
No examples provided.
shazam__audio_identify ~46
[shazam · risk:low] Identify the song currently playing using Shazam
| Name | Type | Req | Description |
|---|---|---|---|
| duration_ms | number | – | How long to listen before identifying, in milliseconds |
No output schema declared.
No examples provided.
slack__message_search ~35
[slack · risk:low] Search recent messages across Slack channels
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search query string |
No output schema declared.
No examples provided.
southwest__flight_status ~57
[southwest · risk:low] Check the status of a Southwest flight
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | Flight date (YYYY-MM-DD) |
| flight_number | string | yes | Flight number, e.g. WN1234 |
No output schema declared.
No examples provided.
telegram__message_read ~40
[telegram · risk:low] Read recent messages from a Telegram chat
| Name | Type | Req | Description |
|---|---|---|---|
| chat | string | yes | Chat id or @username to read from |
No output schema declared.
No examples provided.
twitter__tweets_search ~114
[twitter · risk:low] Search for recent tweets matching a keyword, hashtag, or phrase using the Twitter v2 API. Pass your Twitter Bearer Token via X-Duvera-Service-Token header — Duvera never stores it. Get a free Bearer Token at developer.twitter.com.
| Name | Type | Req | Description |
|---|---|---|---|
| max_results | number | – | Number of tweets to return (10-100, default 10). |
| query | string | yes | Twitter search query. Supports operators like "from:user", "#hashtag", "-word". |
No output schema declared.
No examples provided.
uber__fare_estimate ~75
[uber · risk:low] Estimate the fare for a trip in the Uber app
| Name | Type | Req | Description |
|---|---|---|---|
| destination | string | yes | Drop-off address or place name |
| pickup | string | – | Pickup address (defaults to current location) |
| product | string | – | Ride product, e.g. UberX, Comfort, Black |
No output schema declared.
No examples provided.
united__flight_status ~55
[united · risk:low] Check the status of a United flight
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | Flight date (YYYY-MM-DD) |
| flight_number | string | yes | Flight number, e.g. UA123 |
No output schema declared.
No examples provided.
What is the ai.duvera/gateway MCP server?
ai.duvera/gateway is an MCP server listed in the public MCP registry as ai.duvera/gateway. Governed AI actions with signed, verifiable receipts: free keyless reads, human-approved writes. This page covers its hosted endpoint (https://app.duvera.ai/mcp).
Is the ai.duvera/gateway MCP server safe to use?
ai.duvera/gateway scores 77 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the ai.duvera/gateway MCP server expose?
ai.duvera/gateway exposes 52 tools: amazon__package_track, applehealth__heart_rate_read, applehealth__sleep_read, applehealth__steps_read, bluesky__trending_get, and 47 more. Their descriptions and schemas cost roughly 3,630 tokens of context every time the server is loaded.
Does the ai.duvera/gateway MCP server require authentication?
No. We connected to ai.duvera/gateway without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the ai.duvera/gateway MCP server still maintained?
ai.duvera/gateway is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.