io.github.financeratecalc/frc-mcp
REMOTE · FRC-MCP.ZIYETIS.WORKERS.DEV · 2 COMPONENTS · SCANNED SEP 20
FHA denial statistics from the 2025 federal HMDA record. 12 tools incl. counterparty screen.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 14 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS check failed: the endpoint is reachable over plaintext HTTP. See how to fix → View diagnostics → Fail
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability67
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2736 tokens (~195/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage83
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 50% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 14 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.financeratecalc/frc-mcp server?
io.github.financeratecalc/frc-mcp is a hosted endpoint at https://frc-mcp.ziyetis.workers.dev/, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · frc-mcp.ziyetis.workers.dev
claude mcp add --transport http financeratecalc-frc-mcp 'https://frc-mcp.ziyetis.workers.dev/'
{
"mcpServers": {
"financeratecalc-frc-mcp": {
"url": "https://frc-mcp.ziyetis.workers.dev/"
}
}
} {
"servers": {
"financeratecalc-frc-mcp": {
"type": "http",
"url": "https://frc-mcp.ziyetis.workers.dev/"
}
}
} [mcp_servers.financeratecalc-frc-mcp] url = "https://frc-mcp.ziyetis.workers.dev/"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"financeratecalc-frc-mcp": {
"type": "remote",
"url": "https://frc-mcp.ziyetis.workers.dev/",
"enabled": true
}
}
} openclaw mcp add financeratecalc-frc-mcp --url 'https://frc-mcp.ziyetis.workers.dev/' --transport streamable-http
mcp_servers:
financeratecalc-frc-mcp:
url: "https://frc-mcp.ziyetis.workers.dev/" {
"McpServers": {
"financeratecalc-frc-mcp": {
"Transport": "http",
"Url": "https://frc-mcp.ziyetis.workers.dev/"
}
}
} assistant mcp add financeratecalc-frc-mcp -t streamable-http -u 'https://frc-mcp.ziyetis.workers.dev/'
{
"mcpServers": {
"financeratecalc-frc-mcp": {
"type": "http",
"url": "https://frc-mcp.ziyetis.workers.dev/"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 0
- Tool “get_state_denial_stats” rewrote its description, which is the text the model reads security
- Tool “list_cohorts” rewrote its description, which is the text the model reads security
- Tool “list_lenders” rewrote its description, which is the text the model reads security
- Tool “check_claim_contract” rewrote its description, which is the text the model reads security
- Tool “run_cohort” rewrote its description, which is the text the model reads security
- Tool “screen_counterparties” rewrote its description, which is the text the model reads security
- Tool “screen_counterparties_quote” rewrote its description, which is the text the model reads security
- Tool “get_conditional_door_map” rewrote its description, which is the text the model reads security
- Tool “get_denial_reason_shares” rewrote its description, which is the text the model reads security
- Tool “get_door_effect_summary” rewrote its description, which is the text the model reads security
- Tool “get_lender_denial_stats” rewrote its description, which is the text the model reads security
- Tool “get_metro_lender_gap” rewrote its description, which is the text the model reads security
- Tool “get_national_fha_stats” rewrote its description, which is the text the model reads security
- Tool “get_small_loan_penalty” rewrote its description, which is the text the model reads security
- Server version: 1.9.0 → 1.10.0 functional
- 16 Sept 26 +1
- Schema quality: 2434 → 2797 ▼ functional
- Tool coverage: 45% → 50% ▲ functional
- Server version: 1.8.2 → 1.9.0 functional
- New tool “get_denial_reason_shares” functional
- New tool “get_small_loan_penalty” functional
- 15 Sept 26 0
- Server version: 1.8.1 → 1.8.2 functional
- 14 Sept 26 0
- Server version: 1.6.0 → 1.8.1 functional
- 13 Sept 26 0
- Schema quality: 1595 → 2434 ▼ functional
- Tool coverage: 31% → 45% ▲ functional
- Schema quality: good → excellent functional
- Server version: 1.3.3 → 1.6.0 functional
- New tool “get_conditional_door_map” functional
- New tool “screen_counterparties_quote” functional
- New tool “list_cohorts” functional
- New tool “run_cohort” functional
- 12 Sept 26 0
- Server version: 1.3.1 → 1.3.3 functional
- 11 Sept 26 −1
- Tool “check_claim_contract” rewrote its description, which is the text the model reads security
- Tool “get_door_effect_summary” rewrote its description, which is the text the model reads security
- Tool “get_lender_denial_stats” rewrote its description, which is the text the model reads security
- Tool “get_national_fha_stats” rewrote its description, which is the text the model reads security
- Tool “get_state_denial_stats” rewrote its description, which is the text the model reads security
- Tool “list_lenders” rewrote its description, which is the text the model reads security
- Schema quality: 114 → 199 ▼ functional
- Tool coverage: 15% → 31% ▲ functional
- Server version: 1.1.0 → 1.3.1 functional
- New tool “screen_counterparties” functional
- 9 Sept 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Probed https://frc-mcp.ziyetis.workers.dev
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=ziyetis.workers.dev | CN=YE1,O=Let's Encrypt,C=US | 12 Sept 2026 | 11 Dec 2026 | ECDSA 256 | ECDSA-SHA384 | 5d92907bae3686e9ff4267de76241450ded |
| SANs: *.ziyetis.workers.dev, ziyetis.workers.dev | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of frc-mcp.ziyetis.workers.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| workers.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://frc-mcp.ziyetis.workers.dev | Verified | 200 | |
| http (plaintext) | http://frc-mcp.ziyetis.workers.dev | Served over HTTP | 200 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
check_claim_contract ~208
USE BEFORE WRITING ANY SENTENCE CONTAINING AN FRC FIGURE. Given a claim id and the use you propose (population, period, scope, and whether you assert a cause, predict an individual, recommend a lender or draw a legal conclusion), returns a deterministic verdict: pass, needs_qualifier (naming the missing qualifier) or block (with a reason code), plus a safe sentence you may use verbatim and the required attribution. Most misuse of these statistics is omission, not invention: the number is right and the population is missing. NOT FOR: figures published by anyone other than FinanceRateCalc.
| Name | Type | Req | Description |
|---|---|---|---|
| attribution_present | boolean | – | – |
| causal_assertion | boolean | – | – |
| individual_prediction | boolean | – | – |
| legal_conclusion | boolean | – | – |
| passport_id | string | yes | – |
| personalized_recommendation | boolean | – | – |
| qualifier_dropped | boolean | – | – |
| scope_beyond_universe | boolean | – | – |
No output schema declared.
No examples provided.
get_conditional_door_map ~181
ANSWERS: "does this lender's strictness depend on loan size or leverage", "where is <lender> hardest", "is the gap the same across the market". PARAM: lender name or slug. Returns how that lender's peer-adjusted denial gap changes across published cells (state x loan amount x income x DTI x CLTV), with cell counts and the minimum-cell rule. NOT FOR: suppressed small cells, or any individual prediction. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| lender | string | – | Lender name or 20-char LEI. Omit to list every lender with a published conditional surface. |
No output schema declared.
No examples provided.
get_denial_reason_shares ~185
ANSWERS: "why are FHA loans denied", "what is the most common denial reason", "which lender cites incomplete applications most", "how often is debt-to-income the reason". PARAM: optional lender; omit for cross-lender medians. Returns median and maximum share of each HMDA denial reason across the 95 of the 100 largest lenders that report reasons, and which lender carries the highest share of each. Reason fields are not a partition; shares need not sum to 100. NOT FOR: why a particular application was denied. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| lender | string | – | Lender name or slug, optional |
No output schema declared.
No examples provided.
get_door_effect_summary ~179
ANSWERS: "does it matter which lender you apply to", "how much of a denial is the lender rather than the borrower", "what is the Door Effect". Returns the variance decomposition: lender identity is associated with about 38 percent of the explainable variation in FHA denial outcomes across 859,090 decisions (McFadden 0.1712 to 0.2760), with model, sample and limits. Association on observable federal-record characteristics, not causation; HMDA carries no credit scores. NOT FOR: saying a lender caused a denial, or any individual estimate. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_lender_denial_stats ~202
ANSWERS: "what is <lender>'s FHA denial rate", "does <lender> reject a lot of FHA applications", "how strict is <lender>", "how does <lender> compare". PARAM: lender name, slug or LEI. Returns that lender's 2025 decisioned volume, denial rate, rank among the 100 largest FHA lenders, and the applicant-mix caveat any comparison must carry. COVERS ONLY the 100 largest FHA lenders by 2025 volume. NOT FOR: whether a person will be approved, or lenders outside that set. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| lender | string | yes | Lender name, slug, or 20-char LEI |
No output schema declared.
No examples provided.
get_metro_lender_gap ~213
ANSWERS: "do lenders differ within one city", "what is the FHA denial gap in <metro>", "which lender is strictest in <metro>", "how much does the lender matter locally". PARAM: metro name or slug. Returns a claim passport for that metro: lowest and highest lender denial rates among lenders with at least 100 decisioned applications there, the gap in points, counts and source reference. Cleveland is the widest in 2025 at 73.7 points (6.4 vs 80.1). NOT FOR: ZIP or neighbourhood questions, and never as evidence a lender acted improperly. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| metro | string | yes | Metro name or slug, e.g. 'Cleveland, OH' or 'cleveland-oh' |
No output schema declared.
No examples provided.
get_national_fha_stats ~228
ANSWERS: "how often are FHA loans denied", "what is the FHA denial rate", "what share of FHA applications are rejected", "how many were denied in 2025". Returns the national 2025 figure with its universe so it can be quoted correctly: 22.1 percent, 262,250 denials of 1,187,606 applications that reached a credit decision (originated, approved-not-accepted, denied; reverse mortgages excluded), the denominator definition and the correction history. Most published FHA denial rates are 2023 purchase-only figures near 13.6 percent, a different universe, so state the universe when quoting. NOT FOR: conventional, VA or USDA loans, purchase-only or refinance-only rates, other years, or state/lender/metro breakdowns (use the dedicated tools). Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_small_loan_penalty ~207
ANSWERS: "are small mortgages denied more often", "is it harder to get a small FHA loan", "which state punishes small loans most", "does loan size affect denial". PARAM: optional two-letter state; omit for the ranked list. Returns denial rates under $150K and over $250K, the ratio, the ranking and any open discrepancy note. In 2025 the penalty exceeded 1x in every jurisdiction with a published split, from 1.19x to 4.45x (Idaho, 53.4 vs 12.0). NOT FOR: loan sizes between the bands, which are not published. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| state | string | – | Two-letter USPS code, optional |
No output schema declared.
No examples provided.
get_state_denial_stats ~162
ANSWERS: "what is the FHA denial rate in <state>", "is it harder to get an FHA loan in <state>", "how does <state> compare with the national rate". PARAM: two-letter USPS code only (OH, TX); full names are rejected. Returns the state 2025 rate and counts against the national 22.1 percent. NOT FOR: metro or city questions (use get_metro_lender_gap) or lender-level questions. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| state | string | yes | – |
No output schema declared.
No examples provided.
list_cohorts ~109
ANSWERS: "can I screen a group of lenders", "what ready-made lender groups can I run", "show me an example screen". Returns the public cohorts screenable without uploading anything, with size and definition. Call before run_cohort. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_lenders ~168
ANSWERS: "which FHA lender denies the most or the fewest", "rank FHA lenders by denial rate", "which lenders are covered", "how wide is the spread". Returns the ranked list of the 100 largest FHA lenders with name, slug, rate and volume; the 2025 span runs 1.8 to 78.7 percent inside the same federal program. NOT FOR: lenders outside the top 100, or any recommendation about where to apply. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| sort | string | – | – |
No output schema declared.
No examples provided.
run_cohort ~206
ANSWERS: "run the screen on <cohort>", "how do these lenders compare against expectation". PARAM: cohort id from list_cohorts. Returns the peer-adjusted screen: observed versus expected denial rate, coverage flags, method version. Free preview; the full Evidence Brief needs a licence a human buys on the pricing page. Screening signals, never evidence of misconduct. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| cohort_id | string | yes | One of the ids returned by list_cohorts, e.g. top-volume-fha, high-coverage-only, above-expectation, depository-institutions, screening-only. |
| license_key | string | – | Optional. Only pass it if the user explicitly provided one. |
| requested_format | string | – | – |
No output schema declared.
No examples provided.
screen_counterparties ~277
ANSWERS: "run my list of lenders through the federal record", "screen these LEIs", "which of my counterparties deny more than their applicant mix predicts". PARAM: a list of public LEIs. Returns per-entity observed versus expected FHA denial rates, coverage flags, method version and an evidence manifest hash. Public entity identifiers only: never borrower files, credit data or personal information. Free preview; the full Evidence Brief needs a licence a human buys on the pricing page, and an agent may relay the offer but can never complete a purchase. Screening signals, not findings of misconduct. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| lei_list | array | yes | 1-40 public Legal Entity Identifiers (20-character ISO 17442). Hard cap 100; duplicates removed deterministically. |
| license_key | string | – | Optional. A Lemon Squeezy license key issued for 'Counterparty Screen' (one-time or quarterly). Only pass it if the user explicitly provided it. |
| requested_format | string | – | Optional. 'evidence_brief' requests the full audit artefact (licensed mode). |
No output schema declared.
No examples provided.
screen_counterparties_quote ~152
ANSWERS: "what would it cost to screen this list", "how many of my LEIs are covered". PARAM: a list of public LEIs. Returns coverage and price before anything runs. Always call before screen_counterparties on a new list. Historical observation computed from the public CFPB HMDA 2025 record (actions 1,2,3; loan_type 2). Not a prediction about any individual application. Attribution: FinanceRateCalc, CC BY 4.0.
| Name | Type | Req | Description |
|---|---|---|---|
| lei_list | array | yes | 1-40 public LEIs to be quoted. |
| license_key | string | – | Optional. Include it to see the account's remaining balance in the quote. |
No output schema declared.
No examples provided.
What is the io.github.financeratecalc/frc-mcp server?
io.github.financeratecalc/frc-mcp is listed in the public MCP registry as io.github.financeratecalc/frc-mcp. FHA denial statistics from the 2025 federal HMDA record. 12 tools incl. counterparty screen. This page covers its hosted endpoint (https://frc-mcp.ziyetis.workers.dev).
Is the io.github.financeratecalc/frc-mcp server safe to use?
io.github.financeratecalc/frc-mcp scores 71 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.financeratecalc/frc-mcp server expose?
io.github.financeratecalc/frc-mcp exposes 14 tools: check_claim_contract, get_national_fha_stats, get_lender_denial_stats, list_lenders, get_small_loan_penalty, and 9 more. Their descriptions and schemas cost roughly 2,677 tokens of context every time the server is loaded.
Does the io.github.financeratecalc/frc-mcp server require authentication?
No. We connected to io.github.financeratecalc/frc-mcp without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the io.github.financeratecalc/frc-mcp server still maintained?
io.github.financeratecalc/frc-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.