cmbs.loan: CMBS loan rates, lenders and servicing
REMOTE · CMBS.LOAN
CMBS rates, lenders, underwriting, maturity wall and loan sizing from SEC data; servicing rules.
Available components
Last scanned (14 hours ago)
Scores higher than 57% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security74
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability63
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2128 tokens (~236/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
- Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Checks we ran (13)
- TLS certificate
- Authorization
- HTTPS
- HSTS header
- DNSSEC
- Transport
- Schema quality
- Stability
- Tool coverage
- Injection markers
- Destructive annotations
- Judged manipulation
- MCP protocol
Does not apply to this hosted endpoint (2)
- Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
- Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
The score does not measure everything. What the score does not measure →
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 2 Nov 26 0
- Stability: unverified → 0.03 ▲ functional
- 1 Nov 26 69
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://cmbs.loan/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=cmbs.loan | CN=WE1,O=Google Trust Services,C=US | 24 Oct 2026 | 22 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | 3d565ddc364b6869130f334eb83b9968 |
| SANs: cmbs.loan | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of cmbs.loan. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | Trust anchor | 20326, 38696 | 8, 8 | Verified |
| loan. | DS published | 61084 | 8 | Verified |
| cmbs.loan. | No DS | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://cmbs.loan/mcp | Verified | 200 | |
| http (plaintext) | http://cmbs.loan/mcp | HTTPS enforced | 301 | https://cmbs.loan/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
calculate_appraisal_reduction CMBS appraisal reduction amount ~237
Appraisal Reduction Amount for a delinquent CMBS loan from a new appraisal, using the formula in a 2025 pooling and servicing agreement: balance minus (90% of appraised value + reserves - unpaid interest, advances and other amounts due). Returns the value side, the reduction, the share of scheduled interest the servicer keeps advancing, and the 25% deemed reduction that applies if no appraisal arrives in time.
| Name | Type | Req | Description |
|---|---|---|---|
| advances | number | – | Unreimbursed P&I and servicing advances, with interest, in dollars. Default 0. |
| appraised_value | number | yes | New appraised value in dollars, e.g. 28000000. |
| balance | number | yes | Loan balance in dollars, e.g. 30000000. |
| other_due | number | – | Unpaid taxes, insurance, ground rent, special servicing fees and other amounts due, in dollars. Default 0. |
| reserves | number | – | Escrows, reserves and letters of credit in dollars. Default 0. |
| unpaid_interest | number | – | Unpaid interest at the mortgage rate in dollars. Default 0. |
No output schema declared.
No examples provided.
estimate_special_servicing_fees Estimate CMBS special servicing fees ~308
Special servicing, workout and liquidation fees on a CMBS loan for one outcome (loan corrected and paid at maturity, refinanced within 120 days of a missed maturity, or liquidated/discounted payoff), using the fee terms of a real 2025 pooling and servicing agreement: 0.25%/yr with a $3,500 monthly minimum, 1% workout fee with a $25,000 minimum, 1% to 3% liquidation fee. Returns each fee, the monthly fee and the total.
| Name | Type | Req | Description |
|---|---|---|---|
| balance | number | yes | Loan balance in dollars, e.g. 18000000. |
| months_in_special_servicing | integer | yes | Months the loan spends with the special servicer, e.g. 9. |
| months_to_maturity | integer | – | Months from the loan's return to maturity, e.g. 30. Needed for outcome "corrected". |
| note_rate_pct | number | – | Note rate in percent, e.g. 4.5. Needed for outcome "corrected" (the workout fee applies to interest collections). |
| outcome | string | yes | corrected = three on-time payments, the loan returns and pays off at maturity; refi120 = missed balloon only, refinanced or repaid within 120 days of maturity; payoff = discounted payoff, note sale,… |
| proceeds | number | – | Payoff or liquidation proceeds in dollars. Needed for outcome "payoff". |
No output schema declared.
No examples provided.
find_cmbs_lenders Find CMBS lenders ~195
CMBS originators ranked by loan volume over the last 12 months, from the originator named on each loan in the trusts' SEC filings. Filter by property type, state and loan amount (keeps lenders whose securitized loan sizes span it). Returns volume, loan count, size range, median rate, leverage and a page per lender.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | How many lenders to return, 1 to 30. Default 10. |
| loan_amount | number | – | Loan amount in dollars, e.g. 12000000. |
| property_type | string | – | Property type: multifamily, retail, office, hotel, self-storage, industrial, mixed-use, mobile-home-park, co-op, healthcare. Omit for all types. |
| state | string | – | US state as a two-letter code (TX) or a name (Texas). Omit for all states. |
No output schema declared.
No examples provided.
get_cmbs_lender One CMBS lender's book ~113
One CMBS originator's securitized book from SEC filings: 12- and 24-month volume, loan sizes, median rate, leverage, property types, states and its most recent loans (property, city, amount, rate, term, trust). Give the lender's name or slug, e.g. "Citi" or "wells-fargo".
| Name | Type | Req | Description |
|---|---|---|---|
| lender | string | yes | Lender name or slug, e.g. "Goldman Sachs" or "goldman-sachs". |
No output schema declared.
No examples provided.
get_cmbs_maturity_wall CMBS maturity wall ~149
CMBS loans still reporting, by maturity year: count, balance, average note rate and the share whose NOI at securitization is under 9% of today's balance (a rough refinance-gap proxy), compared with today's median new-loan rate. Overall, by property type or by state (one filter at a time).
| Name | Type | Req | Description |
|---|---|---|---|
| property_type | string | – | Property type: multifamily, retail, office, hotel, self-storage, industrial, mixed-use, mobile-home-park, co-op, healthcare. Omit for all types. |
| state | string | – | US state as a two-letter code (TX) or a name (Texas). Omit for all states. |
No output schema declared.
No examples provided.
get_cmbs_rates Current CMBS loan rates ~125
Median original note rates on CMBS loans securitized in the last 90 days, 180 days and 12 months, from SEC Form ABS-EE loan data, overall or for one property type, with the middle half, loan counts, the 5- vs 10-year split and recent months. Rates on closed loans, not a quote.
| Name | Type | Req | Description |
|---|---|---|---|
| property_type | string | – | Property type: multifamily, retail, office, hotel, self-storage, industrial, mixed-use, mobile-home-park, co-op, healthcare. Omit for all types. |
No output schema declared.
No examples provided.
get_cmbs_underwriting CMBS underwriting medians ~115
What CMBS lenders actually underwrote in the last 12 months, from SEC loan data: loan size, loan to value, debt service coverage, debt yield and occupancy (median and percentiles), interest-only share and 5/10-year term mix, overall or for one property type.
| Name | Type | Req | Description |
|---|---|---|---|
| property_type | string | – | Property type: multifamily, retail, office, hotel, self-storage, industrial, mixed-use, mobile-home-park, co-op, healthcare. Omit for all types. |
No output schema declared.
No examples provided.
size_cmbs_loan Size a CMBS loan ~359
Maximum CMBS loan on a property under the three sizing tests lenders apply, and which one binds: loan to value x value, NOI / (DSCR x annual debt constant at the rate and amortization, or the rate if interest-only), and NOI / debt yield. Limits you omit default to what recent CMBS loans stayed within (90th percentile LTV, 10th percentile DSCR and debt yield, by property type), and the rate to the 90-day median.
| Name | Type | Req | Description |
|---|---|---|---|
| amortization_years | integer | – | Amortization schedule in years. Required when interest_only is false. |
| interest_only | boolean | – | true = interest-only for the full term (most recent CMBS loans). Default true. |
| max_ltv_pct | number | – | Maximum loan to value in percent, e.g. 65. |
| min_debt_yield_pct | number | – | Minimum debt yield in percent, e.g. 8.5. |
| min_dscr | number | – | Minimum debt service coverage ratio, e.g. 1.30. |
| noi | number | yes | Underwritten net operating income (or net cash flow) per year in dollars, e.g. 1800000. |
| property_type | string | – | Property type: multifamily, retail, office, hotel, self-storage, industrial, mixed-use, mobile-home-park, co-op, healthcare. Omit for all types. |
| property_value | number | yes | Appraised value or purchase price in dollars, e.g. 25000000. |
| rate_pct | number | – | Note rate in percent, e.g. 6.5. Default: the 90-day median CMBS rate for the property type. |
No output schema declared.
No examples provided.
special_servicing_timeline CMBS special servicing timeline ~140
The contractual sequence after a missed monthly payment or a missed balloon on a CMBS loan, day by day: transfer to the special servicer, SEC delinquency status codes, the appraisal reduction trigger and deadline, the 120-day maturity window, each with its PSA section. Give days_elapsed to get which events have already been triggered and the next one with days remaining.
| Name | Type | Req | Description |
|---|---|---|---|
| days_elapsed | integer | – | Days since the missed payment due date or the maturity date. Omit to get the full sequence. |
| trigger | string | yes | missed_payment = a monthly payment went unpaid; missed_balloon = the loan was not repaid at maturity. |
No output schema declared.
No examples provided.
How do I install the cmbs.loan: CMBS loan rates, lenders and servicing MCP server?
cmbs.loan: CMBS loan rates, lenders and servicing is a hosted endpoint at https://cmbs.loan/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · cmbs.loan
claude mcp add --transport http loan-cmbs-cmbs-loan 'https://cmbs.loan/mcp'
What is the cmbs.loan: CMBS loan rates, lenders and servicing MCP server?
cmbs.loan: CMBS loan rates, lenders and servicing is an MCP server listed in the public MCP registry as loan.cmbs/cmbs-loan. CMBS rates, lenders, underwriting, maturity wall and loan sizing from SEC data; servicing rules. This page covers its hosted endpoint (https://cmbs.loan/mcp).
Is the cmbs.loan: CMBS loan rates, lenders and servicing MCP server safe to use?
cmbs.loan: CMBS loan rates, lenders and servicing scores 71 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the cmbs.loan: CMBS loan rates, lenders and servicing MCP server expose?
cmbs.loan: CMBS loan rates, lenders and servicing exposes 9 tools: special_servicing_timeline, estimate_special_servicing_fees, calculate_appraisal_reduction, get_cmbs_rates, get_cmbs_underwriting, and 4 more. Their descriptions and schemas cost roughly 1,741 tokens of context every time the server is loaded.
Does the cmbs.loan: CMBS loan rates, lenders and servicing MCP server require authentication?
No. We connected to cmbs.loan: CMBS loan rates, lenders and servicing without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the cmbs.loan: CMBS loan rates, lenders and servicing MCP server still maintained?
cmbs.loan: CMBS loan rates, lenders and servicing is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What did VerifyMCP test on the cmbs.loan: CMBS loan rates, lenders and servicing MCP server?
VerifyMCP ran 13 checks on cmbs.loan: CMBS loan rates, lenders and servicing, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.