# io.github.foxdavidson/property-mortgage-mcp

> UK mortgage calculators: stamp duty, MCOB 3A HNW qualification, and bridging loan cost.

- name: io.github.foxdavidson/property-mortgage-mcp
- version: 0.2.0
- connection class: R0 (autonomous)
- trust: 89/100
- quality: 84/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.foxdavidson%2Fproperty-mortgage-mcp
- tools: https://api.protogrid.dev/v1/servers/io.github.foxdavidson%2Fproperty-mortgage-mcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "property-mortgage-mcp": {
      "type": "http",
      "url": "https://fd-property-mortgage-mcp.fdcommercial-uk.workers.dev/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 98
- freshness: 65
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-96% ~updated-134d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 84/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 100 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 3 of 3 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 2,697 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: 50 (weight 15)

- warn `deps.known_vulns`: 1 advisory of lower severity or without a published fix: GHSA-5r4p-p66f-jhc7 in hono@4.13.9 (indirect, fixed in 4.13.11)
- fail `deps.mcp_sdk_version`: @modelcontextprotocol/sdk 1.30.1 has 3 known advisories (GHSA-22jm-h49p-29qw, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.32.0 or later
- pass `deps.resolvable`: @foxdavidson/property-mortgage-mcp@0.2.0 resolved: 98 packages

- tools: 3, about 2,697 tokens to load them all
- tool set hash: 92ec856665efb71ed96d584284e95f9f
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.foxdavidson/property-mortgage-mcp.svg)](https://protogrid.dev/servers/io.github.foxdavidson/property-mortgage-mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Dependencies

- npm @foxdavidson/property-mortgage-mcp@0.2.0: resolved, 97 dependencies, MCP SDK @modelcontextprotocol/sdk 1.30.1
  - GHSA-22jm-h49p-29qw (high) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.32.0 ``, advisory summary: "MCP TypeScript SDK: Experimental tasks were not tied to the session that created them" https://osv.dev/vulnerability/GHSA-22jm-h49p-29qw
  - GHSA-6qxp-vccf-f47h (high) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.31.0 ``, advisory summary: "MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server" https://osv.dev/vulnerability/GHSA-6qxp-vccf-f47h
  - GHSA-6prh-2h8m-c8cw (moderate) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.32.0 ``, advisory summary: "MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies" https://osv.dev/vulnerability/GHSA-6prh-2h8m-c8cw
  - GHSA-5r4p-p66f-jhc7 (moderate) in `` hono@4.13.9 ``, indirect, fixed in `` 4.13.11 ``, advisory summary: "Hono: \`serveStatic\` decodes the request path a second time, leading to bypass of middleware on static paths" https://osv.dev/vulnerability/GHSA-5r4p-p66f-jhc7

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

- https://fd-property-mortgage-mcp.fdcommercial-uk.workers.dev/mcp (streamable-http, auth none, reachable true, uptime30d 0.95652175)

## Packages

- npm @foxdavidson/property-mortgage-mcp@0.2.0

## Tools (3)

- `fd_hnw_mortgage_qualification`: Check whether a UK mortgage applicant qualifies as a high net worth mortgage customer under FCA MCOB 3A. The test passes if annual net income is at least GBP 300,000 OR net assets are at least GBP 3,000,000. The net assets test INCLUDES primary residence equity (per the literal FCA glossary G2953 and UK lender practice) and INCLUDES pension by default. Supports single applicant or joint application. Returns verdict, per-applicant test breakdown, joint household aggregate (if joint), and a routing recommendation including the relevant UK private bank list. Calculated by Fox Davidson, FCA-authorised UK mortgage brokers (FRN 600427). Use when a user asks whether they qualify for a high net worth mortgage, about MCOB 3A, the GBP 300k income or GBP 3m net assets test, private bank mortgages, or large loans against assets.
- `uk_bridging_loan_calculator`: Calculate the full cost of a UK bridging loan: total interest, arrangement and exit fees, valuation/legal/admin costs, gross facility, net advance, loan-to-value, total cost of finance and an indicative annualised cost. Supports rolled-up (compounding), retained (deducted upfront) and serviced (paid monthly) interest. Also runs the FCA MCOB 3A high net worth check: on a regulated bridge, an applicant with annual net income of at least GBP 300,000 OR net assets of at least GBP 3,000,000 can have a term up to 60 months instead of the standard 12-month cap. Calculated by Fox Davidson, FCA-authorised UK mortgage brokers (FRN 600427). Use when a user asks what a bridging loan costs, about bridging interest (rolled-up, retained or serviced), bridging LTV, regulated vs unregulated bridging, or the maximum term on a regulated bridge.
- `uk_stamp_duty_calculator`: Calculate UK stamp duty on a property purchase across England/Northern Ireland (SDLT), Scotland (LBTT) and Wales (LTT). Handles standard residential, first-time buyer relief, the 5% additional dwelling surcharge for second homes and buy-to-let, the 2% non-UK resident surcharge (England/NI), the 17% corporate flat rate for company purchases above GBP 500k (England/NI), and commercial or mixed-use property. Returns banded breakdown, total tax payable and effective rate. Uses current 2026 bands and surcharge rates. Calculated by Fox Davidson, FCA-authorised UK mortgage brokers (FRN 600427). Use when a user asks about stamp duty, SDLT, LBTT, LTT, additional dwelling surcharge, ADS, first-time buyer relief, non-resident surcharge, or tax on a specific UK property purchase.