Atlas / MCP servers / jennytate / jenny-mortgage-tools

jenny-mortgage-toolsSAFE

mcp/jennytate/jenny-mortgage-tools

Mortgage Tools by Jenny: six read-only Canadian mortgage calculators for AI assistants (remote MCP server, no sign-in). Compare renewal offers, extra payments, breaking a mortgage early and debt consolidation from your own figures. Documentation only.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
—
Transport
streamable-http
License
NOASSERTION
Stars
1
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Six Canadian mortgage calculators that an AI assistant (Claude, ChatGPT and others) can call for you. It is for homeowners and borrowers in Canada who want to compare renewal offers, extra payments, breaking a mortgage early or debt consolidation, using their own figures. Free to use, no account, no sign-in, no email.

https://mcp.jenny.mortgage/mcp

To add it: in your assistant's connector settings, add a custom (remote MCP) connector, paste the address above and leave authentication at none. Then start your message with "Use Mortgage Tools by Jenny."

Published by Jenny Tate, an Ontario mortgage agent. Results are educational scenarios, not advice, an approval or a lender quote. This repository holds documentation only.

The result card for a renewal comparison, as displayed inside an assistant. The figures are made up for the example. The card can look different in another assistant or a later version.

Contents

  • What it does
  • The six tools
  • Quick start
  • How to ask
  • A worked example
  • What it does not do
  • Accuracy and scope
  • Privacy
  • Technical details
  • Publisher
  • Support and security
  • Licence and use
  • Links

What it does

You ask a mortgage question in plain words. The assistant passes your figures to the calculators, and they return payments, interest, costs and the debt le

Read from source at commit a08281bdfa82OBSERVED · 2026-10-14
02

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeNA
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (2)

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862
streamable-http
Why it matters. a network transport with no auth environment variable found
Fix. require a token
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-10-14 · audit v0.4.1 · source sha a08281bdfa82full audit observations/trust-audit/mcp-server/jennytate__jenny-mortgage-tools.json · Report an issue / request a re-scan
03

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-14a08281bdfa82SAFEB89first audit
04

Questions

What is the jenny-mortgage-tools MCP server?

Mortgage Tools by Jenny: six read-only Canadian mortgage calculators for AI assistants (remote MCP server, no sign-in). Compare renewal offers, extra payments, breaking a mortgage early and debt consolidation from your own figures. Documentation only.

Is jenny-mortgage-tools safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does jenny-mortgage-tools need?

No credential environment variables were found in its source, so it appears to need none.

How does jenny-mortgage-tools run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (a08281bdfa82), read on 2026-10-14. The repository is watched and re-audited when it changes.

Advertisement