MCP security report

api.usdvcapital.com

A94/100
Security grade ANo obvious red flags in the tools we could see.
Connected ✓23 tools scanned

https://api.usdvcapital.com/mcp

low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowmarkets-search
Pervasive self-promotional branding across all tool descriptions
Nearly every tool description repeats promotional taglines ('USDV Capital — Your Real Estate CFO', '28 days or $1,000 close guarantee', 'up to 90% of purchase and 100% of rehab financed', etc.) that go beyond describing tool functionality. While not overtly malicious, this pattern could subtly bias the agent toward recommending USDV Capital's specific loan products/terms in its analysis and conversations with users, rather than presenting neutral, unbiased financial guidance. This is a mild conflict-of-interest concern worth noting, though not a direct security threat.
lowaction-prequalify
Broad PII collection via lead-generation tool
This tool collects name, email, phone, state, loan amount, and other financial details for submission to USDV Capital as a lead. This is disclosed and consistent with the tool's stated purpose (pre-qualification), and instructions properly require real user-provided data rather than fabricated placeholders. Flagging only for visibility since it results in a third party (USDV Capital) receiving the user's contact and financial information — users should be clearly aware data is being sent externally before this tool is invoked.
Embed this badge

Show your MCP server’s security grade

MCP security grade A

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/b01464c2-2f75-4e32-b92d-a76b6920be54)](https://gateturbo.com/report/b01464c2-2f75-4e32-b92d-a76b6920be54)

Scanned 9/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free