Loading…
Governed AI actions with signed, verifiable receipts — free keyless reads and human-approved writes.
Review before connecting
The findings on this server are worth reviewing before you connect an agent to it.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The duvera-gateway MCP server exposes 52 tools, focused primarily on filesystem, database, and developer capabilities. Its published description reads: "Governed AI actions with signed, verifiable receipts — free keyless reads and human-approved writes". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates duvera-gateway C — the findings are worth reviewing before you connect an agent to it. Its most notable findings include "Unguarded destructive tools" and "Database tool takes a raw, unparameterised query". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check duvera-gateway's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add duvera-gateway to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://app.duvera.ai/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
[amazon · risk:low] Look up the delivery status of an Amazon order (read-only)
[applehealth · risk:medium] Read heart-rate data from Apple Health
[applehealth · risk:medium] Read sleep-analysis data from Apple Health
[applehealth · risk:medium] Read step-count data from Apple Health
[bluesky · risk:low] Fetch the current trending topics on Bluesky. Returns topic names, display labels, and links to the topic feed. No account or API key required.
[chase · risk:low] Read the current balance of a Chase account (read-only)
[datadog · risk:low] Search and read logs from Datadog over a time range
[delta · risk:low] Pull up the boarding pass for a Delta flight
[duvera · risk:low] Look up the latest version, description, license, and dependencies of an npm package. Works for scoped packages too (e.g. "@types/node"). No account required.
[duvera · risk:low] Look up the current version, summary, license, and homepage of a Python package on PyPI. No account required.
[duvera · risk:low] Search Stack Overflow questions by keyword. Returns top 5 by relevance with title, link, score, and answer status. No account required.
[duvera · risk:low] Current spot price for one or more cryptocurrencies (CoinGecko ids like "bitcoin,ethereum,solana") in a fiat currency (default USD). Read-only market data. No account required.
[duvera · risk:low] Live USD exchange rates against major currencies. Read-only, no account required.
[duvera · risk:low] Search recipes by dish name (e.g. "arrabiata", "pad thai"). Returns ingredients, instructions, category, and cuisine. No account required.
[duvera · risk:low] Search for restaurants and food places by name or location using OpenStreetMap. Read-only, no account required.
[duvera · risk:low] Convert a city or place name (e.g. "Berlin", "San Francisco") to latitude/longitude, country, timezone, and population. Use this before weather.current or weather.air-quality when
[duvera · risk:low] Get the latest published release (tag, name, notes, date) of a public GitHub repository. Returns 404 for repos that publish no releases. No auth required.
[duvera · risk:low] Read a file from a public GitHub repository. Read-only.
[duvera · risk:low] Search public GitHub repositories by keyword. Returns top 5 results by stars. No auth required.
[duvera · risk:low] Search Hacker News stories by keyword, ranked by relevance. Returns title, URL, points, author, and comment count. No account required.
[duvera · risk:low] Top stories from Hacker News. Read-only, no account required.
[duvera · risk:low] Definitions, phonetics, part of speech, and examples for an English word. No account required.
[duvera · risk:low] Public holidays for a given year and ISO country code (e.g. 2026 + "US"). Includes national and regional holidays with dates and names. No account required.
[duvera · risk:low] Current date and time in an IANA timezone (e.g. "America/New_York", "Asia/Tokyo"). Includes day of week and DST status. No account required.
[duvera · risk:low] List aircraft currently airborne within a radius of a point (adsb.lol ADS-B data). Use geo.geocode to get a city's coordinates first. Returns callsign, altitude, speed, and positio
[duvera · risk:low] Current air quality (US AQI, PM2.5, PM10, ozone) for a latitude/longitude. Use geo.geocode first if you only have a place name. No account required.
[duvera · risk:low] Current temperature, conditions, wind, and humidity for a latitude/longitude (Open-Meteo). Use geo.geocode first if you only have a city or place name. No account required.
[duvera · risk:low] Search Wikipedia articles by keyword. Returns matching page titles, keys, and excerpts. Pass a result's key to wiki.summary for the article summary. No account required.
[duvera · risk:low] Get the lead summary of a Wikipedia article by title (e.g. "Zero_trust_architecture"). Use wiki.search first to find the exact page key. No account required.
[gmail · risk:low] Read recent emails from the Gmail inbox
[google-workspace · risk:low] Search Mail via Gmail, governed by Duvera.
[googlecalendar · risk:low] Find open time slots within a date range in Google Calendar
[grubhub · risk:low] Check the live status and ETA of a Grubhub order
[hackernews · risk:low] Fetch the current list of top-story ids on Hacker News. Returns an array of item ids (resolve details via the item endpoint). No account or API key required; the hacker-news.fi
[instacart · risk:low] Search for grocery items and stores in the Instacart app
[maps · risk:low] Share your estimated time of arrival with a contact from Apple Maps
[microsoft365 · risk:low] List Calendar via Outlook Calendar, governed by Duvera.
[microsoft365 · risk:low] Search Mail via Outlook / Exchange, governed by Duvera.
[notion · risk:low] Search pages and notes in Notion by query
[obsidian · risk:low] Search notes in an Obsidian vault by query
[open-meteo · risk:low] Current temperature, conditions, humidity, and wind for a latitude/longitude, from Open-Meteo.
[opensky · risk:low] List aircraft currently airborne within a latitude/longitude box, from OpenSky's live ADS-B feed.
[postgres · risk:low] Execute a read-only SQL query against a Postgres database
[shazam · risk:low] Identify the song currently playing using Shazam
[slack · risk:low] Search recent messages across Slack channels
[southwest · risk:low] Check the status of a Southwest flight
[telegram · risk:low] Read recent messages from a Telegram chat
[twitter · risk:low] Search for recent tweets matching a keyword, hashtag, or phrase using the Twitter v2 API. Pass your Twitter Bearer Token via X-Duvera-Service-Token header — Duvera never stores it
[uber · risk:low] Estimate the fare for a trip in the Uber app
[united · risk:low] Check the status of a United flight
[venmo · risk:low] Request a payment from a contact via Venmo (no money leaves your account)
[wallet · risk:low] Pull up a boarding pass stored in Apple Wallet
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: postgres__sql_read
Tools that execute commands / write files / make arbitrary requests are exposed without annotations or guards.
res · risk:low] Execute a read-only SQL query against a Postgres database {"properties":{"datRecommendationAnnotate destructive tools and require human approval.
tool: postgres__sql_read
A database tool exposes a query/sql parameter that is a free-form string with no allow-list or parameterisation constraint — a raw-string injection surface. A tool exposing structured filters or an `enum` of named queries does not fire.
unconstrained query parameter "query"RecommendationExpose parameterised operations instead of a raw query string; never build queries from unvalidated model output.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: duvera__github_read_file
A filesystem tool exposes a path parameter that is a free-form string with no pattern/enum/format constraint, so it accepts absolute paths and "../" traversal. A tool that constrains its path (a rooted `pattern` or an `enum`) does not fire.
unconstrained path parameter "path"RecommendationConstrain the path parameter to a rooted allow-list and reject absolute/traversal paths server-side.
tool: postgres__sql_read
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "postgres__sql_read"RecommendationScope tools to the minimum needed.
Analyze web pages and entire sites for SEO, accessibility, performance, and security compliance. Generate detailed reports and actionable issue lists to improve site quality and user experien
Validates ZUGFeRD, Factur-X, and XRechnung e-invoices against EN 16931 with correction suggestions.
Tracks US tariff and trade-action changes from Federal Register documents and exposes them through an API for AI agents.
Instant rug-check for any EVM or Solana token, distilled to one clear 0-10 risk verdict.
Provides access to Bible translations, books, chapters, verses, and search functionality.
Remote-first MCP adapter for emitting Settlement Attestation Receipts; not a verifier.