Loading…
Citizenship-by-investment and residency-by-investment (golden visa) programme data, costs, passport mobility, and an origin-aware migration planner from Mirabello Consultancy.
Do not connect
The assessed surface is high-risk. Remediate the findings before connecting.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The mirabello-consultancy MCP server exposes 60 tools, focused primarily on developer and AI capabilities. Its published description reads: "Citizenship-by-investment and residency-by-investment (golden visa) programme data, costs, passport mobility, and an origin-aware migration planner from Mirabello Consultancy". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates mirabello-consultancy D — the assessed surface is high-risk and should be remediated before use. Its most notable findings include "Cross-tool shadowing" and "Data-exfiltration parameters". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check mirabello-consultancy's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add mirabello-consultancy to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.mirabelloconsultancy.com/v1/Streamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
List Mirabello-advised citizenship- (CBI) and residency-by-investment (RBI/golden visa) programmes, optionally filtered by type, budget, region, or max processing time.
Full detail for one programme by id (e.g. "dominica-cbi","greece-gv"): routes, fees, processing, mobility, tax, path to citizenship, its Mirabello Index composite score + rank (mirabello_index), and t
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: generate_briefing
A tool description tries to alter the model’s use of another tool.
RecommendationDescriptions must describe only their own tool.
tool: subscribe_changes
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "webhook_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: get_foundation_rules
A tool description tries to alter the model’s use of another tool.
jurisdictions / find_trust_jurisdictions. Pass cc for one jurisdiction; omit for the covRecommendationDescriptions must describe only their own tool.
tool: get_nonresident_banking
A tool description tries to alter the model’s use of another tool.
eepening behind get_banking_access. Pass cc for one jurisdiction; omit for the covRecommendationDescriptions must describe only their own tool.
tool: get_property_law
A tool description tries to alter the model’s use of another tool.
proceeds (links get_capital_controls), residence/golden-visa linkage and inheritanceRecommendationDescriptions must describe only their own tool.
tool: build_sow_pack
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "context"RecommendationRemove side-channel parameters; constrain tool inputs.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: book_consultation
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: generate_briefing
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: subscribe_changes
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: create_enquiry
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
The server exposes one or more ui:// (MCP Apps) resources whose HTML/JS renders inside the host client — a client-side injection / data-exposure surface most scanners ignore. Flagged for review, not damning on its own.
1 ui:// resource(s); e.g. ui://mirabello/freedom-compass.htmlRecommendationReview each ui:// resource’s markup and scripts; treat host-rendered UI as untrusted, sandbox it, and never expose secrets or conversation context to it.
Financial data service providing fundamental information for 30,000+ listed companies across the US, Japan, and Korea, sourced directly from SEC, EDINET, and DART regulatory filings.
Search tours, attraction tickets, and holiday packages across 24 countries.
Agentic visitor analytics with five tools for CRO and session analysis.
52 paid x402 API endpoints for AI agents — crypto, data, DeFi, and market intelligence, settled on Base.
Access Vonage API documentation, code snippets, tutorials, and troubleshooting resources.
Compare programmes side by side. Pass a + b (two programme ids) for the canonical versioned comparison artefact from the Mirabello Investment Migration Index: rank, composite, the dimension scores, pe
Processing-time estimate for one programme (by id) or all.
Estimate the total cost of a programme for a given family: investment + government & due-diligence fees + family add-ons. Indicative; excludes professional/property/legal fees.
Recommend a ranked shortlist of programmes for a client profile (budget, family size, mobility priority, timeline, tax goal) with reasoning. Respects closed/paused programmes.
Mobility for a programme passport: visa-free count, passport mobility rank, and access to key destinations (Schengen, UK, USA, China).
The Mirabello Investment Migration Index — a composite 0–100 ranking of CBI/RBI programmes across cost, mobility, speed, path-to-citizenship, stability, family and tax, with transparent published meth
Recent material changes across investment-migration programmes (launches, closures, threshold/mobility/regulatory changes) + current status counts, PLUS pathway_field_changes (official-source field-le
About Mirabello Consultancy: track record (cases, approval rate), credentials (IMC, ACAMS), offices, languages, services. Use for "who is Mirabello / why use them / are they reputable" questions.
CBI passport-RENEWAL facts for a Caribbean/Pacific programme country (St Kitts & Nevis, Antigua & Barbuda, Dominica, Grenada, St Lucia, Vanuatu): official government renewal fees (currency-primary EC$
Book a free consultation with Mirabello Consultancy. Requires email + programme interest/message and explicit consent. Delivers the enquiry to Mirabello and returns a tracked booking URL.
Generate a personalised Mirabello briefing: given a client profile (nationality, budget, family, goals), returns a ranked shortlist with full family cost math AND a shareable branded briefing page URL
Subscribe to verified programme-change alerts (price changes, launches, corrections — each linked to the official source). Agents: provide webhook_url (HTTPS POST on each change). Humans: provide emai
Check which programmes a given nationality can realistically apply to: published nationality restrictions/suspensions (e.g. Russia/Belarus/Iran policies), EU-citizen applicability, minimum age and cor
Standard document checklist for a programme application (per programme type, plus programme-specific items where published). Final list always confirmed by a specialist — varies by family composition
Step-by-step expected timeline for a programme: published processing time plus the stage breakdown where available.
Country immigration profile (beyond investment migration): ALL screened pathways for a country — skilled-work, digital-nomad, retirement, citizenship-by-descent, naturalisation, study, family etc. — e
CITATION-FIRST provenance for a country's pathway facts (W3C PROV-O + Schema.org). For each fact returns: the cited official source_url + source_class + verbatim quote (evidence), how it was derived (
RELATIONAL query over the investment-migration KNOWLEDGE GRAPH (programme entities · countries · blocs · investment thresholds · authorities · legal sources). Two modes: (1) pass id to get a single en
The Mirabello Freedom Compass — ORIGIN-AWARE migration path planner. Given the client's STARTING POINT — current citizenship(s) + tax residence — plus their goal, returns ranked end-to-end options. Th
Find which countries offer a given immigration pathway (e.g. digital-nomad, skilled-work, ancestry-descent, retirement-passive). Returns the screened countries that have it.
OFFICIAL GERMAN EMIGRATION DATA: where German citizens actually move, by destination country and year (Statistisches Bundesamt / Destatis, statistic 12711-0008, 2016 onwards). Returns departures, arri
CAPITAL MOBILITY — can money legally LEAVE this country, and how much? For an ORIGIN jurisdiction returns the exchange-control regime (free | liberalising | controlled), the annual outbound allowance
LEGAL NAME CHANGE rules for a jurisdiction: whether a change is permitted, on what grounds (or none), which authority decides (civil registry or court), who may apply, the process, indicative cost and
CHARITABLE & PRIVATE FOUNDATION and TRUST rules for a jurisdiction: whether the foundation legal form exists (Stiftung / fondation / fundación / waqf / foundation company), legal basis, regulator/regi
BANK-ACCOUNT ACCESS for FOREIGN NON-RESIDENTS in a jurisdiction — two profiles: (a) non-resident individual, (b) foreign entity. Each carries the STATUTORY position AND the PRACTICAL bank appetite sep
REAL-ESTATE LAW FOR FOREIGN BUYERS in a jurisdiction: may foreigners own freehold (unrestricted / restricted zones / leasehold-only / approval required / prohibited), restricted categories (border zon
ENTRY REQUIREMENTS for a DESTINATION: passport-validity rule (the "6-month rule", the Schengen "issued within the previous 10 years AND valid 3 months beyond departure" cap, blank-page requirements) a
HNWI tax profile for a country (wealth-protection view): personal income tax (worldwide vs territorial), capital gains, inheritance/estate, wealth tax, exit tax, CRS/AEOI status and special regimes (n
Find countries by wealth-protection tax criteria — no personal income tax, no inheritance tax, no wealth tax, no capital gains tax, territorial taxation, non-CRS (no automatic financial-account exchan
Find trust & foundation jurisdictions for asset protection and succession planning (e.g. Cook Islands, Nevis, Cayman, Jersey, Liechtenstein), ranked by asset-protection strength, each with its statute
Find jurisdictions for setting up a CHARITABLE/PHILANTHROPIC structure — charitable foundations (e.g. the Liechtenstein gemeinnützige Stiftung), donor-advised funds (US 501(c)(3) ecosystem), charitabl
Mirabello curated GLOBAL STRUCTURING roster from a full ~195-country screen: A-tier company-formation jurisdictions (UAE free zones/ADGM, US LLC, Switzerland, Singapore, Cyprus, Malta, Hungary, Jersey
Structuring playbook for online/global businesses: recommended setups by CUSTOMER MARKET (USA, EU, Switzerland, Asia, Middle East income), worldwide archetype stacks (solo, scale-up, multi-region ente
FULL formation profile for one structure from the Mirabello Global Structuring roster (30 profiles: ae-freezone, ae-adgm-spv, ae-adgm-foundation, us-llc-wy, sg-pte, hk-ltd, ch-company, ch-holdco, cy-l
FILTER the Mirabello formation profiles to find company/structure jurisdictions matching constraints: remote_only (fully remote formation), max_setup_usd (setup cost ceiling), banking_tier (good|moder
Side-by-side comparison of 2-6 formation structures across tax position, setup/annual costs, timeline, remote feasibility, substance requirements, banking tier, EU/FATF status, ideal client and not-fo
THE COMPOSED TOOL: one origin-aware answer for the FULL global-setup question — mobility (residence/citizenship options via the Freedom Compass), tax-residence pairing, entity stack by customer market
NON-RESIDENT banking-access landscape per jurisdiction (US, AE, SG, HK, CH, LI, KY/Caribbean, plus the cross-jurisdiction EMI layer): corporate and personal lanes, fintech vs traditional institutions
Registry of the regulatory bodies that govern tax, company formation, accounting, treaties and banking per jurisdiction — ranked most-to-least important, with official-source links (tax authority, com
Double-tax-treaty position for a relocation corridor (from→to): is a DTA in force, the residence tie-breaker test, treaty withholding rates (dividends/interest/royalties), and any limitation-on-benefi
Treaty withholding-tax rates (dividends/interest/royalties) for a from→to corridor.
Anti-avoidance & relocation-tax flags for a jurisdiction: CFC (controlled foreign company), GAAR, POEM/corporate-residence, economic substance, exit-tax detail and step-up-in-basis on becoming residen
Tax-residence TESTS + evidence factors for a jurisdiction: day-count thresholds, statutory test (e.g. UK SRT), connecting/ties factors (permanent home, centre of vital interests, habitual abode, famil
Source-of-Wealth / Source-of-Funds evidence pack: given a wealth-origin type (e.g. business_sale, inheritance, ipo_liquidity_event, real_estate_sale, employment_income, crypto_asset_gains) and an opti
Forced-heirship / testamentary-freedom position for a jurisdiction: whether forced heirship exists, the reserved shares (e.g. France réserve héréditaire, Germany Pflichtteil, Switzerland reform), the
Default matrimonial-property regime for a jurisdiction (e.g. community of acquisitions vs separation of property), whether prenuptial/marital agreements can vary it, and how property splits on divorce
Cross-border succession conflict-of-laws position for a jurisdiction: which law governs succession (habitual residence / nationality / situs of assets), EU Succession Regulation 650/2012 (Brussels IV)
Which law may govern a cross-border family's succession, matrimonial property and divorce — and whether NATIONALITY opens an election. Given the nationalities held, habitual residence, asset situs and
Side-by-side comparison of 2-8 jurisdictions across every wealth-protection dimension at once: tax (income/CGT/inheritance/wealth top rates + territorial-vs-worldwide + special regimes), crypto-asset
Lists the reporting/compliance obligations a stated profile may trigger — FATCA (US persons), CRS, CARF/DAC8 (crypto), DAC6 (EU cross-border arrangements), PEP enhanced due diligence, investment-migra
Strategic mobility optionality for a jurisdiction: the lawful residence/citizenship ROUTES it offers (investment programmes) with minimum physical presence, family inclusion, path to permanence, proce
Per-country digital-money & identity progress relevant to wealth planning: (1) CBDC status (none/researching/exploring/pilot/launched) + type (retail/wholesale) and issuer; (2) government-issued or go
The Mirabello Wealth-Protection Atlas — OBJECTIVE per-pillar sub-indices (0-100) for each jurisdiction: tax efficiency, structure strength, residence clarity, crypto clarity, succession certainty, reg
CLIENT-WEIGHTED wealth-protection composite over the Atlas pillars. Pass your own weights (any of tax_efficiency, structure_strength, residence_clarity, crypto_clarity, succession_certainty, regulator
Search Mirabello-advised investment real estate that QUALIFIES for a citizenship- or residency-by-investment programme. Filter by country, programme (e.g. "grenada-citizenship-by-investment", "greece-
Full detail for one investment property by slug: price, specs, location, qualifying programme + holding period, project/developer (where disclosed), availability and freshness. Mirabello Consultancy i
Recently re-verified listings (price / availability / sale status), optionally since an ISO date. For agents keeping an inventory view fresh.
Route a qualified buyer enquiry about a specific property to Mirabello Consultancy (the broker of record and licensed advisor). Requires property_id (slug) + a valid email + explicit consent:true (GDP