Skip to content

cmbs.loan: CMBS loan rates, lenders and servicing

loan.cmbs/cmbs-loancmbs.loanstreamable-httpv1.2026.1101.1Scanned

CMBS rates, lenders, underwriting, maturity wall and loan sizing from SEC data; servicing rules.

9 tools: 4 change things and 5 only read.

Tools: 0 delete, 0 irreversible, 4 write, 5 read.
  • Reads private data · 2
  • Reads text others write · 0
  • Can send data out · 0
  • No findings

Anlyon alternative

4 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

9 tools

Changes things 4Claude Code: ask
  • calculate_appraisal_reductionAppraisal Reduction Amount for a delinquent CMBS loan from a new appraisal, using the formula in a 2025 pooling and servicing agreement: balance minus (90% of appraised value + res…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Appraisal Reduction Amount for a delinquent CMBS loan from a new appraisal, using the formula in a 2025 pooling and servicing agreement: balance minus (90% of appraised value + reserves - unpaid interest, advances and other amounts due). Returns the value side, the reduction, the share of scheduled interest the servicer keeps advancing, and the 25% deemed reduction that applies if no appraisal arrives in time.

    Annotations the server declares

    • title: CMBS appraisal reduction amount
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • estimate_special_servicing_feesSpecial servicing, workout and liquidation fees on a CMBS loan for one outcome (loan corrected and paid at maturity, refinanced within 120 days of a missed maturity, or liquidated/…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Special servicing, workout and liquidation fees on a CMBS loan for one outcome (loan corrected and paid at maturity, refinanced within 120 days of a missed maturity, or liquidated/discounted payoff), using the fee terms of a real 2025 pooling and servicing agreement: 0.25%/yr with a $3,500 monthly minimum, 1% workout fee with a $25,000 minimum, 1% to 3% liquidation fee. Returns each fee, the monthly fee and the total.

    Annotations the server declares

    • title: Estimate CMBS special servicing fees
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • size_cmbs_loanMaximum CMBS loan on a property under the three sizing tests lenders apply, and which one binds: loan to value x value, NOI / (DSCR x annual debt constant at the rate and amortizat…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Maximum CMBS loan on a property under the three sizing tests lenders apply, and which one binds: loan to value x value, NOI / (DSCR x annual debt constant at the rate and amortization, or the rate if interest-only), and NOI / debt yield. Limits you omit default to what recent CMBS loans stayed within (90th percentile LTV, 10th percentile DSCR and debt yield, by property type), and the rate to the 90-day median.

    Annotations the server declares

    • title: Size a CMBS loan
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • special_servicing_timelineThe contractual sequence after a missed monthly payment or a missed balloon on a CMBS loan, day by day: transfer to the special servicer, SEC delinquency status codes, the appraisa…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The contractual sequence after a missed monthly payment or a missed balloon on a CMBS loan, day by day: transfer to the special servicer, SEC delinquency status codes, the appraisal reduction trigger and deadline, the 120-day maturity window, each with its PSA section. Give days_elapsed to get which events have already been triggered and the next one with days remaining.

    Annotations the server declares

    • title: CMBS special servicing timeline
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 5Show 5 read-only tools
  • find_cmbs_lendersCMBS originators ranked by loan volume over the last 12 months, from the originator named on each loan in the trusts' SEC filings.No findings

    Why it is in this group

    • The name "find_cmbs_lenders" says "find": a word for reading.
    Description, as the server wrote it
    CMBS originators ranked by loan volume over the last 12 months, from the originator named on each loan in the trusts' SEC filings. Filter by property type, state and loan amount (keeps lenders whose securitized loan sizes span it). Returns volume, loan count, size range, median rate, leverage and a page per lender.

    Annotations the server declares

    • title: Find CMBS lenders
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_cmbs_lenderOne CMBS originator's securitized book from SEC filings: 12- and 24-month volume, loan sizes, median rate, leverage, property types, states and its most recent loans (property, cit…No findings

    Why it is in this group

    • The name "get_cmbs_lender" says "get": a word for reading.
    Description, as the server wrote it
    One CMBS originator's securitized book from SEC filings: 12- and 24-month volume, loan sizes, median rate, leverage, property types, states and its most recent loans (property, city, amount, rate, term, trust). Give the lender's name or slug, e.g. "Citi" or "wells-fargo".

    Annotations the server declares

    • title: One CMBS lender's book
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_cmbs_maturity_wallCMBS loans still reporting, by maturity year: count, balance, average note rate and the share whose NOI at securitization is under 9% of today's balance (a rough refinance-gap prox…Reads private dataNo findings

    Why it is in this group

    • The name "get_cmbs_maturity_wall" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "note": it reads notes.
    Description, as the server wrote it
    CMBS loans still reporting, by maturity year: count, balance, average note rate and the share whose NOI at securitization is under 9% of today's balance (a rough refinance-gap proxy), compared with today's median new-loan rate. Overall, by property type or by state (one filter at a time).

    Annotations the server declares

    • title: CMBS maturity wall
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_cmbs_ratesMedian original note rates on CMBS loans securitized in the last 90 days, 180 days and 12 months, from SEC Form ABS-EE loan data, overall or for one property type, with the middle …Reads private dataNo findings

    Why it is in this group

    • The name "get_cmbs_rates" says "get": a word for reading.

    What it can reach

    • private-dataThe description's first sentence says "note": it reads notes.
    Description, as the server wrote it
    Median original note rates on CMBS loans securitized in the last 90 days, 180 days and 12 months, from SEC Form ABS-EE loan data, overall or for one property type, with the middle half, loan counts, the 5- vs 10-year split and recent months. Rates on closed loans, not a quote.

    Annotations the server declares

    • title: Current CMBS loan rates
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_cmbs_underwritingWhat CMBS lenders actually underwrote in the last 12 months, from SEC loan data: loan size, loan to value, debt service coverage, debt yield and occupancy (median and percentiles),…No findings

    Why it is in this group

    • The name "get_cmbs_underwriting" says "get": a word for reading.
    Description, as the server wrote it
    What CMBS lenders actually underwrote in the last 12 months, from SEC loan data: loan size, loan to value, debt service coverage, debt yield and occupancy (median and percentiles), interest-only share and 5/10-year term mix, overall or for one property type.

    Annotations the server declares

    • title: CMBS underwriting medians
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged untrusted-input or outbound.

Reads private data2
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

Install

Pinned to version 1.2026.1101.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http cmbs-loan https://cmbs.loan/mcp
claude mcp add --transport http cmbs-loan https://cmbs.loan/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__cmbs-loan__get_cmbs_rates",
      "mcp__cmbs-loan__get_cmbs_underwriting",
      "mcp__cmbs-loan__find_cmbs_lenders",
      "mcp__cmbs-loan__get_cmbs_lender",
      "mcp__cmbs-loan__get_cmbs_maturity_wall"
    ],
    "ask": [
      "mcp__cmbs-loan__special_servicing_timeline",
      "mcp__cmbs-loan__estimate_special_servicing_fees",
      "mcp__cmbs-loan__calculate_appraisal_reduction",
      "mcp__cmbs-loan__size_cmbs_loan"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as cmbs-loan. Review it before you use it.

Capability tags behind 2 rules
  • mcp__cmbs-loan__get_cmbs_rates private-data
  • mcp__cmbs-loan__get_cmbs_maturity_wall private-data

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/loan.cmbs/cmbs-loan/verify?hash=958f099b497e6274ef2441db0cd33f3bb107be9e67e9216c48c75c850ebdcb26" | jq -e '.changed == false'

Pinned hash 958f099b497e, from Nov 1, 2026, 22:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/loan.cmbs/cmbs-loan/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for loan.cmbs/cmbs-loan
[![anlyon.dev](https://anlyon.dev/badge/loan.cmbs/cmbs-loan.svg)](https://anlyon.dev/servers/loan.cmbs/cmbs-loan)

Source: MCP Registry. Synced Nov 1, 2026, 23:18 UTC.