Next free-source huntWe check for new free data every weekday.
FinancialMCP serverFirst audited Nov 13, 2026

io.github.realopengroup/mcp-server

Verify crypto wallets and generate proof of funds letters for buying real estate with crypto.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: Tool text contains phrasing worth a human review.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 335 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things. Your AI client should ask you first.
Endpointhttps://mcp.realopen.app/mcp

Source code Website Streamable HTTP · protocol 2025-11-25 · server version 2.0.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Warning: Tool text contains phrasing worth a human review.

    • Asks the AI to keep something from the user (tool verify_wallet_signature: parameter wallet_id): "…_wallet or get_wallet_summary response. Do NOT show this ID to the user or ask them for it — look it up yoursel…"
    • Asks the AI to keep something from the user (tool verify_wallet_transfer: parameter wallet_id): "…_wallet or get_wallet_summary response. Do NOT show this ID to the user or ask them for it — look it up yoursel…"
    • Asks the AI to keep something from the user (tool remove_wallet: parameter wallet_id): "…al wallet UUID from get_wallet_summary. Do NOT show this ID to the user or ask them for it — look it up from th…"
    • Asks the AI to keep something from the user (tool refresh_wallet_balance: parameter wallet_id): "…_wallet_summary or add_wallet response. Do NOT show this ID to the user or ask them for it — look it up from th…"
    • Asks the AI to keep something from the user (tool link_wallet_xpub: parameter wallet_id): "…gecoin wallet, from get_wallet_summary. Do NOT show this ID to the user."
    • Asks the AI to keep something from the user (tool refresh_wallet_verification: parameter wallet_id): "…_wallet or get_wallet_summary response. Do NOT show this ID to the user or ask them for it — look it up from th…"
  • Passed: Connections are encrypted (HTTPS).

Safety labels

  • Note: 12 tools are labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • start_identity_verification
    • add_wallet
    • verify_wallet_signature
    • verify_wallet_transfer
    • remove_wallet
    • refresh_wallet_balance
    • link_wallet_xpub
    • refresh_wallet_verification
    • and 4 more
  • Passed: Every tool says whether it only reads or can change things.

Tools

  • Note: Some tool text is long, so it uses more of the AI's working memory.

    • server instructions (6,849 characters)
    • add_wallet (4,730 characters)
  • Passed: 26 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (26)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • search_assetsSearch RealOpen's library of approved affiliate marketing assets (flyers, social graphics, email banners, brand logos, presentations, listing media). Use this when a user asks for existing RealOpen m…Read-only
  • get_snippetsFind pre-approved RealOpen social-media snippets — copy-ready posts written by RealOpen's marketing team for twitter, linkedin, instagram, email, or general use. Use this when a user asks for ready-t…Read-only
  • get_referral_linkConstruct a tracked referral URL pointing at a realopen.com page. Use this whenever you produce marketing content, recommendations, or sign-up suggestions — append the returned URL so clicks are attr…Read-only
  • get_how_it_worksExplain how buying real estate with crypto works through RealOpen — RealOpen's canonical end-to-end flow from verified crypto holdings to an offer — a cash offer when buying outright, or a lender-fin…Read-only
  • get_supported_cryptoReturn the current list of cryptocurrencies, blockchains, and stablecoins a buyer can use to buy real estate through RealOpen — Bitcoin (BTC), Ethereum (ETH), USDC, USDT, and others. Use this to answ…Read-only
  • get_fee_structureReturn RealOpen's current pricing and fee breakdown for buying real estate with crypto, with worked examples. Use this whenever a user asks what it costs to buy a house with Bitcoin or other crypto t…Read-only
  • get_faqSearch RealOpen's frequently asked questions about buying real estate with crypto, by keyword and/or category. Use this when a user asks a specific question about the process — for example whether a…Read-only
  • get_service_areasReturn where a buyer can currently use crypto to buy real estate through RealOpen — geographic coverage, supported property types, and international availability. Use this whenever a user asks whethe…Read-only
  • get_startedThe front door to buying real estate with crypto through RealOpen — for anyone holding Bitcoin, Ethereum, USDC, USDT, or other crypto who wants to buy a home or other property — outright, with a cash…Read-only
  • get_account_statusReturns a high-level account overview of where the user stands in getting ready to buy real estate with crypto: identity verification state, wallet count (not individual wallet details), and Proof of…Read-only
  • start_identity_verificationStart or restart identity verification (KYC) — the first setup step before RealOpen can issue a crypto Proof of Funds letter for a real estate offer. If a previous session exists that was incomplete,…Can change things
  • add_walletSubmit a public crypto wallet address (Bitcoin, Ethereum, Solana, stablecoin wallets, and other supported chains) so RealOpen can verify ownership and count its holdings toward a crypto Proof of Fund…Can change things
  • verify_wallet_signatureSubmit a signed message to prove ownership of a crypto wallet — one of the two ways RealOpen verifies a wallet before its balance counts toward a crypto Proof of Funds letter for a real estate offer.…Can change things
  • verify_wallet_transferSubmit a transaction hash for the dust/test transfer verification method — the other way to prove ownership of a crypto wallet so its balance counts toward a crypto Proof of Funds letter. The test tr…Can change things
  • remove_walletPermanently remove a wallet from the authenticated user's account. Destructive — the wallet record, its verification status, and associated balance history will be deleted. Before calling, confirm wi…Can change things
  • refresh_wallet_balanceRe-fetch on-chain asset balances for an existing wallet and update the stored record (verified balances feed the Proof of Funds ceiling for a real estate offer). Use when the user says their balance…Can change things
  • link_wallet_xpubBITCOIN, ZCASH (transparent) AND DOGECOIN ONLY. Link (or remove) the extended PUBLIC key (xpub / ypub / zpub, or dgub for Dogecoin) of a VERIFIED Bitcoin, Zcash or Dogecoin wallet so every address in…Can change things
  • refresh_wallet_verificationRegenerate verification challenges for an existing unverified wallet. Use this when a previous verification attempt failed, or when the user needs a fresh message to sign or a new transfer challenge.…Can change things
  • get_wallet_summaryCall this whenever the user asks for a wallet summary, wallet list, their wallets, wallet balances, verified holdings, or Proof of Funds ceiling — i.e. how much verified crypto they can show for a re…Read-only
  • generate_proof_of_fundsGenerate a crypto Proof of Funds letter (PDF) for the authenticated user — the document a buyer attaches to a cash offer on real estate to show verified crypto holdings; it states a fiat amount with…Can change things
  • logoutSign out of your RealOpen MCP session and revoke the current OAuth token. Use this when the user wants to switch accounts or disconnect.Can change things
  • open_realopenOpens the RealOpen home, the full-screen app in the ChatGPT sidebar. Use it when the user asks to open RealOpen, open the RealOpen app or sidebar, or see an overview of where they stand. Shows whethe…Read-only
  • open_buying_power_panelOpens the RealOpen panel beside the current conversation (not the full-screen sidebar app; use open_realopen for that), showing the property price being discussed, the crypto asset or wallet the user…Read-only
  • check_buying_powerChecks whether the user's VERIFIED crypto appears to cover a property price. Compares target_price_usd against verified buying power (the most a Proof of Funds letter can state, from verified wallets…Read-only
  • save_purchase_contextSaves what the user is working toward so the RealOpen sidebar and conversation panel stay in step: the property price, the crypto asset or wallet they intend to use, and the workflow they chose. Call…Can change things
  • generate_realscore_reportCreates the user's RealScore Report: the asset verification document a buyer gives a mortgage lender when the down payment or reserves come from crypto. It covers identity, every verified wallet, cur…Can change things

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200335 ms
initializedHTTP 202264 ms
tools/listHTTP 200323 ms
resources/listHTTP 200103 ms
prompts/listHTTP 200105 ms
unknown-methodHTTP 20081 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.