Skip to content

OpenDealer MCP Server

by opendealer.app · remote · no sign-in to list tools · v2.0.0 · published by app.opendealer

Automotive inventory search for AI assistants: vehicles, dealers, deals, and market data.

Changes · 1

25 tools: 1 change things and 24 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http opendealer https://mcp.opendealer.app/rpc --header 'Authorization: <your-authorization>'

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

25 tools

Changes things 1Claude Code: ask
  • filter_vehiclesPreferred structured inventory lookup when make/model/year/color/location are known.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Preferred structured inventory lookup when make/model/year/color/location are known. Exact hard filters only via GET /v1/vehicles (same Meilisearch collection as search_vehicles). Totals match the filters you pass. Shop inventory includes listings without photos, so the same filters return the same total here and on Shop. fuelType is the canonical label. transmission and drivetrain match every indexed raw string in that bucket (automatic includes "8-Speed Automatic"). A 503 powertrain_filter_unavailable means that facet list could not be read, not that zero cars match. Resolve make/model with list_research_makes / list_research_models first. Map shopper prose onto labeled keys; use search_vehicles only for fuzzy NL or VIN-in-q lookup. Often the first step in shopping playbooks (budget_coach, safety_first, price_drop_sniper, dealer_crawl). After results, chain get_deal_score / get_vehicle_history / check_recalls / compare_vehicles when the user needs a recommendation, not just a list. See opendealer://assistant/shopping-playbooks. CRITICAL: CITE: Each vehicle's cite object is `vin` + `url` (canonical opendealer.shop VDP). Cite only `url` to shoppers. Never invent VDP URLs. Never cite `detailsUrl` (dealer/LotLinx). Never send shoppers to `/llm/*` HTML or `/v1/llm/*` as the human listing URL.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 24Claude Code: allow
  • check_recallsGet NHTSA open safety recalls for a vehicle by VIN.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get NHTSA open safety recalls for a vehicle by VIN. Returns recall campaigns resolved at the year/make/model level (YMM-granular). A recall listed for the model year may not apply to every VIN — the response includes NHTSA's disclaimer and campaign details (component, summary, remedy status, Park It / Park Outside advisories). Use this when a shopper asks about recalls, safety campaigns, or whether a specific model has open NHTSA notices. Required step in vehicle_dossier and safety_first playbooks; always include the YMM-granularity disclaimer.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • compare_marketCompare pricing across market segments.Reads text others writeNo findings

    Why it is in this group

    • The name "compare_market" says "compare": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Compare pricing across market segments. Provide cohortKeys or make (optionally with model).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • compare_modelsCompare 2-4 vehicle models side by side (model-level, not specific listings).Reads text others writeNo findings

    Why it is in this group

    • The name "compare_models" says "compare": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Compare 2-4 vehicle models side by side (model-level, not specific listings). Provide composite make-model slugs like "honda-civic" or "toyota-corolla". Returns: • Winner-by-dimension deltas: price, fuel economy, horsepower, seating, towing, NHTSA safety, live median listing price • Full research payload for each model (trims, MSRPs, specs) Use this for "Civic vs Corolla" style questions. To compare specific listed vehicles by VIN, use compare_vehicles instead. CRITICAL: Only use the 'url' field from the response for links. NEVER invent or construct URLs.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • compare_vehiclesCompare 2-5 vehicles side by side.Reads text others writeNo findings

    Why it is in this group

    • The name "compare_vehicles" says "compare": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Compare 2-5 vehicles side by side. Returns a structured comparison including specs, price context, and per-vehicle cite fields (vin + shop url). CRITICAL: CITE: Each vehicle's cite object is `vin` + `url` (canonical opendealer.shop VDP). Cite only `url` to shoppers. Never invent VDP URLs. Never cite `detailsUrl` (dealer/LotLinx). Never send shoppers to `/llm/*` HTML or `/v1/llm/*` as the human listing URL.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • dealer_inventoryBrowse the complete inventory of a specific dealership.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "browse": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "browse": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Browse the complete inventory of a specific dealership. IMPORTANT: Use the exact dealer slug from a previous dealers_near or search_vehicles response. Do NOT guess dealer IDs. Useful when a user wants to see what a particular dealer has in stock. Supports all vehicle filters (make, model, price, etc.). CRITICAL: CITE: Each vehicle's cite object is `vin` + `url` (canonical opendealer.shop VDP). Cite only `url` to shoppers. Never invent VDP URLs. Never cite `detailsUrl` (dealer/LotLinx). Never send shoppers to `/llm/*` HTML or `/v1/llm/*` as the human listing URL.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • dealers_nearFind dealerships near a location.Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Find dealerships near a location. Location modes (choose ONE): • zip + radius (miles) • lat + lng + radius • city + state + radius • county + state + radius Returns dealer information including: • Name, address, phone, website • Slug (the public handle for get_dealer and dealer_inventory; the public list does not include internal dealer UUIDs) • Distance from search location • Current inventory count • Business hours (when available) Response `total` is the full match count for the query (ignores `limit`/`offset`), same population as get_market_overview inventory.activeDealers when unfiltered.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_deal_scoreGet AI-powered deal scoring and market insights for a vehicle.Reads text others writeNo findings

    Why it is in this group

    • The name "get_deal_score" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get AI-powered deal scoring and market insights for a vehicle. Returns comprehensive analysis including: • Deal score (1-100) with rating (Great, Good, Fair, Poor) • Price comparison vs market average • Days on lot analysis • Price history and trends • Similar vehicles in the market Core step in vehicle_dossier, budget_coach, price_drop_sniper, and dealer_crawl playbooks. Pair with get_vehicle_history and check_recalls for buy/no-buy answers.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_dealerGet comprehensive information about a specific dealership.Reads text others writeNo findings

    Why it is in this group

    • The name "get_dealer" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get comprehensive information about a specific dealership. Returns Google-enriched dealer knowledge optimized for assistants: • Name, address, phone, website • Google rating, review count, hours, business status • Inventory count and OpenDealer profile links • Contact points for sales / customer service Use this when a shopper asks "tell me about X dealership" or needs hours/ratings for a known dealer. Prefer a slug from dealers_near or search results. A display name binds only when it matches one rooftop. Shared names (two Jay Hatfield stores, or just "Honda") return candidate slugs instead of picking one. CRITICAL: Only use URL fields from the response (website, urls.*). NEVER invent or construct URLs.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_market_overviewGet high-level automotive market statistics.Reads text others writeNo findings

    Why it is in this group

    • The name "get_market_overview" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get high-level automotive market statistics. Returns aggregated market data including: • inventory.totalVehicles — searchable listings on the live index (priced, not sold) • inventory.activeDealers — active dealers with at least one priced vehicle (internet price or MSRP greater than 0). Same population as dealers_near and Shop, not every status=active account • marketData — YMM cohort snapshot medians and sample sizes • Top makes by segment volume (canonical make labels) • New vs Used vs CPO breakdown

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_market_segmentGet detailed pricing and market data for a specific vehicle segment.Reads text others writeNo findings

    Why it is in this group

    • The name "get_market_segment" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get detailed pricing and market data for a specific vehicle segment. Useful for understanding fair market value for a make/model/year combination. Returns pricing statistics including: • Average, median, min, max prices • Price percentiles (10th, 25th, 75th, 90th) • Average mileage and days on lot • Certified vs non-certified pricing difference

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_market_velocityHow quickly vehicles sell by segment (fastest/slowest days on lot).Reads text others writeNo findings

    Why it is in this group

    • The name "get_market_velocity" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    How quickly vehicles sell by segment (fastest/slowest days on lot). Optional make/type filters.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_safety_ratingGet NHTSA 5-Star Safety Ratings for a year/make/model (no VIN required).Reads text others writeNo findings

    Why it is in this group

    • The name "get_safety_rating" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get NHTSA 5-Star Safety Ratings for a year/make/model (no VIN required). Answers questions like "is a 2023 RAV4 safe for my family" with: • Overall and crash-test star ratings (when published) • Rollover rating / possibility • NHTSA-evaluated ADAS availability (ESC, FCW, LDW) Ratings are model-year granular from the NHTSA NCAP cache. If no confident rating exists, the tool reports that honestly rather than guessing. For VIN-specific listing details use get_vehicle; for open recalls use check_recalls. CRITICAL: Only use the 'sourceUrl' field from the response for NHTSA links. NEVER invent URLs.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_similar_vehiclesFind similar on-lot vehicles for a VIN ("you may also like").Reads text others writeNo findings

    Why it is in this group

    • The name "get_similar_vehicles" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Find similar on-lot vehicles for a VIN ("you may also like"). Same make/model keyword comps as the shop VDP rail (not semantic embeddings). CRITICAL: CITE: Each vehicle's cite object is `vin` + `url` (canonical opendealer.shop VDP). Cite only `url` to shoppers. Never invent VDP URLs. Never cite `detailsUrl` (dealer/LotLinx). Never send shoppers to `/llm/*` HTML or `/v1/llm/*` as the human listing URL.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_suggested_ratesNational average suggested auto loan APRs (not a credit offer).Reads text others writeNo findings

    Why it is in this group

    • The name "get_suggested_rates" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    National average suggested auto loan APRs (not a credit offer). Optional filters: condition (new/used), termMonths (36–84), creditTier.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_vehicleGet complete details for a specific vehicle by listingId or VIN.Reads text others writeNo findings

    Why it is in this group

    • The name "get_vehicle" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get complete details for a specific vehicle by listingId or VIN. When a VIN is listed at multiple dealer rooftops, a VIN-only lookup returns an envelope of every listing (type vehicle_listings) with no single-store price, seller, or url. Pass listingId to fetch one store. Returns comprehensive Schema.org Vehicle data including: • Full specifications (engine, transmission, drivetrain) • High-resolution images • Current pricing and availability • NHTSA NCAP safety rating summary (when available) • NHTSA open recall summary (YMM-granular, when available) • Dealer contact information Starting point for the vehicle_dossier playbook. For buy/no-buy questions, continue with get_deal_score → get_vehicle_history → check_recalls → get_similar_vehicles. CRITICAL: CITE: Each vehicle's cite object is `vin` + `url` (canonical opendealer.shop VDP). Cite only `url` to shoppers. Never invent VDP URLs. Never cite `detailsUrl` (dealer/LotLinx). Never send shoppers to `/llm/*` HTML or `/v1/llm/*` as the human listing URL.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_vehicle_historyGet OpenDealer listing history for a VIN: price changes, days on lot, and status.Reads text others writeNo findings

    Why it is in this group

    • The name "get_vehicle_history" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get OpenDealer listing history for a VIN: price changes, days on lot, and status. Answers "has this VIN dropped in price" and days-on-lot narratives from retained snapshots (including vehicles that left a dealer feed). Returns: • Chronological price history with per-snapshot changes • Days on market / lot signals and badges (price_drop, long_on_lot) • Active vs no-longer-listed status when known Does not invent a deal score for sold vehicles — use get_deal_score for live market scoring. Essential for price_drop_sniper and vehicle_dossier playbooks when shoppers ask about reductions or negotiation leverage. CRITICAL: Only use URL fields from the response when present. NEVER invent URLs.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • get_vehicle_rankingsGet data-driven vehicle rankings (e.g., best SUVs, most fuel-efficient cars).Reads text others writeNo findings

    Why it is in this group

    • The name "get_vehicle_rankings" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get data-driven vehicle rankings (e.g., best SUVs, most fuel-efficient cars). Call without arguments to list all ranking categories. Pass a category slug (e.g., "suvs") for the full scored ranking. Rankings are computed from public data with a published methodology: NHTSA safety ratings, EPA fuel economy, manufacturer pricing, and live market availability. There is no paid placement; each entry includes its transparent score breakdown. CRITICAL: Only use the 'url' field from the response for links. NEVER invent or construct URLs.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_facetsDiscover canonical filter tokens and counts from the live search index (same values GET /v1/vehicles accepts: make, bodyType e.g.Reads text others writeNo findings

    Why it is in this group

    • The name "list_facets" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Discover canonical filter tokens and counts from the live search index (same values GET /v1/vehicles accepts: make, bodyType e.g. suv, fuelType e.g. gasoline, transmission e.g. automatic, drivetrain e.g. awd, plus price/year ranges). Counts match filter_vehicles totals for each token under the same make, condition, and location. Call this before filter_vehicles when you need valid dimension values. Optional make, condition, certified, near, and radius scope the facet counts.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_market_segmentsBrowse market segments with pricing statistics (cohortKey, median price, sample size).Reads text others writeNo findings

    Why it is in this group

    • The name "list_market_segments" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "browse": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Browse market segments with pricing statistics (cohortKey, median price, sample size). Use cohortKey with get_market_segment / get_market_trends.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_research_makesBrowse the research catalog of vehicle makes (with model and inventory counts).Reads text others writeNo findings

    Why it is in this group

    • The name "list_research_makes" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • untrusted-inputThe description's first sentence says "browse": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Browse the research catalog of vehicle makes (with model and inventory counts). Use to resolve exact make names/slugs before filter_vehicles or research_model.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • list_research_modelsList models for a make from the research catalog (MSRP/body summaries).Reads text others writeNo findings

    Why it is in this group

    • The name "list_research_models" says "list": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    List models for a make from the research catalog (MSRP/body summaries). Use before filter_vehicles or research_model when the model name is uncertain.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • research_modelGet the full research payload for a vehicle model (not a specific listing).Reads text others writeNo findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Get the full research payload for a vehicle model (not a specific listing). Returns manufacturer reference data joined with live market data: • All trims with MSRPs, engine/body specs, and EPA fuel economy • NHTSA 5-Star safety ratings and open recall count • Live inventory count and price range on OpenDealer Use this when a shopper asks "tell me about the Honda Civic", "what trims does the RAV4 come in", or "how much is a 2025 F-150". For a specific listed vehicle, use get_vehicle with a VIN instead. CRITICAL: Only use the 'url' field from the response for links. NEVER invent or construct URLs.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_vehiclesForgiving vehicle search (Meilisearch): natural-language q, typo-tolerant make/model/color, optional structured filters.Reads text others writeNo findings

    Why it is in this group

    • The name "search_vehicles" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Forgiving vehicle search (Meilisearch): natural-language q, typo-tolerant make/model/color, optional structured filters. Use when the shopper query is fuzzy or exploratory. Use filter_vehicles instead when make/model/year/body/price/location are known — it applies exact hard filters via GET /v1/vehicles and returns trustworthy totals. Discovery order: list_facets / list_research_makes → filter_vehicles (structured) or search_vehicles (exploratory) → get_vehicle / get_deal_score for depth. Location (choose ONE): zip+radius, lat+lng+radius, city+state+radius, county+state+radius — or embed location in q. q may also be a 17-character VIN for exact lookup. When the ask implies analysis (deal, safety, budget, timing, dealer plan), chain shopping playbooks from initialize instructions or opendealer://assistant/shopping-playbooks. CRITICAL: CITE: Each vehicle's cite object is `vin` + `url` (canonical opendealer.shop VDP). Cite only `url` to shoppers. Never invent VDP URLs. Never cite `detailsUrl` (dealer/LotLinx). Never send shoppers to `/llm/*` HTML or `/v1/llm/*` as the human listing URL.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write25
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 2.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http opendealer https://mcp.opendealer.app/rpc --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__opendealer__search_vehicles",
      "mcp__opendealer__list_facets",
      "mcp__opendealer__list_research_makes",
      "mcp__opendealer__list_research_models",
      "mcp__opendealer__get_vehicle",
      "mcp__opendealer__check_recalls",
      "mcp__opendealer__get_dealer",
      "mcp__opendealer__get_safety_rating",
      "mcp__opendealer__get_vehicle_history",
      "mcp__opendealer__dealers_near",
      "mcp__opendealer__dealer_inventory",
      "mcp__opendealer__compare_vehicles",
      "mcp__opendealer__get_deal_score",
      "mcp__opendealer__get_market_overview",
      "mcp__opendealer__get_market_segment",
      "mcp__opendealer__list_market_segments",
      "mcp__opendealer__get_market_trends",
      "mcp__opendealer__get_market_velocity",
      "mcp__opendealer__compare_market",
      "mcp__opendealer__get_suggested_rates",
      "mcp__opendealer__research_model",
      "mcp__opendealer__compare_models",
      "mcp__opendealer__get_vehicle_rankings",
      "mcp__opendealer__get_similar_vehicles"
    ],
    "ask": [
      "mcp__opendealer__filter_vehicles"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as opendealer. Review it before you use it.

Capability tags behind 25 rules
  • mcp__opendealer__search_vehicles untrusted-input
  • mcp__opendealer__filter_vehicles untrusted-input
  • mcp__opendealer__list_facets untrusted-input
  • mcp__opendealer__list_research_makes untrusted-input
  • mcp__opendealer__list_research_models untrusted-input
  • mcp__opendealer__get_vehicle untrusted-input
  • mcp__opendealer__check_recalls untrusted-input
  • mcp__opendealer__get_dealer untrusted-input
  • mcp__opendealer__get_safety_rating untrusted-input
  • mcp__opendealer__get_vehicle_history untrusted-input
  • mcp__opendealer__dealers_near untrusted-input
  • mcp__opendealer__dealer_inventory untrusted-input
  • mcp__opendealer__compare_vehicles untrusted-input
  • mcp__opendealer__get_deal_score untrusted-input
  • mcp__opendealer__get_market_overview untrusted-input
  • mcp__opendealer__get_market_segment untrusted-input
  • mcp__opendealer__list_market_segments untrusted-input
  • mcp__opendealer__get_market_trends untrusted-input
  • mcp__opendealer__get_market_velocity untrusted-input
  • mcp__opendealer__compare_market untrusted-input
  • mcp__opendealer__get_suggested_rates untrusted-input
  • mcp__opendealer__research_model untrusted-input
  • mcp__opendealer__compare_models untrusted-input
  • mcp__opendealer__get_vehicle_rankings untrusted-input
  • mcp__opendealer__get_similar_vehicles untrusted-input