Elron Club Public Rentals

by elron.club · remote · no sign-in to list tools · v0.2.0 · published by club.elron

Search Elron Club furnished apartments, availability, prices, details, and rental applications.

Deletes · 1Final · 1Changes · 12

Compare Registry entry

23 tools: 1 can delete or cancel things, 1 do something that can't be undone, 12 change things and 9 only read.

Scanned Oct 21, 2026

Deletes or cancels1Claude Code: deny: see these tools
Can't be undone1Claude Code: ask: see these tools
Changes things12Claude Code: ask: see these tools
Only reads9Claude Code: allow: see these tools

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http public-rentals https://elron.club/api/agent/public/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnpayments.get_status
The server marks "payments.get_status" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "payments.get_status" says "payment": a word that usually means money moves, which cannot be taken back.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

23 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

waitlist.unsubscribeUse an opaque unsubscribe token from an Elron marketing email to stop every waitlist marketing update.No findings
Why it is in this group
- The name "waitlist.unsubscribe" says "unsubscribe": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Use an opaque unsubscribe token from an Elron marketing email to stop every waitlist marketing update.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false

Can't be undone 1Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

payments.get_statusReturn due and received payment truth for the scoped application.1 finding
Why it is in this group
- The name "payments.get_status" says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "payments.get_status" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "payments.get_status" says "payment": a word that usually means money moves, which cannot be taken back.
  What this check looks for
Description, as the server wrote it
Return due and received payment truth for the scoped application. An approved human-action URL is returned only from an exact, unexpired provider session; no authorization URL is fabricated.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Changes things 12Creates or changes something that can be changed back.Claude Code: ask

applications.complete_document_uploadVerify the uploaded object, content signature, session ownership, expiry, and exact application version before creating the protected document record.No findings
Why it is in this group
- The name "applications.complete_document_upload" says "upload": a word for a change.
Description, as the server wrote it
Verify the uploaded object, content signature, session ownership, expiry, and exact application version before creating the protected document record.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
applications.create_document_uploadCreate a 15-minute, exact-size and exact-content-type signed upload form for one email-verified application at its exact current version.No findings
Why it is in this group
- The name "applications.create_document_upload" says "create": a word for a change.
Description, as the server wrote it
Create a 15-minute, exact-size and exact-content-type signed upload form for one email-verified application at its exact current version.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
applications.startCreate or reuse a duplicate-safe applicant workspace for one published rental.No findings
Why it is in this group
- The name "applications.start" says "start": a word for a change.
Description, as the server wrote it
Create or reuse a duplicate-safe applicant workspace for one published rental. Requires explicit current privacy consent and an idempotency key. Email verification is sent to the applicant; the tool never returns the verification URL.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
applications.submitSubmit one complete email-verified application for review using its exact version, explicit current credit-check and truth-confirmation consent, and a durable idempotency key.No findings
Why it is in this group
- The name "applications.submit" says "submit": a word for a change.
Description, as the server wrote it
Submit one complete email-verified application for review using its exact version, explicit current credit-check and truth-confirmation consent, and a durable idempotency key.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
applications.updateUpdate bounded applicant, tenancy, and billing data for one email-verified session using its exact current version and a durable idempotency key.No findings
Why it is in this group
- The name "applications.update" says "update": a word for a change.
Description, as the server wrote it
Update bounded applicant, tenancy, and billing data for one email-verified session using its exact current version and a durable idempotency key.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
applications.upload_documentUpload one bounded PDF, JPEG, or PNG identity or company-registry document to an email-verified application using its exact version and a durable idempotency key.No findings
Why it is in this group
- The name "applications.upload_document" says "upload": a word for a change.
Description, as the server wrote it
Upload one bounded PDF, JPEG, or PNG identity or company-registry document to an email-verified application using its exact version and a durable idempotency key.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
quotes.acceptWith explicit customer confirmation, accept one exact active quote and atomically claim a 30-minute request-owned availability hold.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
With explicit customer confirmation, accept one exact active quote and atomically claim a 30-minute request-owned availability hold. This does not create or sign a contract and does not authorize payment.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
quotes.createSnapshot customer-safe approved request terms into a 24-hour quote.No findings
Why it is in this group
- The name "quotes.create" says "create": a word for a change.
Description, as the server wrote it
Snapshot customer-safe approved request terms into a 24-hour quote. The application must be submitted, internally approved, due-diligence positive, and solvency passed. This does not hold inventory.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
rentals.check_availabilityCheck the current published availability state and earliest date for one rental.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Check the current published availability state and earliest date for one rental. This does not create a hold or reservation.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
viewings.propose_availabilityPropose one to five bounded future viewing slots from an email-verified application at its exact version using a durable idempotency key.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Propose one to five bounded future viewing slots from an email-verified application at its exact version using a durable idempotency key.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
viewings.respond_to_proposalAccept or decline one pending Elron Club proposal with explicit confirmation, an exact application version, and a durable idempotency key.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Accept or decline one pending Elron Club proposal with explicit confirmation, an exact application version, and a durable idempotency key. Acceptance may send the existing viewing confirmation communication.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
waitlist.subscribeActivate newsletter updates for one canonical Elron region immediately after the customer explicitly requests them.No findings
Why it is in this group
- The name "waitlist.subscribe" says "subscribe": a word for a change.
Description, as the server wrote it
Activate newsletter updates for one canonical Elron region immediately after the customer explicitly requests them. An explicit customer request may reverse a previous opt-out without a confirmation email; automated inquiry and staff flows cannot override customer opt-outs.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 9Looks things up and changes nothing.Claude Code: allow

applications.get_statusRead the privacy-minimized status and next actions for one scoped application session token.No findings
Why it is in this group
- The name "applications.get_status" says "get": a word for reading.
Description, as the server wrote it
Read the privacy-minimized status and next actions for one scoped application session token.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
bookings.get_confirmationReturn a privacy-minimized booking confirmation only after the request has converted into the authoritative Stay workflow.No findings
Why it is in this group
- The name "bookings.get_confirmation" says "get": a word for reading.
Description, as the server wrote it
Return a privacy-minimized booking confirmation only after the request has converted into the authoritative Stay workflow.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
contracts.get_signing_linkReturn a secure signing URL only when the active signer invitation email matches the email-verified application session.No findings
Why it is in this group
- The name "contracts.get_signing_link" says "get": a word for reading.
Description, as the server wrote it
Return a secure signing URL only when the active signer invitation email matches the email-verified application session. Human verification, review, and signature remain in the signing flow.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
quotes.getRead one privacy-minimized quote and its live expiry/availability-hold state using the application session that owns it.No findings
Why it is in this group
- The name "quotes.get" says "get": a word for reading.
Description, as the server wrote it
Read one privacy-minimized quote and its live expiry/availability-hold state using the application session that owns it.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
rentals.getReturn localized customer-safe apartment details, verified availability, duration pricing, deposit, included services, terms, eligibility, media, and inquiry/application links.No findings
Why it is in this group
- The name "rentals.get" says "get": a word for reading.
Description, as the server wrote it
Return localized customer-safe apartment details, verified availability, duration pricing, deposit, included services, terms, eligibility, media, and inquiry/application links.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
rentals.get_pricingReturn current published monthly pricing by supported duration, parking, deposit, inclusions, payment method, and minimum-stay terms.No findings
Why it is in this group
- The name "rentals.get_pricing" says "get": a word for reading.
Description, as the server wrote it
Return current published monthly pricing by supported duration, parking, deposit, inclusions, payment method, and minimum-stay terms. Pricing is informational until a quote or hold is issued.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
rentals.searchReturn a compact, actionable shortlist of published furnished apartments by location, availability, capacity, rooms, duration, and monthly rent.No findings
Why it is in this group
- The name "rentals.search" says "search": a word for reading.
Description, as the server wrote it
Return a compact, actionable shortlist of published furnished apartments by location, availability, capacity, rooms, duration, and monthly rent. Defaults to 10 available or upcoming rentals; call rentals.get for complete details.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
reservations.get_statusRead privacy-minimized hold, contract, signature, payment, reservation, or confirmation state for one application session.No findings
Why it is in this group
- The name "reservations.get_status" says "get": a word for reading.
Description, as the server wrote it
Read privacy-minimized hold, contract, signature, payment, reservation, or confirmation state for one application session.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
viewings.get_statusRead customer-safe viewing proposals and confirmed viewing state for one email-verified application session.No findings
Why it is in this group
- The name "viewings.get_status" says "get": a word for reading.
Description, as the server wrote it
Read customer-safe viewing proposals and confirmed viewing state for one email-verified application session.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.2.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http public-rentals https://elron.club/api/agent/public/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__public-rentals__rentals_search",
      "mcp__public-rentals__rentals_get",
      "mcp__public-rentals__rentals_get_pricing",
      "mcp__public-rentals__applications_get_status",
      "mcp__public-rentals__viewings_get_status",
      "mcp__public-rentals__quotes_get",
      "mcp__public-rentals__reservations_get_status",
      "mcp__public-rentals__contracts_get_signing_link",
      "mcp__public-rentals__bookings_get_confirmation"
    ],
    "ask": [
      "mcp__public-rentals__waitlist_subscribe",
      "mcp__public-rentals__rentals_check_availability",
      "mcp__public-rentals__applications_start",
      "mcp__public-rentals__applications_update",
      "mcp__public-rentals__applications_create_document_upload",
      "mcp__public-rentals__applications_complete_document_upload",
      "mcp__public-rentals__applications_upload_document",
      "mcp__public-rentals__applications_submit",
      "mcp__public-rentals__viewings_propose_availability",
      "mcp__public-rentals__viewings_respond_to_proposal",
      "mcp__public-rentals__quotes_create",
      "mcp__public-rentals__quotes_accept",
      "mcp__public-rentals__payments_get_status"
    ],
    "deny": [
      "mcp__public-rentals__waitlist_unsubscribe"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as public-rentals. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/club.elron/public-rentals/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

14 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 17:46 UTC.

For agents: Markdown · JSON · report this listing