# `com.adrianhomelab/mall-directory` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/com.adrianhomelab/mall-directory
- JSON: https://anlyon.dev/api/v1/servers/com.adrianhomelab/mall-directory
- Version: 1.0.0 (active)
- Publisher: com.adrianhomelab (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T17:48:19.044Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Mall Store Directory
Search 6,926 mall stores across 49 malls in RO, US, UK, HU by city, operator, or category.
```

Scanned 2026-10-21T18:45:27.061Z over streamable-http.

**6 tools: 4 change things and 2 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 4 | ask |
| Only reads | read | 2 | allow |

## Findings

No check matched anything in these tool definitions.


## Changes things (4)

Creates or changes something that can be changed back. Claude Code: ask.

### `mall_stores`

- The name "mall_stores" says "store": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
List every store in a specific mall by mall_id.

    mall_id is the slug from list_malls() (e.g. 'mega-mall-bucuresti',
    'king-of-prussia'). Also accepts a mall name fragment.

    Args:
        mall_id: Mall id or name fragment (e.g. 'mega-mall-bucuresti').
        max_results: Maximum number of stores to return (1-500).
    
```

### `stores_by_category`

- The name "stores_by_category" says "store": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
List stores by category, optionally filtered by country.

    Categories are multilingual (RO/EN) and hierarchical
    ('Fashion' matches 'Women's Fashions' and 'Shopping / Modă').
    Diacritic-insensitive substring match.

    Args:
        category: Category name or fragment (e.g. 'Fashion', 'Food Court', 'Telecom').
        country: Optional country filter: ro, us, gb, hu.
        max_results: Maximum number of stores to return (1-100).
    
```

### `stores_by_city`

- The name "stores_by_city" says "store": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
List stores in a city, optionally filtered by country.

    City match is diacritic-insensitive and substring-tolerant ('bucuresti'
    matches 'București'). Country accepts ro/us/gb/hu (or full names).

    Args:
        city: City name (e.g. 'Bucharest', 'Timisoara', 'London').
        country: Optional country filter: ro, us, gb, hu.
        max_results: Maximum number of stores to return (1-100).
    
```

### `stores_by_operator`

- The name "stores_by_operator" says "store": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
List stores by mall operator.

    Diacritic-insensitive substring match on the operator name
    ('nepi' matches 'NEPI Rockcastle', 'simon' matches 'Simon Property Group').

    Args:
        operator: Operator name or fragment (e.g. 'NEPI', 'Simon', 'Westfield').
        max_results: Maximum number of stores to return (1-100).
    
```

## Only reads (2)

Looks things up and changes nothing. Claude Code: allow.

### `list_malls`

- The name "list_malls" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List the malls in the directory with store counts.

    Each entry: mall_id, mall_name, city, country, operator, store_count.
    Useful first call for discovery — feed mall_id to mall_stores().

    Args:
        country: Optional country filter: ro, us, gb, hu.
        max_results: Maximum number of malls to return (1-100).
    
```

### `search_stores`

- The name "search_stores" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search mall stores across the whole directory (store, brand, mall, city, operator, category).

    Free-text, diacritic-insensitive, AND-of-tokens. 'zara bucuresti' finds
    Zara stores in Bucharest-area malls; 'samsung' finds stores/brands named
    Samsung. Returns full store records (20 fields).

    Args:
        query: Free-text search terms.
        max_results: Maximum number of stores to return (1-100).
    
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `mall-directory`:

```json
{
  "permissions": {
    "allow": [
      "mcp__mall-directory__search_stores",
      "mcp__mall-directory__list_malls"
    ],
    "ask": [
      "mcp__mall-directory__stores_by_city",
      "mcp__mall-directory__stores_by_operator",
      "mcp__mall-directory__stores_by_category",
      "mcp__mall-directory__mall_stores"
    ],
    "deny": []
  }
}
```