Allowances API
com.allowancesapi/per-diem-allowancesallowancesapi.comstreamable-httpv1.0.0Scanned
U.S. government per diem and overseas allowance rates from GSA, DTMO OCONUS and State DSSR tables.
42 tools: 3 change things and 39 only read.
- Reads private data · 0
- Reads text others write · 3
- Can send data out · 0
- No findings
Anlyon alternative
3 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
42 tools
Changes things 3Claude Code: ask
calculate_mileage_reimbursementCalculate POV mileage reimbursement Calculate mileage reimbursement using the official GSA rate in effect on the travel date.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Calculate POV mileage reimbursement Calculate mileage reimbursement using the official GSA rate in effect on the travel date. Provide a distance in miles and select automobile, airplane, motorcycle, or moving mileage. For automobile travel, indicate whether a government-furnished automobile was authorized and available; this determines whether the standard or reduced rate applies. If no travel date is supplied, today's date is used. The response identifies the selected rate category, rate and effective date, and the reimbursement amount rounded to the nearest cent.
calculate_trip_per_diemCalculate a GSA CONUS trip per diem entitlement <p>Calculate estimated lodging and meals and incidental expenses (M&IE) reimbursement for a trip within the continental United S…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Calculate a GSA CONUS trip per diem entitlement <p>Calculate estimated lodging and meals and incidental expenses (M&IE) reimbursement for a trip within the continental United States. The response provides a daily breakdown and trip totals.</p> <h3 class="text-xl">Describe the trip</h3> <ul class="list-disc"> <li>Add each temporary-duty stop in travel order, with inclusive arrival and departure dates.</li> <li>Identify each stop with a GSA destination ID or ZIP code. A stop represents the temporary-duty locality, which may differ from the hotel location.</li> <li>Optionally provide the actual nightly lodging cost and any meals that must be deducted.</li> <li>When one stop ends on the same date another begins, the arriving stop applies to that date.</li> </ul> <h3 class="text-xl">Calculation rules</h3> <ul class="list-disc"> <li>The calculator selects the GSA rate in effect for each day, including seasonal and fiscal-year changes.</li> <li>First and last travel days receive 75% of the M&IE rate; intermediate days receive 100%.</li> <li>Submitted meal deductions use the official GSA meal values while preserving the required incidental expense amount.</li> <li>Lodging reimbursement is limited to the nightly GSA cap. Any amount above the cap is reported as <code>overage</code> and is not included in the payable total.</li> </ul> <h3 class="text-xl">Important notes</h3> <ul class="list-disc"> <li>Submit only meals that you have determined must be deducted under FTR 301-11.21.</li> <li>Single-day reimbursement applies only when the traveler is in eligible travel status for more than 12 hours.</li> <li>If a lodging cost is omitted, the response still shows the nightly cap, but lodging and overall payable totals are <code>null</code>.</li> <li>The response includes the calculation version and a source fingerprint to support auditing.</li> </ul>
cola_calculator_by_postcodeDSSR COLA calculator by postcode Returns the rate in percentage, the annual and the biweekly amounts of cost of living allowance (COLA) for a given DSSR postcode.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it DSSR COLA calculator by postcode Returns the rate in percentage, the annual and the biweekly amounts of cost of living allowance (COLA) for a given DSSR postcode. Use this endpoint to automate your COLA calculations and replace the official excel file.
Only reads 39Show 39 read-only tools
get_allowancesDSSR allowances by countryNo findings
Why it is in this group
- The name "get_allowances" says "get": a word for reading.
Description, as the server wrote it DSSR allowances by country
get_allowances_by_locationDSSR allowances by location nameNo findings
Why it is in this group
- The name "get_allowances_by_location" says "get": a word for reading.
Description, as the server wrote it DSSR allowances by location name
get_allowances_by_postcodeDSSR allowances by location post codeReads text others writeNo findings
Why it is in this group
- The name "get_allowances_by_postcode" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "post": it reads posts, which other people can write.
Description, as the server wrote it DSSR allowances by location post code
get_city_pair_locationsCity Pair airport and city codes List or search the three-letter codes used by GSA City Pair awards for the fiscal year of `date` (today by default), with GSA's own city, state and…No findings
Why it is in this group
- The name "get_city_pair_locations" says "get": a word for reading.
Description, as the server wrote it City Pair airport and city codes List or search the three-letter codes used by GSA City Pair awards for the fiscal year of `date` (today by default), with GSA's own city, state and country labels. Awards use IATA airport codes (DCA, IAD, BWI) for most domestic pairs and metropolitan city codes (WAS, NYC, LON) for others; only GSA decides which, so resolve the code here before calling the fare lookup. Several codes can share one city label. Without `q`, every code of the fiscal year is returned, ordered by code. With `q` (3+ characters), a code matches exactly and city/country names match by substring, case-insensitively. Plan/date rules are those of the fare lookup: Sandbox and Google add-on today only; Pro the current US fiscal year; Business (including Enterprise accounts) any loaded fiscal year. Example: ```sh curl --get 'https://api.allowancesapi.com/v1/gsa/city-pairs/locations' -H 'X-API-Key: YOUR_KEY' --data-urlencode 'q=washington' ``` Labels mirror the latest imported awards table and change with it.
get_city_pairsCity Pair contract airfares Return every GSA contract award matching the airport/city code pair and date (today by default).No findings
Why it is in this group
- The name "get_city_pairs" says "get": a word for reading.
Description, as the server wrote it City Pair contract airfares Return every GSA contract award matching the airport/city code pair and date (today by default). Codes are returned in alphabetical order; fares are one-way USD and valid in either direction. Source start/end dates are inclusive; overlapping amendments are both returned. No fallback to other fiscal years or dates. Null fare categories are unavailable. Sandbox and Google add-on: today only. Pro: current US fiscal year. Business (including Enterprise accounts): any loaded fiscal year, including published future awards. Data reflects the latest imported table, not past publication snapshots. These are eligible government travelers' contract prices, not live seat availability or booking offers. Domestic fares exclude passenger facility, segment and security fees; international fares exclude taxes/fees but include fuel surcharges. Book through the agency's authorized system. [Official CPP rules and price caveats](https://www.gsa.gov/travel/plan-a-trip/transportation-airfare-rates-pov-rates/airfare-rates-city-pair-program); [fare definitions](https://www.gsa.gov/travel/plan-a-trip/transportation-airfare-rates-pov-rates/airfare-rates-city-pair-program/government-airfare-types). Example (fixed date; use Business access for dates outside the current fiscal year): ```sh curl --get 'https://api.allowancesapi.com/v1/gsa/city-pairs/ABE/ATL' -H 'X-API-Key: YOUR_KEY' -H 'X-Bypass-Cache: 1' --data-urlencode 'date=2026-10-28' --data-urlencode 'verification_url=true' ``` See the 200 response example for all result fields. Importing does not invalidate existing cached responses; use X-Bypass-Cache: 1 to verify newly imported data.
get_countriesResolve a country name to its ISO code and list its postsReads text others writeNo findings
Why it is in this group
- The name "get_countries" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "resolve" and "post": it reads posts, which other people can write.
Description, as the server wrote it Resolve a country name to its ISO code and list its posts
get_countryGet country by ISO codeNo findings
Why it is in this group
- The name "get_country" says "get": a word for reading.
Description, as the server wrote it Get country by ISO code
get_destination_by_idGet GSA destination metadata by ID Return the geographic metadata for one GSA destination rate area.No findings
Why it is in this group
- The name "get_destination_by_id" says "get": a word for reading.
Description, as the server wrote it Get GSA destination metadata by ID Return the geographic metadata for one GSA destination rate area. A destination may represent a city, metropolitan area, county, group of jurisdictions, or the Standard CONUS area rather than a single municipality. `name` is GSA's short display name, while `defined_name` describes the geographic scope of the rate area. `destination_id` is GSA's numeric identifier for that rate area. Use [`GET /v1/gsa/destinations`](/docs#tag/GSA---CONUS-locations/operation/get_destinations_v1_gsa_destinations_get) to browse available destinations and find an ID. ID `0` identifies the Standard CONUS rate area. This endpoint returns destination metadata only. Use `GET /v1/gsa/perdiem/destination/{destination_id}` to retrieve the per diem rate in effect for a particular date.
get_destinationsList GSA destinations Return the paginated list of GSA destination rate areas and their numeric IDs.No findings
Why it is in this group
- The name "get_destinations" says "get": a word for reading.
Description, as the server wrote it List GSA destinations Return the paginated list of GSA destination rate areas and their numeric IDs. A destination is an area for which GSA publishes a per diem rate; it may represent a city, metropolitan area, county, locality, or the Standard CONUS area rather than a single municipality. Use `destination_id` with `GET /v1/gsa/perdiem/destination/{destination_id}` to retrieve the rate in effect for that destination. ID `0` identifies the Standard CONUS rate. `name` is GSA's display name, while `defined_name`, `county`, and state fields provide the geographic context needed to select the correct rate area. Results are ordered by `destination_id`. Use `offset` and `limit` to page through the list. An offset beyond the available records returns an empty list, not a 404 response.
get_dssr_locationsList DSSR locations Return DSSR locations, optionally filtered by q=<name>.No findings
Why it is in this group
- The name "get_dssr_locations" says "get": a word for reading.
Description, as the server wrote it List DSSR locations Return DSSR locations, optionally filtered by q=<name>. The response is paginated and includes the total number of matching locations (ignoring pagination) along with the offset and limit that were applied.
get_dssr_locations_by_countryList DSSR locations by country Return all DSSR locations for a specific country using its ISO alpha-2 code (e.g., 'AF', 'DE')No findings
Why it is in this group
- The name "get_dssr_locations_by_country" says "get": a word for reading.
Description, as the server wrote it List DSSR locations by country Return all DSSR locations for a specific country using its ISO alpha-2 code (e.g., 'AF', 'DE')
get_dtmo_conus_locationsGet DTMO CONUS locations # todo add filter by location Return all DTMO locations for a specific state using its US State Code (e.g., 'US-CA')No findings
Why it is in this group
- The name "get_dtmo_conus_locations" says "get": a word for reading.
Description, as the server wrote it Get DTMO CONUS locations # todo add filter by location Return all DTMO locations for a specific state using its US State Code (e.g., 'US-CA')
get_dtmo_oconus_locationsGet DTMO OCONUS locations Return DTMO locations for a specific country using its ISO Code (e.g., 'AU', 'BE').No findings
Why it is in this group
- The name "get_dtmo_oconus_locations" says "get": a word for reading.
Description, as the server wrote it Get DTMO OCONUS locations Return DTMO locations for a specific country using its ISO Code (e.g., 'AU', 'BE'). The optional `location` filter performs case-insensitive substring matching. Omitted or empty filters return all locations in the country. Nonempty input is literal, including spaces and wildcard characters. No matches returns [].
get_dtmo_perdiem_conusGet perdiem CONUS Department of Defense per diem for the continental U.S.No findings
Why it is in this group
- The name "get_dtmo_perdiem_conus" says "get": a word for reading.
Description, as the server wrote it Get perdiem CONUS Department of Defense per diem for the continental U.S. by state code (e.g. 'TX'); Alaska, Hawaii and the territories are served by the OCONUS endpoint. Returns lodging, local and proportional meal rates, incidentals and the maximum per diem (lodging + meals + incidentals) per season. `q` filters by location name. `date` selects the rates in force on that day, `year` a fiscal year (Oct 1 to Sep 30); omit both for the current fiscal year.
get_dtmo_perdiem_oconusGet perdiem OCONUS Department of Defense per diem outside the continental U.S.: foreign countries by ISO alpha-2 code (e.g.No findings
Why it is in this group
- The name "get_dtmo_perdiem_oconus" says "get": a word for reading.
Description, as the server wrote it Get perdiem OCONUS Department of Defense per diem outside the continental U.S.: foreign countries by ISO alpha-2 code (e.g. 'PG'), and Alaska, Hawaii and U.S. territories by 'US-XX' code. Returns lodging, local and proportional meal rates, incidentals and the maximum per diem (lodging + meals + incidentals) per season. `q` filters by location name. `date` selects the rates in force on that day, `year` a fiscal year (Oct 1 to Sep 30); omit both for the current fiscal year.
get_fema_hotel_by_idFEMA-listed property by FEMA ID Return the property registered under a FEMA ID, or 404 when the ID is not on the list.No findings
Why it is in this group
- The name "get_fema_hotel_by_id" says "get": a word for reading.
Description, as the server wrote it FEMA-listed property by FEMA ID Return the property registered under a FEMA ID, or 404 when the ID is not on the list. The Hotel and Motel Fire Safety Act of 1990 requires federal travelers to stay at a property on FEMA's Hotel and Motel National Master List to be reimbursed for lodging. Each property on the list has a FEMA ID. FEMA publishes the current list only; `as_of` is the date of the snapshot the results come from. This endpoint returns no rates: combine it with the GSA per diem lookups for the lodging ceiling.
get_fema_hotels_by_state_cityFEMA-listed properties by state, optionally filtered by city Return the properties on the list in a state, ordered by city then name and paginated with `offset` and `limit` (50 by …No findings
Why it is in this group
- The name "get_fema_hotels_by_state_city" says "get": a word for reading.
Description, as the server wrote it FEMA-listed properties by state, optionally filtered by city Return the properties on the list in a state, ordered by city then name and paginated with `offset` and `limit` (50 by default, 200 at most); `total` is the number of matches across all pages. The optional `city` is matched case-insensitively as a partial name, so `york` matches New York and Yorktown. The state path accepts the 50 states, DC and the territories FEMA lists (AS, GU, MP, PR, PW, VI); other codes return 404. A city that matches nothing returns an empty `results` list. The Hotel and Motel Fire Safety Act of 1990 requires federal travelers to stay at a property on FEMA's Hotel and Motel National Master List to be reimbursed for lodging. Each property on the list has a FEMA ID. FEMA publishes the current list only; `as_of` is the date of the snapshot the results come from. This endpoint returns no rates: combine it with the GSA per diem lookups for the lodging ceiling.
get_fema_hotels_by_zipcodeFEMA-listed properties by ZIP code Return every property on the list in a US ZIP code, ordered by name.No findings
Why it is in this group
- The name "get_fema_hotels_by_zipcode" says "get": a word for reading.
Description, as the server wrote it FEMA-listed properties by ZIP code Return every property on the list in a US ZIP code, ordered by name. The path accepts a five-digit ZIP or ZIP+4, normalized to the first five digits. A known ZIP with no listed property returns an empty `results` list; an unknown ZIP returns 404. The Hotel and Motel Fire Safety Act of 1990 requires federal travelers to stay at a property on FEMA's Hotel and Motel National Master List to be reimbursed for lodging. Each property on the list has a FEMA ID. FEMA publishes the current list only; `as_of` is the date of the snapshot the results come from. This endpoint returns no rates: combine it with the GSA per diem lookups for the lodging ceiling.
get_fleet_rates_by_sinGSA Fleet vehicle leasing rates by SIN Return the GSA Fleet vehicle leasing rates (monthly lease rate and rate per mile) for the vehicle type identified by its Standard Item Number…No findings
Why it is in this group
- The name "get_fleet_rates_by_sin" says "get": a word for reading.
Description, as the server wrote it GSA Fleet vehicle leasing rates by SIN Return the GSA Fleet vehicle leasing rates (monthly lease rate and rate per mile) for the vehicle type identified by its Standard Item Number (SIN), from the standard (US) or europe rate schedule. If year is not specified, the current fiscal year's rates will be returned. Rates are available from fiscal year 2022.
get_gsa_perdiem_by_destinationGSA per diem rate by destination Return the GSA per diem rate in effect for a specific GSA destination on a given date.No findings
Why it is in this group
- The name "get_gsa_perdiem_by_destination" says "get": a word for reading.
Description, as the server wrote it GSA per diem rate by destination Return the GSA per diem rate in effect for a specific GSA destination on a given date. A destination is a rate area defined by GSA and may represent a city, metropolitan area, county, or the Standard CONUS area. It is not necessarily a single municipality. `destination_id` is the numeric identifier assigned to that GSA rate area in the source data. Use [`GET /v1/gsa/destinations`](/docs#tag/GSA---CONUS-locations/operation/get_destinations_v1_gsa_destinations_get) to browse the available destinations and find the ID for the location you need. Destination ID `0` represents the Standard CONUS rate. The response contains the seasonal lodging rate applicable on the requested date and the daily meals and incidental expenses (M&IE) rate. When `date` is omitted, today's rate is returned. Set `verification_url=true` to include the corresponding official GSA lookup URL.
get_gsa_perdiem_by_stateGSA per diem rates by state and date Return every GSA destination rate in a state that applies on a specific date.No findings
Why it is in this group
- The name "get_gsa_perdiem_by_state" says "get": a word for reading.
Description, as the server wrote it GSA per diem rates by state and date Return every GSA destination rate in a state that applies on a specific date. Each result contains the seasonal lodging rate in effect on that date and the daily meals and incidental expenses (M&IE) rate. When `date` is omitted, today's rates are returned. Use the optional `location` parameter to filter by a GSA destination or location-defined name. Matching is case-insensitive and accepts partial names. If the state has no non-standard destination rate, the Standard CONUS rate is returned. This endpoint covers GSA CONUS rates; unsupported or unknown state codes return 404. Set `verification_url=true` to include the corresponding official GSA state lookup URL.
get_gsa_perdiem_by_state_yearGSA per diem rates by state and fiscal year Return every GSA destination rate in a state for a US fiscal year.No findings
Why it is in this group
- The name "get_gsa_perdiem_by_state_year" says "get": a word for reading.
Description, as the server wrote it GSA per diem rates by state and fiscal year Return every GSA destination rate in a state for a US fiscal year. Each result contains the lodging rate for every month and the daily meals and incidental expenses (M&IE) rate. A US fiscal year begins October 1 of the preceding calendar year and ends September 30. Use the optional `location` parameter to filter destinations by their GSA destination or location-defined name. Matching is case-insensitive and accepts partial names. Set `verification_url=true` to include the corresponding official GSA state lookup URL.
get_gsa_perdiem_by_zipcodeGSA per diem rates by ZIP code and date Return every GSA destination rate associated with a US ZIP code that applies on a specific date.No findings
Why it is in this group
- The name "get_gsa_perdiem_by_zipcode" says "get": a word for reading.
Description, as the server wrote it GSA per diem rates by ZIP code and date Return every GSA destination rate associated with a US ZIP code that applies on a specific date. Each result contains the seasonal lodging rate in effect on that date and the daily meals and incidental expenses (M&IE) rate. When `date` is omitted, today's rates are returned. A ZIP code can map to more than one GSA destination. When that happens, `results` contains every applicable rate, and the API does not choose one automatically. Use the returned county or a geocoder to determine which destination applies to the travel location. If a known ZIP code has no non-standard destination, the Standard CONUS rate is returned. The path accepts either a five-digit ZIP code or ZIP+4. ZIP+4 values are normalized to their first five digits. Set `verification_url=true` to include the corresponding official GSA lookup URL.
get_gsa_perdiem_by_zipcode_yearGSA per diem rates by ZIP code and fiscal year Return the GSA lodging rates for every month of a US fiscal year and the daily meals and incidental expenses (M&IE) rate associated w…No findings
Why it is in this group
- The name "get_gsa_perdiem_by_zipcode_year" says "get": a word for reading.
Description, as the server wrote it GSA per diem rates by ZIP code and fiscal year Return the GSA lodging rates for every month of a US fiscal year and the daily meals and incidental expenses (M&IE) rate associated with a ZIP code. A US fiscal year begins October 1 of the preceding calendar year and ends September 30. A ZIP code can map to more than one GSA destination. When that happens, `results` contains every applicable rate. The API does not choose a destination automatically; use the returned county or a geocoder to determine which rate applies. ZIP codes without a non-standard destination return the Standard CONUS rate. ZIP+4 input is accepted and normalized to its first five digits. Set `verification_url=true` to include the corresponding official GSA lookup URL.
get_latest_publicationsLatest data publicationsNo findings
Why it is in this group
- The name "get_latest_publications" says "get": a word for reading.
Description, as the server wrote it Latest data publications
get_mie_breakdownsM&IE meal breakdowns Return how daily M&IE totals break down into breakfast, lunch, dinner and incidental expenses, as in effect on the given date.No findings
Why it is in this group
- The name "get_mie_breakdowns" says "get": a word for reading.
Description, as the server wrote it M&IE meal breakdowns Return how daily M&IE totals break down into breakfast, lunch, dinner and incidental expenses, as in effect on the given date. The CONUS table breaks down the five standard CONUS M&IE tiers and is returned by default. Set region=oconus for the generic DTMO/DSSR M&IE total table. If date is not specified, today's breakdowns will be returned.
get_mileagePOV mileage reimbursement rates Return the privately owned vehicle (POV) mileage reimbursement rates in effect on the given date.No findings
Why it is in this group
- The name "get_mileage" says "get": a word for reading.
Description, as the server wrote it POV mileage reimbursement rates Return the privately owned vehicle (POV) mileage reimbursement rates in effect on the given date. If date is not specified, today's rates will be returned.
get_opm_localitiesGS locality pay areas, optionally by county or city List the locality pay areas of the latest pay year, with the code to use on the pay endpoints.No findings
Why it is in this group
- The name "get_opm_localities" says "get": a word for reading.
Description, as the server wrote it GS locality pay areas, optionally by county or city List the locality pay areas of the latest pay year, with the code to use on the pay endpoints. The optional `location` keeps the areas whose name contains every word, and the areas of the counties and cities with that name. `state` narrows `location` to one state and has no effect without it. County and city names must match exactly, ignoring case; a trailing `county` is optional. A place outside every listed area returns Rest of U.S. (`RUS`). Area names keep matching on any word they contain. `matched_places` lists the counties and cities behind each result. A place name can return several areas: the same name can exist in several states, which `state` narrows, and a city can span several areas, in which case all of them are returned and the official duty station decides. City data is not published by OPM, so for payroll use `/v1/opm/localities/county/{fips}`. An empty result does not mean Rest of U.S.: the name may be misspelled, and U.S. territories are not covered.
get_opm_locality_by_countyGS locality pay area of a county Return the locality pay area of a county for the latest pay year, using OPM's own definitions.No findings
Why it is in this group
- The name "get_opm_locality_by_county" says "get": a word for reading.
Description, as the server wrote it GS locality pay area of a county Return the locality pay area of a county for the latest pay year, using OPM's own definitions. A county that OPM doesn't list under an area falls under Rest of U.S. (`RUS`), and every county in Alaska or Hawaii returns that state's area. Returns 404 for an unknown code and for a Connecticut planning region, as OPM defines Connecticut by its eight legacy counties. U.S. territories fall under Rest of U.S. in OPM's definitions, but their county codes are not available here and return 404. Burlington County, NJ (`34005`) returns the Philadelphia area, while three military sites inside it (Fort Dix, Joint Base McGuire-Dix-Lakehurst and McGuire Air Force Base) belong to the New York area.
get_opm_payGS pay by locality code Return the latest pay table of a locality pay area, ordered by grade and step, or 404 for an unknown code.No findings
Why it is in this group
- The name "get_opm_pay" says "get": a word for reading.
Description, as the server wrote it GS pay by locality code Return the latest pay table of a locality pay area, ordered by grade and step, or 404 for an unknown code. `grade` and `step` narrow the rates. Use `GS` for the base table without locality pay, and `RUS` for Rest of U.S.
get_perdiem_allowanceDSSR per diem by countryNo findings
Why it is in this group
- The name "get_perdiem_allowance" says "get": a word for reading.
Description, as the server wrote it DSSR per diem by country
get_perdiem_allowance_by_locationDSSR per diem by location nameNo findings
Why it is in this group
- The name "get_perdiem_allowance_by_location" says "get": a word for reading.
Description, as the server wrote it DSSR per diem by location name
get_perdiem_allowance_by_postcodeDSSR per diem by location post codeReads text others writeNo findings
Why it is in this group
- The name "get_perdiem_allowance_by_postcode" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "post": it reads posts, which other people can write.
Description, as the server wrote it DSSR per diem by location post code
get_userGet UserNo findings
Why it is in this group
- The name "get_user" says "get": a word for reading.
Description, as the server wrote it Get User
get_zipcodeGet ZIP code metadata Look up every state associated with a US ZIP code.No findings
Why it is in this group
- The name "get_zipcode" says "get": a word for reading.
Description, as the server wrote it Get ZIP code metadata Look up every state associated with a US ZIP code. Most ZIP codes belong to one state, but some cross state boundaries. In that case, `states` contains every matching state; the API does not choose one on the caller's behalf. This is a geographic metadata endpoint; it does not return GSA per diem rates. Use `/v1/gsa/perdiem/zipcode/{zipcode}` for rates. The path accepts either a five-digit ZIP code or ZIP+4. ZIP+4 values are normalized to their first five digits before lookup, and the normalized five-digit ZIP is returned in the response. Leading zeroes are significant, so ZIP codes must be sent as strings.
search_dtmo_perdiemSearch by location name Department of Defense per diem by location name (e.g.No findings
Why it is in this group
- The name "search_dtmo_perdiem" says "search": a word for reading.
Description, as the server wrote it Search by location name Department of Defense per diem by location name (e.g. 'Kabul') or country/state name (e.g. 'Afghanistan'), across CONUS and OCONUS. `date` selects the rates in force on that day, `year` a fiscal year (Oct 1 to Sep 30); omit both for the current fiscal year.
search_fema_hotelsSearch FEMA-listed properties by name and town Return the properties whose name or city contains every word of `q`, case-insensitively, as a plain substring: `courtyard dallas` mat…No findings
Why it is in this group
- The name "search_fema_hotels" says "search": a word for reading.
Description, as the server wrote it Search FEMA-listed properties by name and town Return the properties whose name or city contains every word of `q`, case-insensitively, as a plain substring: `courtyard dallas` matches Courtyard properties in Dallas, `mint house alexandria` the Mint House in Alexandria. There is no fuzzy matching, so `hampton inn` does not find "Hampton by Hilton". Words of one character are ignored. `state` narrows the search to one state or territory (404 for a code FEMA does not list). Results are ordered by name then city and paginated with `offset` and `limit` (50 by default, 200 at most); `total` counts every match. No match returns an empty `results` list. The Hotel and Motel Fire Safety Act of 1990 requires federal travelers to stay at a property on FEMA's Hotel and Motel National Master List to be reimbursed for lodging. Each property on the list has a FEMA ID. FEMA publishes the current list only; `as_of` is the date of the snapshot the results come from. This endpoint returns no rates: combine it with the GSA per diem lookups for the lodging ceiling.
search_opm_paySearch GS pay by locality area Return the latest pay tables whose locality area matches every word of `q`: each word must be contained in the area name, case-insensitively, or equa…No findings
Why it is in this group
- The name "search_opm_pay" says "search": a word for reading.
Description, as the server wrote it Search GS pay by locality area Return the latest pay tables whose locality area matches every word of `q`: each word must be contained in the area name, case-insensitively, or equal its code. `grade` and `step` narrow the rates. No match returns an empty `results` list. Matching only looks at OPM's locality area names, not at the counties and towns each area covers: `naperville` finds Chicago because the name contains it, while a town missing from the names returns nothing. No match does not mean the place falls under Rest of U.S.
search_perdiemSearch DSSR Per Diem by country/location name Search globally by case-insensitive substring of a location or country name.No findings
Why it is in this group
- The name "search_perdiem" says "search": a word for reading.
Description, as the server wrote it Search DSSR Per Diem by country/location name Search globally by case-insensitive substring of a location or country name. The date selects effective and seasonal rates and defaults to today. The response effective_date is the first day of the selected month. Missing, blank, or fewer than three characters after trimming returns HTTP 422. A valid search with no matching rates returns HTTP 404.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write3
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http per-diem-allowances https://mcp.allowancesapi.com/mcp --header 'X-API-Key: <your-x-api-key>'claude mcp add --transport http per-diem-allowances https://mcp.allowancesapi.com/mcp --header 'X-API-Key: <your-x-api-key>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__per-diem-allowances__get_allowances",
"mcp__per-diem-allowances__get_allowances_by_location",
"mcp__per-diem-allowances__get_allowances_by_postcode",
"mcp__per-diem-allowances__search_perdiem",
"mcp__per-diem-allowances__get_perdiem_allowance",
"mcp__per-diem-allowances__get_perdiem_allowance_by_location",
"mcp__per-diem-allowances__get_perdiem_allowance_by_postcode",
"mcp__per-diem-allowances__get_dssr_locations",
"mcp__per-diem-allowances__get_countries",
"mcp__per-diem-allowances__get_country",
"mcp__per-diem-allowances__get_dssr_locations_by_country",
"mcp__per-diem-allowances__get_gsa_perdiem_by_destination",
"mcp__per-diem-allowances__get_gsa_perdiem_by_state",
"mcp__per-diem-allowances__get_gsa_perdiem_by_state_year",
"mcp__per-diem-allowances__get_gsa_perdiem_by_zipcode",
"mcp__per-diem-allowances__get_gsa_perdiem_by_zipcode_year",
"mcp__per-diem-allowances__get_zipcode",
"mcp__per-diem-allowances__get_destination_by_id",
"mcp__per-diem-allowances__get_destinations",
"mcp__per-diem-allowances__get_city_pair_locations",
"mcp__per-diem-allowances__get_city_pairs",
"mcp__per-diem-allowances__get_mileage",
"mcp__per-diem-allowances__get_mie_breakdowns",
"mcp__per-diem-allowances__get_fleet_rates_by_sin",
"mcp__per-diem-allowances__get_dtmo_perdiem_conus",
"mcp__per-diem-allowances__get_dtmo_perdiem_oconus",
"mcp__per-diem-allowances__search_dtmo_perdiem",
"mcp__per-diem-allowances__get_dtmo_conus_locations",
"mcp__per-diem-allowances__get_dtmo_oconus_locations",
"mcp__per-diem-allowances__search_fema_hotels",
"mcp__per-diem-allowances__get_fema_hotel_by_id",
"mcp__per-diem-allowances__get_fema_hotels_by_zipcode",
"mcp__per-diem-allowances__get_fema_hotels_by_state_city",
"mcp__per-diem-allowances__get_opm_localities",
"mcp__per-diem-allowances__get_opm_locality_by_county",
"mcp__per-diem-allowances__search_opm_pay",
"mcp__per-diem-allowances__get_opm_pay",
"mcp__per-diem-allowances__get_latest_publications",
"mcp__per-diem-allowances__get_user"
],
"ask": [
"mcp__per-diem-allowances__cola_calculator_by_postcode",
"mcp__per-diem-allowances__calculate_mileage_reimbursement",
"mcp__per-diem-allowances__calculate_trip_per_diem"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as per-diem-allowances. Review it before you use it.
Capability tags behind 3 rules
- mcp__per-diem-allowances__get_allowances_by_postcode untrusted-input
- mcp__per-diem-allowances__get_perdiem_allowance_by_postcode untrusted-input
- mcp__per-diem-allowances__get_countries untrusted-input
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/com.allowancesapi/per-diem-allowances/verify?hash=c22a30b77999cc8b6fab5c91cd66399ffd307039621e614719288f71ad8fea0b" | jq -e '.changed == false'Pinned hash c22a30b77999, from Nov 1, 2026, 14:18 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/com.allowancesapi/per-diem-allowances/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/com.allowancesapi/per-diem-allowances)Source: MCP Registry. Synced Nov 1, 2026, 14:17 UTC.