AutoPrivado

com.autoprivado/autoprivadoautoprivado.comstreamable-httpv1.0.0Scanned 2 hours ago

Private car sales in Europe: search listings, price estimate from VIN, portals, contracts.

7 tools: 4 change things and 3 only read.

Reads private data · 1
Reads text others write · 4
Can send data out · 0
1 finding

Anlyon alternative

4 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

7 tools

Changes things 4Creates or changes something that can be changed back.Claude Code: ask

create_listingCreate a car-for-sale listing for a PRIVATE seller on AutoPrivado, only on behalf of and with the consent of the car's owner.Reads text others writeNo findings
Why it is in this group
- The name "create_listing" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Create a car-for-sale listing for a PRIVATE seller on AutoPrivado, only on behalf of and with the consent of the car's owner. Decodes the VIN (NHTSA vPIC) or Dutch plate (RDW), gives a rule-based price estimate, writes the listing in EN/DE/IT/ES/FR/NL/PL and a missing-info checklist. The listing page goes live on autoprivado.com; returns its URL and a secret edit URL (give the edit URL only to the seller). AutoPrivado never posts to portals: the seller publishes on each portal himself with the posting kit (kitUrl). Limited per client and per day (free service).
Annotations the server declares
- title: Create a private car listing
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
decode_vehicleDecode a 17-character VIN (NHTSA vPIC, works best for cars sold in the US and many EU makes) or a Dutch licence plate (RDW open data: make, model, first registration, fuel, power, …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Decode a 17-character VIN (NHTSA vPIC, works best for cars sold in the US and many EU makes) or a Dutch licence plate (RDW open data: make, model, first registration, fuel, power, APK date). Returns the vehicle data AutoPrivado would use. Nothing is stored.
Annotations the server declares
- title: Decode a vehicle
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
estimate_priceRule-based price range (low/mid/high, EUR) for a used car from its VIN or Dutch plate (or make/model/year), mileage, condition and the approximate price when new.Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Rule-based price range (low/mid/high, EUR) for a used car from its VIN or Dutch plate (or make/model/year), mileage, condition and the approximate price when new. Not a valuation; it explains every step and the typical dealer gap. Polish listings are priced in PLN by the seller; this estimate is always in EUR, never converted. Nothing is stored.
Annotations the server declares
- title: Estimate a price
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
get_sale_documentsLinks and data for closing a private car sale in a country: printable sale-contract template (prefilled when a listing id is given), the change-of-ownership checklist with deadline…Reads private data1 finding
Why it is in this group
- The name "get_sale_documents" says "get": a word for reading.
- The description's first verb is "link": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- private-dataThe name "get_sale_documents" says "get" and "document": it reads documents.
- private-dataThe description's first sentence says "document": it reads documents.
Findings
- Warn
  The server marks "get_sale_documents" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_sale_documents" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Links and data for closing a private car sale in a country: printable sale-contract template (prefilled when a listing id is given), the change-of-ownership checklist with deadlines (computed from the sale date), documents to hand over, costs and official sources.
Annotations the server declares
- title: Sale documents
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

Only reads 3Looks things up and changes nothing.Show 3 read-only tools

get_listingGet one AutoPrivado listing by id: vehicle data, price and currency, texts in 7 languages, photo URLs, page URL per language, missing-info checklist.Reads text others writeNo findings
Why it is in this group
- The name "get_listing" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "get" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Get one AutoPrivado listing by id: vehicle data, price and currency, texts in 7 languages, photo URLs, page URL per language, missing-info checklist. Expired or deleted listings return not_found.
Annotations the server declares
- title: Get a listing
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_portalsThe car portals AutoPrivado prepares posting kits for, per country (IT, ES, DE, FR, NL, PL): recommended and optional portal, home page, the portal's own listing form, private-sell…No findings
Why it is in this group
- The name "list_portals" says "list": a word for reading.
Description, as the server wrote it
The car portals AutoPrivado prepares posting kits for, per country (IT, ES, DE, FR, NL, PL): recommended and optional portal, home page, the portal's own listing form, private-seller fee with its source, optional payment service, and whether a seller from abroad can use it.
Annotations the server declares
- title: List portals
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_listingsSearch active private-seller car listings on AutoPrivado.No findings
Why it is in this group
- The name "search_listings" says "search": a word for reading.
Description, as the server wrote it
Search active private-seller car listings on AutoPrivado. Filters: free text (make/model), make, model, market country, price range with currency, max km, min year, fuel. A country search also returns cars cross-listed into that market (crossListed, marketPrice, marketCurrency); price filters use that market's currency (PLN in PL, EUR elsewhere). Results may be up to a minute old.
Annotations the server declares
- title: Search listings
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_sale_documents
Reads text others write4: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; create_listing
decode_vehicle
estimate_price
get_listing
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warnget_sale_documents
The server marks "get_sale_documents" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "get_sale_documents" says "get": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http autoprivado https://autoprivado.com/mcp

claude mcp add --transport http autoprivado https://autoprivado.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__autoprivado__get_listing",
      "mcp__autoprivado__search_listings",
      "mcp__autoprivado__list_portals"
    ],
    "ask": [
      "mcp__autoprivado__create_listing",
      "mcp__autoprivado__decode_vehicle",
      "mcp__autoprivado__estimate_price",
      "mcp__autoprivado__get_sale_documents"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as autoprivado. Review it before you use it.

Capability tags behind 5 rules

mcp__autoprivado__create_listing untrusted-input
mcp__autoprivado__get_listing untrusted-input
mcp__autoprivado__decode_vehicle untrusted-input
mcp__autoprivado__estimate_price untrusted-input
mcp__autoprivado__get_sale_documents private-data

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.autoprivado/autoprivado/verify?hash=49af648b01da351c596ae2c0c0a729149305074f8e797ca465a78114519c6c0b" | jq -e '.changed == false'

Pinned hash 49af648b01da, from Oct 31, 2026, 16:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.autoprivado/autoprivado/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.autoprivado/autoprivado.svg)](https://anlyon.dev/servers/com.autoprivado/autoprivado)

Source: MCP Registry · repository. Synced Oct 31, 2026, 16:17 UTC.