ShowMeOnMap
by showmeonmap.com · remote · local (npm) · no sign-in to list tools · v0.3.1 · published by com.showmeonmap
Ask in plain English, get a rendered, shareable map from live public data. 24 geospatial tools.
30 tools: 3 can delete or cancel things, 1 do something that can't be undone, 21 change things and 5 only read.
Scanned Oct 21, 2026
- Deletes or cancels3Claude Code: deny: see these tools
- Can't be undone1Claude Code: ask: see these tools
- Changes things21Claude Code: ask: see these tools
- Only reads5Claude Code: allow: see these tools
4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http maps https://showmeonmap.com/api/mcp --header 'Authorization: <your-authorization>'Findings
Matches of fixed checks, with the text they matched.
- Warnselect_within
The server marks "select_within" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "select_within" says "select": a word for a change.
- Warnquery_features
The server marks "query_features" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "query_features" says "query": a word for reading.
- Warnclear_filters
The server marks "clear_filters" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "wipe": a word for removing or ending something.
The server marks "remove_annotation" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "remove_annotation" says "remove": a word for removing or ending something.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
30 tools
Deletes or cancels 3Claude Code: deny
clear_filtersWipe every predicate currently applied to a layer's filter chain, making every source feature visible again.1 finding
Why it is in this group
- The description's first verb is "wipe": a word for removing or ending something.
- The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.
Findings
- Warn
The server marks "clear_filters" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "wipe": a word for removing or ending something.
Description, as the server wrote it Wipe every predicate currently applied to a layer's filter chain, making every source feature visible again. Inverse of filter_layer. No-op on layers that have no existing filter. GATED: pass confirmed:true to proceed; otherwise a needs_confirmation envelope is returned.
Annotations the server declares
- title: Clear all filters on a layer (direct, gated)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
remove_annotationDrop a previously-placed annotation by id.1 finding
Why it is in this group
- The name "remove_annotation" says "remove": a word for removing or ending something.
- The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.
Findings
- Warn
The server marks "remove_annotation" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "remove_annotation" says "remove": a word for removing or ending something.
Description, as the server wrote it Drop a previously-placed annotation by id. Strict: removing an already-removed or never-placed id fails. After removal, the id CAN be re-used by a later add_annotation (unlike layer ids, which are tombstoned for the session).
Annotations the server declares
- title: Remove an annotation (direct)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
remove_layerDrop a layer from the workspace by id.No findings
Why it is in this group
- The name "remove_layer" says "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Drop a layer from the workspace by id. Strict: removing an already-removed or never-added layer fails. Layer ids do NOT recycle — a removed id cannot be re-added later in the same workspace. GATED: this tool is destructive. Pass confirmed:true to proceed; otherwise a needs_confirmation envelope is returned.
Annotations the server declares
- title: Remove a layer (direct, destructive)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
Can't be undone 1Claude Code: ask
report_blockerSend the ShowMeOnMap team a report about a request this server could not complete — an unsupported intent, a missing tool, an unclear schema, or an op that failed in a confusing wa…No findings
Why it is in this group
- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Send the ShowMeOnMap team a report about a request this server could not complete — an unsupported intent, a missing tool, an unclear schema, or an op that failed in a confusing way. Records the report to a server-side log for future capability work; it does not change the current map or session. map_id is optional, so a report can be filed before any map exists.
Annotations the server declares
- title: Report a blocker (agent feedback)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
Changes things 21Claude Code: ask
add_annotationAdd a user-placed label at a specific coordinate.No findings
Why it is in this group
- The name "add_annotation" says "add": a word for a change.
Description, as the server wrote it Add a user-placed label at a specific coordinate. Annotations are independent of layers and live in their own id namespace. Strict: the id must not already be in use by another CURRENTLY-placed annotation (removed ids can be recycled).
Annotations the server declares
- title: Place an annotation on the map (direct)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
add_fusion_layerSpatially join two existing layers and add a new layer that encodes both values per region as a 3x3 bivariate choropleth.No findings
Why it is in this group
- The name "add_fusion_layer" says "add": a word for a change.
Description, as the server wrote it Spatially join two existing layers and add a new layer that encodes both values per region as a 3x3 bivariate choropleth. Both layers must already exist in the workspace. Auto-detects the numeric value field from each layer's viz config; pass value_field_a / value_field_b to override. Returns the new layer_id, correlation r, and matched-feature count. Required: map_id, layer_a_id, layer_b_id.
Annotations the server declares
- title: Add bivariate fusion layer
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
add_layerAppend a fully-constructed LayerPlan to an existing workspace without going through NL.No findings
Why it is in this group
- The name "add_layer" says "add": a word for a change.
Description, as the server wrote it Append a fully-constructed LayerPlan to an existing workspace without going through NL. Pass the same shape the workspace pipeline emits — { id, title, source, viz, geometry, ... }. Takes a structured plan; natural-language edits go through mutate_map. The full LayerPlan and Op spec are documented in the MCP resource showmeonmap://docs/workspace-ops-spec.
Annotations the server declares
- title: Add a layer (direct)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
build_mapMake an interactive, data-driven map from a plain-language request, built from live public data with every value cited to its source.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Make an interactive, data-driven map from a plain-language request, built from live public data with every value cited to its source. Covers natural hazards (earthquakes, wildfires, volcanoes, tropical storms, floods), weather and air quality, statistics by country, state or region (GDP, population, health, emissions — World Bank, Eurostat, US Census), infrastructure and transit (railways, power plants, transit lines, roads), parks and terrain, and points of interest from OpenStreetMap. The query carries the place, time window and any thresholds — "earthquakes above magnitude 5 near Japan this month", "GDP per capita across Europe" — and the server applies them itself. Returns a shareable link and a map_id for follow-ups (mutate_map, filter_layer, get_state); in clients that support MCP Apps the map also renders interactively in the conversation. The Op catalog and predicate grammar that downstream tools (mutate_map, filter_layer, etc.) accept are documented in the MCP resource showmeonmap://docs/workspace-ops-spec.
Annotations the server declares
- title: Build a map
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
correlate_layersSpatially join two existing workspace layers and return the Pearson correlation coefficient r, sample size n, two-sided p-value approximation, plus human-readable strength and dire…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Spatially join two existing workspace layers and return the Pearson correlation coefficient r, sample size n, two-sided p-value approximation, plus human-readable strength and direction labels. Pure read — no layer is added, no op is committed, no credit charge. Returns numbers only; add_fusion_layer renders the same join as a map layer. Required: map_id, layer_a_id, layer_b_id.
Annotations the server declares
- title: Compute correlation between two layers
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
export_layer_dataExport a single layer's features as a downloadable file.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Export a single layer's features as a downloadable file. Returns a URL with Content-Disposition: attachment so the user's browser downloads it. CSV drops geometry beyond a (lng, lat) centroid — for full polygon/line geometry, use format: "geojson". The URL is an unguessable capability link that does NOT expire: anyone with the link can download the file. Required: map_id, layer_id, format.
Annotations the server declares
- title: Export layer data
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
filter_layerNarrow a layer to features matching a structured predicate.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Narrow a layer to features matching a structured predicate. `append:true` (default) conjoins with any existing filter; `append:false` replaces the chain.
Annotations the server declares
- title: Filter a layer (direct)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
focus_areaRefine an existing layer to a NAMED area the server resolves from OpenStreetMap — a street corridor ("Broadway from Arbutus Street to Main Street"), a place ("Mount Pleasant"), or …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Refine an existing layer to a NAMED area the server resolves from OpenStreetMap — a street corridor ("Broadway from Arbutus Street to Main Street"), a place ("Mount Pleasant"), or an intersection surroundings. Pass names only, never coordinates; unresolvable names return a clarification with real nearby candidates instead of guessed geometry. Emits ordinary undoable ops (filter / new layer + camera) and a grounded summary like "kept 37 of 150 features". Costs 1 credit when a mutation lands; clarifications are refunded.
Annotations the server declares
- title: Focus a layer on a named area
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
mutate_mapApply a natural-language instruction to an existing workspace.No findings
Why it is in this group
- The description's first verb is "apply": a word for a change.
Description, as the server wrote it Apply a natural-language instruction to an existing workspace. Valid mutations: filter a layer, remove a layer, change camera, change basemap. For ambiguous instructions the tool emits a clarification field. For unrelated instructions it emits outOfScope — build a new map in that case. The full Op catalog and predicate grammar are documented in the MCP resource showmeonmap://docs/workspace-ops-spec.
Annotations the server declares
- title: Mutate a map
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
query_featuresEvaluate a predicate against a layer's inline features and return the matching subset.1 finding
Why it is in this group
- The name "query_features" says "query": a word for reading.
- The description's first verb is "evaluate": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "query_features" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "query_features" says "query": a word for reading.
Description, as the server wrote it Evaluate a predicate against a layer's inline features and return the matching subset. No Op is emitted and the workspace is not mutated. Handy for introspection ("how many X match Y?") before deciding whether to filter, subset, or build a new layer.
Annotations the server declares
- title: Query features from a layer (read-only)
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
redoAdvance the workspace cursor by one toward the tail of the ops log, replaying the next op that was previously undone.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Advance the workspace cursor by one toward the tail of the ops log, replaying the next op that was previously undone. Calling redo when the cursor is already at the tail (no undone ops to fast-forward) fails rather than silently no-op. Note: any new op applied via apply-op / mutate-map after an undo truncates the redo tail (standard edit-stack semantics).
Annotations the server declares
- title: Redo a previously-undone op
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
rename_layerChange a layer's id from oldLayerId to newLayerId.No findings
Why it is in this group
- The name "rename_layer" says "rename": a word for a change.
Description, as the server wrote it Change a layer's id from oldLayerId to newLayerId. Re-keys any existing filter chain and preserves insertion order among sibling layers. Strict: newLayerId must not already be in use (current OR tombstoned) in this workspace. Subsequent ops must reference the layer by its new id.
Annotations the server declares
- title: Rename a layer (direct)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
restyle_layerAdjust a layer's color and/or opacity.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Adjust a layer's color and/or opacity. Within-palette changes only — the renderer silently ignores fields the current viz variant doesn't support. Pass at least one of color / opacity; passing neither is an accepted no-op.
Annotations the server declares
- title: Restyle a layer (direct)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
run_analysisCompute a spatial analysis server-side and append the finished, honestly-legended result as a new layer + camera; the result REPLACES its input layer(s) (undoable).No findings
Why it is in this group
- The name "run_analysis" says "run": a word for a change.
Description, as the server wrote it Compute a spatial analysis server-side and append the finished, honestly-legended result as a new layer + camera; the result REPLACES its input layer(s) (undoable). hotspot = Getis-Ord Gi*: hot/cold significance classes (99/95/90%, Benjamini-Hochberg FDR-corrected) on a numeric field, or on hex-binned point density when valueField is omitted. zonal = aggregate points into polygon zones (an existing zone layer OR a generated h3 fishnet): count/sum/mean/min/max per zone as a quantile choropleth where zero and no-data are distinct classes. enrich = join a US Census ACS indicator (median income, home value, rent, …) onto each feature by tract/county/state containment — unmatched features stay null, never zero-filled. join = spatial join (attribute transfer): each point in layerId takes properties from the joinLayerId polygon containing it (collisions prefixed, unmatched points carry NO joined fields, zero overlap is a typed rejection). merge = append two same-geometry-class layers into one dataset with a per-row source column (schemas never null-filled; class mismatch is a typed failure). near = nearest-neighbor distance columns (great-circle meters, stated — never presented as road distance). dissolve = true polygon union per attribute group (missing values form their own group; partial sums reported). Returns a grounded memo + stats payload — every number is computed, never generated; findings keep the map. Costs 1 credit when the result lands; typed failures (unknown layer, too few features, >10,000-feature cap) are refunded.
Annotations the server declares
- title: Run a spatial analysis on a layer
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
run_workflowExecute a saved workflow with parameter values.No findings
Why it is in this group
- The name "run_workflow" says "run": a word for a change.
Description, as the server wrote it Execute a saved workflow with parameter values. PAID: bills ~1 credit per step through the normal build/mutate paths (the estimate is in list_workflows). Optional batch mode sweeps ONE param across 2–20 values — each value is a full independent run (steps × values credits); failed/paused values are reported per value and the batch continues. A clarification pauses a single run (status "paused" + the question); failures stop at the failing step. On success the result is a live map with a shareable URL (batch: the last successful value's map).
Annotations the server declares
- title: Run a saved workflow
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
save_workflowSave a re-runnable, parameterized workflow: an ordered list of natural-language instructions (step 1 builds, later steps mutate).No findings
Why it is in this group
- The name "save_workflow" says "save": a word for a change.
Description, as the server wrote it Save a re-runnable, parameterized workflow: an ordered list of natural-language instructions (step 1 builds, later steps mutate). Wrap values in {braces} and declare them in params. Running it later re-executes the instructions on FRESH data and bills per step like typing.
Annotations the server declares
- title: Save a workflow
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
select_withinCreate a new layer containing the source layer's features that lie within the supplied polygon.1 finding
Why it is in this group
- The name "select_within" says "select": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "select_within" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "select_within" says "select": a word for a change.
Description, as the server wrote it Create a new layer containing the source layer's features that lie within the supplied polygon. The source layer is untouched. Useful for "show me only the X inside this country/bbox/hand-drawn shape."
Annotations the server declares
- title: Subset a layer to a polygon selection
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
set_cameraOverride the workspace camera.No findings
Why it is in this group
- The name "set_camera" says "set": a word for a change.
Description, as the server wrote it Override the workspace camera. Latest set_camera op wins during replay. Two modes: `fitBounds` with a [w,s,e,n] bbox (plus optional padding/animateMs), or `flyTo` with [lng,lat] center + zoom (plus optional pitch/bearing/animateMs). Covers requests like "zoom to Japan", "center on Paris at z=10", or framing a filtered layer. Equivalent to the camera move mutate_map would emit, but skips the NL roundtrip.
Annotations the server declares
- title: Set the map camera (direct)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
set_timeOverride the current time-range filter.No findings
Why it is in this group
- The name "set_time" says "set": a word for a change.
Description, as the server wrote it Override the current time-range filter. Latest set_time op wins during replay. Covers requests like "filter to 2020-2024" or "show only the last 7 days". Not yet consumed by the renderer — the UI drives the slider directly — but the value is captured in the ops log and queryable via get_state.
Annotations the server declares
- title: Set the time window (direct)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
tagLabel the current workspace state with a user-supplied name.No findings
Why it is in this group
- The description's first verb is "label": a word for a change.
Description, as the server wrote it Label the current workspace state with a user-supplied name. The label is mirrored into workspace.meta.tags so UIs can render a named-revision history. Tagging the same label twice is idempotent — no error, no duplicate entry.
Annotations the server declares
- title: Save a named checkpoint (direct)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
undoRewind the workspace cursor by one, re-materializing the state as it was before the last mutation.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Rewind the workspace cursor by one, re-materializing the state as it was before the last mutation. Does NOT delete any ops — redo will fast-forward. Calling undo at the workspace genesis (cursor === 0, only the CreateWorkspace op is in scope) is a no-op that surfaces an error rather than silently doing nothing. GATED: pass confirmed:true to proceed; otherwise a needs_confirmation envelope is returned.
Annotations the server declares
- title: Undo the most recent op (gated)
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
Only reads 5Claude Code: allow
export_imageReturns a deep-link URL that opens the map in the user's browser and automatically triggers a PNG download.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Returns a deep-link URL that opens the map in the user's browser and automatically triggers a PNG download. The user clicks the link, the browser renders the map at full resolution with the legend composited (if legend: true), and the file downloads. There is no server-side rendering; the user's browser is the renderer. Required: map_id. Optional: format (png default), legend (true default).
Annotations the server declares
- title: Export map as image
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
export_workspaceReturn the current workspace document (ops log + cursor + meta) plus the materialized mapPlan and layerFilters, in a shape suitable for save-to-file / share-by-URL / inspection.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Return the current workspace document (ops log + cursor + meta) plus the materialized mapPlan and layerFilters, in a shape suitable for save-to-file / share-by-URL / inspection. Pure read — no mutation, no credit charge. This is the full raw state for serialization; get_state returns a compact summary for display.
Annotations the server declares
- title: Export the workspace JSON
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_map_viewUsed by the ShowMeOnMap map card to load a map version.No findings
Why it is in this group
- The name "get_map_view" says "get": a word for reading.
Description, as the server wrote it Used by the ShowMeOnMap map card to load a map version. Not for the model.
Annotations the server declares
- title: Map view (viewer only)
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_stateReturn the current workspace, map plan, and active filters for a given map_id.No findings
Why it is in this group
- The name "get_state" says "get": a word for reading.
Description, as the server wrote it Return the current workspace, map plan, and active filters for a given map_id.
Annotations the server declares
- title: Read map state
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
list_workflowsList the caller's saved workflows with their parameters and per-run credit estimates.No findings
Why it is in this group
- The name "list_workflows" says "list": a word for reading.
Description, as the server wrote it List the caller's saved workflows with their parameters and per-run credit estimates.
Annotations the server declares
- title: List saved workflows
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.3.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http maps https://showmeonmap.com/api/mcp --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__maps__get_map_view",
"mcp__maps__get_state",
"mcp__maps__export_workspace",
"mcp__maps__export_image",
"mcp__maps__list_workflows"
],
"ask": [
"mcp__maps__build_map",
"mcp__maps__mutate_map",
"mcp__maps__add_layer",
"mcp__maps__add_fusion_layer",
"mcp__maps__correlate_layers",
"mcp__maps__filter_layer",
"mcp__maps__select_within",
"mcp__maps__focus_area",
"mcp__maps__run_analysis",
"mcp__maps__query_features",
"mcp__maps__rename_layer",
"mcp__maps__restyle_layer",
"mcp__maps__set_camera",
"mcp__maps__set_time",
"mcp__maps__tag",
"mcp__maps__add_annotation",
"mcp__maps__export_layer_data",
"mcp__maps__undo",
"mcp__maps__redo",
"mcp__maps__report_blocker",
"mcp__maps__save_workflow",
"mcp__maps__run_workflow"
],
"deny": [
"mcp__maps__remove_layer",
"mcp__maps__clear_filters",
"mcp__maps__remove_annotation"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as maps. Review it before you use it.