SPACEXPLORATION
by spacexploration.com · remote · no sign-in to list tools · v1.2.2 · published by com.spacexploration
Search commercial real estate listings. Reads need no token; authoring is self-serve OAuth (DCR).
23 tools: 6 can delete or cancel things, 2 do something that can't be undone, 6 change things and 9 only read.
Scanned Oct 21, 2026
- Deletes or cancels6Claude Code: deny: see these tools
- Can't be undone2Claude Code: ask: see these tools
- Changes things6Claude Code: ask: see these tools
- Only reads9Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http listings https://spacexploration.com/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
23 tools
Deletes or cancels 6Claude Code: deny
delete_attachmentDelete an attachment you own by its ULID.No findings
Why it is in this group
- The name "delete_attachment" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Delete an attachment you own by its ULID. Soft-deletes the row so it no longer appears on the listing. Use this to clean up an abandoned upload (one you signed but never finished) or a photo you no longer want. Idempotent: deleting an already-deleted attachment succeeds.
Annotations the server declares
- title: Delete attachment
- readOnlyHint: false
- openWorldHint: false
- idempotentHint: true
- destructiveHint: true
delete_saved_searchDelete a saved search by its ID.No findings
Why it is in this group
- The name "delete_saved_search" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Delete a saved search by its ID. Only the owner may delete their own searches. Requires authentication.
Annotations the server declares
- title: Delete saved search
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: true
publish_listingKick off the publish pipeline for a draft listing.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "publish_listing" says "publish": a word for a change that another call does not undo.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "publish_listing" says "publish": it sends or publishes something to other people.
Description, as the server wrote it Kick off the publish pipeline for a draft listing. Enriches with AI, gathers market data, then transitions the listing to Active. Returns the pipeline ID to track progress. Fails with the unmet readiness checklist if the listing is not ready (including any photo that has not cleared content moderation).
Annotations the server declares
- title: Publish listing
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: true
set_listing_attributesSet broker-authored attributes on a listing you own.No findings
Why it is in this group
- The name "set_listing_attributes" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Set broker-authored attributes on a listing you own. Pass `attributes` as a map of registry field name to value (the field names get_registry returns, e.g. {"attr_parking_spaces": 40, "attr_office_class": "Class A"}). Only fields get_registry marks "writable":true can be set; publish-time computed fields and hot columns (use update_listing for those) are rejected with guidance. Enum fields take the allowed value (or an array for multiselect); send null to clear a field. Returns the full updated listing.
Annotations the server declares
- title: Set listing attributes
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: true
- idempotentHint: true
update_listingUpdate a listing's parcel, pricing, or marketing data, or a lease's suites.No findings
Why it is in this group
- The name "update_listing" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Update a listing's parcel, pricing, or marketing data, or a lease's suites. Pass at least one group (parcel, pricing, marketing, spaces); send each group whole, not just the changed field. Returns the full updated listing exactly as stored.
Annotations the server declares
- title: Update listing
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: true
- idempotentHint: true
withdraw_listingWithdraw a listing, removing it from public search.Reads text others writeNo findings
Why it is in this group
- The name "withdraw_listing" says "withdraw": a word that usually means money moves, which cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Withdraw a listing, removing it from public search. This is a terminal status — the listing cannot be re-activated; create a new listing instead.
Annotations the server declares
- title: Withdraw listing
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: true
Can't be undone 2Claude Code: ask
confirm_attachment_uploadFinalize an out-of-band upload after the file bytes have been PUT to the presigned URL.No findings
Why it is in this group
- The name "confirm_attachment_upload" says "upload": a word for a change.
- The description's first verb is "finalize": a word for a change that another call does not undo.
Description, as the server wrote it Finalize an out-of-band upload after the file bytes have been PUT to the presigned URL. Verifies the stored object matches what was signed (size and content-type) and marks the attachment ready. Returns the attachment snapshot with its public variant URLs. Idempotent: confirming an already-confirmed upload returns the same snapshot.
Annotations the server declares
- title: Confirm attachment upload
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
- idempotentHint: true
send_feedbackFile feedback or a support ticket with the SPACEXPLORATION team: a bug report, feature request, or question about the app or this MCP server.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "send_feedback" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "send_feedback" says "send": it sends or publishes something to other people.
Description, as the server wrote it File feedback or a support ticket with the SPACEXPLORATION team: a bug report, feature request, or question about the app or this MCP server. Works anonymously — include a contact email if you want a reply.
Annotations the server declares
- title: Send feedback
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
Changes things 6Claude Code: ask
attach_listing_photoAttach a photo to a listing you own directly from its public URL — one call, no separate sign/upload/confirm.Reads text others writeNo findings
Why it is in this group
- The name "attach_listing_photo" says "attach": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Attach a photo to a listing you own directly from its public URL — one call, no separate sign/upload/confirm. The server fetches the image and ingests it with auto-generated thumbnail/hero/full variants. Only https image URLs whose host is publicly routable are accepted. The photo is content-moderated (must be real-estate related and safe) before it can appear publicly — the returned snapshot includes the moderation_status (approved / rejected / escalated) and moderation_reason. A rejected or escalated photo will not be publicly visible and will block publishing until removed or replaced.
Annotations the server declares
- title: Attach listing photo
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
create_listingCreate a new draft listing.No findings
Why it is in this group
- The name "create_listing" says "create": a word for a change.
Description, as the server wrote it Create a new draft listing. Returns the full created listing exactly as stored, including its hashid and status. Pass an idempotency_key (any client-generated string, e.g. a UUID) to make the call safe to retry — re-sending the same key returns the original listing instead of creating a duplicate.
Annotations the server declares
- title: Create listing
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
geocode_addressGeocode a free-form US address into coordinates and structured components (street_address, city, county, state, postal_code) plus a formatted address and place_id — exactly the ide…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Geocode a free-form US address into coordinates and structured components (street_address, city, county, state, postal_code) plus a formatted address and place_id — exactly the identity fields create_listing requires. Use this first, then pass the result straight into create_listing instead of supplying your own coordinates.
Annotations the server declares
- title: Geocode address
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
look_up_parcelLook up any US building by its street address and get the public data SPACEXPLORATION keeps on it, whether or not it is for sale or lease: the FEMA flood zone and natural hazard ri…Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Look up any US building by its street address and get the public data SPACEXPLORATION keeps on it, whether or not it is for sale or lease: the FEMA flood zone and natural hazard risk, EPA records nearby (including leaking underground storage tanks), Census demographics around it, access and nearby amenities, and, for a building that has been listed on SPACEXPLORATION, the county public record (owner, assessed and market values, taxes, tax lots, recorded sales) with a numbered source for each figure. Also returns the building page URL to share and any live listings in it (pass a listing hashid to get_listing). The first lookup of a building gathers its data in the background, which takes a minute or two: while status.gathering or status.researching_county_record is true, check on it with get_parcel and the returned hashid instead of repeating the lookup. Requires a signed-in account.
Annotations the server declares
- title: Look up a building
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
save_searchSave the current search as a named alert.Reads text others writeNo findings
Why it is in this group
- The name "save_search" says "save": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it Save the current search as a named alert. The user will receive email digests when new matching listings appear. Requires authentication.
Annotations the server declares
- title: Save search
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
sign_attachment_uploadBegin an out-of-band file upload.No findings
Why it is in this group
- The name "sign_attachment_upload" says "upload": a word for a change.
Description, as the server wrote it Begin an out-of-band file upload. Returns a presigned R2 PUT URL and the headers to use; the file bytes are uploaded directly to storage, never through this channel. After PUTting the file, call confirm_attachment_upload with the returned attachment_id. Supports listings (photos, documents), users (avatar), and pages (cover, photos). Avatars pass an automated content check before they appear publicly.
Annotations the server declares
- title: Sign attachment upload
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
Only reads 9Claude Code: allow
get_faqAnswers to the questions people ask about SPACEXPLORATION itself: what it costs, listing a property, where leads go, finding property, AI assistants (including the built-in one), w…No findings
Why it is in this group
- The name "get_faq" says "get": a word for reading.
Description, as the server wrote it Answers to the questions people ask about SPACEXPLORATION itself: what it costs, listing a property, where leads go, finding property, AI assistants (including the built-in one), where the building data comes from, and accounts. Call this before answering any question about how SPACEXPLORATION works or what it costs, answer from what it returns, and link the entry's `url` (or its `see` page when it has no url). Pass `topic` to read one group; leave it out for all of them.
Annotations the server declares
- title: Get FAQ
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
get_listingRetrieve the full details of a single listing by its hashid.No findings
Why it is in this group
- The name "get_listing" says "get": a word for reading.
Description, as the server wrote it Retrieve the full details of a single listing by its hashid. Returns the complete ListingResource projection including parcel data, all attribute details, and attachments: photos, plus the public documents the broker attached (brochures, offering memoranda, site plans) with their filename and a direct download URL. Broker contact is included only when the requesting user is authorised to manage the listing; such a user also gets every lease suite with its id and status, the rows update_listing takes back.
Annotations the server declares
- title: Get listing
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
get_parcelRead a building SPACEXPLORATION already has, by the hashid that look_up_parcel returns or that a building page URL (/parcel/{hashid}/...) contains.Reads text others writeNo findings
Why it is in this group
- The name "get_parcel" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "read" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it Read a building SPACEXPLORATION already has, by the hashid that look_up_parcel returns or that a building page URL (/parcel/{hashid}/...) contains. Returns the same data as look_up_parcel: the address and building page URL, the FEMA flood zone and natural hazard risk, EPA records nearby, Census demographics, access and nearby amenities, the county public record with numbered sources where research has found it, and any live listings in it. It looks nothing up and starts nothing, so use it to check on a building whose status.gathering or status.researching_county_record was true.
Annotations the server declares
- title: Get building
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_publish_statusGet the status of your listing publishes.No findings
Why it is in this group
- The name "get_publish_status" says "get": a word for reading.
Description, as the server wrote it Get the status of your listing publishes. Pass a listing hashid for the detailed status of that listing's latest publish run — overall state (pending/running/completed/failed), current phase, per-step progress, and any failure reason. Omit the hashid to list your recent publish runs across all your listings. Use this to track a publish_listing call to completion.
Annotations the server declares
- title: Get publish status
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
get_registryReturns the full attribute registry — every searchable and filterable field, its type, allowed values, and display label.No findings
Why it is in this group
- The name "get_registry" says "get": a word for reading.
Description, as the server wrote it Returns the full attribute registry — every searchable and filterable field, its type, allowed values, and display label. Read this first to understand the schema before calling search_listings with attribute filters.
Annotations the server declares
- title: Get attribute registry
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
interpret_searchTranslate a natural-language property-search sentence into a structured filter payload compatible with search_listings.No findings
Why it is in this group
- The name "interpret_search" says "search": a word for reading.
Description, as the server wrote it Translate a natural-language property-search sentence into a structured filter payload compatible with search_listings. Use this as a transparent intermediate step: pass the user's raw query here, then forward the returned filters — and the returned bounds, when present (they carry the "near <place>" intent) — to search_listings.
Annotations the server declares
- title: Interpret search query
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
list_my_listingsList all listings owned or brokered by the authenticated user.No findings
Why it is in this group
- The name "list_my_listings" says "list": a word for reading.
Description, as the server wrote it List all listings owned or brokered by the authenticated user. Optionally filter by status. Requires authentication.
Annotations the server declares
- title: List my listings
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
list_my_saved_searchesList the authenticated user's saved searches, including their filters and alert schedule.No findings
Why it is in this group
- The name "list_my_saved_searches" says "list": a word for reading.
Description, as the server wrote it List the authenticated user's saved searches, including their filters and alert schedule. Requires authentication.
Annotations the server declares
- title: List my saved searches
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
search_listingsSearch commercial real estate listings.No findings
Why it is in this group
- The name "search_listings" says "search": a word for reading.
Description, as the server wrote it Search commercial real estate listings. Returns paginated hits with facet counts; every hit carries the public `url` to cite and its `listed_at` / `updated_at` stamps. For AI-driven search, call interpret_search first to convert a natural-language query into structured filters, then pass those filters — and its bounds, when present — here.
Annotations the server declares
- title: Search listings
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write8
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out2
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Install
Pinned to version 1.2.2. Values in angle brackets are yours to fill in.
claude mcp add --transport http listings https://spacexploration.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__listings__get_registry",
"mcp__listings__search_listings",
"mcp__listings__get_listing",
"mcp__listings__interpret_search",
"mcp__listings__get_parcel",
"mcp__listings__list_my_saved_searches",
"mcp__listings__list_my_listings",
"mcp__listings__get_publish_status",
"mcp__listings__get_faq"
],
"ask": [
"mcp__listings__look_up_parcel",
"mcp__listings__save_search",
"mcp__listings__geocode_address",
"mcp__listings__create_listing",
"mcp__listings__attach_listing_photo",
"mcp__listings__sign_attachment_upload",
"mcp__listings__confirm_attachment_upload",
"mcp__listings__send_feedback"
],
"deny": [
"mcp__listings__delete_saved_search",
"mcp__listings__update_listing",
"mcp__listings__set_listing_attributes",
"mcp__listings__delete_attachment",
"mcp__listings__publish_listing",
"mcp__listings__withdraw_listing"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as listings. Review it before you use it.
Capability tags behind 8 rules
- mcp__listings__look_up_parcel untrusted-input
- mcp__listings__get_parcel untrusted-input
- mcp__listings__save_search untrusted-input
- mcp__listings__geocode_address untrusted-input
- mcp__listings__attach_listing_photo untrusted-input
- mcp__listings__publish_listing untrusted-input, outbound
- mcp__listings__withdraw_listing untrusted-input
- mcp__listings__send_feedback untrusted-input, outbound