Skip to content

SPACEXPLORATION

by spacexploration.com · remote · no sign-in to list tools · v1.2.2 · published by com.spacexploration

Search commercial real estate listings. Reads need no token; authoring is self-serve OAuth (DCR).

Deletes · 6Final · 2Changes · 6

23 tools: 6 can delete or cancel things, 2 do something that can't be undone, 6 change things and 9 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http listings https://spacexploration.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

23 tools

Deletes or cancels 6Claude Code: deny
  • delete_attachmentDelete an attachment you own by its ULID.No findings

    Why it is in this group

    • The name "delete_attachment" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete an attachment you own by its ULID. Soft-deletes the row so it no longer appears on the listing. Use this to clean up an abandoned upload (one you signed but never finished) or a photo you no longer want. Idempotent: deleting an already-deleted attachment succeeds.

    Annotations the server declares

    • title: Delete attachment
    • readOnlyHint: false
    • openWorldHint: false
    • idempotentHint: true
    • destructiveHint: true
  • publish_listingKick off the publish pipeline for a draft listing.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "publish_listing" says "publish": a word for a change that another call does not undo.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe name "publish_listing" says "publish": it sends or publishes something to other people.
    Description, as the server wrote it
    Kick off the publish pipeline for a draft listing. Enriches with AI, gathers market data, then transitions the listing to Active. Returns the pipeline ID to track progress. Fails with the unmet readiness checklist if the listing is not ready (including any photo that has not cleared content moderation).

    Annotations the server declares

    • title: Publish listing
    • readOnlyHint: false
    • openWorldHint: true
    • destructiveHint: true
  • set_listing_attributesSet broker-authored attributes on a listing you own.No findings

    Why it is in this group

    • The name "set_listing_attributes" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Set broker-authored attributes on a listing you own. Pass `attributes` as a map of registry field name to value (the field names get_registry returns, e.g. {"attr_parking_spaces": 40, "attr_office_class": "Class A"}). Only fields get_registry marks "writable":true can be set; publish-time computed fields and hot columns (use update_listing for those) are rejected with guidance. Enum fields take the allowed value (or an array for multiselect); send null to clear a field. Returns the full updated listing.

    Annotations the server declares

    • title: Set listing attributes
    • readOnlyHint: false
    • openWorldHint: false
    • destructiveHint: true
    • idempotentHint: true
  • update_listingUpdate a listing's parcel, pricing, or marketing data, or a lease's suites.No findings

    Why it is in this group

    • The name "update_listing" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Update a listing's parcel, pricing, or marketing data, or a lease's suites. Pass at least one group (parcel, pricing, marketing, spaces); send each group whole, not just the changed field. Returns the full updated listing exactly as stored.

    Annotations the server declares

    • title: Update listing
    • readOnlyHint: false
    • openWorldHint: false
    • destructiveHint: true
    • idempotentHint: true
  • withdraw_listingWithdraw a listing, removing it from public search.Reads text others writeNo findings

    Why it is in this group

    • The name "withdraw_listing" says "withdraw": a word that usually means money moves, which cannot be taken back.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Withdraw a listing, removing it from public search. This is a terminal status — the listing cannot be re-activated; create a new listing instead.

    Annotations the server declares

    • title: Withdraw listing
    • readOnlyHint: false
    • openWorldHint: true
    • destructiveHint: true
Can't be undone 2Claude Code: ask
  • confirm_attachment_uploadFinalize an out-of-band upload after the file bytes have been PUT to the presigned URL.No findings

    Why it is in this group

    • The name "confirm_attachment_upload" says "upload": a word for a change.
    • The description's first verb is "finalize": a word for a change that another call does not undo.
    Description, as the server wrote it
    Finalize an out-of-band upload after the file bytes have been PUT to the presigned URL. Verifies the stored object matches what was signed (size and content-type) and marks the attachment ready. Returns the attachment snapshot with its public variant URLs. Idempotent: confirming an already-confirmed upload returns the same snapshot.

    Annotations the server declares

    • title: Confirm attachment upload
    • readOnlyHint: false
    • openWorldHint: false
    • destructiveHint: false
    • idempotentHint: true
  • send_feedbackFile feedback or a support ticket with the SPACEXPLORATION team: a bug report, feature request, or question about the app or this MCP server.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "send_feedback" says "send": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    • outboundThe name "send_feedback" says "send": it sends or publishes something to other people.
    Description, as the server wrote it
    File feedback or a support ticket with the SPACEXPLORATION team: a bug report, feature request, or question about the app or this MCP server. Works anonymously — include a contact email if you want a reply.

    Annotations the server declares

    • title: Send feedback
    • readOnlyHint: false
    • openWorldHint: true
    • destructiveHint: false
Changes things 6Claude Code: ask
  • attach_listing_photoAttach a photo to a listing you own directly from its public URL — one call, no separate sign/upload/confirm.Reads text others writeNo findings

    Why it is in this group

    • The name "attach_listing_photo" says "attach": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Attach a photo to a listing you own directly from its public URL — one call, no separate sign/upload/confirm. The server fetches the image and ingests it with auto-generated thumbnail/hero/full variants. Only https image URLs whose host is publicly routable are accepted. The photo is content-moderated (must be real-estate related and safe) before it can appear publicly — the returned snapshot includes the moderation_status (approved / rejected / escalated) and moderation_reason. A rejected or escalated photo will not be publicly visible and will block publishing until removed or replaced.

    Annotations the server declares

    • title: Attach listing photo
    • readOnlyHint: false
    • openWorldHint: true
    • destructiveHint: false
  • create_listingCreate a new draft listing.No findings

    Why it is in this group

    • The name "create_listing" says "create": a word for a change.
    Description, as the server wrote it
    Create a new draft listing. Returns the full created listing exactly as stored, including its hashid and status. Pass an idempotency_key (any client-generated string, e.g. a UUID) to make the call safe to retry — re-sending the same key returns the original listing instead of creating a duplicate.

    Annotations the server declares

    • title: Create listing
    • readOnlyHint: false
    • openWorldHint: false
    • destructiveHint: false
  • geocode_addressGeocode a free-form US address into coordinates and structured components (street_address, city, county, state, postal_code) plus a formatted address and place_id — exactly the ide…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Geocode a free-form US address into coordinates and structured components (street_address, city, county, state, postal_code) plus a formatted address and place_id — exactly the identity fields create_listing requires. Use this first, then pass the result straight into create_listing instead of supplying your own coordinates.

    Annotations the server declares

    • title: Geocode address
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • look_up_parcelLook up any US building by its street address and get the public data SPACEXPLORATION keeps on it, whether or not it is for sale or lease: the FEMA flood zone and natural hazard ri…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Look up any US building by its street address and get the public data SPACEXPLORATION keeps on it, whether or not it is for sale or lease: the FEMA flood zone and natural hazard risk, EPA records nearby (including leaking underground storage tanks), Census demographics around it, access and nearby amenities, and, for a building that has been listed on SPACEXPLORATION, the county public record (owner, assessed and market values, taxes, tax lots, recorded sales) with a numbered source for each figure. Also returns the building page URL to share and any live listings in it (pass a listing hashid to get_listing). The first lookup of a building gathers its data in the background, which takes a minute or two: while status.gathering or status.researching_county_record is true, check on it with get_parcel and the returned hashid instead of repeating the lookup. Requires a signed-in account.

    Annotations the server declares

    • title: Look up a building
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • sign_attachment_uploadBegin an out-of-band file upload.No findings

    Why it is in this group

    • The name "sign_attachment_upload" says "upload": a word for a change.
    Description, as the server wrote it
    Begin an out-of-band file upload. Returns a presigned R2 PUT URL and the headers to use; the file bytes are uploaded directly to storage, never through this channel. After PUTting the file, call confirm_attachment_upload with the returned attachment_id. Supports listings (photos, documents), users (avatar), and pages (cover, photos). Avatars pass an automated content check before they appear publicly.

    Annotations the server declares

    • title: Sign attachment upload
    • readOnlyHint: false
    • openWorldHint: false
    • destructiveHint: false
Only reads 9Claude Code: allow
  • get_faqAnswers to the questions people ask about SPACEXPLORATION itself: what it costs, listing a property, where leads go, finding property, AI assistants (including the built-in one), w…No findings

    Why it is in this group

    • The name "get_faq" says "get": a word for reading.
    Description, as the server wrote it
    Answers to the questions people ask about SPACEXPLORATION itself: what it costs, listing a property, where leads go, finding property, AI assistants (including the built-in one), where the building data comes from, and accounts. Call this before answering any question about how SPACEXPLORATION works or what it costs, answer from what it returns, and link the entry's `url` (or its `see` page when it has no url). Pass `topic` to read one group; leave it out for all of them.

    Annotations the server declares

    • title: Get FAQ
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_listingRetrieve the full details of a single listing by its hashid.No findings

    Why it is in this group

    • The name "get_listing" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve the full details of a single listing by its hashid. Returns the complete ListingResource projection including parcel data, all attribute details, and attachments: photos, plus the public documents the broker attached (brochures, offering memoranda, site plans) with their filename and a direct download URL. Broker contact is included only when the requesting user is authorised to manage the listing; such a user also gets every lease suite with its id and status, the rows update_listing takes back.

    Annotations the server declares

    • title: Get listing
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_parcelRead a building SPACEXPLORATION already has, by the hashid that look_up_parcel returns or that a building page URL (/parcel/{hashid}/...) contains.Reads text others writeNo findings

    Why it is in this group

    • The name "get_parcel" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "read" and "url": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Read a building SPACEXPLORATION already has, by the hashid that look_up_parcel returns or that a building page URL (/parcel/{hashid}/...) contains. Returns the same data as look_up_parcel: the address and building page URL, the FEMA flood zone and natural hazard risk, EPA records nearby, Census demographics, access and nearby amenities, the county public record with numbered sources where research has found it, and any live listings in it. It looks nothing up and starts nothing, so use it to check on a building whose status.gathering or status.researching_county_record was true.

    Annotations the server declares

    • title: Get building
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_publish_statusGet the status of your listing publishes.No findings

    Why it is in this group

    • The name "get_publish_status" says "get": a word for reading.
    Description, as the server wrote it
    Get the status of your listing publishes. Pass a listing hashid for the detailed status of that listing's latest publish run — overall state (pending/running/completed/failed), current phase, per-step progress, and any failure reason. Omit the hashid to list your recent publish runs across all your listings. Use this to track a publish_listing call to completion.

    Annotations the server declares

    • title: Get publish status
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_registryReturns the full attribute registry — every searchable and filterable field, its type, allowed values, and display label.No findings

    Why it is in this group

    • The name "get_registry" says "get": a word for reading.
    Description, as the server wrote it
    Returns the full attribute registry — every searchable and filterable field, its type, allowed values, and display label. Read this first to understand the schema before calling search_listings with attribute filters.

    Annotations the server declares

    • title: Get attribute registry
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • list_my_listingsList all listings owned or brokered by the authenticated user.No findings

    Why it is in this group

    • The name "list_my_listings" says "list": a word for reading.
    Description, as the server wrote it
    List all listings owned or brokered by the authenticated user. Optionally filter by status. Requires authentication.

    Annotations the server declares

    • title: List my listings
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • list_my_saved_searchesList the authenticated user's saved searches, including their filters and alert schedule.No findings

    Why it is in this group

    • The name "list_my_saved_searches" says "list": a word for reading.
    Description, as the server wrote it
    List the authenticated user's saved searches, including their filters and alert schedule. Requires authentication.

    Annotations the server declares

    • title: List my saved searches
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • search_listingsSearch commercial real estate listings.No findings

    Why it is in this group

    • The name "search_listings" says "search": a word for reading.
    Description, as the server wrote it
    Search commercial real estate listings. Returns paginated hits with facet counts; every hit carries the public `url` to cite and its `listed_at` / `updated_at` stamps. For AI-driven search, call interpret_search first to convert a natural-language query into structured filters, then pass those filters — and its bounds, when present — here.

    Annotations the server declares

    • title: Search listings
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write8
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out2
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 1.2.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http listings https://spacexploration.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__listings__get_registry",
      "mcp__listings__search_listings",
      "mcp__listings__get_listing",
      "mcp__listings__interpret_search",
      "mcp__listings__get_parcel",
      "mcp__listings__list_my_saved_searches",
      "mcp__listings__list_my_listings",
      "mcp__listings__get_publish_status",
      "mcp__listings__get_faq"
    ],
    "ask": [
      "mcp__listings__look_up_parcel",
      "mcp__listings__save_search",
      "mcp__listings__geocode_address",
      "mcp__listings__create_listing",
      "mcp__listings__attach_listing_photo",
      "mcp__listings__sign_attachment_upload",
      "mcp__listings__confirm_attachment_upload",
      "mcp__listings__send_feedback"
    ],
    "deny": [
      "mcp__listings__delete_saved_search",
      "mcp__listings__update_listing",
      "mcp__listings__set_listing_attributes",
      "mcp__listings__delete_attachment",
      "mcp__listings__publish_listing",
      "mcp__listings__withdraw_listing"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as listings. Review it before you use it.

Capability tags behind 8 rules
  • mcp__listings__look_up_parcel untrusted-input
  • mcp__listings__get_parcel untrusted-input
  • mcp__listings__save_search untrusted-input
  • mcp__listings__geocode_address untrusted-input
  • mcp__listings__attach_listing_photo untrusted-input
  • mcp__listings__publish_listing untrusted-input, outbound
  • mcp__listings__withdraw_listing untrusted-input
  • mcp__listings__send_feedback untrusted-input, outbound