Skip to content

UniAffitti Room Finder

by www.uniaffitti.com · remote · no sign-in to list tools · v0.1.0 · published by com.uniaffitti.www

Find, rank, and compare student rooms from UniAffitti public listings.

Deletes · 4Changes · 2

21 tools: 4 can delete or cancel things, 2 change things and 15 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http room-finder https://www.uniaffitti.com/mcp/

Findings

Matches of fixed checks, with the text they matched.

1 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

21 tools

Deletes or cancels 4Claude Code: deny
  • create_rental_requestCreate and send a rental request for an approved available room using the authenticated UniAffitti account.No findings

    Why it is in this group

    • The name "create_rental_request" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Create and send a rental request for an approved available room using the authenticated UniAffitti account. The landlord is notified, and the request remains in the account until its status changes. Do not include passwords, payment-card details, government identifiers, health or biometric data in the optional message.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
    • idempotentHint: false
  • remove_favoriteRemove a room from the authenticated user’s favorites.No findings

    Why it is in this group

    • The name "remove_favorite" says "remove": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Remove a room from the authenticated user’s favorites.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
    • idempotentHint: true
  • send_room_messageSend and permanently store a message to the landlord of an approved available room from the authenticated UniAffitti account.No findings

    Why it is in this group

    • The name "send_room_message" says "send": a word for sending, and what is sent cannot be taken back.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Send and permanently store a message to the landlord of an approved available room from the authenticated UniAffitti account. The landlord receives a notification; messages cannot be recalled with this tool. Do not include passwords, payment-card details, government identifiers, health or biometric data.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
    • idempotentHint: false
  • update_rental_request_statusChange a rental request to in review, accepted, rejected, or cancelled according to the authenticated user’s role.No findings

    Why it is in this group

    • The name "update_rental_request_status" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Change a rental request to in review, accepted, rejected, or cancelled according to the authenticated user’s role. Acceptance marks the room as rented; status changes may notify the other participant.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: true
    • idempotentHint: false
Changes things 2Claude Code: ask
  • add_favoriteSave an approved room to the authenticated user’s favorites.No findings

    Why it is in this group

    • The name "add_favorite" says "add": a word for a change.
    Description, as the server wrote it
    Save an approved room to the authenticated user’s favorites.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • create_listingCreate a listing draft for UniAffitti moderation.No findings

    Why it is in this group

    • The name "create_listing" says "create": a word for a change.
    Description, as the server wrote it
    Create a listing draft for UniAffitti moderation. It is not public until approved. The draft stores the full property address and coordinates; university and campus IDs remain unset. Do not include passwords, payment-card details, government identifiers, health or biometric data in the description.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: false
Only reads 15Claude Code: allow
  • compare_roomsCompare selected public room listings side by side for price, distance, type, availability, features, and trust signals.No findings

    Why it is in this group

    • The name "compare_rooms" says "compare": a word for reading.
    Description, as the server wrote it
    Compare selected public room listings side by side for price, distance, type, availability, features, and trust signals.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
  • get_my_conversation_messagesLoad the recent messages for one authenticated UniAffitti conversation.No findings

    Why it is in this group

    • The name "get_my_conversation_messages" says "get": a word for reading.
    Description, as the server wrote it
    Load the recent messages for one authenticated UniAffitti conversation. This is a data-only tool intended to be called by the messages UI after the user selects a conversation.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_my_profileWhen the user asks to access or connect UniAffitti, call this tool.1 finding

    Why it is in this group

    • The name "get_my_profile" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...not return phone, photos, account IDs, credentials, or secrets."

      What this check looks for
    Description, as the server wrote it
    When the user asks to access or connect UniAffitti, call this tool. It starts secure OAuth account connection when needed, then returns only first and last name, email, role, and email-verification status; it does not return phone, photos, account IDs, credentials, or secrets.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • get_room_detailsReturn public details for one approved room, including user-submitted description, media, features, and limited landlord trust information.No findings

    Why it is in this group

    • The name "get_room_details" says "get": a word for reading.
    Description, as the server wrote it
    Return public details for one approved room, including user-submitted description, media, features, and limited landlord trust information.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
  • list_my_favoritesList the authenticated user’s saved available rooms.No findings

    Why it is in this group

    • The name "list_my_favorites" says "list": a word for reading.
    Description, as the server wrote it
    List the authenticated user’s saved available rooms.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • list_my_listingsList the authenticated user’s own listings and moderation status.No findings

    Why it is in this group

    • The name "list_my_listings" says "list": a word for reading.
    Description, as the server wrote it
    List the authenticated user’s own listings and moderation status.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • list_my_messagesRead the authenticated user’s UniAffitti conversations from the same chat used by the web app.No findings

    Why it is in this group

    • The name "list_my_messages" says "list": a word for reading.
    Description, as the server wrote it
    Read the authenticated user’s UniAffitti conversations from the same chat used by the web app. Without a conversation_id return fast conversation summaries and last-message previews; with one load the complete recent messages for that conversation.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • list_my_requestsList rental requests sent or received by the authenticated user.No findings

    Why it is in this group

    • The name "list_my_requests" says "list": a word for reading.
    Description, as the server wrote it
    List rental requests sent or received by the authenticated user.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • list_search_metadataList a paginated slice of the global university catalog, optional campuses, and feature filters for room search.No findings

    Why it is in this group

    • The name "list_search_metadata" says "list": a word for reading.
    Description, as the server wrote it
    List a paginated slice of the global university catalog, optional campuses, and feature filters for room search. The catalog is not limited to 500 records.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • list_university_campusesList active campuses for a selected university so the user can refine the room search.No findings

    Why it is in this group

    • The name "list_university_campuses" says "list": a word for reading.
    Description, as the server wrote it
    List active campuses for a selected university so the user can refine the room search.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true
  • rank_room_matchesFind public, approved room listings and score them against preferences such as budget, campus distance, room type, and trust signals.No findings

    Why it is in this group

    • The description's first verb is "find": a word for reading.
    Description, as the server wrote it
    Find public, approved room listings and score them against preferences such as budget, campus distance, room type, and trust signals. Listing content is submitted by UniAffitti users.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
  • search_citiesSearch cities represented in the active university catalog and public room listings, with country and university counts for assisted room search.No findings

    Why it is in this group

    • The name "search_cities" says "search": a word for reading.
    Description, as the server wrote it
    Search cities represented in the active university catalog and public room listings, with country and university counts for assisted room search.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
  • search_roomsSearch approved, available student rooms by budget, type, university, optional campus, distance, and features.No findings

    Why it is in this group

    • The name "search_rooms" says "search": a word for reading.
    Description, as the server wrote it
    Search approved, available student rooms by budget, type, university, optional campus, distance, and features. Results include public listing content submitted by UniAffitti users.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
    • idempotentHint: true
  • search_universitiesSearch the complete active UniAffitti university catalog worldwide with pagination and total count.No findings

    Why it is in this group

    • The name "search_universities" says "search": a word for reading.
    Description, as the server wrote it
    Search the complete active UniAffitti university catalog worldwide with pagination and total count.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
    • idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http room-finder https://www.uniaffitti.com/mcp/

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__room-finder__search_rooms",
      "mcp__room-finder__rank_room_matches",
      "mcp__room-finder__get_room_details",
      "mcp__room-finder__compare_rooms",
      "mcp__room-finder__list_search_metadata",
      "mcp__room-finder__search_universities",
      "mcp__room-finder__search_cities",
      "mcp__room-finder__list_university_campuses",
      "mcp__room-finder__get_my_profile",
      "mcp__room-finder__list_my_messages",
      "mcp__room-finder__get_my_conversation_messages",
      "mcp__room-finder__list_my_favorites",
      "mcp__room-finder__list_my_requests",
      "mcp__room-finder__list_my_listings",
      "mcp__room-finder__get_account_links"
    ],
    "ask": [
      "mcp__room-finder__add_favorite",
      "mcp__room-finder__create_listing"
    ],
    "deny": [
      "mcp__room-finder__send_room_message",
      "mcp__room-finder__remove_favorite",
      "mcp__room-finder__create_rental_request",
      "mcp__room-finder__update_rental_request_status"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as room-finder. Review it before you use it.