UniAffitti Room Finder
by www.uniaffitti.com · remote · no sign-in to list tools · v0.1.0 · published by com.uniaffitti.www
Find, rank, and compare student rooms from UniAffitti public listings.
21 tools: 4 can delete or cancel things, 2 change things and 15 only read.
Scanned Oct 21, 2026
- Deletes or cancels4Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads15Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http room-finder https://www.uniaffitti.com/mcp/Findings
Matches of fixed checks, with the text they matched.
- Infoget_my_profile
The description mentions "credentials".
What this check looks forMatched text
description: "...not return phone, photos, account IDs, credentials, or secrets."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
21 tools
Deletes or cancels 4Claude Code: deny
create_rental_requestCreate and send a rental request for an approved available room using the authenticated UniAffitti account.No findings
Why it is in this group
- The name "create_rental_request" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Create and send a rental request for an approved available room using the authenticated UniAffitti account. The landlord is notified, and the request remains in the account until its status changes. Do not include passwords, payment-card details, government identifiers, health or biometric data in the optional message.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true
- idempotentHint: false
remove_favoriteRemove a room from the authenticated user’s favorites.No findings
Why it is in this group
- The name "remove_favorite" says "remove": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Remove a room from the authenticated user’s favorites.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: false
- idempotentHint: true
send_room_messageSend and permanently store a message to the landlord of an approved available room from the authenticated UniAffitti account.No findings
Why it is in this group
- The name "send_room_message" says "send": a word for sending, and what is sent cannot be taken back.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Send and permanently store a message to the landlord of an approved available room from the authenticated UniAffitti account. The landlord receives a notification; messages cannot be recalled with this tool. Do not include passwords, payment-card details, government identifiers, health or biometric data.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true
- idempotentHint: false
update_rental_request_statusChange a rental request to in review, accepted, rejected, or cancelled according to the authenticated user’s role.No findings
Why it is in this group
- The name "update_rental_request_status" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Change a rental request to in review, accepted, rejected, or cancelled according to the authenticated user’s role. Acceptance marks the room as rented; status changes may notify the other participant.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true
- idempotentHint: false
Changes things 2Claude Code: ask
add_favoriteSave an approved room to the authenticated user’s favorites.No findings
Why it is in this group
- The name "add_favorite" says "add": a word for a change.
Description, as the server wrote it Save an approved room to the authenticated user’s favorites.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
create_listingCreate a listing draft for UniAffitti moderation.No findings
Why it is in this group
- The name "create_listing" says "create": a word for a change.
Description, as the server wrote it Create a listing draft for UniAffitti moderation. It is not public until approved. The draft stores the full property address and coordinates; university and campus IDs remain unset. Do not include passwords, payment-card details, government identifiers, health or biometric data in the description.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
- idempotentHint: false
Only reads 15Claude Code: allow
compare_roomsCompare selected public room listings side by side for price, distance, type, availability, features, and trust signals.No findings
Why it is in this group
- The name "compare_rooms" says "compare": a word for reading.
Description, as the server wrote it Compare selected public room listings side by side for price, distance, type, availability, features, and trust signals.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true
get_account_linksReturn deep links for account, listing creation, messages, requests, and favorites in the full UniAffitti web app.No findings
Why it is in this group
- The name "get_account_links" says "get": a word for reading.
Description, as the server wrote it Return deep links for account, listing creation, messages, requests, and favorites in the full UniAffitti web app.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
get_my_conversation_messagesLoad the recent messages for one authenticated UniAffitti conversation.No findings
Why it is in this group
- The name "get_my_conversation_messages" says "get": a word for reading.
Description, as the server wrote it Load the recent messages for one authenticated UniAffitti conversation. This is a data-only tool intended to be called by the messages UI after the user selects a conversation.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
get_my_profileWhen the user asks to access or connect UniAffitti, call this tool.1 finding
Why it is in this group
- The name "get_my_profile" says "get": a word for reading.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...not return phone, photos, account IDs, credentials, or secrets."
Description, as the server wrote it When the user asks to access or connect UniAffitti, call this tool. It starts secure OAuth account connection when needed, then returns only first and last name, email, role, and email-verification status; it does not return phone, photos, account IDs, credentials, or secrets.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
get_room_detailsReturn public details for one approved room, including user-submitted description, media, features, and limited landlord trust information.No findings
Why it is in this group
- The name "get_room_details" says "get": a word for reading.
Description, as the server wrote it Return public details for one approved room, including user-submitted description, media, features, and limited landlord trust information.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true
list_my_favoritesList the authenticated user’s saved available rooms.No findings
Why it is in this group
- The name "list_my_favorites" says "list": a word for reading.
Description, as the server wrote it List the authenticated user’s saved available rooms.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
list_my_listingsList the authenticated user’s own listings and moderation status.No findings
Why it is in this group
- The name "list_my_listings" says "list": a word for reading.
Description, as the server wrote it List the authenticated user’s own listings and moderation status.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
list_my_messagesRead the authenticated user’s UniAffitti conversations from the same chat used by the web app.No findings
Why it is in this group
- The name "list_my_messages" says "list": a word for reading.
Description, as the server wrote it Read the authenticated user’s UniAffitti conversations from the same chat used by the web app. Without a conversation_id return fast conversation summaries and last-message previews; with one load the complete recent messages for that conversation.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
list_my_requestsList rental requests sent or received by the authenticated user.No findings
Why it is in this group
- The name "list_my_requests" says "list": a word for reading.
Description, as the server wrote it List rental requests sent or received by the authenticated user.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
list_search_metadataList a paginated slice of the global university catalog, optional campuses, and feature filters for room search.No findings
Why it is in this group
- The name "list_search_metadata" says "list": a word for reading.
Description, as the server wrote it List a paginated slice of the global university catalog, optional campuses, and feature filters for room search. The catalog is not limited to 500 records.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
list_university_campusesList active campuses for a selected university so the user can refine the room search.No findings
Why it is in this group
- The name "list_university_campuses" says "list": a word for reading.
Description, as the server wrote it List active campuses for a selected university so the user can refine the room search.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
rank_room_matchesFind public, approved room listings and score them against preferences such as budget, campus distance, room type, and trust signals.No findings
Why it is in this group
- The description's first verb is "find": a word for reading.
Description, as the server wrote it Find public, approved room listings and score them against preferences such as budget, campus distance, room type, and trust signals. Listing content is submitted by UniAffitti users.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true
search_citiesSearch cities represented in the active university catalog and public room listings, with country and university counts for assisted room search.No findings
Why it is in this group
- The name "search_cities" says "search": a word for reading.
Description, as the server wrote it Search cities represented in the active university catalog and public room listings, with country and university counts for assisted room search.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true
search_roomsSearch approved, available student rooms by budget, type, university, optional campus, distance, and features.No findings
Why it is in this group
- The name "search_rooms" says "search": a word for reading.
Description, as the server wrote it Search approved, available student rooms by budget, type, university, optional campus, distance, and features. Results include public listing content submitted by UniAffitti users.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true
search_universitiesSearch the complete active UniAffitti university catalog worldwide with pagination and total count.No findings
Why it is in this group
- The name "search_universities" says "search": a word for reading.
Description, as the server wrote it Search the complete active UniAffitti university catalog worldwide with pagination and total count.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http room-finder https://www.uniaffitti.com/mcp/Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__room-finder__search_rooms",
"mcp__room-finder__rank_room_matches",
"mcp__room-finder__get_room_details",
"mcp__room-finder__compare_rooms",
"mcp__room-finder__list_search_metadata",
"mcp__room-finder__search_universities",
"mcp__room-finder__search_cities",
"mcp__room-finder__list_university_campuses",
"mcp__room-finder__get_my_profile",
"mcp__room-finder__list_my_messages",
"mcp__room-finder__get_my_conversation_messages",
"mcp__room-finder__list_my_favorites",
"mcp__room-finder__list_my_requests",
"mcp__room-finder__list_my_listings",
"mcp__room-finder__get_account_links"
],
"ask": [
"mcp__room-finder__add_favorite",
"mcp__room-finder__create_listing"
],
"deny": [
"mcp__room-finder__send_room_message",
"mcp__room-finder__remove_favorite",
"mcp__room-finder__create_rental_request",
"mcp__room-finder__update_rental_request_status"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as room-finder. Review it before you use it.