VEDUTUM

com.vedutum/vedutumvedutum.comstreamable-httpv2.0.0Scanned 48 minutes ago

Floor plan to measured 3D model: rooms and areas, furnishing, roof, solar, site and share links.

19 tools: 5 can delete or cancel things, 6 change things and 8 only read.

Reads private data · 2
Reads text others write · 5
Can send data out · 0
2 findings

Anlyon alternative

11 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

19 tools

Deletes or cancels 5Removes, cancels or revokes something.Claude Code: deny

vedutum_add_solarLays out photovoltaic modules (or solar thermal collectors) on every roof face of the model that does not face north, with edge margins, as rows on racks on a flat roof; returns mo…No findings
Why it is in this group
- The name "vedutum_add_solar" says "add": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Lays out photovoltaic modules (or solar thermal collectors) on every roof face of the model that does not face north, with edge margins, as rows on racks on a flat roof; returns module count, area and rated power in kWp. Or removes them. Replaces an earlier layout on those faces; vedutum_undo_last_change goes back. A layout, not a yield forecast. Costs no points.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
vedutum_furnish_roomsPlaces furniture in the rooms of a project’s model the way a planner would: by room type (living, kitchen, bedroom, bath, office, meeting…), clear of doors and windows, with 90 cm …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Places furniture in the rooms of a project’s model the way a planner would: by room type (living, kitchen, bedroom, bath, office, meeting…), clear of doors and windows, with 90 cm passages. One room by name or every room of a storey or of the house; "add" fills only empty rooms, "replace" furnishes anew. Changes the model; vedutum_undo_last_change takes it back. Costs no points.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false
vedutum_set_designChanges the design settings of a project’s model: roof shape, facade material, window frames, building style, roof covering, number and height of storeys, north direction.No findings
Why it is in this group
- The name "vedutum_set_design" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Changes the design settings of a project’s model: roof shape, facade material, window frames, building style, roof covering, number and height of storeys, north direction. Only the values given change. The model and every later image use them. vedutum_undo_last_change goes back. Costs no points.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: false
vedutum_set_site_addressSets the address of a project’s building site: looks it up on OpenStreetMap for sun position and shadows, and loads neighbouring buildings, roads and terrain around it into the mod…Reads text others writeNo findings
Why it is in this group
- The name "vedutum_set_site_address" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Sets the address of a project’s building site: looks it up on OpenStreetMap for sun position and shadows, and loads neighbouring buildings, roads and terrain around it into the model (OpenStreetMap, EU-DEM; takes about a minute, then visible in vedutum_get_project). Replaces the previous address; vedutum_undo_last_change goes back. Costs no points.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
vedutum_undo_last_changeRestores a project to the state before the last change made with vedutum_furnish_rooms, vedutum_set_design, vedutum_add_solar or vedutum_set_site_address.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Restores a project to the state before the last change made with vedutum_furnish_rooms, vedutum_set_design, vedutum_add_solar or vedutum_set_site_address. One step; changes made in the app are not touched.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: false

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

vedutum_check_floor_planChecks a floor plan file against VEDUTUM’s upload rules before anyone uploads it: file type, size, pages, scan or vector, scale, title block.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Checks a floor plan file against VEDUTUM’s upload rules before anyone uploads it: file type, size, pages, scan or vector, scale, title block. Use when someone asks which format to export from CAD (Archicad, Revit, AutoCAD, Vectorworks) or whether a scan or photo of a plan works. Nothing is uploaded.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
vedutum_create_projectCreates a new, empty project in the connected account, optionally with the client and the site address (looked up for sun and surroundings).Reads text others writeNo findings
Why it is in this group
- The name "vedutum_create_project" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Creates a new, empty project in the connected account, optionally with the client and the site address (looked up for sun and surroundings). Returns its id and the link where the floor plan can be uploaded. Costs no points.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
vedutum_print_resolutionConverts a print size (cm) and dpi, or a pixel width, into the pixels needed on the long edge and the fitting quality level, with the largest print each level allows at 300 and 150…1 finding
Why it is in this group
- The description's first verb is "convert": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "vedutum_print_resolution" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "convert": a word for a change.
  What this check looks for
Description, as the server wrote it
Converts a print size (cm) and dpi, or a pixel width, into the pixels needed on the long edge and the fitting quality level, with the largest print each level allows at 300 and 150 dpi. Use for brochures, boards, site hoardings, websites.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
vedutum_read_floor_planLoads a floor plan from a public https link (PDF, JPG, PNG or WebP, up to 15 MB, one storey per sheet) into a project of the connected account and starts reading walls, openings an…Reads private dataReads text others write1 finding
Why it is in this group
- The name "vedutum_read_floor_plan" says "read": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
What it can reach
- private-dataThe input names a file (input.file_url), and the tool reads: it reads files.
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- untrusted-inputThe description's first sentence says "http": it reads web pages, which anyone can write.
Findings
- Warn
  The server marks "vedutum_read_floor_plan" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "vedutum_read_floor_plan" says "read": a word for reading.
  What this check looks for
Description, as the server wrote it
Loads a floor plan from a public https link (PDF, JPG, PNG or WebP, up to 15 MB, one storey per sheet) into a project of the connected account and starts reading walls, openings and rooms into a measured model. Costs 1 point per storey from the account, as in the app; refuses with the reason when points or the free month have run out. Reading runs one to three minutes; check the result with vedutum_get_project. For a file on the person’s computer, give them the upload link from vedutum_get_project instead.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
vedutum_share_linkReturns the share link of a project (creating it the first time): the page where a client sees the model and the images, comments and approves, without an account.No findings
Why it is in this group
- The name "vedutum_share_link" says "link": a word for a change.
Description, as the server wrote it
Returns the share link of a project (creating it the first time): the page where a client sees the model and the images, comments and approves, without an account. Also says how often it was opened and whether it was approved.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
vedutum_sun_and_shadowSun azimuth and elevation, shadow length per metre of building height and shadow direction for a building site on a given day and local times (Central European time), plus sunrise …Reads text others writeNo findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Sun azimuth and elevation, shadow length per metre of building height and shadow direction for a building site on a given day and local times (Central European time), plus sunrise and sunset. Use for orientation, terrace or window planning and quick shadow questions. Looks the site up by town or address via OpenStreetMap. A study on flat ground without neighbouring buildings, not a legal shadow certificate.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true

Only reads 8Looks things up and changes nothing.Show 8 read-only tools

vedutum_estimate_pointsCounts the points VEDUTUM needs for a job: reading a floor plan (per storey), an optional check run, images and 8-second videos in three quality levels (hd ≈ 1,024 px, praesentatio…No findings
Why it is in this group
- The description's first verb is "count": a word for reading.
Description, as the server wrote it
Counts the points VEDUTUM needs for a job: reading a floor plan (per storey), an optional check run, images and 8-second videos in three quality levels (hd ≈ 1,024 px, praesentation ≈ 2,048 px, druck ≈ 4,096 px). Use when someone asks what a set of renderings or videos takes. Returns points only, with a breakdown; the 3D model, share page and exports need none.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
vedutum_example_projectReturns VEDUTUM’s example project „Haus Lindenweg“ (a fictional study): the share page a client receives, a step-by-step demo and five pictures from plan to finished visualisation,…No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it
Returns VEDUTUM’s example project „Haus Lindenweg“ (a fictional study): the share page a client receives, a step-by-step demo and five pictures from plan to finished visualisation, with captions. Use when someone wants to see what the result looks like.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
vedutum_get_projectReturns one project of the connected account: the state of each floor plan reading (also while it runs), storeys, rooms with their approximate areas, outline area per storey and in…No findings
Why it is in this group
- The name "vedutum_get_project" says "get": a word for reading.
Description, as the server wrote it
Returns one project of the connected account: the state of each floor plan reading (also while it runs), storeys, rooms with their approximate areas, outline area per storey and in total, windows and doors, roof, facade and style, solar modules, surroundings, share link and approval, number of images, and the link into the app. Use after vedutum_read_floor_plan to see the result, and for questions about areas or rooms.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
vedutum_get_startedReturns the links to open an account or sign in and the four steps from floor plan to share page.No findings
Why it is in this group
- The name "vedutum_get_started" says "get": a word for reading.
Description, as the server wrote it
Returns the links to open an account or sign in and the four steps from floor plan to share page. Use when someone wants to try it with their own plan. Creates nothing.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
vedutum_list_projectsLists the projects in the connected VEDUTUM account with id, client, whether the floor plan has been read, last change, and the points left.No findings
Why it is in this group
- The name "vedutum_list_projects" says "list": a word for reading.
Description, as the server wrote it
Lists the projects in the connected VEDUTUM account with id, client, whether the floor plan has been read, last change, and the points left. Use first when the person talks about one of their projects, to find its id.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
vedutum_model_geometryReturns the plan geometry (walls, openings, rooms, furniture, roof and facade settings) that the VEDUTUM 3D view draws.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it
Returns the plan geometry (walls, openings, rooms, furniture, roof and facade settings) that the VEDUTUM 3D view draws. Used by the view itself.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
vedutum_search_knowledgeSearches VEDUTUM’s published articles, service pages and feature documentation (German or English) and returns titles, short answers and links.No findings
Why it is in this group
- The name "vedutum_search_knowledge" says "search": a word for reading.
Description, as the server wrote it
Searches VEDUTUM’s published articles, service pages and feature documentation (German or English) and returns titles, short answers and links. Use for questions about architectural visualisation: floor plan to 3D, rendering costs and resolutions, IFC and CAD formats, sign-off with clients, AI labelling of images.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
vedutum_view_modelShows a building model in 3D inside the conversation: turn it, look at single storeys or a cut-away view.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "vedutum_view_model" says "view": a word for reading.
What it can reach
- private-dataThe description's first sentence says "show" and "conversation": it reads messages.
- untrusted-inputThe description's first sentence says "show" and "conversation": it reads messages, which other people can write.
Description, as the server wrote it
Shows a building model in 3D inside the conversation: turn it, look at single storeys or a cut-away view. Without project_id it shows VEDUTUM’s example house „Haus Lindenweg“ (no account needed); with project_id a project of the connected account. Returns a short summary for clients without the view.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data2: Reads files, mail, messages, databases, secrets, calendars or repositories.; vedutum_read_floor_plan
vedutum_view_model
Reads text others write5: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; vedutum_create_project
vedutum_read_floor_plan
vedutum_set_site_address
vedutum_sun_and_shadow
vedutum_view_model
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

2 warn

Warnvedutum_print_resolution
The server marks "vedutum_print_resolution" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "convert": a word for a change.
What this check looks for
Warnvedutum_read_floor_plan
The server marks "vedutum_read_floor_plan" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "vedutum_read_floor_plan" says "read": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 2.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http vedutum https://www.vedutum.com/mcp

claude mcp add --transport http vedutum https://www.vedutum.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__vedutum__vedutum_estimate_points",
      "mcp__vedutum__vedutum_search_knowledge",
      "mcp__vedutum__vedutum_example_project",
      "mcp__vedutum__vedutum_get_started",
      "mcp__vedutum__vedutum_list_projects",
      "mcp__vedutum__vedutum_get_project",
      "mcp__vedutum__vedutum_view_model",
      "mcp__vedutum__vedutum_model_geometry"
    ],
    "ask": [
      "mcp__vedutum__vedutum_sun_and_shadow",
      "mcp__vedutum__vedutum_check_floor_plan",
      "mcp__vedutum__vedutum_print_resolution",
      "mcp__vedutum__vedutum_create_project",
      "mcp__vedutum__vedutum_read_floor_plan",
      "mcp__vedutum__vedutum_share_link"
    ],
    "deny": [
      "mcp__vedutum__vedutum_furnish_rooms",
      "mcp__vedutum__vedutum_set_design",
      "mcp__vedutum__vedutum_add_solar",
      "mcp__vedutum__vedutum_set_site_address",
      "mcp__vedutum__vedutum_undo_last_change"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as vedutum. Review it before you use it.

Capability tags behind 5 rules

mcp__vedutum__vedutum_sun_and_shadow untrusted-input
mcp__vedutum__vedutum_create_project untrusted-input
mcp__vedutum__vedutum_read_floor_plan private-data, untrusted-input
mcp__vedutum__vedutum_set_site_address untrusted-input
mcp__vedutum__vedutum_view_model private-data, untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.vedutum/vedutum/verify?hash=9ec935572553e745745081173737e76c5ef28be91cd661bcf16a96653c2fc006" | jq -e '.changed == false'

Pinned hash 9ec935572553, from Oct 29, 2026, 10:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.vedutum/vedutum/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.vedutum/vedutum.svg)](https://anlyon.dev/servers/com.vedutum/vedutum)

Source: MCP Registry. Synced Oct 29, 2026, 10:17 UTC.