# `es.flatin/spain-property` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/es.flatin/spain-property
- JSON: https://anlyon.dev/api/v1/servers/es.flatin/spain-property
- Version: 1.0.0 (active)
- Publisher: es.flatin (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-21T18:12:41.963Z

Title and description, as the publisher wrote them:

```untrusted-server-text
flatin.es — new builds and local data in Spain
New-build homes on sale in Spain, buying costs, non-resident tax and local open data.
```

Scanned 2026-10-21T19:00:03.731Z over streamable-http.

**5 tools: 1 do something that can't be undone, 3 change things and 1 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 1 | ask |
| Changes things | write | 3 | ask |
| Only reads | read | 1 | allow |

## Findings

- **warn** Annotations that disagree with the tool in `purchase_costs` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "purchase_costs" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "purchase_costs" says "purchase": a word that usually means money moves, which cannot be taken back.
```


## Can't be undone (1)

Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask.

### `purchase_costs`

- The name "purchase_costs" says "purchase": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Taxes and fees of buying a home in Spain: VAT + stamp duty (AJD) for a new build or transfer tax (ITP) for a resale at the general rate of the tax territory, plus notary and land registry by the official scales. Every line cites its law, article and the date it was checked. An estimate, not tax advice.
```

## Changes things (3)

Creates or changes something that can be changed back. Claude Code: ask.

### `ibi_rate`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Yearly IBI urbana rate (% of cadastral value) of a municipality, with year, provisional flag, source (Ministerio de Hacienda) and the flatin.es page.
```

### `newbuilds_in_place`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
New-build developments on sale in a municipality, buyer zone or province of the flatin.es catalogue: at most 25 per call, sorted by name, no pagination — the full list is on the linked flatin.es page. Facts are the developer's own, latest check only, with attribution.
```

### `non_resident_tax`

- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

Description, as the server wrote it:

```untrusted-server-text
Yearly IRNR of a non-resident owner of a Spanish home: imputed income (1.1 % or 2 % of the cadastral value for days not let) and rental income (EU/EEA: 19 % net of expenses; others: 24 % on gross rent). Every line cites its law and check date; rules pending validation (RDL 29/2026) are listed, not applied. An estimate, not tax advice.
```

## Only reads (1)

Looks things up and changes nothing. Claude Code: allow.

### `compare_places`

- The name "compare_places" says "compare": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Side-by-side latest figures for 2–4 municipalities (provinces of Alicante, Málaga, Valencia, Murcia) or buyer zones: housing prices (MIVAU), rent (SERPAVI), IBI, population, income, tourist lets, foreigners, air quality and more — at most 12 indicators per call. Each figure has its unit, period, level (municipality, or province when the place has none), source credit and date, and station or point of interest with distance. Only places whose flatin.es page is published get figures; every answer links the flatin.es pages.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `spain-property`:

```json
{
  "permissions": {
    "allow": [
      "mcp__spain-property__compare_places"
    ],
    "ask": [
      "mcp__spain-property__newbuilds_in_place",
      "mcp__spain-property__ibi_rate",
      "mcp__spain-property__purchase_costs",
      "mcp__spain-property__non_resident_tax"
    ],
    "deny": []
  }
}
```