GISDB

io.gisdb/gisdbgisdb.iostreamable-httpv0.4.2Scanned 54 minutes ago

Source-backed county property records, owner-name portfolios and three Hamilton County lead packa...

15 tools: 1 can delete or cancel things, 6 change things and 8 only read.

Reads private data · 1
Reads text others write · 4
Can send data out · 0
1 finding

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

15 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

gisdb_cancel_subscriptionCancel renewal of the selected subscription at its current paid period's end, only when the user requests cancellation.Reads text others writeNo findings
Why it is in this group
- The name "gisdb_cancel_subscription" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Cancel renewal of the selected subscription at its current paid period's end, only when the user requests cancellation. Returns provider-confirmed renewal and access status. This is different from pausing lead updates.
Annotations the server declares
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false

Changes things 6Creates or changes something that can be changed back.Claude Code: ask

gisdb_continue_searchContinue the same saved workflow using its latest revision and the complete accumulated answers/skips.1 finding
Why it is in this group
- The name "gisdb_continue_search" says "search": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
  The server marks "gisdb_continue_search" as not read-only (readOnlyHint: false), and its words say it reads.
  Matched text
  annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "gisdb_continue_search" says "search": a word for reading.
  What this check looks for
Description, as the server wrote it
Continue the same saved workflow using its latest revision and the complete accumulated answers/skips. A changed source or offer requires review. Reuse a retry key only for identical arguments.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
gisdb_create_checkoutCreate a secure payment link for the exact reviewed records or lead purchase, or monthly lead subscription, selected in the private workflow.Reads text others writeNo findings
Why it is in this group
- The name "gisdb_create_checkout" says "create": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Create a secure payment link for the exact reviewed records or lead purchase, or monthly lead subscription, selected in the private workflow. First show the returned amount, coverage, update frequency, renewal and cancellation terms and obtain the user's purchase request. Card details stay on the hosted payment page. Reuse the original idempotency_key on a lost response; never accept a claimed successful payment as evidence.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
- readOnlyHint: false
gisdb_open_billing_portalOpen secure billing management for this account's order or subscription when the user requests it.Reads text others writeNo findings
Why it is in this group
- The name "gisdb_open_billing_portal" says "open": a word for a change.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Open secure billing management for this account's order or subscription when the user requests it. Payment methods remain in the browser. The portal link alone does not confirm any change; read the order again afterward.
Annotations the server declares
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
- readOnlyHint: false
gisdb_save_searchName and retain this account's lead search.No findings
Why it is in this group
- The name "gisdb_save_search" says "save": a word for a change.
Description, as the server wrote it
Name and retain this account's lead search. Saving does not purchase a subscription or activate updates. Use the current revision and a stable retry key.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
gisdb_set_lead_updatesPause or resume checks/delivery for the selected saved lead search, only when requested.No findings
Why it is in this group
- The name "gisdb_set_lead_updates" says "set": a word for a change.
Description, as the server wrote it
Pause or resume checks/delivery for the selected saved lead search, only when requested. Read updates first and pass the returned delivery revision and a stable retry key. Pause does not cancel subscription renewal. Resume cannot override a newer pause and requires valid entitlement and source checks.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false
gisdb_start_searchSave the current GISDB chat workflow to the connected account.No findings
Why it is in this group
- The name "gisdb_start_search" says "start": a word for a change.
Description, as the server wrote it
Save the current GISDB chat workflow to the connected account. Reuse the same idempotency_key after an uncertain result. Does not purchase, subscribe or send anything.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: false

Only reads 8Looks things up and changes nothing.Show 8 read-only tools

gisdb_get_lead_updatesRead this account's saved lead-search updates, delivery revision, source/check timestamps and available downloads.No findings
Why it is in this group
- The name "gisdb_get_lead_updates" says "get": a word for reading.
Description, as the server wrote it
Read this account's saved lead-search updates, delivery revision, source/check timestamps and available downloads. No-new-leads requires a successful source check. A source failure preserves the last successful checkpoint. Subscription status and delivery status are separate.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
gisdb_get_metadataRead verified county records product metadata, source scope, missing facts and limitations.No findings
Why it is in this group
- The name "gisdb_get_metadata" says "get": a word for reading.
Description, as the server wrote it
Read verified county records product metadata, source scope, missing facts and limitations. Returns unavailable when no verified release exists; no CAD compatibility or current tax year is assumed.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
gisdb_get_orderRead the same account-owned order after payment, browser return or uncertain failure.Reads text others writeNo findings
Why it is in this group
- The name "gisdb_get_order" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "read" and "browser": it reads web pages, which anyone can write.
Description, as the server wrote it
Read the same account-owned order after payment, browser return or uncertain failure. Independently verifies payment, subscription, entitlement and delivery. A link or paid checkout is not proof of delivery. Use only order_id returned for this account.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
gisdb_get_searchResume an account-owned workflow and recheck current source/offer context.No findings
Why it is in this group
- The name "gisdb_get_search" says "get": a word for reading.
Description, as the server wrote it
Resume an account-owned workflow and recheck current source/offer context. Preserve the user's preferences; ask for reconfirmation when the returned context changed.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
gisdb_guide_searchFind property leads, owner portfolios or released county data.No findings
Why it is in this group
- The name "gisdb_guide_search" says "search": a word for reading.
Description, as the server wrote it
Find property leads, owner portfolios or released county data. Ask next_question one at a time, accept unknown/skip, and resend accumulated explicit answers and skipped IDs. Returns real available coverage, source information, preview and current offers. No sign-in or purchase required. An unsupported notice category never falls back to assessment leads.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
gisdb_list_saved_searchesList only this connected GISDB account's saved searches, including their workflow IDs and revisions.No findings
Why it is in this group
- The name "gisdb_list_saved_searches" says "list": a word for reading.
Description, as the server wrote it
List only this connected GISDB account's saved searches, including their workflow IDs and revisions. Reopen a search before treating its source as current.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
gisdb_search_catalogFind county records products and geographic directory entries.Reads private dataNo findings
Why it is in this group
- The name "gisdb_search_catalog" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "find" and "directory": it reads files.
Description, as the server wrote it
Find county records products and geographic directory entries. Returned availability, exact prices, source scope and limitations determine what can be purchased; directory membership does not establish lead, assessment or CAD coverage.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true
gisdb_search_recordsInspect retained county property observations or repeated owner-name groups.No findings
Why it is in this group
- The name "gisdb_search_records" says "search": a word for reading.
Description, as the server wrote it
Inspect retained county property observations or repeated owner-name groups. Choose property_records for address, parcel or owner-label search; choose owner_portfolios for unfiltered owner-name groups. Property records allow 1–250 rows and offsets through 1000000; portfolios allow 1–100 rows and no query, signal or offset. JSON preview only. Source labels do not establish identity, authority, debt, equity, distress, cash purchases or sale intent.
Annotations the server declares
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data1: Reads files, mail, messages, databases, secrets, calendars or repositories.; gisdb_search_catalog
Reads text others write4: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; gisdb_cancel_subscription
gisdb_create_checkout
gisdb_get_order
gisdb_open_billing_portal
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn

Warngisdb_continue_search
The server marks "gisdb_continue_search" as not read-only (readOnlyHint: false), and its words say it reads.
Matched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "gisdb_continue_search" says "search": a word for reading.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.4.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http gisdb https://gisdb.io/api/v1/mcp

claude mcp add --transport http gisdb https://gisdb.io/api/v1/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__gisdb__gisdb_search_catalog",
      "mcp__gisdb__gisdb_get_metadata",
      "mcp__gisdb__gisdb_search_records",
      "mcp__gisdb__gisdb_guide_search",
      "mcp__gisdb__gisdb_get_search",
      "mcp__gisdb__gisdb_list_saved_searches",
      "mcp__gisdb__gisdb_get_order",
      "mcp__gisdb__gisdb_get_lead_updates"
    ],
    "ask": [
      "mcp__gisdb__gisdb_start_search",
      "mcp__gisdb__gisdb_continue_search",
      "mcp__gisdb__gisdb_save_search",
      "mcp__gisdb__gisdb_create_checkout",
      "mcp__gisdb__gisdb_open_billing_portal",
      "mcp__gisdb__gisdb_set_lead_updates"
    ],
    "deny": [
      "mcp__gisdb__gisdb_cancel_subscription"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as gisdb. Review it before you use it.

Capability tags behind 5 rules

mcp__gisdb__gisdb_search_catalog private-data
mcp__gisdb__gisdb_create_checkout untrusted-input
mcp__gisdb__gisdb_get_order untrusted-input
mcp__gisdb__gisdb_open_billing_portal untrusted-input
mcp__gisdb__gisdb_cancel_subscription untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.gisdb/gisdb/verify?hash=8d86c9e2db62018673e8bb640445bbb42ba7d0db4e6300eadcd6425d66fa449f" | jq -e '.changed == false'

Pinned hash 8d86c9e2db62, from Oct 26, 2026, 14:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.gisdb/gisdb/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.gisdb/gisdb.svg)](https://anlyon.dev/servers/io.gisdb/gisdb)

Source: MCP Registry · repository. Synced Oct 26, 2026, 14:17 UTC.