# `io.github.Batu1-1an/istanbul-mcp` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.github.Batu1-1an/istanbul-mcp
- JSON: https://anlyon.dev/api/v1/servers/io.github.Batu1-1an/istanbul-mcp
- Version: 0.2.4 (active)
- Publisher: io.github.Batu1-1an (GitHub account)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/Batu1-1an/istanbulmcp
- Metadata from the official MCP Registry, synced 2026-10-25T15:17:39.277Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Istanbul MCP
Read-only Istanbul open city data: transport, parking, water, nearby services and datasets.
```

Scanned 2026-10-25T15:18:01.010Z over streamable-http.

**18 tools: 2 change things and 16 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 2 | ask |
| Only reads | read | 16 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__istanbul__istanbul_datastore_query` `mcp__istanbul__istanbul_gtfs_snapshot_status` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__istanbul__istanbul_city_services_nearby` `mcp__istanbul__istanbul_datastore_query` `mcp__istanbul__istanbul_get_dataset` `mcp__istanbul__istanbul_get_resource_schema` `mcp__istanbul__istanbul_gtfs_snapshot_status` `mcp__istanbul__istanbul_health` `mcp__istanbul__istanbul_market_schedule` `mcp__istanbul__istanbul_metro_accessibility_status` `mcp__istanbul__istanbul_mobility_nearby` `mcp__istanbul__istanbul_nearby` `mcp__istanbul__istanbul_neighborhood_profile` `mcp__istanbul__istanbul_next_departures` `mcp__istanbul__istanbul_query_resource` `mcp__istanbul__istanbul_search_datasets` `mcp__istanbul__istanbul_traffic_status` `mcp__istanbul__istanbul_transit_line` `mcp__istanbul__istanbul_transport_disruptions` `mcp__istanbul__istanbul_water_status` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

- **warn** Annotations that disagree with the tool in `istanbul_datastore_query` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "istanbul_datastore_query" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "istanbul_datastore_query" says "query": a word for reading.
```

- **warn** Annotations that disagree with the tool in `istanbul_market_schedule` ([annotation-conflict](https://anlyon.dev/methodology#annotation-conflict))

```untrusted-server-text
The server marks "istanbul_market_schedule" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "istanbul_market_schedule" says "schedule": a word for a change.
```


## Changes things (2)

Creates or changes something that can be changed back. Claude Code: ask.

### `istanbul_datastore_query`

- The name "istanbul_datastore_query" says "query": a word for reading.
- The description's first verb is "run": a word for a change.
- The input takes a statement or command to run (input.sql), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag private-data: The name says "query" and the input takes a statement (input.sql): it reads databases.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Run a bounded SELECT over records from one allowlisted CKAN resource.

    SQLite dialect: use table records and published column names. GROUP BY and
    aggregates are supported; no writes, arbitrary functions or application DB.
    A complete bounded capture is required, never partial counts. The server
    enforces an outer result limit (default 20, max 100) even if SQL omits LIMIT.
    Only resources configured in CKAN_SQL_ALLOWED_RESOURCE_IDS are available.
    Local query syntax and bounds: https://github.com/Batu1-1an/istanbulmcp/blob/main/docs/datastore-sql.md
    Source API: https://docs.ckan.org/en/latest/maintaining/datastore.html
    
```

### `istanbul_market_schedule`

- The name "istanbul_market_schedule" says "schedule": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Findings: warn annotation-conflict

Description, as the server wrote it:

```untrusted-server-text
Return the published weekly İBB market schedule, optionally by district/day.

    day accepts Turkish/English weekdays, today/yesterday/tomorrow, or an ISO
    date. Results are a static weekly schedule, not proof a market is open today;
    coordinates are source points and maps_url is a map search link.
    
```

## Only reads (16)

Looks things up and changes nothing. Claude Code: allow.

### `istanbul_city_services_nearby`

- The description's first verb is "summarize": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Summarize WiFi near a static reference point and district-level libraries/culture.

    district (all 39 Istanbul districts) is exclusive with place/coordinates;
    district-only place names also return district address lists, without WiFi or
    invented distances. Radius applies only to WiFi with a point. For Acıbadem,
    specify 'Acıbadem, Kadıköy' or 'Acıbadem, Üsküdar'. Not full address geocoding.
    
```

### `istanbul_get_dataset`

- The name "istanbul_get_dataset" says "get": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Return metadata and resources for one IBB dataset.
```

### `istanbul_get_resource_schema`

- The name "istanbul_get_resource_schema" says "get": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Return DataStore field schema for a resource.
```

### `istanbul_gtfs_snapshot_status`

- The name "istanbul_gtfs_snapshot_status" says "snapshot": a word for reading.
- Tag private-data: The description's first sentence says "inspect" and "calendar": it reads calendars.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Inspect local GTFS load age, calendar validity, row counts and skipped rows.

    No upstream request or refresh is made. A missing or warming snapshot is
    unavailable, not an empty timetable. Cache age is not feed publication age;
    a loaded snapshot does not prove live arrivals or transport service.
    
```

### `istanbul_health`

- The description's first verb is "return": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Return Istanbul MCP service readiness.
```

### `istanbul_metro_accessibility_status`

- The name "istanbul_metro_accessibility_status" says "status": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Return official Metro İstanbul equipment/total counts and current equipment fault details, optionally filtered by line, station, or equipment type. This is not an end-to-end accessibility guarantee.
```

### `istanbul_mobility_nearby`

- The description's first verb is "summarize": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Summarize mobility near a static place reference or coordinates.

    district (all 39 Istanbul districts) is exclusive with place/coordinates and
    returns parking only, without distances. District-only place names do the same.
    For Acıbadem specify 'Acıbadem, Kadıköy' or 'Acıbadem, Üsküdar'. Not address geocoding.
    
```

### `istanbul_nearby`

- The description's first verb is "find": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Find city services by kind and coordinates, or parking/pharmacy by district.

    bbox and types apply only to city_feature (parking, metro_station,
    air_quality_station, public_transport_stop, wifi, ev_charging, taxi_stand,
    market). air_quality includes latest readings; city_feature has station
    locations only. Static layers return published locations, not live status.
    District lists have no distances. Pharmacy records include name, district, address, phone, map links,
    provenance and freshness; maps_search_url is address search, not a verified pin.
    Pharmacy duty-end times are not guaranteed. Card/social locations are static,
    not live operating status.
    
```

### `istanbul_neighborhood_profile`

- The description's first verb is "return": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Return a joined neighborhood profile from social, building, and earthquake scenario records.
```

### `istanbul_next_departures`

- The description's first verb is "search": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Search GTFS stop names or return published departures for selected stops.

    Use stop_query with limit only to discover stop_id candidates by name,
    including Turkish/ASCII spellings (Kadıköy/kadikoy). This mode returns stops,
    NOT departures. Same-name stops remain separate; never choose the first
    automatically. Approximate spelling suggestions are labeled, not matches.
    Ask the user to select a candidate using name/map, then call with stop_id.
    stop_code identifies the published stop sign when present. stop_desc and
    platform_direction_text preserve source text; they are not inferred route directions.
    Missing metadata stays null; districts are not inferred.

    at is an ISO datetime with a UTC offset; omitted means now in Europe/Istanbul.
    The search covers 24 hours. stop_id and coordinates are mutually exclusive.
    line matches the published route short name. Times are scheduled, never live
    ETA, delays or proof of service. Outside-calendar queries are unavailable.
    
```

### `istanbul_query_resource`

- The name "istanbul_query_resource" says "query": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Query IBB CKAN DataStore records with guarded filters and limits.

    API reference: https://docs.ckan.org/en/latest/maintaining/datastore.html
    Uses datastore_search, not SQL; field names come from the resource schema.
    
```

### `istanbul_search_datasets`

- The name "istanbul_search_datasets" says "search": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Search the IBB open data catalog.
```

### `istanbul_traffic_status`

- The name "istanbul_traffic_status" says "status": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Return Istanbul citywide traffic index.
```

### `istanbul_transit_line`

- The description's first verb is "get": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Get IETT line info, ordered stops or planned main-terminal departures.

    limit applies only to departures. This is not live intermediate-stop ETA.
    Cross-operator service notices are provided by istanbul_transport_disruptions.
    
```

### `istanbul_transport_disruptions`

- The description's first verb is "return": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Return current official disruptions and service announcements across supported transport operators.
```

### `istanbul_water_status`

- The name "istanbul_water_status" says "status": a word for reading.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Get ISKI active faults (district or fault_number) or dam occupancy.

    Dam filters apply only to dams; fault_number is exclusive with district.
    Nearby faults are provided by istanbul_nearby(kind="water_fault"). Results
    carry fallback freshness and approximate fault locations; no restoration guarantee.
    
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `istanbul`:

```json
{
  "permissions": {
    "allow": [
      "mcp__istanbul__istanbul_health",
      "mcp__istanbul__istanbul_search_datasets",
      "mcp__istanbul__istanbul_get_dataset",
      "mcp__istanbul__istanbul_get_resource_schema",
      "mcp__istanbul__istanbul_query_resource",
      "mcp__istanbul__istanbul_nearby",
      "mcp__istanbul__istanbul_traffic_status",
      "mcp__istanbul__istanbul_water_status",
      "mcp__istanbul__istanbul_mobility_nearby",
      "mcp__istanbul__istanbul_city_services_nearby",
      "mcp__istanbul__istanbul_neighborhood_profile",
      "mcp__istanbul__istanbul_transit_line",
      "mcp__istanbul__istanbul_transport_disruptions",
      "mcp__istanbul__istanbul_metro_accessibility_status",
      "mcp__istanbul__istanbul_next_departures",
      "mcp__istanbul__istanbul_gtfs_snapshot_status"
    ],
    "ask": [
      "mcp__istanbul__istanbul_datastore_query",
      "mcp__istanbul__istanbul_market_schedule"
    ],
    "deny": []
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__istanbul__istanbul_health`: untrusted-input
- `mcp__istanbul__istanbul_search_datasets`: untrusted-input
- `mcp__istanbul__istanbul_get_dataset`: untrusted-input
- `mcp__istanbul__istanbul_get_resource_schema`: untrusted-input
- `mcp__istanbul__istanbul_query_resource`: untrusted-input
- `mcp__istanbul__istanbul_nearby`: untrusted-input
- `mcp__istanbul__istanbul_traffic_status`: untrusted-input
- `mcp__istanbul__istanbul_water_status`: untrusted-input
- `mcp__istanbul__istanbul_mobility_nearby`: untrusted-input
- `mcp__istanbul__istanbul_city_services_nearby`: untrusted-input
- `mcp__istanbul__istanbul_neighborhood_profile`: untrusted-input
- `mcp__istanbul__istanbul_transit_line`: untrusted-input
- `mcp__istanbul__istanbul_transport_disruptions`: untrusted-input
- `mcp__istanbul__istanbul_metro_accessibility_status`: untrusted-input
- `mcp__istanbul__istanbul_datastore_query`: private-data, untrusted-input
- `mcp__istanbul__istanbul_market_schedule`: untrusted-input
- `mcp__istanbul__istanbul_next_departures`: untrusted-input
- `mcp__istanbul__istanbul_gtfs_snapshot_status`: private-data, untrusted-input