Skip to content

Mapsource OpenStreetMap & Geospatial APIs

by robit-man · remote · no sign-in to list tools · v0.3.1 · published by GitHub user robit-man

OpenStreetMap queries, maps/styles, search, routing, terrain, analysis, pipelines, and rendering.

Final · 1Changes · 6

13 tools: 1 do something that can't be undone, 6 change things and 6 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http mapsource https://api.mapsource.io/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "geo_navigate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false}; The name "geo_navigate" says "navigate": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

13 tools

Can't be undone 1Claude Code: ask
  • geo_styleConfigure semantic basemap styles.No findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Configure semantic basemap styles. Operations: explain and schema retrieve public definitions; intent generates a proposal; preview compiles changes; save, list, revisions, diff, and delete manage profiles. Submit semantic manifests or preset patches, not raw MapLibre JSON. Authenticated operations affect the current key's profiles.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
Changes things 6Claude Code: ask
  • elevationSample terrain at lat/lon.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Sample terrain at lat/lon. elevationMeters is clamped to zero; sampledMeters retains the raw model elevation. belowSeaLevel identifies negative samples and bathymetryTile references the source raster. Requires a subscription key. Not survey-grade.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • geo_navigateNavigation operations: route, matrix, isochrone, map_match, snap, and optimize.1 finding

    Why it is in this group

    • The name "geo_navigate" says "navigate": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "geo_navigate" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false}; The name "geo_navigate" says "navigate": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Navigation operations: route, matrix, isochrone, map_match, snap, and optimize. Route accepts 2–10 waypoints and optional elevation profiles. Matrix supports up to 625 pairs. Map matching accepts up to 1,000 trace points; optimization accepts 3–20 stops. Results include geometry or travel costs and source metadata. Requires a subscription key. Unroutable requests return an error and require revised inputs.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • geo_renderRender a static PNG map from a center and zoom or bounding box.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Render a static PNG map from a center and zoom or bounding box. Supports GeoJSON overlays, result handles, and up to 50 labeled markers. Dark and light styles use raster rendering; other preset or profile names use vector rendering. Requires a subscription key.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • isochroneCalculate reachable-area polygons from a coordinate for up to four travel-time bands.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Calculate reachable-area polygons from a coordinate for up to four travel-time bands. Returns GeoJSON for catchment, coverage, and accessibility analysis. Requires a subscription key.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • overpass_queryExecute bounded Overpass QL over OSM nodes, ways, relations, tags, geometry, areas, metadata, and spatial selectors.No findings

    Why it is in this group

    • The name "overpass_query" says "query": a word for reading.
    • The description's first verb is "execute": a word for a change.
    Description, as the server wrote it
    Execute bounded Overpass QL over OSM nodes, ways, relations, tags, geometry, areas, metadata, and spatial selectors. Historical attic queries are unsupported. Requires a subscription key or authorized x402 payment. Use service_status to retrieve the dataset timestamp.
  • routeCalculate a turn-by-turn route between 2–10 waypoints.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Calculate a turn-by-turn route between 2–10 waypoints. Supported costing: auto, bicycle, pedestrian, truck, motor_scooter, and bus. Returns GeoJSON, distance, duration, and maneuvers. Set elevation to true for a terrain profile with gain and loss. Requires a subscription key.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
Only reads 6Claude Code: allow
  • basemap_catalogList raster and vector tile templates, source zoom ranges, dataset snapshots, and attribution.No findings

    Why it is in this group

    • The description's first verb is "list": a word for reading.
    Description, as the server wrote it
    List raster and vector tile templates, source zoom ranges, dataset snapshots, and attribution. The catalog is public; tile requests require a subscription key.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • find_featuresFind cafes, restaurants, buildings, parks, schools, hospitals, transit stops, drinking water, or trails within a bounding box up to 0.5 degrees per axis.No findings

    Why it is in this group

    • The name "find_features" says "find": a word for reading.
    Description, as the server wrote it
    Find cafes, restaurants, buildings, parks, schools, hospitals, transit stops, drinking water, or trails within a bounding box up to 0.5 degrees per axis. Returns OSM geometry and tags, subject to the output limit. Requires a subscription key or authorized x402 payment.
  • geo_analyzeMeasure or transform geometry using buffer, centroid, bbox, area, length, distance, intersect, union, difference, contains, intersects, nearest, simplify, or convex.No findings

    Why it is in this group

    • The name "geo_analyze" says "analyze": a word for reading.
    Description, as the server wrote it
    Measure or transform geometry using buffer, centroid, bbox, area, length, distance, intersect, union, difference, contains, intersects, nearest, simplify, or convex. Inputs accept GeoJSON, coordinate pairs, Overpass results, and result handles. Polygon overlay operations require areas. Use operation pipeline for up to 12 ordered steps and estimateOnly for cost estimation. Requires a subscription key.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • geo_dataRead service status, basemap catalog, point elevation, contours, usage, and metrics.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read service status, basemap catalog, point elevation, contours, usage, and metrics. Status includes subsystem availability and replication lag. Elevation returns surface and raw model heights. Metrics report request rates, success rates, latency percentiles, and dataset ages. Status and basemaps are public; other operations require a subscription key.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
  • service_statusRead Overpass engine readiness, dataset timestamp, billing state, and x402 payment mode.No findings

    Why it is in this group

    • The name "service_status" says "status": a word for reading.
    Description, as the server wrote it
    Read Overpass engine readiness, dataset timestamp, billing state, and x402 payment mode. Public. Use geo_data with operation status for the full subsystem report.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.3.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http mapsource https://api.mapsource.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__mapsource__service_status",
      "mcp__mapsource__basemap_catalog",
      "mcp__mapsource__geo_data",
      "mcp__mapsource__geo_analyze",
      "mcp__mapsource__geo_search",
      "mcp__mapsource__find_features"
    ],
    "ask": [
      "mcp__mapsource__elevation",
      "mcp__mapsource__geo_style",
      "mcp__mapsource__geo_render",
      "mcp__mapsource__geo_navigate",
      "mcp__mapsource__route",
      "mcp__mapsource__isochrone",
      "mcp__mapsource__overpass_query"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as mapsource. Review it before you use it.