Compare Auckland Builds: builders and trades directory

org.compare-auckland-newbuilds-renovations/auckland-builderscompare-auckland-newbuilds-renovations.orgstreamable-httpv1.1.0Scanned 1 hour ago

Compare Auckland NZ builders and trades by suburb, project type and credentials. Sources shown.

11 tools: 2 change things and 9 only read.

Reads private data · 6
Reads text others write · 3
Can send data out · 0
7 findings

Anlyon alternative

2 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

11 tools

Changes things 2Creates or changes something that can be changed back.Claude Code: ask

builder_checksNeutral lookup of sourced public records (LBP Board disciplinary decisions, Gazette liquidation notices, Official Assignee notices, MBIE prosecutions) the website has collected.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Neutral lookup of sourced public records (LBP Board disciplinary decisions, Gazette liquidation notices, Official Assignee notices, MBIE prosecutions) the website has collected. With no query: an overview with counts, dates checked and sources. With a query (name or company): name matches only, each with its source link. A name match is not proof of identity and a record is not a quality rating. No credits.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Official records search
how_to_get_quotesLinks and a short checklist for getting and comparing quotes: the website's project brief and shortlist tools.Reads text others write1 finding
Why it is in this group
- The name "how_to_get_quotes" says "get": a word for reading.
- The description's first verb is "link": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
What it can reach
- untrusted-inputThe description's first sentence says "link" and "website": it reads web pages, which anyone can write.
Findings
- Warn
  The server marks "how_to_get_quotes" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "how_to_get_quotes" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Links and a short checklist for getting and comparing quotes: the website's project brief and shortlist tools. Contains no personal data and this server never receives a user's name, phone or email. Optionally pass a suburb to include its page and any Sponsored featured builders there.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: How to get quotes

Only reads 9Looks things up and changes nothing.Show 9 read-only tools

compare_buildersSide-by-side comparison of 2 to 20 listings of any trade (slugs or names; the trade is shown for each): status badge, base, project types, credentials, rating, register details.Reads private data1 finding
Why it is in this group
- The name "compare_builders" says "compare": a word for reading.
What it can reach
- private-dataThe description's first sentence says "credential": it reads secrets.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...ch): status badge, base, project types, credentials, rating, register details. Paid keys: 2..."
  What this check looks for
Description, as the server wrote it
Side-by-side comparison of 2 to 20 listings of any trade (slugs or names; the trade is shown for each): status badge, base, project types, credentials, rating, register details. Paid keys: 2 credits per builder with the richer fields; free use gets the summary comparison.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Compare builders side by side
get_builderFull public profile for one directory listing (any trade): where they work, project types, credentials, register details, rating, status badge with date, published contact details,…Reads private data1 finding
Why it is in this group
- The name "get_builder" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "directory": it reads files.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...trade): where they work, project types, credentials, register details, rating, status badge..."
  What this check looks for
Description, as the server wrote it
Full public profile for one directory listing (any trade): where they work, project types, credentials, register details, rating, status badge with date, published contact details, and provenance (source and date checked). Pass a slug (from search_builders) or the builder's name. detail=full costs 2 credits for paid keys; free use returns the summary.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Get one builder
get_open_leadsRecent public job leads in Auckland (from third-party marketplaces) that builders can respond to, by suburb and/or trade.No findings
Why it is in this group
- The name "get_open_leads" says "get": a word for reading.
Description, as the server wrote it
Recent public job leads in Auckland (from third-party marketplaces) that builders can respond to, by suburb and/or trade. Links go to the original posting; no personal details are included. 1 credit per lead for paid keys; free use max 5 per call.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Open public leads
list_project_typesProject types used by the directory (new builds, kitchens, bathrooms ...) with the number of listings for each, plus the most common credentials.Reads private data1 finding
Why it is in this group
- The name "list_project_types" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "directory": it reads files.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...listings for each, plus the most common credentials. No credits."
  What this check looks for
Description, as the server wrote it
Project types used by the directory (new builds, kitchens, bathrooms ...) with the number of listings for each, plus the most common credentials. No credits.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: List project types
list_suburbsAuckland suburbs and areas covered by the directory, with region and profile page link.Reads private dataNo findings
Why it is in this group
- The name "list_suburbs" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "directory": it reads files.
Description, as the server wrote it
Auckland suburbs and areas covered by the directory, with region and profile page link. No credits.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: List covered suburbs
list_tradesThe 42 trades involved in New Builds and Renovations in three groups (Building trades, Siteworks trades, Professional services), each with a plain-English description, the NZ licen…Reads private dataReads text others writeNo findings
Why it is in this group
- The name "list_trades" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "directory": it reads files.
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
The 42 trades involved in New Builds and Renovations in three groups (Building trades, Siteworks trades, Professional services), each with a plain-English description, the NZ licensing or registration body to check, the page URL and the number of directory listings. No credits.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: List trades
my_usageShows how many free calls are left this hour/day, or for a paid key the credit balance, expiry dates and recent usage.No findings
Why it is in this group
- The description's first verb is "show": a word for reading.
Description, as the server wrote it
Shows how many free calls are left this hour/day, or for a paid key the credit balance, expiry dates and recent usage. No credits.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Plan, balance and usage
search_buildersSearch the Compare Auckland Builds directory of Auckland new-build and renovation builders (about 300 listings, each checked against its own website and public registers).Reads private dataReads text others write2 findings
Why it is in this group
- The name "search_builders" says "search": a word for reading.
What it can reach
- private-dataThe description's first sentence says "search" and "directory": it reads files.
- untrusted-inputThe description's first sentence says "search" and "website": it reads web pages, which anyone can write.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...sters). Filter by suburb, project type, credential, register status and minimum rating. Re..."
  What this check looks for
- Info
  The input schema at properties.credential.description mentions "Credential".
  Matched text
  inputSchema.properties.credential.description: "Credential or membership the builder's website lis..."
  What this check looks for
Description, as the server wrote it
Search the Compare Auckland Builds directory of Auckland new-build and renovation builders (about 300 listings, each checked against its own website and public registers). Filter by suburb, project type, credential, register status and minimum rating. Returns organic results plus, always first and clearly labelled, any paid 'Sponsored' featured listings for the suburb (these cannot be filtered out or limited away). Free use returns at most 5 organic results per call.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Search Auckland builders
search_businessesSame as search_builders, but the default is ANY trade on a new build or renovation (builders, plumbers, electricians, landscapers, architects ...1 finding
Why it is in this group
- The name "search_businesses" says "search": a word for reading.
Findings
- Info
  The input schema at properties.credential.description mentions "Credential".
  Matched text
  inputSchema.properties.credential.description: "Credential or membership the builder's website lis..."
  What this check looks for
Description, as the server wrote it
Same as search_builders, but the default is ANY trade on a new build or renovation (builders, plumbers, electricians, landscapers, architects ... see list_trades). Pass trade to narrow to one. Sponsored (featured) listings come first for the trade searched, labelled, and cannot be filtered away. Trades other than builders may have no listings yet.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
- title: Search businesses of any trade

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged outbound.

Reads private data6: Reads files, mail, messages, databases, secrets, calendars or repositories.; compare_builders
get_builder
list_project_types
list_suburbs
list_trades
search_builders
Reads text others write3: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; how_to_get_quotes
list_trades
search_builders
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn6 info

Warnhow_to_get_quotes
The server marks "how_to_get_quotes" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "how_to_get_quotes" says "get": a word for reading.
What this check looks for
Infosearch_builders
The description mentions "credential".
Matched text
description: "...sters). Filter by suburb, project type, credential, register status and minimum rating. Re..."
What this check looks for
Infosearch_builders
The input schema at properties.credential.description mentions "Credential".
Matched text
inputSchema.properties.credential.description: "Credential or membership the builder's website lis..."
What this check looks for
Infosearch_businesses
The input schema at properties.credential.description mentions "Credential".
Matched text
inputSchema.properties.credential.description: "Credential or membership the builder's website lis..."
What this check looks for
Infoget_builder
The description mentions "credentials".
Matched text
description: "...trade): where they work, project types, credentials, register details, rating, status badge..."
What this check looks for
Infolist_project_types
The description mentions "credentials".
Matched text
description: "...listings for each, plus the most common credentials. No credits."
What this check looks for

Show 1 more finding

Infocompare_builders
The description mentions "credentials".
Matched text
description: "...ch): status badge, base, project types, credentials, rating, register details. Paid keys: 2..."
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http auckland-builders https://mcp.compare-auckland-newbuilds-renovations.org/mcp

claude mcp add --transport http auckland-builders https://mcp.compare-auckland-newbuilds-renovations.org/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__auckland-builders__search_builders",
      "mcp__auckland-builders__search_businesses",
      "mcp__auckland-builders__list_trades",
      "mcp__auckland-builders__get_builder",
      "mcp__auckland-builders__list_suburbs",
      "mcp__auckland-builders__list_project_types",
      "mcp__auckland-builders__get_open_leads",
      "mcp__auckland-builders__compare_builders",
      "mcp__auckland-builders__my_usage"
    ],
    "ask": [
      "mcp__auckland-builders__builder_checks",
      "mcp__auckland-builders__how_to_get_quotes"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as auckland-builders. Review it before you use it.

Capability tags behind 7 rules

mcp__auckland-builders__search_builders private-data, untrusted-input
mcp__auckland-builders__list_trades private-data, untrusted-input
mcp__auckland-builders__get_builder private-data
mcp__auckland-builders__list_suburbs private-data
mcp__auckland-builders__list_project_types private-data
mcp__auckland-builders__compare_builders private-data
mcp__auckland-builders__how_to_get_quotes untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/org.compare-auckland-newbuilds-renovations/auckland-builders/verify?hash=96a5ec656c7d8727ba1e617cf5cf35ba7bfc5d1c88c37b4cc8c4033a3a9f2f91" | jq -e '.changed == false'

Pinned hash 96a5ec656c7d, from Nov 3, 2026, 04:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/org.compare-auckland-newbuilds-renovations/auckland-builders/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/org.compare-auckland-newbuilds-renovations/auckland-builders.svg)](https://anlyon.dev/servers/org.compare-auckland-newbuilds-renovations/auckland-builders)

Source: MCP Registry. Synced Nov 3, 2026, 04:18 UTC.