Skip to content
anlyon.devby Anlyon

BEEP.rent — car rental in Poland

rent.beep/car-rentalbeep.rentstreamable-httpv1.0.0Scanned

Search, price and book rental cars across Poland; the customer confirms on beep.rent.

16 tools: 3 can delete or cancel things, 6 change things and 7 only read.

Tools: 3 delete, 0 irreversible, 6 write, 7 read.
  • Reads private data · 1
  • Reads text others write · 9
  • Can send data out · 1
  • No findings

Anlyon alternative

9 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

16 tools

Deletes or cancels 3Claude Code: deny
  • cancel_reservationUse when the user asks to cancel: after verify_reservation_management, with its management_id (and the reservation_number when the code was sent for the user's e-mail), or with the…Reads text others writeNo findings

    Why it is in this group

    • The name "cancel_reservation" says "cancel": a word for removing or ending something.
    • The description says "irreversible".
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Use when the user asks to cancel: after verify_reservation_management, with its management_id (and the reservation_number when the code was sent for the user's e-mail), or with the reservation_number when the user's BEEP.rent account is connected. First call without confirm: it returns the refund and a confirmation_token and cancels nothing. Show the refund, get the user's explicit yes, then call again with confirm=true and that token. Cancellation is irreversible. Example: {"management_id":"from_verify","confirm":true,"confirmation_token":"from_preview"}.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
    • title: Cancel a reservation
  • create_reservationUse only after the user explicitly asked to book and, asked in one question of its own, accepted the terms and the privacy policy and answered about marketing messages (a yes to th…Reads text others writeNo findings

    Why it is in this group

    • The name "create_reservation" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Use only after the user explicitly asked to book and, asked in one question of its own, accepted the terms and the privacy policy and answered about marketing messages (a yes to the booking is not a yes to the terms): creates the reservation from checkout_id with the driver's details. The booking is not confirmed until the user enters the code sent to them (confirm_reservation_code) or pays on beep.rent. Calling again with the same checkout returns the same reservation. Show the user the price, the deposit and the cancellation policy before calling this tool. Example: {"checkout_id":"from_checkout","customer":{"first_name":"Anna","last_name":"Nowak","email":"anna@example.com","phone":"+48500600700"},"consents":{"terms":true,"rental_terms":true,"marketing":false}}.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
    • title: Book the reservation
  • request_extensionUse after quote_extension when the user asked to extend.Reads text others writeNo findings

    Why it is in this group

    • The name "request_extension" says "request": a word for a change.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Use after quote_extension when the user asked to extend. First call without confirm previews the request and returns confirmation_token; after the user's explicit yes call again with confirm=true, the token and the same new_return_at. The rental company decides; decision says how the user hears back. Example: {"management_id":"from_verify","new_return_at":"2026-12-10T10:00:00+01:00","confirm":true,"confirmation_token":"from_preview"}.

    Annotations the server declares

    • destructiveHint: true
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
    • title: Request a rental extension
Changes things 6Claude Code: ask
  • confirm_reservation_codeUse when the user gives you the 6-digit code they received for a new reservation.Reads text others writeNo findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Use when the user gives you the 6-digit code they received for a new reservation. Never guess or invent a code. Returns the reservation status: the rental company may still have to accept it. Example: {"reservation_number":"AB12CD34","status_token":"from_reservation","code":"123456"}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: false
    • title: Confirm a reservation with the user's code
  • create_checkoutUse after get_offer when the user chose an offer: freezes the final price, deposit, options and policies and returns checkout_id and a beep.rent link (continue_url) where the user …No findings

    Why it is in this group

    • The name "create_checkout" says "create": a word for a change.
    Description, as the server wrote it
    Use after get_offer when the user chose an offer: freezes the final price, deposit, options and policies and returns checkout_id and a beep.rent link (continue_url) where the user can finish. Resend every option you applied in get_offer. Does not book anything. Show the user the price, the deposit and the cancellation policy before calling this tool. Example: {"search_id":"from_search","offer_ref":"from_offer","options":{"damage_waiver":true}}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Prepare a checkout
  • quote_extensionUse when the user wants to return the car later, after verify_reservation_management, with its management_id (and the reservation_number when the code was sent for the user's e-mai…Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Use when the user wants to return the car later, after verify_reservation_management, with its management_id (and the reservation_number when the code was sent for the user's e-mail), or with the reservation_number when the user's BEEP.rent account is connected: prices the extra days. Only a rental in progress can be extended. Changes nothing. Example: {"management_id":"from_verify","new_return_at":"2026-12-10T10:00:00+01:00"}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Price a longer rental
  • request_confirmation_codeUse when the user did not receive the 6-digit code for a new reservation or it expired.Reads text others writeNo findings

    Why it is in this group

    • The name "request_confirmation_code" says "request": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Use when the user did not receive the 6-digit code for a new reservation or it expired. Sends a new code to the contact given at booking; do not call it unprompted. Example: {"reservation_number":"AB12CD34","status_token":"from_reservation"}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Send the confirmation code again
  • start_reservation_managementUse when the user wants to see, cancel or extend their reservations: e-mails a 6-digit code to the booking's e-mail address and returns management_id.Reads text others writeNo findings

    Why it is in this group

    • The name "start_reservation_management" says "start": a word for a change.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Use when the user wants to see, cancel or extend their reservations: e-mails a 6-digit code to the booking's e-mail address and returns management_id. With the reservation number the code unlocks that reservation; without it, every reservation of that e-mail. Examples: {"reservation_number":"AB12CD34","email":"anna@example.com"}; {"email":"anna@example.com"}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
    • readOnlyHint: false
    • title: Start managing reservations
  • verify_reservation_managementUse with the 6-digit code from the management e-mail: unlocks the reservation's summary and its cancellation and extension options or, for a code sent for an e-mail alone, that e-m…No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Use with the 6-digit code from the management e-mail: unlocks the reservation's summary and its cancellation and extension options or, for a code sent for an e-mail alone, that e-mail's reservations, for this conversation (2 hours). Go on with the management_id it returns. Never guess a code. Example: {"management_id":"from_start","code":"123456"}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: false
    • title: Verify the management code
Only reads 7Show 7 read-only tools
  • find_pickup_pointsUse to find physical pickup desks near a city or location.No findings

    Why it is in this group

    • The name "find_pickup_points" says "find": a word for reading.
    Description, as the server wrote it
    Use to find physical pickup desks near a city or location. Reads the shared public snapshot. Do not treat a pickup point as a guarantee of car availability. Examples: {"city":"krakow","radius_m":10000}; {"near":{"lat":50.06,"lng":19.94},"limit":5}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Find nearby pickup points
  • get_city_pricesUse for cached price examples before travel dates are chosen.No findings

    Why it is in this group

    • The name "get_city_prices" says "get": a word for reading.
    Description, as the server wrote it
    Use for cached price examples before travel dates are chosen. These are dated examples, not live availability. Do not use for a binding quote. Examples: {"city":"Kraków"}; {"city":"wroclaw-krzyki","market":"en-pl"}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Read indicative city prices
  • get_offerUse after search_offers to read current pricing, deposit, extras and rental policies.No findings

    Why it is in this group

    • The name "get_offer" says "get": a word for reading.
    Description, as the server wrote it
    Use after search_offers to read current pricing, deposit, extras and rental policies. Supplied options are applied on top of the search selections; omitted options keep the search values. Options from earlier get_offer calls are not remembered: resend every option you changed. detail "full" adds every photo; "policies" keeps the policies in a concise response. Do not use to book or confirm a reservation. Example: {"search_id":"from_search","offer_ref":"from_offer"}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Read an offer and its conditions
  • get_reservation_statusUse to check whether a reservation is confirmed, awaits the user's code or payment, or awaits the rental company.No findings

    Why it is in this group

    • The name "get_reservation_status" says "get": a word for reading.
    Description, as the server wrote it
    Use to check whether a reservation is confirmed, awaits the user's code or payment, or awaits the rental company. Identify it with status_token from create_reservation, with the e-mail used for booking, with the management_id of the user's e-mail, or by its number alone when the user's BEEP.rent account is connected. Never say a reservation is confirmed unless this returns status confirmed. Examples: {"reservation_number":"AB12CD34","status_token":"from_reservation"}; {"reservation_number":"AB12CD34","email":"anna@example.com"}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: Read a reservation's status
  • list_my_reservationsUse when the user asks about their own BEEP.rent bookings.No findings

    Why it is in this group

    • The name "list_my_reservations" says "list": a word for reading.
    Description, as the server wrote it
    Use when the user asks about their own BEEP.rent bookings. Lists the reservations of the e-mail the user verified with start_reservation_management (pass its management_id) or of the BEEP.rent account they connected: upcoming ones with the next pickup first, or with include_past the last 365 days, newest first. Each has its number, status, dates, pickup place, car and total. Example: {"management_id": "from_verify", "limit": 5}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
    • readOnlyHint: true
    • title: List my reservations
  • search_offersUse when looking for available cars and full prices in Poland.Reads text others writeNo findings

    Why it is in this group

    • The name "search_offers" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Use when looking for available cars and full prices in Poland. Supply the whole trip when changing criteria; omitted options reset. Filters and sort are not remembered: repeat them on every page. Do not use for an existing reservation. Examples: {"pickup":{"query":"Kraków"},"pickup_at":"2026-12-01T10:00:00+01:00","return_at":"2026-12-08T10:00:00+01:00","sort":"price"}; {"search_id":"from_previous_result","offset":8,"sort":"price"}.

    Annotations the server declares

    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
    • readOnlyHint: true
    • title: Search rental offers

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

9 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write9
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__car-rental__resolve_booking_link"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http car-rental https://mcp.beep.rent/mcp
claude mcp add --transport http car-rental https://mcp.beep.rent/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__car-rental__search_offers",
      "mcp__car-rental__get_offer",
      "mcp__car-rental__get_city_prices",
      "mcp__car-rental__find_pickup_points",
      "mcp__car-rental__get_reservation_status",
      "mcp__car-rental__list_my_reservations"
    ],
    "ask": [
      "mcp__car-rental__resolve_booking_link",
      "mcp__car-rental__create_checkout",
      "mcp__car-rental__request_confirmation_code",
      "mcp__car-rental__confirm_reservation_code",
      "mcp__car-rental__start_reservation_management",
      "mcp__car-rental__verify_reservation_management",
      "mcp__car-rental__quote_extension"
    ],
    "deny": [
      "mcp__car-rental__create_reservation",
      "mcp__car-rental__cancel_reservation",
      "mcp__car-rental__request_extension"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as car-rental. Review it before you use it.

Capability tags behind 9 rules
  • mcp__car-rental__search_offers untrusted-input
  • mcp__car-rental__resolve_booking_link private-data, untrusted-input, outbound
  • mcp__car-rental__create_reservation untrusted-input
  • mcp__car-rental__request_confirmation_code untrusted-input
  • mcp__car-rental__confirm_reservation_code untrusted-input
  • mcp__car-rental__start_reservation_management untrusted-input
  • mcp__car-rental__cancel_reservation untrusted-input
  • mcp__car-rental__quote_extension untrusted-input
  • mcp__car-rental__request_extension untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/rent.beep/car-rental/verify?hash=a2817a1b84611ac779e5019267e02c0f5a5d0af1d9ce8a5c0ab0f60a9a44a8c3" | jq -e '.changed == false'

Pinned hash a2817a1b8461, from Oct 26, 2026, 12:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/rent.beep/car-rental/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for rent.beep/car-rental
[![anlyon.dev](https://anlyon.dev/badge/rent.beep/car-rental.svg)](https://anlyon.dev/servers/rent.beep/car-rental)

Source: MCP Registry. Synced Oct 26, 2026, 12:18 UTC.