com.spacexploration/listings

Est-ce que com.spacexploration/listings est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.spacexploration/listings » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 23 outils

• attach_listing_photo≈ 297 tokens

  Attach a photo to a listing you own directly from its public URL — one call, no separate sign/upload/confirm. The server fetches the image and ingests it with auto-generated thumbnail/hero/full variants. Only https image URLs whose host is publicly routable are accepted. The photo is content-moderated (must be real-estate related and safe) before it can appear publicly — the returned snapshot includes the moderation_status (approved / rejected / escalated) and moderation_reason. A rejected or escalated photo will not be publicly visible and will block publishing until removed or replaced.

  Paramètres, retour & exemple (2)

  Paramètres

  • hashid · string · requis
    Hashid of the listing to attach the photo to.
  • source_url · string · requis
    Public https URL of the image to fetch and attach. Must point directly at an image (jpeg, png, webp, gif, avif, heic/heif) on a publicly-routable host.

  Exemple d'appel

  {"name": "attach_listing_photo", "arguments": {"hashid": "texte", "source_url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• confirm_attachment_upload≈ 215 tokens

  Finalize an out-of-band upload after the file bytes have been PUT to the presigned URL. Verifies the stored object matches what was signed (size and content-type) and marks the attachment ready. Returns the attachment snapshot with its public variant URLs. Idempotent: confirming an already-confirmed upload returns the same snapshot.

  Paramètres, retour & exemple (1)

  Paramètres

  • attachment_id · string · requis
    The attachment_id (ULID) returned by sign_attachment_upload. Confirm only after the file bytes have been successfully PUT to the presigned URL.

  Exemple d'appel

  {"name": "confirm_attachment_upload", "arguments": {"attachment_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• create_listing≈ 550 tokens

  Create a new draft listing. Returns the full created listing exactly as stored, including its hashid and status. Pass an idempotency_key (any client-generated string, e.g. a UUID) to make the call safe to retry — re-sending the same key returns the original listing instead of creating a duplicate.

  Paramètres, retour & exemple (14)

  Paramètres

  • apn · string|null · optionnel
    The county assessor parcel number (APN / parcel ID), if known. Used with the county to find the building if another listing already has it.
  • city · string · requis
    City.
  • unit · string|null · optionnel
    Unit or suite number, if applicable.
  • state · string · requis
    State (2-letter abbreviation).
  • county · string · requis
    County.
  • latitude · number · requis
    Latitude coordinate.
  • place_id · string|null · optionnel
    Place ID from geocoder.
  • longitude · number · requis
    Longitude coordinate.
  • postal_code · string · requis
    ZIP/postal code.
  • listing_type · string · requis · sale | lease
    Listing type: sale or lease.
  • property_type · string · requis
    Property type. Allowed values are listed under the property_type attribute returned by get_registry (e.g. industrial, office, retail, land).
  • street_address · string · requis
    Street address of the property.
  • idempotency_key · string|null · optionnel
    Optional client-generated key (e.g. a UUID) making this create safe to retry: re-sending the same key within 24 hours returns the originally created listing instead of a duplicate.
  • formatted_address · string|null · optionnel
    Full formatted address string from geocoder.

  Exemple d'appel

  {"name": "create_listing", "arguments": {"city": "texte", "state": "texte", "county": "texte", "latitude": 1, "longitude": 1, "postal_code": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• delete_attachment≈ 194 tokens

  Delete an attachment you own by its ULID. Soft-deletes the row so it no longer appears on the listing. Use this to clean up an abandoned upload (one you signed but never finished) or a photo you no longer want. Idempotent: deleting an already-deleted attachment succeeds.

  Paramètres, retour & exemple (1)

  Paramètres

  • attachment_id · string · requis
    The attachment_id (ULID) of the attachment to delete, as returned by sign_attachment_upload / confirm_attachment_upload or listed in get_listing.

  Exemple d'appel

  {"name": "delete_attachment", "arguments": {"attachment_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• delete_saved_search≈ 124 tokens

  Delete a saved search by its ID. Only the owner may delete their own searches. Requires authentication.

  Paramètres, retour & exemple (1)

  Paramètres

  • id · integer · requis
    The numeric ID of the saved search to delete (from list_my_saved_searches).

  Exemple d'appel

  {"name": "delete_saved_search", "arguments": {"id": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• geocode_address≈ 180 tokens

  Geocode a free-form US address into coordinates and structured components (street_address, city, county, state, postal_code) plus a formatted address and place_id — exactly the identity fields create_listing requires. Use this first, then pass the result straight into create_listing instead of supplying your own coordinates.

  Paramètres, retour & exemple (1)

  Paramètres

  • address · string · requis
    Free-form address to geocode, e.g. "3763 Imperial St, Frederick, CO 80516".

  Exemple d'appel

  {"name": "geocode_address", "arguments": {"address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_faq≈ 232 tokens

  Answers to the questions people ask about SPACEXPLORATION itself: what it costs, listing a property, where leads go, finding property, AI assistants (including the built-in one), where the building data comes from, and accounts. Call this before answering any question about how SPACEXPLORATION works or what it costs, answer from what it returns, and link the entry's `url` (or its `see` page when it has no url). Pass `topic` to read one group; leave it out for all of them.

  Paramètres, retour & exemple (1)

  Paramètres

  • topic · string · optionnel · pricing | listing | leads | finding | ai-assistants | building-data | account
    One group of questions to read. Leave it out to get every group.

  Exemple d'appel

  {"name": "get_faq", "arguments": {"topic": "pricing"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_listing≈ 226 tokens

  Retrieve the full details of a single listing by its hashid. Returns the complete ListingResource projection including parcel data, all attribute details, and attachments: photos, plus the public documents the broker attached (brochures, offering memoranda, site plans) with their filename and a direct download URL. Broker contact is included only when the requesting user is authorised to manage the listing; such a user also gets every lease suite with its id and status, the rows update_listing takes back.

  Paramètres, retour & exemple (1)

  Paramètres

  • hashid · string · requis
    The short hashid of the listing (e.g. "a1b2c3d4"). Found in listing URLs and search hits.

  Exemple d'appel

  {"name": "get_listing", "arguments": {"hashid": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_parcel≈ 252 tokens

  Read a building SPACEXPLORATION already has, by the hashid that look_up_parcel returns or that a building page URL (/parcel/{hashid}/...) contains. Returns the same data as look_up_parcel: the address and building page URL, the FEMA flood zone and natural hazard risk, EPA records nearby, Census demographics, access and nearby amenities, the county public record with numbered sources where research has found it, and any live listings in it. It looks nothing up and starts nothing, so use it to check on a building whose status.gathering or status.researching_county_record was true.

  Paramètres, retour & exemple (1)

  Paramètres

  • hashid · string · requis
    The building's short hashid (e.g. "k3m9x2qa"), as returned by look_up_parcel in parcel.hashid.

  Exemple d'appel

  {"name": "get_parcel", "arguments": {"hashid": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_publish_status≈ 202 tokens

  Get the status of your listing publishes. Pass a listing hashid for the detailed status of that listing's latest publish run — overall state (pending/running/completed/failed), current phase, per-step progress, and any failure reason. Omit the hashid to list your recent publish runs across all your listings. Use this to track a publish_listing call to completion.

  Paramètres, retour & exemple (1)

  Paramètres

  • hashid · string|null · optionnel
    Optional. Hashid of a listing to get its latest publish run in detail. Omit to list your recent publish runs across all your listings.

  Exemple d'appel

  {"name": "get_publish_status", "arguments": {"hashid": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_registry≈ 118 tokens

  Returns the full attribute registry — every searchable and filterable field, its type, allowed values, and display label. Read this first to understand the schema before calling search_listings with attribute filters.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "get_registry", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• interpret_search≈ 197 tokens

  Translate a natural-language property-search sentence into a structured filter payload compatible with search_listings. Use this as a transparent intermediate step: pass the user's raw query here, then forward the returned filters — and the returned bounds, when present (they carry the "near <place>" intent) — to search_listings.

  Paramètres, retour & exemple (1)

  Paramètres

  • prompt · string · requis
    A natural-language property search sentence from the end user. Example: "industrial with rail access in Denver under $5m".

  Exemple d'appel

  {"name": "interpret_search", "arguments": {"prompt": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_my_listings≈ 142 tokens

  List all listings owned or brokered by the authenticated user. Optionally filter by status. Requires authentication.

  Paramètres, retour & exemple (1)

  Paramètres

  • status · string|null · optionnel · draft | pending_payment | active | suspended | sold | leased | withdrawn
    Filter by listing status. Omit to return all statuses.

  Exemple d'appel

  {"name": "list_my_listings", "arguments": {"status": "draft"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_my_saved_searches≈ 95 tokens

  List the authenticated user's saved searches, including their filters and alert schedule. Requires authentication.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_my_saved_searches", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• look_up_parcel≈ 358 tokens

  Look up any US building by its street address and get the public data SPACEXPLORATION keeps on it, whether or not it is for sale or lease: the FEMA flood zone and natural hazard risk, EPA records nearby (including leaking underground storage tanks), Census demographics around it, access and nearby amenities, and, for a building that has been listed on SPACEXPLORATION, the county public record (owner, assessed and market values, taxes, tax lots, recorded sales) with a numbered source for each figure. Also returns the building page URL to share and any live listings in it (pass a listing hashid to get_listing). The first lookup of a building gathers its data in the background, which takes a minute or two: while status.gathering or status.researching_county_record is true, check on it with get_parcel and the returned hashid instead of repeating the lookup. Requires a signed-in account.

  Paramètres, retour & exemple (1)

  Paramètres

  • address · string · requis
    A full US street address with its street number, e.g. "910 Elysian Fields Ave, New Orleans, LA 70117". A road, a town or a partial address is refused: the lookup has to name one building.

  Exemple d'appel

  {"name": "look_up_parcel", "arguments": {"address": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• publish_listing≈ 163 tokens

  Kick off the publish pipeline for a draft listing. Enriches with AI, gathers market data, then transitions the listing to Active. Returns the pipeline ID to track progress. Fails with the unmet readiness checklist if the listing is not ready (including any photo that has not cleared content moderation).

  Paramètres, retour & exemple (1)

  Paramètres

  • hashid · string · requis
    Hashid of the listing to publish.

  Exemple d'appel

  {"name": "publish_listing", "arguments": {"hashid": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• save_search≈ 186 tokens

  Save the current search as a named alert. The user will receive email digests when new matching listings appear. Requires authentication.

  Paramètres, retour & exemple (3)

  Paramètres

  • name · string|null · optionnel
    A human-readable name for the saved search. If omitted, a name is derived from the filters.
  • query · string|null · optionnel
    The free-text query string, if any.
  • filters · object|null · optionnel
    The structured filter map to persist (same shape as search_listings filters).

  Exemple d'appel

  {"name": "save_search", "arguments": {"name": "texte", "query": "texte", "filters": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_listings≈ 434 tokens

  Search commercial real estate listings. Returns paginated hits with facet counts; every hit carries the public `url` to cite and its `listed_at` / `updated_at` stamps. For AI-driven search, call interpret_search first to convert a natural-language query into structured filters, then pass those filters — and its bounds, when present — here.

  Paramètres, retour & exemple (5)

  Paramètres

  • page · integer|null · optionnel
    Page number (1-based). Defaults to 1.
  • sort · string|null · optionnel
    Sort key. Valid values from get_registry sort_options (e.g. "listed_at:desc", "price:asc").
  • query · string|null · optionnel
    Free-text search query (street address, city, or keyword). Omit or pass null for no text filter.
  • bounds · object|null · optionnel
    Geographic bounding box (degrees) limiting hits to an area. Forward the bounds returned by interpret_search verbatim to honour "near <place>" intent; omit for a nationwide search.
  • filters · object|null · optionnel
    Structured filter map keyed by Typesense field name. Ranges as {min?, max?}, multi-select as string[], booleans as true/false. Call get_registry to see valid field names and allowed values.

  Exemple d'appel

  {"name": "search_listings", "arguments": {"page": 1, "sort": "texte", "query": "texte", "bounds": {}, "filters": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• send_feedback≈ 243 tokens

  File feedback or a support ticket with the SPACEXPLORATION team: a bug report, feature request, or question about the app or this MCP server. Works anonymously — include a contact email if you want a reply.

  Paramètres, retour & exemple (3)

  Paramètres

  • email · string|null · optionnel
    Optional contact email if you or your human want a reply. Authenticated callers default to their account email.
  • message · string · requis
    The feedback itself — what happened, or what should change about the app or the MCP server. Plain text, max 5000 characters.
  • category · string · optionnel · bug | feature_request | question | other
    What kind of feedback this is. Defaults to "other".

  Exemple d'appel

  {"name": "send_feedback", "arguments": {"message": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• set_listing_attributes≈ 318 tokens

  Set broker-authored attributes on a listing you own. Pass `attributes` as a map of registry field name to value (the field names get_registry returns, e.g. {"attr_parking_spaces": 40, "attr_office_class": "Class A"}). Only fields get_registry marks "writable":true can be set; publish-time computed fields and hot columns (use update_listing for those) are rejected with guidance. Enum fields take the allowed value (or an array for multiselect); send null to clear a field. Returns the full updated listing.

  Paramètres, retour & exemple (2)

  Paramètres

  • hashid · string · requis
    Hashid of the listing to update.
  • attributes · object · requis
    Map of registry field name to value, e.g. {"attr_parking_spaces": 40, "attr_office_class": "Class A", "attr_industrial_rail_access": true}. Only fields get_registry marks "writable":true are accepted. Multiselect enum fields take an array of allowed values. Send null to clear a field.

  Exemple d'appel

  {"name": "set_listing_attributes", "arguments": {"hashid": "texte", "attributes": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• sign_attachment_upload≈ 481 tokens

  Begin an out-of-band file upload. Returns a presigned R2 PUT URL and the headers to use; the file bytes are uploaded directly to storage, never through this channel. After PUTting the file, call confirm_attachment_upload with the returned attachment_id. Supports listings (photos, documents), users (avatar), and pages (cover, photos). Avatars pass an automated content check before they appear publicly.

  Paramètres, retour & exemple (6)

  Paramètres

  • size · integer · requis
    Exact byte size of the file. Verified against the uploaded object at confirm time, so it must be accurate.
  • filename · string · requis
    Original filename including extension, e.g. "front-elevation.jpg". Used to derive the storage key and extension.
  • collection · string|null · optionnel
    Optional explicit collection: "photos", "documents", "avatar", or "cover". Omit to auto-route by MIME (images→photos, PDFs→documents; documents are PDF only). Singleton slots (avatar/cover) must be set explicitly.
  • content_type · string · requis
    MIME type of the file, e.g. "image/jpeg" or "application/pdf". Must match the collection whitelist.
  • attachable_id · string · requis
    Identifier of the attachable resource. For "listing" pass the listing hashid (e.g. "d5yqqgoa") — the same id every read tool returns. For "user" pass "me" to attach to yourself. For "page" pass its numeric id.
  • attachable_type · string · requis
    Morph alias of the resource to attach to: "listing", "user", or "page".

  Exemple d'appel

  {"name": "sign_attachment_upload", "arguments": {"size": 1, "filename": "texte", "content_type": "texte", "attachable_id": "texte", "attachable_type": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• update_listing≈ 990 tokens

  Update a listing's parcel, pricing, or marketing data, or a lease's suites. Pass at least one group (parcel, pricing, marketing, spaces); send each group whole, not just the changed field. Returns the full updated listing exactly as stored.

  Paramètres, retour & exemple (5)

  Paramètres

  • hashid · string · requis
    Hashid of the listing to update.
  • parcel · object|null · optionnel
    Parcel/address fields to update: street_address, city, county, state, postal_code, latitude, longitude, and optionally unit, lot_size (INTEGER SQUARE FEET — convert acres × 43,560), lot_size_unit (the unit the size was stated in: sqft | acres | sqm | hectares; display-only), year_built, property_type, place_id (from geocode_address — when the address moves, it matches the listing to a building already on file).
  • spaces · array|null · optionnel
    A lease's suites, as the whole list: a suite left out is removed, and an empty list removes them all. A whole building leased as one is a single suite. To change suites, start from the spaces get_listing returns to you as the owner: a suite sent with its id is updated, and any field it leaves out keeps its stored value; a suite without an id is added. Publishing a lease needs at least one available suite with available_sqft and a lease_rate or price_on_request=true.
  • pricing · object|null · optionnel
    Pricing fields to update: listing_type (sale|lease). For a sale set sale_price (dollars), or omit it and set price_on_request=true for "price upon request". A lease is priced per suite (see spaces); lease_rate_period (per_sqft_year|per_sqft_month|per_month|per_year, default per_sqft_year) is the basis every suite's rate is quoted in. A lease with at most one suite, such as a whole building leased as one, can instead be priced here: lease_rate and available_sqft (INTEGER SQUARE FEET), or price_on_request=true, set that one suite, creating it when there is none. Optionally expires_at (ISO date).
  • marketing · object|null · optionnel
    Marketing copy to update: headline, summary, title_override, highlights (string[]).

  Exemple d'appel

  {"name": "update_listing", "arguments": {"hashid": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• withdraw_listing≈ 124 tokens

  Withdraw a listing, removing it from public search. This is a terminal status — the listing cannot be re-activated; create a new listing instead.

  Paramètres, retour & exemple (1)

  Paramètres

  • hashid · string · requis
    Hashid of the listing to withdraw.

  Exemple d'appel

  {"name": "withdraw_listing", "arguments": {"hashid": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://spacexploration.com/mcp