// SCAN REPORT

Rentalot MCP Server

65 tools. 35 can modify or destroy data without limits.

8 destructive tools with no built-in limits. Policy required.

Last updated:

35 can modify or destroy data
30 read-only
65 tools total

Community server · catalogue entry verified 30/06/2026

How to control Rentalot MCP Server ↓

TOOL MAP

What Rentalot MCP Server exposes to your agents

Read (30) Write / Execute (27) Destructive / Financial (8)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Rentalot MCP Server tools

Destructive · High delete_contact Although described as a soft-delete (restorable), the tool's primary action is deletion of a contact record, which classifies it as Destructive. Destructive · Medium delete_draft The tool performs an irreversible deletion operation on draft messages. Destructive · High delete_followup This tool irreversibly removes data (a pending follow-up record) that cannot be recovered. Destructive · High delete_property This tool irreversibly removes data (a property listing) from the system with no recovery mechanism.

35 of Rentalot MCP Server's 65 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Rentalot MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Rentalot MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "delete_contact": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "bulk_create_properties": {
    "limits": [
      {
        "counter": "bulk_create_properties_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "check_showing_availability": {
    "limits": [
      {
        "counter": "check_showing_availability_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Rentalot MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON RENTALOT →

Instant setup, no code required.

FULL CATALOGUE

All 65 Rentalot MCP Server tools

DESTRUCTIVE 8 tools
Destructive delete_contact Use to soft-delete a contact. The contact can be restored later. Write operation — requires Pro tier or higher Destructive delete_draft Use to delete a draft message. Only Destructive delete_followup Use to cancel and delete a pending follow-up. Only Destructive delete_property Use to permanently delete a property listing. This cannot be undone. Write operation — requires Pro tier or hi Destructive delete_property_images Use to delete one or more images from a property. Write operation — requires Pro tier or higher. Destructive delete_showing Use to permanently delete a showing. Prefer updating status to Destructive delete_webhook Use to delete a webhook subscription. Events will no longer be delivered to the endpoint. Write operation — re Destructive delete_workflow Use to delete a workflow template. Fails with 409 if active runs exist — cancel or wait for them to finish fir
EXECUTE 1 tools
Execute trigger_workflow_run Use to trigger a new run of a workflow for a specific contact. Optionally scope it to a property. The workflow
WRITE 26 tools
Write bulk_create_properties Use to bulk-import up to 500 properties at once. Accepts flexible field names (Zillow/AppFolio aliases are aut Write confirm_image_batch Use to confirm multiple property image uploads after files have been uploaded to their presigned URLs. Creates Write confirm_image_upload Use to confirm a property image upload after the file has been uploaded to the presigned URL. Creates the imag Write create_contact Use to create a new contact (prospect, tenant, etc.). Write operation — requires Pro tier or higher. Write create_draft Use to create a draft message for review before sending. Drafts auto-expire after 24 hours. Use send_draft to Write create_followup Use to schedule a follow-up message for a contact. The follow-up will be automatically sent at the scheduled t Write create_property Use to create a new rental property listing. Requires address, monthly rent, bedrooms, and bathrooms at minimu Write create_showing Use to schedule a new property showing. Requires property ID, contact ID, title, and start/end times. Write op Write create_webhook Use to create a webhook subscription. Specify an HTTPS URL and one or more event types to subscribe to. Payloa Write create_workflow Use to create a new workflow template. Slug is auto-generated from name. Write operation — requires Pro tier o Write import_property_images Use to import property images from external URLs. The server downloads from the URLs (SSRF-protected) and uplo Write presign_image_batch Use to get presigned URLs for uploading up to 20 property images at once. Returns an upload URL and R2 key for Write presign_image_upload Use to get a presigned URL for uploading a property image to R2 storage. Returns an upload URL and R2 key. Wri Write reorder_property_images Use to reorder images for a property. Pass the image IDs in the desired display order. Write operation — requi Write review_session Use to approve or deny a workflow session. Write operation — requires Pro tier or higher. Write rotate_webhook_secret Use to rotate the HMAC signing secret for a webhook subscription. The new secret is returned once and must be Write send_draft Use to send a pending draft message. The draft will be delivered via its specified channel. Once sent, the dra Write send_message Use to send a message to a contact via their preferred channel (or a specified channel). The message is delive Write update_contact Use to update a contact Write update_draft Use to edit an existing draft message. Only Write update_followup_settings Use to update follow-up automation settings. Only include fields you want to change. Write operation — require Write update_property Use to update an existing property. Only include fields you want to change. Write operation — requires Pro tie Write update_settings Use to update account settings including agent preferences and email notifications. Only include fields you wa Write update_showing Use to update a showing Write update_webhook Use to update a webhook subscription. Only include fields you want to change. Write operation — requires Pro t Write update_workflow Use to update a workflow template. Only include fields you want to change. Changes to execution fields (steps,
READ 30 tools
Read check_showing_availability Use to check available time slots for scheduling a property showing. Returns open slots for the given property Read get_bulk_import_job Use to check the status of a bulk property import job. Returns progress (total, created, failed), created prop Read get_contact Use to get full details for a specific contact by ID. Response includes Read get_conversation Use to get details for a specific conversation by ID. Read-only. Read get_draft Use to get a specific draft message by ID. Read get_followup Use to get details for a specific follow-up by ID. Read get_followup_settings Use to get the current follow-up automation settings (enabled state, idle hours before trigger, max sequence s Read get_image_import_job Use to check the status of an image import job. Returns progress including how many images have been imported, Read get_property Use to get full details for a specific rental property by ID. Read get_session Use to get full details for a specific workflow session by ID. Read get_settings Use to get all account settings including agent preferences, working hours, voice settings, prescreening confi Read get_showing Use to get full details for a specific showing by ID. Read get_webhook Use to get details for a specific webhook subscription by ID. Read get_workflow Use to get a specific workflow template by ID. Returns full template detail including steps, triggerConfig, ex Read get_workflow_run Use to get details and current progress of a specific workflow run by ID. Read list_contacts Use to list contacts (prospects, tenants, etc.). Supports filtering by lifecycle status, role, channel, and fr Read list_conversation_messages Use to list messages in a conversation. Returns paginated messages with direction (inbound/outbound), content, Read list_conversations Use to list messaging conversations. Supports filtering by contact and status. Read-only. Read list_drafts Use to list draft messages. Supports filtering by contact, status, and channel. Drafts auto-expire 24 hours af Read list_events Use to list all calendar events (showings, calls, inspections, meetings). Supports filtering by date range and Read list_followups Use to list scheduled follow-up messages. Supports filtering by contact and status. Read list_properties Use to list rental properties. Supports filtering by rent range, bedrooms, bathrooms, availability date, pet p Read list_property_images Use to list all images for a property. Returns image metadata including URLs, alt text, and display order. Read list_sessions Use to list workflow sessions. Supports filtering by contact, workflow template, status, and review status. Read list_showings Use to list property showings. Supports filtering by property, contact, status, and date range. Read list_webhooks Use to list webhook subscriptions. Webhooks deliver real-time event notifications to your HTTPS endpoint. Read list_workflow_runs Use to list workflow runs. Supports filtering by workflow, contact, and execution status. Read list_workflows Use to list workflow templates. Workflows are automated multi-step sequences (e.g. pre-screening, lead qualifi Read search_conversations Use to search conversations by keyword. Returns conversations matching the query across message content. Respo Read test_webhook Use to send a test event to a webhook endpoint. Useful for verifying your webhook handler is working correctly
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
adminautomation
Nodebench 824 tools
adminautomation
UnClick 813 tools
adminautomation
Binance MCP Server 734 tools
adminautomation
Fortimanager 584 tools
adminautomation
Crow 573 tools
adminautomation
Mcp 571 tools
adminautomation
GoHighLevel MCP Server 566 tools
adminautomation
FAQ

Questions about Rentalot MCP Server

Can an AI agent delete data through the Rentalot MCP Server MCP server? +

Yes. The Rentalot MCP Server server exposes 8 destructive tools including delete_contact, delete_draft, delete_followup. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Rentalot MCP Server? +

The Rentalot MCP Server server has 26 write tools including bulk_create_properties, confirm_image_batch, confirm_image_upload. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Rentalot MCP Server.

How many tools does the Rentalot MCP Server MCP server expose? +

65 tools across 4 categories: Destructive, Execute, Read, Write. 30 are read-only. 35 can modify, create, or delete data.

How do I enforce a policy on Rentalot MCP Server? +

Register the Rentalot MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Rentalot MCP Server tool call.

Deterministic rules across all 65 Rentalot MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON RENTALOT →

Instant setup, no code required.

65 Rentalot MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.