Rentalot MCP Server
UnverifiedREPOrentalot-ai/rentalot-mcp
F
Catalogue entry updated 6 days ago
Auth postureNot probedno remote endpoint probed yet
Tools658 Destructive · 1 Execute · 26 Write · 30 Read
Worst categoryDestructivegrade tracks the peak, not the average
Capability mix
Destructive 8Execute 1Write 26Read 30
What it can reach
Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money
Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.
Tools 65
delete_contactdelete_draftdelete_followupdelete_propertydelete_property_images
View all 65 tools
delete_showingdelete_webhookdelete_workflowtrigger_workflow_runbulk_create_propertiesconfirm_image_batchconfirm_image_uploadcreate_contactcreate_draftcreate_followupcreate_propertycreate_showingcreate_webhookcreate_workflowimport_property_imagespresign_image_batchpresign_image_uploadreorder_property_imagesreview_sessionrotate_webhook_secretsend_draftsend_messageupdate_contactupdate_draftupdate_followup_settingsupdate_propertyupdate_settingsupdate_showingupdate_webhookupdate_workflowcheck_showing_availabilityget_bulk_import_jobget_contactget_conversationget_draftget_followupget_followup_settingsget_image_import_jobget_propertyget_sessionget_settingsget_showingget_webhookget_workflowget_workflow_runlist_contactslist_conversation_messageslist_conversationslist_draftslist_eventslist_followupslist_propertieslist_property_imageslist_sessionslist_showingslist_webhookslist_workflow_runslist_workflowssearch_conversationstest_webhook
Change history
No changes recorded since first scan. Watched servers surface a diff within the hour.
Recommended policy
delete_contactdeny
trigger_workflow_runrequire approval
bulk_create_propertiesrate limit
Read-only toolsallow
Full policy breakdown with enforcement rules →