Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.jdw2111/propraven

NPM · @PROPRAVEN/MCP · 2 COMPONENTS

Property intelligence: 180M+ US parcels — lookup, search, owners, hazards, permits, deeds.

+14 this week 92 Trust /100

Last scanned (11 hours ago)

Scores higher than 95% of npm servers

Category Maps and Location

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 30 of 92 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to jdw2111/propraven-mcp). View diagnostics → Pass
  • Clear OSI-approved license (Apache-2.0).Pass
  • Actively maintained (last published 33 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability65
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2496 tokens (~312/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage96
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 88% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
What we tested

Checks we ran (16)

  • Malware scan
  • Known CVEs
  • Install scripts
  • Dependency health
  • Source repository
  • Provenance
  • License
  • Maintenance
  • Security disclosure
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this package (2)

  • Endpoint SecurityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.
  • Transport & ReachabilityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Nov 26 +14
    • Stability: fail → pass ▲ security
  • 29 Oct 26 0
    • Security disclosure: unverified → fail ▼ functional
  • 28 Oct 26 0
    • Security disclosure: fail → unverified ▼ functional
  • 12 Oct 26 0
    • Security disclosure: unverified → fail ▼ functional
  • 11 Oct 26 0
    • Security disclosure: fail → unverified ▼ functional
  • 3 Oct 26 +15
    • Malware scan: unverified → pass ▲ security
  • 2 Oct 26 −27
    • Malware scan: pass → unverified ▼ security
    • Stability: 0.80 → fail ▼ security
    • Schema quality: 201 → 312 ▼ functional
    • Tool coverage: 83% → 88% ▲ functional
    • Package version: 0.1.1 → 0.2.0 functional
  • 1 Oct 26 90
    • Stability: pass → 0.80 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed npm/@propraven/mcp@0.2.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo jdw2111/propraven-mcp
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/jdw2111/propraven-mcp/.github/workflows/publish-npm.yml@refs/tags/v0.2.0
Rekor log index 3062079257
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:d5b555779b33f16477abaef66d91709adbbfd7305dbd228c975b6df26ca65b7eee6aab5afeed12dde3ddbb96938cb6ec2d2b085b037347f8f0caa3728

Background: How many MCP packages publish verified provenance →

Dependencies 92 packages
Packages resolved 92
Stale 30
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 8 exposed · ~2,496 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
hazard_score ~253

Hazard profile for a parcel (GET /api/v1/parcels/{id}/risks): flood (FEMA zone + SFHA flag), wildfire, seismic, windstorm, air quality and crime blocks, plus withhold_gate / identity_gate provenance. Use when the user asks about a property's risk profile — insurance pricing, underwriting, or due diligence. Do NOT use to compare multiple parcels (use parcel_compare, which includes each parcel's hazards). Every requested key is present: the value, or null when PropRaven does not hold it. Coverage varies by hazard. Free read — never purchases anything (this is not the paid risk-score product).

NameTypeReqDescription
includearray–Hazard blocks to return (default all). flood → flood_zone + is_sfha + is_sfha_basis; the others map to the same-named block.
parcel_idstringyesPropRaven parcel ID. Canonical form is state_fips:county_fips:parcel_id, e.g. "37:119:12104406" (the legacy 5-digit form "37119:12104406" and PropRaven parcel UUIDs are also accepted). Get one from p…

No output schema declared.

No examples provided.

owner_pierce ~317

List the parcels titled under an owner-of-record name (GET /api/v1/owners/{name}/portfolio). Returns the matched owner name, a portfolio `summary` (count, total_value, total_acreage, by_state, truncated) and the `properties` list (parcel_id, county_fips, state_fips, address, assessed values, last sale, match_basis, match_confidence). This matches owner-name SPELLINGS — it is NOT a verified corporate, parent-subsidiary or beneficial-ownership link. Use when the user names a person, LLC, trust, or company and wants to see what is titled under that name. Do NOT use when starting from a parcel (use parcel_lookup, which returns owner inline). `ticker` is best-effort: it runs an owner-name search (GET /api/v1/owners/search) for the ticker text and uses the top match, returning the candidates under `resolution` — verify them, or call again with `name`. `state` filters the returned properties client-side (the summary stays portfolio-wide). Free read — never purchases anything.

NameTypeReqDescription
namestring–Owner name or entity name as recorded, e.g. "MARKEY ENTERPRISES INC". Preferred over ticker.
statestring–Optional 2-letter state (e.g. "NC") or 2-digit state FIPS to filter the property list.
tickerstring–Public-company ticker. Resolved best-effort via an owner-name search.

No output schema declared.

No examples provided.

parcel_compare ~351

Fetch 2–25 parcels side by side so they can be ranked against criteria. For each parcel it reads the free parcel card (GET /api/v1/parcels/{id}: identity, owner, valuation, building, lot) and, unless include_risks=false, the hazard block (GET /api/v1/parcels/{id}/risks), and returns a normalized `summary` plus the raw `card` / `risks`. The calling agent does the per-criterion scoring and final ranking. NEVER buys the paid parcel report or any other paid product. Use when the user has identified candidate properties (often from parcel_search) and wants them ranked. Do NOT use to discover new candidates (use parcel_search) or for a single property (use parcel_lookup + hazard_score). For deed or permit timelines call sales_history / permits_history per parcel. The `criteria` argument is returned verbatim so the agent can pin its scoring to the user's intent.

NameTypeReqDescription
criteriaarrayyes1–8 ranking criteria, free-form natural language. Echoed back in the response to anchor the agent's scoring.
include_risksboolean–Also fetch each parcel's hazard block (/risks). Default true; set false to halve the API calls.
parcel_idsarrayyes2–25 parcel IDs to compare. PropRaven parcel ID. Canonical form is state_fips:county_fips:parcel_id, e.g. "37:119:12104406" (the legacy 5-digit form "37119:12104406" and PropRaven parcel UUIDs are al…

No output schema declared.

No examples provided.

parcel_lookup ~287

Resolve a single US parcel by identifier (canonical state_fips:county_fips:parcel_id, PropRaven UUID, street address, or APN). An ID returns the canonical PropRaven parcel card (GET /api/v1/parcels/{id}): identity, current owner, valuation, geography and source provenance. An address or APN runs the text search and returns up to 5 candidates — re-call with the chosen candidate's `lookup_id` to get the card. Use when the user names one specific property. Do NOT use when ranking multiple parcels (use parcel_compare) or when filtering by criteria (use parcel_search). Example: `parcel_lookup({ query: "37:119:12104406" })` or `parcel_lookup({ query: "2232 Wilmore Dr, Charlotte, NC 28203" })`. Free read — never purchases anything.

NameTypeReqDescription
querystringyesParcel identifier in any of these forms: (1) canonical ID like "37:119:12104406" (state_fips:county_fips:parcel_id) — preferred, direct lookup; (2) legacy "37119:12104406" or a PropRaven parcel UUID…

No output schema declared.

No examples provided.

parcel_search ~392

Text search over US parcels (GET /api/v1/search/full): pass `q` as a city, owner name, address fragment or APN, optionally narrowed by `field`, `state` and `city`. Returns `{ results, total, totalCapped, page, pages, hasMore, nextCursor }` (default 50 per page, max 200); each result carries parcel_id, apn, county_fips, state_fips, site_address, city, zip5, owner_name, total_value, latitude, longitude (in search rows `parcel_id` is the PropRaven UUID and `county_fips` is 5-digit), plus `lookup_id`, added by this server — pass it to parcel_lookup / parcel_compare. Page with `cursor` (the previous response's `nextCursor`) rather than `page`; `total` is a floor when `totalCapped` is true. Use when the user wants properties matching a name, place or address fragment. Do NOT use when looking up a single known property (use parcel_lookup) or ranking a known set (use parcel_compare). Free read — never purchases anything.

NameTypeReqDescription
citystring–City filter (when q is not the city).
cursorstring–Opaque keyset cursor: the previous response's `nextCursor`. Preferred over `page`. Keep sort/dir stable while paging.
dirstring––
fieldstring–Restrict the q match to one field. Default all.
limitinteger––
pageinteger–1-indexed page number (prefer `cursor`).
qstringyesText query — owner name, address fragment, APN or city. Min 2 chars.
sortstring––
statestring–2-letter state filter (e.g. "NC").

No output schema declared.

No examples provided.

permits_history ~333

Timeline of building / construction / demolition permits filed against a parcel (GET /api/v1/parcels/{id}/permits). Each permit includes permit_number, permit_type, permit_status, description, work_class, issued_date, completed_date, estimated_cost, contractor_name (where disclosed). Use when the user asks about construction activity, recent renovations, planned work, or wants to detect a property that's actively changing. Do NOT use to find properties WITH recent permits across a market. At most 100 permits are returned (newest first). `permit_count` is the parcel's TRUE count when `permit_count_basis` is "exact"; "capped" means it is the size of the 100-row window (a floor); `truncated: true` means the parcel has more permits than returned. `since` / `types` filter the returned window only (`returned_count` is after filtering). Coverage varies by county. Free read — never purchases anything.

NameTypeReqDescription
parcel_idstringyesPropRaven parcel ID. Canonical form is state_fips:county_fips:parcel_id, e.g. "37:119:12104406" (the legacy 5-digit form "37119:12104406" and PropRaven parcel UUIDs are also accepted). Get one from p…
sincestring–ISO date — only return permits issued on or after this date (client-side filter).
typesarray–Keep permits whose permit_type contains any of these substrings (e.g. ["Building", "Demolition"]). Case-insensitive.

No output schema declared.

No examples provided.

sales_history ~323

Deed / transaction timeline for a parcel (GET /api/v1/parcels/{id}/deeds): recorded sales and transfers with recording and sale dates, sale price (where disclosed), grantor (seller), grantee (buyer), deed/document type and book/page. Use when the user asks about a property's transaction history, flip activity, or holding period. Do NOT use to find properties with recent sales market-wide, or to estimate current market value (use valuation_estimate). Note: 13 states do not disclose sale prices on deeds (KS, MS, TX, UT, WY, etc.). `event_count` is the number of events returned. `status` says where they came from: per_deed (deed rows), rollup_events (dated rollup entries), summary_only (no events served, but `known_deed_count` deeds are known — see known_deed_count_basis), or none. UCC liens are NOT available here (they are only in the paid parcel report, which this server never buys). Free read — never purchases anything.

NameTypeReqDescription
parcel_idstringyesPropRaven parcel ID. Canonical form is state_fips:county_fips:parcel_id, e.g. "37:119:12104406" (the legacy 5-digit form "37119:12104406" and PropRaven parcel UUIDs are also accepted). Get one from p…
sincestring–ISO date — only return events on or after this date (client-side filter).

No output schema declared.

No examples provided.

valuation_estimate ~240

Value fields for a parcel from its free card (GET /api/v1/parcels/{id}): market_value, avm_value with avm_confidence / avm_method, total / land / improvement assessed value, tax, last sale price and date, price_per_sqft. Numbers are normalized to JSON numbers (null = not held). Use when the user asks for a property's value, market estimate, AVM, or wants to compare assessed vs market. Do NOT use as a substitute for an appraisal — this is a modeled estimate. Historical AVM (as_of) is not supported; the tool returns the current snapshot. Free read — never purchases anything.

NameTypeReqDescription
as_ofstring–ISO date — historical AVM. NOT SUPPORTED; ignored.
parcel_idstringyesPropRaven parcel ID. Canonical form is state_fips:county_fips:parcel_id, e.g. "37:119:12104406" (the legacy 5-digit form "37119:12104406" and PropRaven parcel UUIDs are also accepted). Get one from p…

No output schema declared.

No examples provided.

Install

How do I install the io.github.jdw2111/propraven MCP server?

io.github.jdw2111/propraven runs locally as an npm package, launched with npx -y @propraven/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @propraven/mcp

# add to Claude Code
claude mcp add jdw2111-propraven -- npx -y @propraven/mcp
Common questions

What is the io.github.jdw2111/propraven MCP server?

io.github.jdw2111/propraven is an MCP server listed in the public MCP registry as io.github.jdw2111/propraven. Property intelligence: 180M+ US parcels, lookup, search, owners, hazards, permits, deeds. This page covers its npm package (@propraven/mcp).

Is the io.github.jdw2111/propraven MCP server safe to use?

io.github.jdw2111/propraven scores 92 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.jdw2111/propraven MCP server expose?

io.github.jdw2111/propraven exposes 8 tools: parcel_lookup, parcel_search, parcel_compare, owner_pierce, hazard_score, and 3 more. Their descriptions and schemas cost roughly 2,496 tokens of context every time the server is loaded.

Is the io.github.jdw2111/propraven MCP server still maintained?

io.github.jdw2111/propraven is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.jdw2111/propraven MCP server under?

io.github.jdw2111/propraven declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

What did VerifyMCP test on the io.github.jdw2111/propraven MCP server?

VerifyMCP ran 16 checks on io.github.jdw2111/propraven, covering Malware scan, Known CVEs, Install scripts, Dependency health and 12 more. Endpoint Security and Transport & Reachability do not apply to an npm package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.