GISDB
REMOTE · GISDB.IO
Browse county records and group parcels by recorded owner name. (mooshworks.com)
Available components
Last scanned (4 hours ago)
Scores higher than 58% of remote servers
Reachable. Last reached 5 Nov 2026.
Category CRM and Sales
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security66
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (gisdb_cancel_subscription). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability72
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2117 tokens (~141/item across 15 items; 15 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management30
- Stability check failed: schema churn in the 16 days we've observed: 4 tool removals, 0 breaking changes, 0 auth/transport breaks, 2 additions. See how to fix → Fail
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (80% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 15 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 16 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 26 to 30.
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 20 to 23.
- 1 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 16.
- 30 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 6 to 10.
- 28 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 0 to 3.
- 27 Oct 26 +1
- DNSSEC: fail → pass ▲ security
- The server rewrote its instructions, which are the text every model session reads security
- Tool “gisdb_cancel_subscription” rewrote its description, which is the text the model reads security
- Tool “gisdb_continue_search” rewrote its description, which is the text the model reads security
- Tool “gisdb_create_checkout” rewrote its description, which is the text the model reads security
- Tool “gisdb_get_lead_updates” rewrote its description, which is the text the model reads security
- Tool “gisdb_get_metadata” rewrote its description, which is the text the model reads security
- Tool “gisdb_get_order” rewrote its description, which is the text the model reads security
- Tool “gisdb_get_search” rewrote its description, which is the text the model reads security
- Tool “gisdb_guide_search” rewrote its description, which is the text the model reads security
- Tool “gisdb_list_saved_searches” rewrote its description, which is the text the model reads security
- Tool “gisdb_open_billing_portal” rewrote its description, which is the text the model reads security
- Tool “gisdb_save_search” rewrote its description, which is the text the model reads security
- Tool “gisdb_search_catalog” rewrote its description, which is the text the model reads security
- Tool “gisdb_search_records” rewrote its description, which is the text the model reads security
- Tool “gisdb_set_lead_updates” rewrote its description, which is the text the model reads security
- Tool “gisdb_start_search” rewrote its description, which is the text the model reads security
- 21 Oct 26 +3
- Stability: unverified → fail ▼ security
- Tool “gisdb_get_owner_portfolios” was removed ▼ security
- Tool “gisdb_get_stacked_leads” was removed ▼ security
- Tool “gisdb_pause_lead_updates” was removed ▼ security
- Tool “gisdb_resume_lead_updates” was removed ▼ security
- Schema quality: pass → fail ▼ functional
- Tool coverage: 14% → 100% ▲ functional
- Schema quality: good → excellent functional
- Server version: 0.4.0 → 0.4.1 functional
- Server version: 0.3.0 → 0.4.0 functional
- New tool “gisdb_search_records” functional
- New tool “gisdb_set_lead_updates” functional
- “gisdb_cancel_subscription” reworded the description of “order_id” cosmetic
- “gisdb_continue_search” reworded the description of “expected_revision” cosmetic
- “gisdb_continue_search” reworded the description of “idempotency_key” cosmetic
- “gisdb_continue_search” reworded the description of “input” cosmetic
- “gisdb_continue_search” reworded the description of “workflow_id” cosmetic
- “gisdb_create_checkout” reworded the description of “idempotency_key” cosmetic
- “gisdb_create_checkout” reworded the description of “offer_id” cosmetic
- “gisdb_create_checkout” reworded the description of “workflow_id” cosmetic
- “gisdb_create_checkout” reworded the description of “workflow_revision” cosmetic
- “gisdb_get_lead_updates” reworded the description of “workflow_id” cosmetic
- “gisdb_get_metadata” reworded the description of “county” cosmetic
- “gisdb_get_metadata” reworded the description of “state” cosmetic
- “gisdb_get_order” reworded the description of “order_id” cosmetic
- “gisdb_get_search” reworded the description of “workflow_id” cosmetic
- “gisdb_guide_search” reworded the description of “answers” cosmetic
- “gisdb_guide_search” reworded the description of “preview_limit” cosmetic
- “gisdb_guide_search” reworded the description of “preview_offset” cosmetic
- “gisdb_guide_search” reworded the description of “skipped_question_ids” cosmetic
- “gisdb_open_billing_portal” reworded the description of “order_id” cosmetic
- “gisdb_save_search” reworded the description of “expected_revision” cosmetic
- “gisdb_save_search” reworded the description of “idempotency_key” cosmetic
- “gisdb_save_search” reworded the description of “name” cosmetic
- “gisdb_save_search” reworded the description of “workflow_id” cosmetic
- “gisdb_search_catalog” reworded the description of “query” cosmetic
- “gisdb_search_catalog” reworded the description of “state” cosmetic
- “gisdb_start_search” reworded the description of “idempotency_key” cosmetic
- “gisdb_start_search” reworded the description of “input” cosmetic
- 20 Oct 26 63
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://gisdb.io/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=gisdb.io | CN=YE1,O=Let's Encrypt,C=US | 2 Oct 2026 | 31 Dec 2026 | ECDSA 256 | ECDSA-SHA384 | 634d055730af83b4afb70d4ac12330bb3ae |
| SANs: *.gisdb.io, gisdb.io | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of gisdb.io. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| io. | present | 38690 | 8 | Verified |
| gisdb.io. | present | 2371 | 13 | Verified |
| gisdb.io. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000; includeSubDomains; preload |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://untax.io; frame-src https://challenges.cloudflare.com; frame-ancestors 'none'; |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | no-referrer |
| permissions-policy | camera=(), microphone=(), geolocation=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://gisdb.io/mcp | Verified | 200 | |
| http (plaintext) | http://gisdb.io/mcp | HTTPS enforced |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
gisdb_cancel_subscription ~68
Cancel the selected subscription's renewal at the end of its paid period, only when the user asks. Returns confirmed renewal and access status. Pausing updates does not cancel renewal.
| Name | Type | Req | Description |
|---|---|---|---|
| order_id | string | yes | Exact order_id returned by checkout or an earlier order response for this connected account. |
Structured output declared, but exposes no named fields.
No examples provided.
gisdb_continue_search ~142
Continue this saved search with its latest revision and all previous answers and skips. Review any changed source or offer. Reuse a retry key only with identical arguments.
| Name | Type | Req | Description |
|---|---|---|---|
| expected_revision | integer | yes | Latest workflow revision returned for this search. Stale values are rejected. |
| idempotency_key | string | yes | Stable retry key for this exact request. Reuse it with identical arguments after an uncertain result; use a new key for changed arguments. |
| input | object | yes | Complete current search input, including accumulated explicit answers, skipped questions and the requested preview page. |
| workflow_id | string | yes | Exact account-owned workflow_id returned by the saved-search tools. |
Structured output declared, but exposes no named fields.
No examples provided.
gisdb_create_checkout ~175
Create a secure payment link for the selected reviewed records, lead or subscription offer. First show its price, coverage, update frequency, renewal and cancellation terms and get the user's purchase request. Card details stay on the hosted page. Reuse the original idempotency_key if the response is uncertain. Verify payment with gisdb_get_order.
| Name | Type | Req | Description |
|---|---|---|---|
| idempotency_key | string | yes | Stable retry key for this exact request. Reuse it with identical arguments after an uncertain result; use a new key for changed arguments. |
| offer_id | string | yes | Exact reviewed offer_id selected in the current workflow after its price, scope and terms were shown. |
| workflow_id | string | yes | Exact account-owned workflow_id returned by the saved-search tools. |
| workflow_revision | integer | yes | Exact workflow revision bound to the selected reviewed offer. |
Structured output declared, but exposes no named fields.
No examples provided.
gisdb_get_lead_updates ~77
Read this account's saved-search updates, delivery revision, source dates, check times and available downloads. Only a successful source check can establish no new records. Failed checks keep the last successful result. Subscription and delivery status are separate.
| Name | Type | Req | Description |
|---|---|---|---|
| workflow_id | string | yes | Exact account-owned workflow_id returned by the saved-search tools. |
Structured output declared, but exposes no named fields.
No examples provided.
gisdb_get_metadata ~84
Read a county records package's verified details, source coverage, missing facts and limits. Returns unavailable when no verified package exists. CAD compatibility and the current tax year are not assumed.
| Name | Type | Req | Description |
|---|---|---|---|
| county | string | yes | Explicit county name or five-digit county FIPS within the selected state. |
| state | string | yes | Explicit two-letter state code, such as TN or GA. |
No output schema declared.
No examples provided.
gisdb_get_order ~77
Check the same account's order after checkout or an uncertain result. Verifies payment, subscription, access and delivery separately. Use only its returned order_id. A payment link or confirmed payment does not prove files were delivered.
| Name | Type | Req | Description |
|---|---|---|---|
| order_id | string | yes | Exact order_id returned by checkout or an earlier order response for this connected account. |
Structured output declared, but exposes no named fields.
No examples provided.
gisdb_get_search ~59
Reopen this account's saved search and recheck its sources and offers. Keep the user's preferences and ask them to confirm any changed source or offer.
| Name | Type | Req | Description |
|---|---|---|---|
| workflow_id | string | yes | Exact account-owned workflow_id returned by the saved-search tools. |
Structured output declared, but exposes no named fields.
No examples provided.
gisdb_guide_search ~205
Find available property records, owner-name groups, lead packages or county downloads. Ask one next_question at a time. Accept unknown or skipped answers and resend previous answers and skipped IDs. Returns source coverage, previews and available offers. No sign-in or purchase required. Unsupported notices never fall back to assessment records.
| Name | Type | Req | Description |
|---|---|---|---|
| answers | object | – | Accumulated explicit answers for this search. Retain previous choices and omit unknown values; never invent an answer. |
| preview_limit | integer | – | Maximum number of preview rows to return, from 1 through 20; default 5. This does not limit the scope of a purchased package. |
| preview_offset | integer | – | Zero-based offset for supported property-record or lead-package previews, from 0 through 10000; default 0. Owner-name group previews do not support pagination. |
| skipped_question_ids | array | – | Question IDs explicitly skipped by the user. Resend them so those questions are not asked again. |
Structured output declared, but exposes no named fields.
No examples provided.
gisdb_list_saved_searches ~42
List this connected GISDB account's saved searches, with their workflow IDs and revisions. Reopen a search to check its source before calling it current.
Input schema present but exposes no named parameters.
Structured output declared, but exposes no named fields.
No examples provided.
gisdb_open_billing_portal ~76
Open secure billing for this account's order or subscription when the user asks. Payment details stay on the hosted page. Read the order after returning to confirm any change; opening the page alone confirms nothing.
| Name | Type | Req | Description |
|---|---|---|---|
| order_id | string | yes | Exact order_id returned by checkout or an earlier order response for this connected account. |
Structured output declared, but exposes no named fields.
No examples provided.
gisdb_save_search ~138
Name and save this account's search. Saving does not buy a subscription or start updates. Use the current revision and a stable retry key.
| Name | Type | Req | Description |
|---|---|---|---|
| expected_revision | integer | yes | Latest workflow revision returned for this search. Stale values are rejected. |
| idempotency_key | string | yes | Stable retry key for this exact request. Reuse it with identical arguments after an uncertain result; use a new key for changed arguments. |
| name | string | yes | User-chosen name for this retained search. Naming it does not purchase or activate updates. |
| workflow_id | string | yes | Exact account-owned workflow_id returned by the saved-search tools. |
Structured output declared, but exposes no named fields.
No examples provided.
gisdb_search_catalog ~92
Find county records packages and directory listings. Check each package's availability, price, source coverage and limits before buying. A county listing does not confirm lead, assessment or CAD coverage.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | – | Optional county-name filter. Released records catalogs also accept county FIPS. Omit to browse the state's catalog. |
| state | string | yes | Explicit two-letter state code, such as TN or GA. |
No output schema declared.
No examples provided.
gisdb_search_records ~317
Search recorded county property facts or repeated owner-name groups. Use property_records for address, parcel or owner-name searches, or owner_portfolios for unfiltered groups. Property records allow 1–250 rows and offsets through 1000000; groups allow 1–100 rows without query, signal or offset. JSON preview only. Names do not prove identity, authority, debt, equity, distress, cash purchases or intent to sell.
| Name | Type | Req | Description |
|---|---|---|---|
| county | string | yes | Explicit county name or slug within the selected state; no county is assumed. |
| format | string | – | Return a JSON preview. Downloadable CSV products require a separately reviewed purchase and verified delivery. |
| limit | integer | – | Maximum returned rows: 1–250 property records (default 25), or 1–100 owner-name groups (default 20). |
| mode | string | yes | Choose property_records to search retained property observations, or owner_portfolios for unfiltered repeated owner-name groups without pagination. |
| offset | integer | – | Zero-based row offset for property_records mode, from 0 through 1000000; default 0. Omit for owner_portfolios. |
| q | string | – | Address, parcel or retained owner-name label to search in property_records mode. Omit or send an empty string to browse all retained property records. |
| signal | string | – | Optional assessment-observation filter for property_records mode. No notice or motivation signals are supported. |
| state | string | yes | Explicit two-letter state code, such as TN or GA. |
No output schema declared.
No examples provided.
gisdb_set_lead_updates ~180
Pause or resume updates for this saved search when the user asks. Read updates first, then use its delivery revision and a stable retry key. Pausing does not cancel renewal. Resuming requires verified paid access and source checks and cannot override a newer pause.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Explicit requested delivery change: pause checks and delivery, or resume subject to entitlement and source checks. This never cancels subscription renewal. |
| expected_revision | integer | yes | Latest delivery_revision returned by gisdb_get_lead_updates. A stale value cannot override a newer pause or resume. |
| idempotency_key | string | yes | Stable retry key for this exact request. Reuse it with identical arguments after an uncertain result; use a new key for changed arguments. |
| workflow_id | string | yes | Exact account-owned workflow_id returned by the saved-search tools. |
Structured output declared, but exposes no named fields.
No examples provided.
gisdb_start_search ~103
Save this GISDB search to the connected account. Reuse the same idempotency_key if the result is uncertain. Does not buy, subscribe or send anything.
| Name | Type | Req | Description |
|---|---|---|---|
| idempotency_key | string | yes | Stable retry key for this exact request. Reuse it with identical arguments after an uncertain result; use a new key for changed arguments. |
| input | object | yes | Complete current search input, including accumulated explicit answers, skipped questions and the requested preview page. |
Structured output declared, but exposes no named fields.
No examples provided.
How do I install the GISDB MCP server?
GISDB is a hosted endpoint at https://gisdb.io/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · gisdb.io
claude mcp add --transport http mooshee-gisdb 'https://gisdb.io/mcp'
What is the GISDB MCP server?
GISDB is an MCP server listed in the public MCP registry as io.github.mooshee/gisdb. Browse county records and group parcels by recorded owner name. (mooshworks.com). This page covers its hosted endpoint (https://gisdb.io/mcp).
Is the GISDB MCP server safe to use?
GISDB scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the GISDB MCP server expose?
GISDB exposes 15 tools: gisdb_search_catalog, gisdb_get_metadata, gisdb_search_records, gisdb_guide_search, gisdb_start_search, and 10 more. Their descriptions and schemas cost roughly 1,835 tokens of context every time the server is loaded.
Does the GISDB MCP server require authentication?
No. We connected to GISDB without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the GISDB MCP server still maintained?
GISDB is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.