Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

WhereToLive London open data

REMOTE · WHERETOLIVE.XYZ

London postcodes and districts from official open data: prices, crime, schools, rents, commutes

Available components

72 Trust /100

Last scanned (14 hours ago)

Scores higher than 63% of remote servers

Reachable. Last reached 18 Oct 2026.

Category Maps and Location

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security80
Transport & Reachability100
Schema Quality & AI Usability60
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2208 tokens (~315/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management7
  • Stability observed for 2 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 18 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

  • 17 Oct 26 0
    • Stability: unverified → 0.03 ▲ functional
  • 16 Oct 26 71

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 18 Oct 2026 · Probed https://wheretolive.xyz/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=wheretolive.xyz CN=WE1,O=Google Trust Services,C=US 21 Sept 2026 20 Dec 2026 ECDSA 256 ECDSA-SHA256 280894aaa850dac013dcaf575bf9388f
SANs: wheretolive.xyz, *.wheretolive.xyz
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of wheretolive.xyz. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
xyz. present 3599, 18130 8, 8 Verified
wheretolive.xyz. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains
content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' https://api.mapbox.com https://challenges.cloudflare.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://api.mapbox.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.mapbox.com https://*.tiles.mapbox.com https://events.mapbox.com https://tiles.openfreemap.org https://*.supabase.co wss://*.supabase.co https://challenges.cloudflare.com https://cloudflareinsights.com; worker-src 'self' blob:; frame-src 'self' https://challenges.cloudflare.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; upgrade-insecure-requests; report-uri /api/security/csp-report; report-to csp-endpoint
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin
permissions-policy camera=(), microphone=(), payment=(), usb=(), browsing-topics=()

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://wheretolive.xyz/mcp Verified 200
http (plaintext) http://wheretolive.xyz/mcp HTTPS enforced 301 https://wheretolive.xyz/mcp
MCP tools · 7 exposed · ~1,837 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
check_london_postcode ~197

Open-data facts at one full London postcode (e.g. "E17 4QH"): the Environment Agency flood zone at its centre; whether its centre is inside a conservation area, listed building outline, Article 4 direction area or tree preservation order area (planning.data.gov.uk, with "unknown" where the borough publishes no data); its Census neighbourhood's police.uk crime rate per 1,000 residents against London, Index of Multiple Deprivation decile and housing tenure; the nearest state schools with their own Ofsted grade and the nearest stations, by straight-line distance; door-to-door commute minutes from its postcode sector to 12 work hubs; council tax bands for its borough; and its district page. Every block says which area it describes; a single home can differ.

NameTypeReqDescription
postcodestringyesA full London postcode, e.g. "E17 4QH" or "sw112ar".

No output schema declared.

No examples provided.

compare_london_districts ~184

Side-by-side open-data figures for 2 to 6 London postcode districts and London as a whole: median sold price of existing houses, residential crime per 1,000 residents, Outstanding state schools, share of postcodes in flood zone 3, Band D council tax, the main borough's ONS official rent, the share of residents in England's most deprived 20% of areas, Census 2021 tenure, and optionally commute minutes to one hub.

NameTypeReqDescription
bedroomsstring–Bedrooms for the official rent column: all (default), 1, 2, 3 or 4+.
districtsarrayyes2 to 6 outward codes or postcodes, e.g. ["E17", "E10", "N17"].
hubstring–Add typical commute minutes to this work hub.

No output schema declared.

No examples provided.

find_london_district ~129

Resolve a place name, borough, Tube or rail station, outward code or full postcode to the London postcode district(s) the other tools take. Returns up to 15 matches with their borough(s) and how each matched. To screen districts on prices, commute, crime, schools, flood or rent, use find_london_districts instead.

NameTypeReqDescription
querystringyesA place ("Walthamstow", "Clapham"), borough ("Hackney"), station ("Clapham Junction"), outward code ("SW1") or postcode ("E17 4QH").

No output schema declared.

No examples provided.

find_london_districts ~611

Find the London postcode districts that meet several open-data criteria at once: a maximum Land Registry median house price, a maximum commute to a work hub, crime at or below the London rate or under a rate per 1,000 residents, a minimum number of Outstanding state schools, a maximum share of postcodes in flood zone 3, a maximum ONS official borough rent for a number of bedrooms, and an optional borough. Each match carries the figures that qualified it, with sample sizes, and its page URL; districts that cannot be checked for lack of data are counted, not hidden. When nothing matches, it returns the districts that miss by only one criterion, closest first, with by how much, and names the criterion that rules out most of them. Houses only: flat medians are not compared across districts (retirement flats are not identified in Land Registry data).

NameTypeReqDescription
bedroomsstring–Bedrooms for the rent criterion: all (default), 1, 2, 3 or 4+.
boroughstring–Only districts with postcodes in this London borough, e.g. "Lewisham".
crime_at_or_below_london_rateboolean–Only districts whose residential crime per 1,000 residents is at or below London as a whole.
hubstring–Work hub for the commute criterion or sort. canary-wharf (Canary Wharf), city-of-london (Bank / Liverpool Street / Moorgate), kings-cross (King's Cross), westminster (Westminster), oxford-circus (Oxf…
limitinteger–Districts to return (default 20, max 50).
max_commute_minutesinteger–Only districts whose typical door-to-door minutes to hub are at or under this (needs hub).
max_crimes_per_1000_residentsnumber–Only districts at or under this many residential-relevant crimes per 1,000 residents a year.
max_flood_zone_3_pctnumber–Only districts with at most this % of postcodes in Environment Agency Flood Zone 3.
max_median_house_price_gbpinteger–Only districts whose median sold price of existing houses (12 months) is at or under this.
max_official_rent_gbp_pcminteger–Only districts whose borough(s) have an ONS official average monthly rent at or under this (see bedrooms).
min_outstanding_schoolsinteger–Only districts with at least this many state schools currently graded Outstanding by Ofsted.
sort_bystring–Order of the matches (lowest first, Outstanding schools most first). Default: the first criterion given.

No output schema declared.

No examples provided.

get_commute_times ~201

Typical door-to-door public transport minutes (TfL Journey Planner, 09:00 weekday departure) from a London postcode district to London work hubs, quickest first, with the district's quickest sector. Hubs: canary-wharf (Canary Wharf), city-of-london (Bank / Liverpool Street / Moorgate), kings-cross (King's Cross), westminster (Westminster), oxford-circus (Oxford Circus), london-bridge (London Bridge), paddington (Paddington), stratford (Stratford), hammersmith (Hammersmith), victoria (Victoria), waterloo (Waterloo), farringdon (Farringdon).

NameTypeReqDescription
districtstringyesA London postcode district (outward code) such as "E17" or "SW11", or a full postcode such as "E17 4QH".
hubstring–One hub only; leave out for all 12.

No output schema declared.

No examples provided.

get_district_profile ~210

Open-data profile of one London postcode district: HM Land Registry median sold prices of existing flats and houses (12 months, with sales counts and London figures) and five years of yearly medians, police.uk residential crime per 1,000 residents against London, Ofsted grades of its state schools with the Outstanding ones named, the share of its postcodes in Environment Agency flood zones 2 and 3, council tax bands and ONS official rents for its borough(s), and who lives there (Census 2021 tenure and age, and the share of residents in England's most deprived areas on the Index of Multiple Deprivation 2025). Each block has its window, definition, caveats and source, plus a sentence that keeps them together, and the district page URL to cite.

NameTypeReqDescription
districtstringyesA London postcode district (outward code) such as "E17" or "SW11", or a full postcode such as "E17 4QH".

No output schema declared.

No examples provided.

rank_london_districts ~305

London postcode districts ranked on one open-data measure: lowest_crime_rate (police.uk residential crime per 1,000 residents), cheapest_houses (Land Registry median sold price of existing houses; flats are not ranked), most_outstanding_schools (Ofsted), or shortest_commute (needs hub). Optional borough filter, commute cut-off and reversed order (most expensive, highest crime, longest commute first). Ranks are London-wide.

NameTypeReqDescription
boroughstring–Only districts with postcodes in this London borough, e.g. "Lewisham".
hubstring–For shortest_commute: the work hub. canary-wharf (Canary Wharf), city-of-london (Bank / Liverpool Street / Moorgate), kings-cross (King's Cross), westminster (Westminster), oxford-circus (Oxford Circ…
limitinteger–Rows to return (default 10, max 50).
max_minutesinteger–For shortest_commute: only districts at or under this many minutes.
metricstringyesWhat to rank on.
reverseboolean–Worst first: highest crime, most expensive, fewest Outstanding schools, longest commute.

No output schema declared.

No examples provided.

Install

How do I install the WhereToLive London open data MCP server?

WhereToLive London open data is a hosted endpoint at https://wheretolive.xyz/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · wheretolive.xyz

# add to Claude Code
claude mcp add --transport http xyz-wheretolive-london-open-data 'https://wheretolive.xyz/mcp'
Common questions

What is the WhereToLive London open data MCP server?

WhereToLive London open data is an MCP server listed in the public MCP registry as xyz.wheretolive/london-open-data. London postcodes and districts from official open data: prices, crime, schools, rents, commutes. This page covers its hosted endpoint (https://wheretolive.xyz/mcp).

Is the WhereToLive London open data MCP server safe to use?

WhereToLive London open data scores 72 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the WhereToLive London open data MCP server expose?

WhereToLive London open data exposes 7 tools: find_london_district, find_london_districts, check_london_postcode, get_district_profile, get_commute_times, and 2 more. Their descriptions and schemas cost roughly 1,837 tokens of context every time the server is loaded.

Does the WhereToLive London open data MCP server require authentication?

No. We connected to WhereToLive London open data without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the WhereToLive London open data MCP server still maintained?

WhereToLive London open data is still listed as active in the MCP registry. We last reached this channel on 18 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.