Search excessionlabs.ai, the site of Excession Labs, a security lab, and request a security test.
- Passed: Handshake
- Passed: Tools listed
- Passed: Updated recently
Median latency 71 ms · Last checked
Explore
Evidence for your next connection.
Independent measurements of remote MCP servers. Every observation has a timestamp.
Read-only probesMCP server · Data access / search
Search rentals, manage Requests and viewings, get availability updates and contact elron club.
3 failed · 8 not measured
Median of successful probes over 7 days
Share of countable probes over 30 days, including daily rollups. Auth challenges are excluded.
Tool definitions returned by this server
Independent monitoring
Outdated check
Last connection measurement is over 24 hours old. Current availability is unknown.
Last checked| Test area | Passed | Failed | Unmeasured |
|---|---|---|---|
ConnectionCan a client connect and discover tools? | 5 | 0 | 0 |
Reliability & speedDoes it respond consistently and quickly? | 0 | 0 | 4 |
Access & authenticationWhat is required to use this server? | 1 | 0 | 2 |
Tool qualityAre the tool definitions usable by an agent? | 3 | 1 | 0 |
Publisher identityCan the publisher be traced to its source? | 2 | 2 | 2 |
Unmeasured means there is not enough evidence to decide. How these checks work
Start using Elron Club Public Rentals
Choose your client, copy the configuration, then enable the server in your client’s MCP settings.
Run this command in your terminal, then restart Claude Code.
Claude Code
claude mcp add --transport http elron-club-public-rentals https://elron.club/api/agent/public/mcpCapabilities
Verify the uploaded object, content signature, session ownership, expiry, and exact application version before creating the protected document record.
DiscoveredCreate a 15-minute, exact-size and exact-content-type signed upload form for one email-verified application at its exact current version.
DiscoveredRead the customer-editable fields and current version of the email-verified request session. This result contains the session owner's personal information and must remain within that customer's context. Unverified, expired and revoked sessions are refused.
DiscoveredReturn an authenticated binary-download URL for one document owned by the email-verified session. The link contains a scoped credential: do not share or log it. Use documentId from applications.list_documents.
DiscoveredRead the privacy-minimized status and next actions for one scoped application session token.
DiscoveredList document metadata owned by the email-verified request session. Use documentId with applications.get_document or applications.remove_document. Returns no storage keys or employee data.
DiscoveredRemove one explicitly selected document from an editable, email-verified request draft, using documentId from applications.list_documents and the current version. Submitted requests remain locked; exact retries replay the receipt.
DiscoveredSelect a published apartment by rentalId from rentals.search within the customer's verified, editable inquiry context. Existing selection and stage rules are enforced by the website service; submitted requests cannot change apartments.
DiscoveredRecord the verified customer's explicit privacy, credit-check and truth-confirmation choices on an editable draft. Each boolean is the customer's actual choice; this does not submit a Request or sign a contract.
DiscoveredCreate or reuse a duplicate-safe applicant workspace for one published rental. Requires explicit current privacy consent and an idempotency key. Email verification is sent to the applicant; the tool never returns the verification URL.
DiscoveredSubmit one complete email-verified application for review using its exact version, explicit current credit-check and truth-confirmation consent, and a durable idempotency key.
DiscoveredUpdate bounded applicant, tenancy, billing and manual insurance-offer selection for one email-verified session using its exact current version and a durable idempotency key. Insurance choice is optional, never preselected or active cover; referral permission must be explicit. A household edit without a new insuranceSelection clears existing sharing permission and retains the package choice.
DiscoveredUpload one bounded PDF, JPEG, or PNG identity or company-registry document to an email-verified application using its exact version and a durable idempotency key.
DiscoveredRecord the customer's explicit loss of interest in the owning inquiry and cancel its arrangements through the same website workflow. Once a Request owns the journey, contact the team instead; this tool cannot cancel a contract or tenancy.
DiscoveredReturn a privacy-minimized booking confirmation only after the request has converted into the authoritative Stay workflow.
DiscoveredSend a customer-confirmed apartment inquiry, corporate housing request, resident support report, or general question through the same website intake. Resident support accepts only photo upload tokens from contact.upload_photo; it grants no access to tenancy records. May send the existing receipt email. Preserve one idempotencyKey when retrying.
DiscoveredUpload one customer-approved JPEG or PNG support photo, up to 5 MiB, as base64. The shared image sanitizer strips metadata and returns a single-use 30-minute upload token for contact.submit. Arbitrary URLs and storage keys are not accepted. Keep the idempotencyKey stable for retries.
DiscoveredReturn a secure signing URL only when the active signer invitation email matches the email-verified application session. Human verification, review, and signature remain in the signing flow.
DiscoveredRead the same approved localized article as the public website, including related answers and next steps. after-hours-emergencies also returns schedule-based office-hours status in Europe/Zurich, the observation time, the published schedule and Swiss emergency numbers. A message does not guarantee immediate attendance. Historical examples never override an individual signed agreement. Returns no apartment credentials, staff notes or individual case data.
DiscoveredSearch approved general DE/EN guidance for applicants, residents and coworking guests. Returns article IDs and canonical links. For emergency guidance and schedule-based office-hours status, call help.get with articleId after-hours-emergencies. Use rentals tools for current apartment availability and prices; personal tenancy details require the resident's own portal.
DiscoveredRead the current English or German company, corporate-housing, contact or legal information. Legal documents are information, not acceptance of terms. Personal tenancy facts require the resident portal.
DiscoveredActivate the email-verified draft as a viewing inquiry, using its current version and explicit customer confirmation. Existing inquiries are reused. Submitted requests cannot switch back to an inquiry.
DiscoveredRead one published role and its email application instructions using jobId from jobs.search. This does not send an application or make a hiring decision.
DiscoveredSearch the published elron club job openings. Returns jobId slugs for jobs.get; recruitment follows the published email application handoff.
DiscoveredRead published building and neighborhood information, media and apartment slugs using locationId from locations.search. Published rental details and pricing remain available through rentals.get.
DiscoveredFind published apartment buildings by city, region or name. Returns public locationId slugs for locations.get; no private property identifiers are returned.
DiscoveredReturn due and received payment truth for the scoped application. An approved human-action URL is returned only from an exact, unexpired provider session; no authorization URL is fabricated.
DiscoveredRequest the existing secure resident-portal access email for the customer's own address. Always returns the same generic acknowledgement, without disclosing tenancy existence, identity, access codes or links. Identity verification and personal tenant actions remain in the private resident portal.
DiscoveredWith explicit customer confirmation, accept one exact active quote and atomically claim a 30-minute request-owned availability hold. This does not create or sign a contract and does not authorize payment.
DiscoveredSnapshot customer-safe approved request terms into a 24-hour quote. The application must be submitted, internally approved, due-diligence positive, and solvency passed. This does not hold inventory.
DiscoveredRead one privacy-minimized quote and its live expiry/availability-hold state using the application session that owns it.
DiscoveredRead the published Swiss regions, local facts and canonical region pages. Use rentals.search for current inventory and availability.
DiscoveredCheck the current published availability state and earliest date for one rental. This does not create a hold or reservation.
DiscoveredReturn localized customer-safe apartment details, verified availability, duration pricing, deposit, included services, terms, eligibility, media, and inquiry/application links.
DiscoveredReturn current published monthly pricing by supported duration, parking, deposit, inclusions, payment method, and minimum-stay terms. Pricing is informational until a quote or hold is issued.
DiscoveredReturn a compact, actionable shortlist of published furnished apartments by location, availability, capacity, rooms, duration, and monthly rent. Defaults to 10 available or upcoming rentals; call rentals.get for complete details.
DiscoveredRead privacy-minimized hold, contract, signature, payment, reservation, or confirmation state for one application session.
DiscoveredCancel a future confirmed appointment or withdraw the customer's own pending proposal. Use appointmentId or proposalId from viewings.get_details, current request version, and explicit confirmation. This may send the existing cancellation communication.
DiscoveredDecline one or more exact pending elron club proposals from viewings.get_details in one version-bound, customer-confirmed operation. Only the selected proposals are changed; later offers are preserved.
DiscoveredRead session-owned proposals, availability windows, appointments, and post-viewing feedback versions. Includes only customer-facing information and viewing instructions currently released to this customer by the canonical owner; internal notes and unreleased or revoked contact details are excluded.
DiscoveredRead customer-safe viewing proposals and confirmed viewing state for one email-verified application session.
DiscoveredRecord the customer's explicit decision to continue the rental journey without a viewing. Uses the verified session, exact version and stable idempotency key; all separate Request approval and legal gates remain in force.
DiscoveredPropose one to five bounded future viewing slots from an email-verified application at its exact version using a durable idempotency key.
DiscoveredAsk elron club to arrange the resident contact for one SHARE_TENANT_CONTACT arrangement returned by viewings.get_details. Requires an owning verified inquiry, exact version and explicit customer confirmation. This never releases contact data or changes resident permission; read get_details later for instructions actually released by the team.
DiscoveredRecord PROCEED, NOT_INTERESTED, NEEDS_ALTERNATIVES or ANOTHER_VIEWING for one elapsed appointment from viewings.get_details. Requires the current request version, exact feedbackVersion and explicit customer confirmation. Proceeding does not submit a Request or create a booking.
DiscoveredAccept or decline one pending Elron Club proposal with explicit confirmation, an exact application version, and a durable idempotency key. Acceptance may send the existing viewing confirmation communication.
DiscoveredAdd one to five future availability windows to the verified inquiry. Times are ISO 8601 with timezone offsets; endAt must follow startAt. This does not confirm an appointment.
DiscoveredConfirm an older newsletter invitation only with its separate confirmation token and the customer's explicit consent. Current availability signup activates immediately; this tool never manufactures a confirmation token.
DiscoveredUse the opaque Manage regions token from an update email to read the selected regions and current version. Returns no internal contact or building identifiers.
DiscoveredAdd or remove one exact region, or unsubscribe from all updates, using an opaque Manage regions token, the version from waitlist.preferences.get and a stable UUID idempotency key. Adding a region requires explicit customer consent. Stale state fails unchanged; an uncertain result must be reconciled before another attempt.
DiscoveredActivate availability updates immediately after explicit customer consent for one or more of Basel, Bern, Luzern or Zürich. An exact public rentalId can select its canonical region; no apartment or building list is created. A new activation queues one welcome email; repeated signup does not repeat it. Only explicit customer action can restore the requested opted-out region. Signup creates no reservation or priority.
DiscoveredUse an opaque unsubscribe token from an elron club update email to stop all availability updates.
DiscoveredRecent measurements
| Checked | Result | Response | Tools |
|---|---|---|---|
| Connected | 664 ms | 52 |