Name: Gisgp
Author: uponex

Gisgp MCP

GIS tools for AI agents: 65 free tools + 8 paid (hazard/site-scouting/GeoJSON export)

Tool-list grade A Remote · Streamable HTTP No auth needed 112 tools v1.3.0

No reviews yet by uponexGitHub The publisher’s own endpoint — this marketplace is not in the path

93/100

tool-list score

112

tools declared

remote

at its publisher

—

calls last 7d

What it does

GIS tools for AI agents: 65 free tools + 8 paid (hazard/site-scouting/GeoJSON export)

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http gisgp-mcp https://gisgp.com/mcp

# 2 — ask your agent for something these tools do
#   convert_coordinates, validate_geojson, geojson_to_csv and 109 more

Gisgp costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

uponex1 server

1 category

All 1 server

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Convert coordinate pairs between EPSG coordinate systems (max 1000 points). points: [[x, y], ...] in from_epsg axis order (lon/lat for EPSG:4326). Returns JSON: {"points": [[x, y], ...], "from_epsg": ..., "to_epsg": ...}.

Parameter	Type	Required	Notes
points	array	yes	—
from_epsg	integer	yes	—
to_epsg	integer	yes	—

Check whether a GeoJSON file/string is valid — catches broken geometry, malformed structure, self-intersections, and out-of-range coordinates before you try to use the file elsewhere (e.g. "is this GeoJSON valid", "why won't my GeoJSON load", "lint my GeoJSON", "check topology errors"). Validates RFC 7946 structure, topology, and WGS84 coordinate ranges. Returns a JSON report:

Parameter	Type	Required	Notes
geojson	string	yes	—

Convert GeoJSON to CSV/spreadsheet — one row per feature, properties as columns, geometry flattened into a column (e.g. "turn this GeoJSON into Excel/CSV", "I need a spreadsheet from these map features", "export GeoJSON as a table"). Returns the CSV as plain text.

Parameter	Type	Required	Notes
geojson	string	yes	—

Count features in an ArcGIS FeatureServer layer, optionally filtered by a WHERE clause. service_url: full layer URL ending in /FeatureServer/<n>. token: only for private layers. Returns JSON: {"ok": true, "count": ..., "name": ..., "geometry": ...}.

Parameter	Type	Required	Notes
service_url	string	yes	—
where	string	no	—
token	string	no	—

Extract coded value domains from an ArcGIS FeatureServer layer. Returns JSON: {"layer_name": ..., "domains": {field: {name, field_alias, codes}}}.

Parameter	Type	Required	Notes
service_url	string	yes	—
token	string	no	—

Inspect the field schema of an ArcGIS FeatureServer layer. Returns JSON: {layer_name, geometry_type, fields:[{name, alias, type, length, nullable, has_domain}]} — useful before importing/mapping data.

Parameter	Type	Required	Notes
service_url	string	yes	—
token	string	no	—

Check whether an ArcGIS FeatureServer layer is reachable and responsive. Returns JSON: {ok, ms (latency), name, geometry_type, field_count, record_count, capabilities, max_record_count}.

Parameter	Type	Required	Notes
service_url	string	yes	—
token	string	no	—

List the layers and tables of an ArcGIS FeatureServer/MapServer root. Point at a service root to enumerate its layers/tables, or at a single layer URL to describe it. Returns JSON: {is_server, layers:[{id, name, type}]}.

Parameter	Type	Required	Notes
service_url	string	yes	—
token	string	no	—

Compare the field schemas of two ArcGIS FeatureServer layers. Returns JSON diff: {added, removed, changed:[{field, diffs}], same, geometry_match, identical} — useful for QA before an import or migration.

Parameter	Type	Required	Notes
service_url_a	string	yes	—
service_url_b	string	yes	—
token_a	string	no	—
token_b	string	no	—

Convert a Shapefile ZIP (base64-encoded .zip with .shp/.dbf/.shx[/.prj]) to a GeoJSON FeatureCollection. Reprojects to WGS84 if a .prj says otherwise. Returns JSON: {geojson: {...}, reprojection_notice: str|null}.

Parameter	Type	Required	Notes
shapefile_zip_base64	string	yes	—

Convert Google Earth / Google My Maps KML (2.0–2.2) to GeoJSON — the common request when someone exported a map from Google Earth or Google My Maps and needs it in a format other GIS tools/APIs accept (e.g. "convert my Google Earth file to GeoJSON", "KML to GeoJSON"). Returns the GeoJSON FeatureCollection as a JSON string.

Parameter	Type	Required	Notes
kml	string	yes	—

Convert a GPS track/route file (GPX — from Garmin, Strava exports, hiking/cycling apps, waypoints) to GeoJSON (e.g. "convert my GPS track to GeoJSON", "GPX to GeoJSON", "import my Strava route"). Returns the GeoJSON FeatureCollection as a JSON string.

Parameter	Type	Required	Notes
gpx	string	yes	—

Convert GeoJSON to a GPX file — e.g. "export this as a GPS track", "GeoJSON to GPX for my Garmin", "make waypoints from this GeoJSON". Points become GPX waypoints; lines and polygon rings become GPX tracks (GPX has no native polygon type). Non-name properties are dropped — GPX has no generic attribute-table equivalent.

Parameter	Type	Required	Notes
geojson	string	yes	—

Convert a FlatGeobuf file (base64-encoded .fgb) to a GeoJSON FeatureCollection. FlatGeobuf is a cloud-native binary format with a built-in spatial index, used for fast HTTP-range-request streaming (e.g. deck.gl, MapLibre, QGIS cloud layers). Returns the GeoJSON FeatureCollection as a JSON string.

Parameter	Type	Required	Notes
flatgeobuf_base64	string	yes	—

Convert GeoJSON to FlatGeobuf (.fgb) — the cloud-native binary format with a built-in spatial index. FlatGeobuf holds one geometry type per file, so mixed point/line/polygon input is automatically split into one .fgb per category and returned inside a zip. Returns JSON: {flatgeobuf_base64|flatgeobuf_zip_base64: str, split: bool, split_categories: [str]|null}.

Parameter	Type	Required	Notes
geojson	string	yes	—

Convert a MapInfo TAB file set (base64-encoded .zip containing .tab + its .dat/.map/.id sidecar files) to a GeoJSON FeatureCollection. MapInfo TAB is the native format of MapInfo Pro — a multi-file format on disk, always uploaded as a zip. Returns the GeoJSON FeatureCollection as a JSON string.

Parameter	Type	Required	Notes
mapinfo_tab_zip_base64	string	yes	—

Convert GeoJSON to a MapInfo TAB file set, ready for MapInfo Pro. TAB is a multi-sidecar-file format (.tab/.dat/.id/.map) and single geometry type per file, like Shapefile — always returned as a zip, mixed point/line/polygon input is split into one .tab set per category. Returns JSON: {mapinfo_tab_zip_base64: str, split: bool, split_categories: [str]|null}.

Parameter	Type	Required	Notes
geojson	string	yes	—

Fetch actual feature records (attributes + geometry) from a FeatureServer layer. Free preview capped at 50 records (WHERE filter + chosen fields). Returns JSON: {returned, total, truncated, geojson, note}. Full unlimited export is a paid operation.

Parameter	Type	Required	Notes
service_url	string	yes	—
where	string	no	—
out_fields	string	no	—
token	string	no	—
limit	integer	no	—

Server-side aggregate stats on a numeric field of a FeatureServer layer. No records fetched — AGOL computes sum/avg/min/max/count (also stddev/var). Optional WHERE filter and group_by field. Returns JSON: {field, results:[...]}. Cheap way to answer "what's the average/total of field X" without an export.

Parameter	Type	Required	Notes
service_url	string	yes	—
field	string	yes	—
stats	string	no	—
where	string	no	—
group_by	string	no	—
token	string	no	—

Compute area (m²/km²), length (m/km), vertex count, centroid and bbox of GeoJSON. Metric measurements use an equal-area projection so area/length are real metres.

Parameter	Type	Required	Notes
geojson	string	yes	—

Change a GeoJSON's coordinate reference system (CRS/projection) — e.g. "reproject to Web Mercator", "convert WGS84 to UTM", "my coordinates are in the wrong CRS", "EPSG:4326 to EPSG:3857". Reprojects every geometry type between any two EPSG codes.

Parameter	Type	Required	Notes
geojson	string	yes	—
from_epsg	integer	yes	—
to_epsg	integer	yes	—

Reduce the number of vertices in GeoJSON geometry (Douglas-Peucker algorithm) — e.g. "simplify this polygon", "this shape has too many points", "reduce vertex count for faster rendering". Tolerance in degrees; lower = more detail kept.

Parameter	Type	Required	Notes
geojson	string	yes	—
tolerance	number	no	—

Round every coordinate to N decimal places to shrink a GeoJSON file's size — e.g. "my GeoJSON file is too big", "reduce coordinate precision", "strip excess decimal places". 6 decimals ≈ 11cm precision, plenty for most mapping use cases.

Parameter	Type	Required	Notes
geojson	string	yes	—
decimals	integer	no	—

Convert a CSV/spreadsheet with lat/lon (or X/Y) columns to GeoJSON — auto-detects the coordinate columns (e.g. "map this spreadsheet", "CSV with lat/lon to GeoJSON", "turn my Excel export into map points"). Returns a GeoJSON FeatureCollection as a JSON string.

Parameter	Type	Required	Notes
csv	string	yes	—

Convert GeoJSON to KML for Google Earth / Google My Maps (e.g. "open this in Google Earth", "GeoJSON to KML", "make this viewable in Google My Maps"). Returns the KML as plain text.

Parameter	Type	Required	Notes
geojson	string	yes	—

Convert GeoJSON to an Esri Shapefile ZIP — the format ArcGIS Desktop Pro/QGIS/most legacy GIS software still expects (e.g. "I need a shapefile for ArcGIS Pro", "GeoJSON to SHP", "convert for QGIS import"). Returns JSON: {shapefile_zip_base64, warnings}.

Parameter	Type	Required	Notes
geojson	string	yes	—

Convert a GPS track file (GPX) directly to KML for Google Earth — e.g. "open my Garmin/Strava track in Google Earth", "GPX to KML".

Parameter	Type	Required	Notes
gpx	string	yes	—

Convert a Google Earth/My Maps KML file directly to an Esri Shapefile ZIP — e.g. "Google Earth file to shapefile for ArcGIS", "KML to SHP". Returns JSON: {shapefile_zip_base64, warnings}.

Parameter	Type	Required	Notes
kml	string	yes	—

Convert a Google Earth/My Maps KML file directly to GPX — waypoints from Points, tracks from Lines/Polygons — e.g. "KML to GPX for my Garmin", "load this map on my GPS" (2026-09-03, completes the reverse of the existing gpx_to_kml).

Parameter	Type	Required	Notes
kml	string	yes	—

Convert a Shapefile ZIP (base64-encoded .zip with .shp/.dbf/.shx[/.prj]) directly to GPX — points become waypoints, lines/polygons become tracks (2026-09-03). Returns GPX 1.1 XML as plain text.

Parameter	Type	Required	Notes
shapefile_zip_base64	string	yes	—

Convert a GPS track file (GPX) directly to an Esri Shapefile ZIP — waypoints become points, tracks/routes become lines (2026-09-03). Returns JSON: {shapefile_zip_base64, warnings}.

Parameter	Type	Required	Notes
gpx	string	yes	—

Convert a CSV with latitude/longitude columns directly to GPX waypoints (2026-09-03) — e.g. "these coordinates to a GPX for my GPS". Column names are auto-detected (lat/latitude/y, lon/lng/longitude/x).

Parameter	Type	Required	Notes
csv	string	yes	—

Convert a GPS track file (GPX) directly to CSV (2026-09-03) — waypoints get LATITUDE/LONGITUDE columns, tracks/routes get a GEOMETRY_WKT column instead.

Parameter	Type	Required	Notes
gpx	string	yes	—

Convert a WKT (Well-Known Text) geometry string — the format PostGIS/SQL geometry columns print by default — to GeoJSON (e.g. "this came from a PostGIS query", "WKT to GeoJSON", "parse this POLYGON(...) string").

Parameter	Type	Required	Notes
wkt	string	yes	—

Convert a GeoJSON geometry (or a Feature's geometry) to WKT — the format needed to insert geometry into PostGIS/SQL (e.g. "I need this for a PostGIS INSERT", "GeoJSON to WKT", "geometry as WKT string").

Parameter	Type	Required	Notes
geojson	string	yes	—

Convert an AutoCAD DXF file's contents to GeoJSON — e.g. "convert this DXF to GeoJSON", "AutoCAD drawing to GIS format", "DXF export from Civil 3D to GeoJSON", "extract only the UTILITIES layer from this DXF". POINT/LINE/LWPOLYLINE/POLYLINE/ARC/CIRCLE/ELLIPSE/SPLINE/HATCH convert (curves tessellated into LineString/Polygon), TEXT/MTEXT become points with a text property, and

Parameter	Type	Required	Notes
dxf	string	yes	—
layer	string	no	—

Convert GeoJSON to an AutoCAD DXF file — e.g. "export this GeoJSON to DXF for AutoCAD", "GIS data to CAD format", "convert to .dxf for Civil 3D". Points become DXF POINT entities; lines and polygon rings become LWPOLYLINE entities. A feature's properties.layer (if present) is written back as the DXF entity's layer (group code 8), defaulting to layer "0" otherwise.

Parameter	Type	Required	Notes
geojson	string	yes	—

List the distinct DXF layer names used in a drawing — e.g. "what layers does this DXF have", "list layers before I extract one". Real CAD exports organize entities into named layers (BOUNDARY, UTILITIES, TEXT, ...); use the result with dxf_to_geojson's layer param to pull out just one. Returns a JSON array of layer name strings.

Parameter	Type	Required	Notes
dxf	string	yes	—

Reproject a DXF drawn in a local/arbitrary CAD coordinate system into real-world coordinates — e.g. "this DXF isn't in real coordinates, fix it", "georeference this site plan", "I know 2 points on this drawing's real location, convert the rest". Give exactly 2 control points as a JSON array: '[{"local":[x,y],"real":[lon,lat]}, {"local":[x,y],"real":[lon,lat]}]' — a 2-point simi

Parameter	Type	Required	Notes
dxf	string	yes	—
control_points	string	yes	—

PAID (150 credits) — render a DXF drawing to a one-page PDF site-plan report (vector plot + entity-type breakdown + layer list, base64- encoded PDF) — e.g. "make a PDF of this site plan", "DXF to PDF report". No basemap (DXF coordinates are usually local drawing units, not real lon/lat) — use georeference_dxf first if you need a real-world-referenced report. Requires Authorizat

Parameter	Type	Required	Notes
dxf	string	yes	—
title	string	no	—

Grade an ArcGIS FeatureServer layer A–F across 5 categories (schema quality, data completeness, performance, maintenance, configuration). Returns JSON: {grade, score, categories:[{key, label, score, note}], archetype, insight, percentile, share_url} — share_url is a public scorecard page you can send to a human. token: only for private layers (never stored in the scorecard).

Parameter	Type	Required	Notes
service_url	string	yes	—
token	string	no	—

Full one-call QA report of an ArcGIS FeatureServer layer: health (latency, record count, capabilities) + field schema + coded domains + summary counts. One call replaces separate health/fields/domains lookups. Returns JSON: {name, geometry_type, health, fields, domains, summary}.

Parameter	Type	Required	Notes
service_url	string	yes	—
token	string	no	—

Scan an ArcGIS FeatureServer layer for common problems: missing ObjectID, disabled query, stale data, all-null fields, features without geometry. Sample-based (first 200 records). Returns JSON: {layer_name, issues:[{severity, code, message}], issue_count, sample_size, note}.

Parameter	Type	Required	Notes
service_url	string	yes	—
token	string	no	—

Publish a GeoJSON FeatureCollection as a live, shareable map page on gisgp.com. Returns JSON: {url, expires_at} — url is a public interactive map a human can open in a browser (free links live 30 days). Use it to hand off results of a GIS workflow visually instead of pasting raw GeoJSON.

Parameter	Type	Required	Notes
geojson	string	yes	—
name	string	no	—

Ready-to-paste <iframe> embed code for a live interactive map — thin wrapper around share_map (same live page, same 30-day TTL), for embedding directly in a website/dashboard rather than sharing a link. Returns JSON: {ok, embed_html, url, expires_at}.

Parameter	Type	Required	Notes
geojson	string	yes	—
name	string	no	—
width	string	no	—
height	string	no	—

Buffer every feature by a distance in METRES (negative shrinks). Geodesically accurate at any latitude (each feature is buffered in a local equidistant projection). Returns JSON {ok, distance_m, geojson} where geojson is a FeatureCollection of buffer polygons.

Parameter	Type	Required	Notes
geojson	string	yes	—
distance_m	number	yes	—

Merge overlapping/adjacent geometries into one (optionally grouped by a property field by → one dissolved feature per distinct value). Returns JSON {ok, by, group_count, geojson}.

Parameter	Type	Required	Notes
geojson	string	yes	—
by	string	no	—

Get the center point of each polygon/line feature — e.g. "find the center of each parcel", "convert polygons to points for labeling", "centroid of each feature". Properties are kept. Returns JSON {ok, geojson} — a FeatureCollection of points.

Parameter	Type	Required	Notes
geojson	string	yes	—

Draw the smallest polygon that wraps around all input features (a convex hull) — e.g. "draw a boundary around these points", "find the outer perimeter of my data", "convex hull of these locations". Returns JSON {ok, geojson} — a single polygon.

Parameter	Type	Required	Notes
geojson	string	yes	—

Combine two GeoJSON FeatureCollections with a boolean set operation. op: intersection | difference (a minus b) | symmetric_difference | union. Each side is unioned into one geometry first, then the operation is applied. Returns JSON {ok, op, geojson} — empty geojson means no overlap, not an error.

Parameter	Type	Required	Notes
geojson_a	string	yes	—
geojson_b	string	yes	—
op	string	no	—

Attach properties from every B feature that satisfies a spatial predicate to each A feature (as a _matches list). predicate: intersects | within | contains | touches | crosses | overlaps. Returns JSON {ok, predicate, match_count, geojson}.

Parameter	Type	Required	Notes
geojson_a	string	yes	—
geojson_b	string	yes	—
predicate	string	no	—

For each feature in A, find the nearest feature in B by centroid-to- centroid geodesic distance. Attaches _nearest properties and _nearest_distance_m. Returns JSON {ok, geojson}.

Parameter	Type	Required	Notes
geojson_a	string	yes	—
geojson_b	string	yes	—

Repair invalid geometries (self-intersections, bad rings) via GEOS make_valid. Already-valid geometries are left untouched. Returns JSON {ok, fixed_count, feature_count, geojson}.

Parameter	Type	Required	Notes
geojson	string	yes	—

Compare two GeoJSON FeatureCollections — added/removed/changed features. Matched by an id_field property if given, else by array position (exact structural comparison, not topological equals). Returns JSON {ok, added, removed, changed, added_count, removed_count, changed_count, unchanged_count}.

Parameter	Type	Required	Notes
geojson_a	string	yes	—
geojson_b	string	yes	—
id_field	string	no	—

Suggest the correct UTM EPSG code to project a WGS84 lon/lat into for accurate metric measurements (buffer/area/distance). Returns JSON {ok, epsg, utm_zone, hemisphere, name, warning}.

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

Convert a WGS84 lon/lat + zoom level to Slippy Map (XYZ) tile x/y, that tile's lon/lat bbox, and its Bing quadkey. Returns JSON {ok, zoom, x, y, tile_bbox, quadkey}.

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—
zoom	integer	yes	—

Get the bounding box (min/max rectangle) around each feature — e.g. "get the bounding box of this shape", "bbox for each feature", "rectangular extent of my geometry". Properties are kept. Returns JSON {ok, geojson}.

Parameter	Type	Required	Notes
geojson	string	yes	—

Smallest-area rectangle wrapping all input features combined — can be tilted to fit tighter than a straight bounding box (e.g. "tightest rectangle around this data", "minimum bounding rectangle", "oriented bounding box"). Returns JSON {ok, geojson}.

Parameter	Type	Required	Notes
geojson	string	yes	—

Divide space into regions closest to each input point (Voronoi diagram) — e.g. "find the service area for each location", "which points are closest to which store", "Voronoi/Thiessen polygons". Non-point features use their centroid. Needs at least 2 points. Returns JSON {ok, cell_count, geojson}.

Parameter	Type	Required	Notes
geojson	string	yes	—

Complete one-call QA report: A-F grade + full audit (health/fields/ domains/summary) + issue scan, merged into one response — replaces 3 separate calls (grade_service + audit_service + find_layer_issues). Returns JSON: {ok, grade, score, categories, archetype, insight, percentile, share_url, audit: {name, health, fields, domains, summary}, issues, issue_count}.

Parameter	Type	Required	Notes
service_url	string	yes	—
token	string	no	—

Complete one-call GeoJSON health check: validate + auto-repair invalid geometry + stats (area/length/vertices) + bbox envelope, merged — replaces 4 separate calls (validate_geojson + fix_geometry + geometry_stats + envelope_geojson). Returns JSON: {ok, valid, errors, warnings, fixed_count, stats, envelope, geojson} where geojson is the (possibly auto-fixed) input.

Parameter	Type	Required	Notes
geojson	string	yes	—

Get the ground elevation (metres above sea level) at a coordinate — e.g. "what's the elevation here", "is this point in a flood-risk lowland", "elevation at this address". Via Open-Meteo (Copernicus DEM GLO-90, no key, free, ~90m resolution). Returns JSON: {ok, lon, lat, elevation_m, source}.

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

Daily historical weather for a point/date range via Open-Meteo's ERA5-based archive (no key, free, data back to 1940). Dates are YYYY-MM-DD. Returns JSON: {ok, daily: {time, <variables>...}, source}.

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—
start_date	string	yes	—
end_date	string	yes	—
variables	string	no	—

Land cover class at a WGS84 point via ESA CCI Land Cover 2018 (ArcGIS Living Atlas ImageServer, no key, 300m resolution). Returns JSON: {ok, class_code, class_label, source}. NOTE 2026-07-26: gated separately (mcp_layer1_landcover, Off pending live smoke-check) — swapped from the earlier ESA WorldCover WMS source, which was confirmed dead (being phased out). This ArcGIS REST i

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

Reverse-geocode a WGS84 point to country/region/locality via OSM Nominatim (no key, free — fair-use rate limited, best-effort). Returns JSON: {ok, display_name, country, country_code, region, locality, source}.

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

Forward-geocode a free-text address to lon/lat. Default: OSM Nominatim (no key, free, fair-use rate limited) — the complement to analyze_location's reverse geocode. Optional agol_token: route through Esri's own World Geocoding Service instead for more authoritative matches — uses YOUR OWN AGOL credentials/quota, not GISGP's (no extra charge either way, no GISGP account needed f

Parameter	Type	Required	Notes
address	string	yes	—
agol_token	string	no	—

Move a WGS84 point by a geodesic distance (metres) along a compass bearing (0=N, 90=E, 180=S, 270=W). Pure computation, no external API. Returns JSON: {ok, lon, lat, origin_lon, origin_lat, distance_m, bearing_deg, source}.

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—
distance_m	number	yes	—
bearing_deg	number	yes	—

Detect whether [x, y] pairs are [lon, lat] or [lat, lon] — resolves a genuinely common real-world confusion (one of the most-viewed GIS StackExchange questions ever, 550k+ views). Certain when any value exceeds ±90 (only longitude can); honestly reports 'inconclusive' otherwise, never a fabricated guess. Pure computation, no external API. Returns JSON: {ok, order, confidence, n

Parameter	Type	Required	Notes
points	array	yes	—

Best-guess candidate CRS for raw [x, y] coordinates with no metadata (e.g. a shapefile with a missing .prj) — real demand signal (79k+ views on GIS StackExchange). Genuinely ambiguous by nature — returns ranked candidates with an honest 'not a certain identification' caveat, never a single confident answer. Pure computation, no external API. Returns JSON: {ok, x_range, y_range,

Parameter	Type	Required	Notes
points	array	yes	—

Parse ANY single coordinate string a human might paste into WGS84 lat/lon — decimal degrees with any separator or an EU decimal comma, DMS (42°41'51.7"N 23°19'18.9"E), DDM / GPS style (N 42° 41.535'), NMEA (4241.535,N,02319.314,E), UTM with a zone/band (34T 583000 4727000), MGRS (34TFN8300027000), British grid refs (TQ 30 80), Geohash, full Plus Codes, and Google/Apple/Bing/OSM

Parameter	Type	Required	Notes
text	string	yes	—

Express one WGS84 point in every common notation at once: decimal degrees, DMS, DDM, UTM (zone/band/easting/northing), MGRS and USNG, British National Grid reference (inside GB only), Geohash, Plus Code, Web Mercator metres, the ArcGIS Online "lon, lat" form, the best local UTM EPSG code, plus ready-to-open Google Maps / Street View / Google Earth / Apple / Bing / OpenStreetMap

Parameter	Type	Required	Notes
lat	number	yes	—
lon	number	yes	—
mgrs_precision	integer	no	—

Render a GeoJSON FeatureCollection/Feature to a static PNG map image (base64 data URL) — for embedding in reports/emails/documents, unlike share_map's interactive live page. basemap: 'topo', 'streets', or 'satellite'. Reuses the exact rendering path already used inside PDF map reports, no new map-rendering logic. Optional agol_token: for a single-Point input, renders through Es

Parameter	Type	Required	Notes
geojson	string	yes	—
accent	string	no	—
basemap	string	no	—
width	integer	no	—
height	integer	no	—
agol_token	string	no	—

Electric grid infrastructure proximity at a US point: nearby substations + transmission lines within 10 miles (community ArcGIS mirror of HIFLD data — proximity indicator, not a certified survey). No key needed. Returns JSON: {ok, substations: {count, nearest, source}, transmission_lines: {count, volt_classes, owners, source}}.

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

One-call solar/wind site-scouting indicator: terrain + land cover + 1-year solar/wind climate averages + grid proximity, combined from GISGP's existing free primitives (no new external source). No key needed. Returns JSON: {ok, terrain, land_cover, solar_wind, grid_proximity}. Not a substitute for a professional feasibility study.

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

Natural gas interstate/intrastate transmission pipeline proximity at a US point (EIA/HIFLD, 32,892 segments). Substitute for proprietary local-utility "call before you dig" data — covers major transmission pipelines only, NOT local distribution lines. Not a substitute for calling 811 before excavation. No key needed. Returns JSON: {ok, count, pipeline_types, operators, source,

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

US protected/conservation area proximity via USGS PAD-US (public domain, commercial-use OK — unlike Protected Planet/WDPA, whose API explicitly forbids commercial-entity use). Reports whether the point falls inside/near (2 mile radius) a federally-tracked protected area: name, managing agency, designation type, public access. US-only. Returns JSON: {ok, count, areas, source, no

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

Nearest USGS real-time stream/river gauge to a point (US rivers and streams only): live streamflow (ft3/s) and gauge height (ft), reported honestly as provisional USGS data — no derived flood-risk score, since USGS does not publish per-site flood-stage thresholds through this API. First real-time (not static/historical) primitive in the catalog. No key needed. Returns JSON: {ok

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

Keyword search across ArcGIS Hub Open Data — real public FeatureServer/MapServer datasets from government/organization ArcGIS Online portals worldwide. Returns real service_url values usable directly with query_features/count_features/rest_explore/compare_schemas. Free, no API key. Not a universal open-data search (ArcGIS Hub coverage only — see tool note). Returns JSON: {o

Parameter	Type	Required	Notes
query	string	yes	—
limit	integer	no	—

One-call EV charging site-scouting indicator: grid proximity (power for fast-charging) + land cover + locality context, combined from GISGP's existing free primitives. No key needed. Returns JSON: {ok, grid_proximity, land_cover, location, physically_unsuitable}.

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

One-call cell tower site-scouting indicator: grid proximity + terrain elevation (line-of-sight proxy) + land cover, combined from GISGP's existing free primitives. No key needed. Returns JSON: {ok, grid_proximity, terrain, land_cover, physically_unsuitable}.

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

Bulk solar/wind site screener — evaluates up to 25 candidate points (each {"lon": ..., "lat": ...}) and returns only the top_n, ranked by average daily solar radiation. Candidates with unsuitable land cover (urban/water/snow) or no substation nearby are filtered out, not silently scored low. No invented composite score. No key needed. Returns JSON: {ok, evaluated, excluded_coun

Parameter	Type	Required	Notes
candidates	array	yes	—
top_n	integer	no	—

Real-time active wildfire proximity at a point via NASA FIRMS (VIIRS satellite hotspot detections, last 2 days) + electric grid exposure (transmission lines are a documented wildfire-ignition- liability factor). No key needed — GISGP holds its own free NASA FIRMS key server-side. Two separate honest indicators, no fabricated combined risk score. Returns JSON: {ok, active_fires,

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

Real driving distance + duration between two points. Default: OSRM (public demo instance, no key — fair-use limited, not a production SLA). Optional agol_token: route through Esri's own World Route Service instead — uses YOUR OWN AGOL credentials/quota, not GISGP's (no extra charge either way, no GISGP account needed for this option). Returns "no_route" honestly when no driving

Parameter	Type	Required	Notes
origin_lon	number	yes	—
origin_lat	number	yes	—
dest_lon	number	yes	—
dest_lat	number	yes	—
agol_token	string	no	—

FREE — quote a paid tool's cost WITHOUT executing it or charging the wallet (call this before assess_property_hazard etc.). units = candidate/item count for per-unit-priced tools (currently only rank_hazard_safe_sites — pass the number of candidates you intend to submit); ignored (treated as 1) for every flat-priced tool. Returns JSON: {ok, tool_name, units, credits, eur_esti

Parameter	Type	Required	Notes
tool_name	string	yes	—
units	integer	no	—

FREE — check your own MCP credits wallet balance (the same account paid tools like assess_property_hazard charge against). Requires Authorization: Bearer <api_key> — an agent can call this on its own, no browser/dashboard needed. Returns JSON: {ok, balance, eur_equivalent} or {ok: false, error} if no API key was provided.

No parameter schema on file.

PAID (200 credits) — multi-source US property hazard indicator: USGS seismic risk (required), plus best-effort FEMA disaster declaration history (state, last 10 years) and NOAA real-time active severe weather alerts at the point. Requires Authorization: Bearer <api_key> and a sufficient credits balance — top up at https://gisgp.com/billing/mcp-credits/topup. Use estimate_cost f

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

PAID (200 credits PER CANDIDATE, max 25 candidates/call) — bulk seismic- risk screener. Runs assess_property_hazard's seismic check under the hood for each [lon, lat] candidate and returns only the top_n ranked by lowest real seismic risk (PGA). Not a full multi-hazard ranking — ranked by ONE real, single-source metric only (matches this project's no-invented- composite-score s

Parameter	Type	Required	Notes
candidates	array	yes	—
top_n	integer	no	—

PAID (200 credits PER PROPERTY, max 25 properties/call) — bulk physical climate-risk disclosure input for a real-estate/asset portfolio (SEC climate disclosure rule / EU CSRD physical-risk reporting). Runs assess_property_hazard for each [lon, lat] property and returns honest aggregate counts (properties with FEMA disaster history, properties with active NOAA alerts) alongside

Parameter	Type	Required	Notes
properties	array	yes	—

PAID (400 credits) — checks whether two supposedly-redundant sites (e.g. two "backup" suppliers/warehouses/data centers) are actually independent: real geodesic distance between them + each site's own multi-source hazard profile (seismic + FEMA + NOAA) side by side, plus any FEMA disaster incident types they share in the last 10 years. No invented "redundancy score" — the calle

Parameter	Type	Required	Notes
site_a	array	yes	—
site_b	array	yes	—

PAID (100 credits) — US Inflation Reduction Act "energy community" bonus tax credit qualification lookup for a renewable energy project site. Checks both DOE/NETL-published qualifying pathways (coal-mine- closure/coal-plant-retirement adjoining tracts, and MSA/non-MSA fossil- fuel-employment + above-average-unemployment areas) — a point qualifies if either matches. Reports qual

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

PAID (300 credits) — data center site-scouting composite: grid proximity (power availability), multi-source hazard (seismic + FEMA + NOAA, required — same contract as assess_property_hazard), land cover, and a year of temperature history (cooling-load proxy). No invented overall suitability score — each source reported honestly. Requires Authorization: Bearer <api_key> and suff

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

PAID (100 credits) — reforestation/afforestation site-scouting composite: terrain, land cover (flags already-forested/urban/water/snow as unsuitable), and a year of precipitation history (tree-viability proxy). All-free-primitive composite, priced for the bulk-screening convenience (carbon-offset/land-screening use case), no invented "sequestration score". Requires Authorizatio

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

PAID (50 credits) — elevation PROFILE along a line, not a single point: pass points=[[lon,lat],…] (up to 100) or start=[lon,lat] + end=[lon,lat] with samples (2-100, evenly spaced). Returns every point's elevation and distance plus min/max, total gain/loss, net change, mean and max segment slope. For "how steep is this route", "line-of-sight terrain between two towers", "elevat

Parameter	Type	Required	Notes
points		no	—
start		no	—
end		no	—
samples	integer	no	—

PAID (30 credits) — open-data discovery with the metadata an agent needs BEFORE querying: up to 50 ArcGIS Hub results (free tool: 10) and, for the top 25, each layer's geometry type, field list, record count and query capability — so you can pick the right layer in one call instead of probing each service_url. Same coverage as the free discover_open_geodata (ArcGIS Hub Open Dat

Parameter	Type	Required	Notes
query	string	yes	—
limit	integer	no	—
enrich	boolean	no	—

PAID (100 credits) — nearby FAA-registered vertical obstructions (towers, stacks, wind turbines) at a US point, for telecom/tower-siting due diligence (e.g. "is there anything tall already near this proposed tower site", "does a 250ft tower here need FAA notification"). Source: official FAA Digital Obstacle File (652k+ records nationwide). If proposed_height_agl_ft is given, fl

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—
proposed_height_agl_ft	number	no	—

PAID (300 credits) — master due-diligence report for a point: wraps assess_property_hazard (seismic + FEMA + NOAA, required) plus grid proximity, land cover, and reverse-geocoded locality — all in one call. No invented overall "site score" across sources. Requires Authorization: Bearer <api_key> and sufficient credits balance. Use estimate_cost first to quote. Returns JSON: {ok

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

PAID (150 credits) — render an ad-hoc GeoJSON FeatureCollection to a one-page PDF report (static map + property table, base64-encoded PDF). Separate from the web app's own PDF Builder (AGOL-service-tied, quota- gated there) — this is for GeoJSON an agent already has in hand. Requires Authorization: Bearer <api_key> and sufficient credits balance. Returns JSON: {ok, pdf_base64,

Parameter	Type	Required	Notes
geojson	string	yes	—
title	string	no	—
accent	string	no	—

PAID (80 credits) — convert a GeoJSON FeatureCollection to an Excel workbook (.xlsx, base64-encoded). Point geometries get LATITUDE/LONGITUDE columns; other geometry types get a GEOMETRY_WKT column. Separate from the web app's own Excel export (AGOL-service-tied, quota-gated there). Requires Authorization: Bearer <api_key> and sufficient credits balance. Returns JSON: {ok, xlsx

Parameter	Type	Required	Notes
geojson	string	yes	—

PAID (40 credits) — one-call file migration: convert a raw file to GeoJSON, then optionally reproject and simplify, then round coordinates. Replaces 2-4 separate free tool calls (convert + reproject + simplify + round) an agent would otherwise chain by hand — see estimate_cost's "replaces" field. Requires Authorization: Bearer <api_key> and sufficient credits balance. inpu

Parameter	Type	Required	Notes
input_format	string	yes	—
data	string	yes	—
to_epsg	integer	no	—
simplify_tolerance	number	no	—
round_decimals	integer	no	—

PAID (150 credits) — fetch ALL records from a live FeatureServer layer (no 50-record preview cap), auto-repair invalid geometries (GEOS make_valid), and scan for common problems, in one call. Replaces an uncapped query_features call (itself a paid-only capability) plus fix_geometry plus find_layer_issues. Requires Authorization: Bearer <api_key> and sufficient credits balance.

Parameter	Type	Required	Notes
service_url	string	yes	—
where	string	no	—
token	string	no	—

PAID (120 credits) — fetch ALL records from a live FeatureServer layer once, then export the same data as Shapefile + CSV + GeoJSON + KML + Excel in a single ZIP (base64-encoded). Replaces an uncapped fetch plus 4 separate format-conversion calls. Requires Authorization: Bearer <api_key> and sufficient credits balance. Returns JSON: {ok, feature_count, truncated, zip_base64, f

Parameter	Type	Required	Notes
service_url	string	yes	—
where	string	no	—
token	string	no	—

PAID (100 credits) — migration-readiness report comparing two FeatureServer layers: schema diff, coded-value domains, and field types for both. Replaces compare_schemas + extract_domains×2 + check_field_types×2. Requires Authorization: Bearer <api_key> and sufficient credits balance. Returns JSON: {ok, schema_diff, domains_a, domains_b, fields_a, fields_b, ready, blockers}

Parameter	Type	Required	Notes
service_url_a	string	yes	—
service_url_b	string	yes	—
token_a	string	no	—
token_b	string	no	—

PAID (30 credits PER ADDRESS, max 10 addresses/call) — batch geocode + enrich. For each address: forward-geocodes to lon/lat (free fallback chain: OSM Nominatim -> Photon -> US Census), then reverse-geocodes for country/region/locality context and classifies land cover at that point. Replaces 3 separate calls per address: geocode_address + analyze_location + classify_land_cover

Parameter	Type	Required	Notes
addresses	array	yes	—

PAID PER DELIVERY (30 credits each time it fires, NOT at creation — free to create/cancel) — the only MCP tool that exposes GISGP's core recurring-export product to agents: creates a schedule that re-exports a FeatureServer layer on its own and POSTs the file straight to your own webhook_url, no email/web UI account needed beyond the API key. Reuses the same scheduler that runs the

Parameter	Type	Required	Notes
service_url	string	yes	—
format	string	yes	—
webhook_url	string	yes	—
frequency	string	no	—
where	string	no	—
run_hour	integer	no	—
weekday	integer	no	—
monthday	integer	no	—
token	string	no	—

FREE — cancel a schedule created by bundle_create_export_schedule. Only the API key that created it can cancel it. Returns JSON: {ok} or {ok: false, error}.

Parameter	Type	Required	Notes
schedule_id	string	yes	—
token	string	no	—

PAID via x402 (USDC on Base Sepolia testnet, ~$0.20/call) — no GISGP account or API key needed, the agent pays directly on-chain. Multi-source US property hazard indicator (USGS seismic + FEMA disaster history + NOAA active alerts), same underlying data as assess_property_hazard. Returns JSON: {ok, pga_percent_g, hazard_note, source, disaster_history_10y, active_weather_alerts}.

Parameter	Type	Required	Notes
lon	number	yes	—
lat	number	yes	—

GISGP Lite ($3 a month, or $1 once for 24 hours) — pass the api_key of that account (or Authorization: Bearer). contour lines for a box bbox=[west, south, east, north] (degrees) or a GeoJSON polygon, from Copernicus 30 m (source="cop30", worldwide, up to 100 km² per box) or USGS 10 m ("usgs10", US, up to 25 km²). interval in units ("m" or "ft"; omit for an automatic int

Parameter	Type	Required	Notes
bbox		no	—
polygon		no	—
interval		no	—
units	string	no	—
source	string	no	—
format	string	no	—
major_every	integer	no	—
crs	string	no	—
api_key	string	no	—

GISGP Lite ($3 a month, or $1 once for 24 hours) — pass the api_key of that account (or Authorization: Bearer). US Public Land Survey System township, range, section and meridian at a point (BLM CadNSDI). Returns JSON {ok, found, township, range, section, meridian, plssid, …} or {ok, found: false, note}.

Parameter	Type	Required	Notes
lat	number	yes	—
lon	number	yes	—
api_key	string	no	—

GISGP Lite ($3 a month, or $1 once for 24 hours) — pass the api_key of that account (or Authorization: Bearer). a legal description → where it is: q like "T2N R3E Sec 14", "NW¼ SE¼ Sec 12 T3N R4W", "Township 1 North, Range 2 East" or BLM-coded "1460N 0920W SEC 8"; state the two-letter code (tried in every PLSS state when empty). Returns JSON {ok, results: [{label, state, lat, l

Parameter	Type	Required	Notes
q	string	yes	—
state	string	no	—
api_key	string	no	—

GISGP Lite ($3 a month, or $1 once for 24 hours) — pass the api_key of that account (or Authorization: Bearer). which coordinate reference system puts these easting/northing rows where they belong. lines are text rows such as "P-7 690183.66, 4729859.76" (up to 1,000); say roughly where with country ("Kenya") or lat/lon. Returns JSON {ok, confidence: high|medium|low|none, ca

Parameter	Type	Required	Notes
lines	array	yes	—
country	string	no	—
lat		no	—
lon		no	—
api_key	string	no	—

GISGP Lite ($3 a month, or $1 once for 24 hours) — pass the api_key of that account (or Authorization: Bearer). height above mean sea level of one point from Copernicus GLO-30 (30 m), read from the public elevation model (GLO-90 fallback). Returns JSON {ok, elevation_m, source, resolution_m, credit}; elevation_m is null at sea. For a free, coarser answer use get_terrain_profile.

Parameter	Type	Required	Notes
lat	number	yes	—
lon	number	yes	—
api_key	string	no	—

GISGP Lite ($3 a month, or $1 once for 24 hours) — pass the api_key of that account (or Authorization: Bearer). convert one GIS file between formats with the full site converter: input shapefile (.zip), KML/KMZ, GPX, CSV, GeoJSON, GPKG, FlatGeobuf, MapInfo TAB (.zip, source="mapinfo-tab"), FileGDB (.zip, source="filegdb"), DXF or DWG; to geojson | shapefile | kml | kmz | gpx | cs

Parameter	Type	Required	Notes
filename	string	yes	—
data_base64	string	yes	—
to	string	yes	—
source	string	no	—
source_epsg	string	no	—
target_epsg	string	no	—
api_key	string	no	—

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install Gisgp or to call it, at any volume.

ATool-list grade · score 93 / 100

Release 1.3.0 · scanned 20 Oct 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 6 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digeste5f93c978192ce28271969455d7a9250deda57eb64f9512696a81fc62e5d15ea

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
convert_coordinates	no tags
validate_geojson	no tags
geojson_to_csv	no tags
count_features	no tags
extract_domains	no tags
check_field_types	no tags
check_service_health	no tags
rest_explore	no tags
compare_schemas	no tags
shapefile_to_geojson	no tags
kml_to_geojson	no tags
gpx_to_geojson	no tags
geojson_to_gpx	no tags
flatgeobuf_to_geojson	no tags
geojson_to_flatgeobuf	no tags
mapinfo_tab_to_geojson	no tags
geojson_to_mapinfo_tab	no tags
query_features	untrusted-input	untrusted-input: keyword "fetch"
query_statistics	no tags
geometry_stats	no tags
reproject_geojson	no tags
simplify_geometry	no tags
reduce_precision	no tags
csv_to_geojson	no tags
geojson_to_kml	no tags
geojson_to_shapefile	no tags
gpx_to_kml	no tags
kml_to_shapefile	no tags
kml_to_gpx	no tags
shapefile_to_gpx	no tags
gpx_to_shapefile	no tags
csv_to_gpx	no tags
gpx_to_csv	no tags
wkt_to_geojson	no tags
geojson_to_wkt	no tags
dxf_to_geojson	no tags
geojson_to_dxf	no tags
list_dxf_layers	no tags
georeference_dxf	no tags
dxf_to_pdf_report	no tags
grade_service	no tags
audit_service	no tags
find_layer_issues	no tags
share_map	no tags
embed_map_snippet	no tags
buffer_geojson	no tags
dissolve_geojson	no tags
centroids_geojson	no tags
convex_hull_geojson	no tags
overlay_geojson	no tags
spatial_join_geojson	no tags
nearest_features_geojson	no tags
fix_geometry	no tags
geojson_diff	no tags
epsg_suggest	no tags
tile_math	no tags
envelope_geojson	no tags
minimum_rotated_rectangle	no tags
voronoi_geojson	no tags
full_service_audit	no tags
geometry_health_report	no tags
get_terrain_profile	no tags
get_climate_history	no tags
classify_land_cover	no tags
analyze_location	no tags
geocode_address	no tags
offset_coordinates	no tags
detect_coordinate_order	no tags
guess_crs_from_coordinates	no tags
parse_coordinate	no tags
format_coordinate	no tags
generate_static_map_image	no tags
assess_grid_exposure	no tags
assess_renewable_site	no tags
assess_pipeline_proximity	no tags
assess_protected_area_proximity	no tags
get_river_flow_status	no tags
discover_open_geodata	no tags
assess_ev_charging_site	no tags
assess_telecom_site	no tags
rank_renewable_sites	no tags
assess_wildfire_risk	no tags
calculate_route	no tags
estimate_cost	no tags
check_wallet_balance	no tags
assess_property_hazard	no tags
rank_hazard_safe_sites	no tags
assess_portfolio_climate_disclosure	no tags
assess_supply_chain_redundancy	no tags
assess_energy_community_credit	no tags
assess_datacenter_site	no tags
assess_reforestation_site	no tags
get_elevation_profile	no tags
discover_open_geodata_pro	no tags
assess_airspace_obstruction_proximity	no tags
assess_site_due_diligence	no tags
export_geojson_to_pdf	no tags
export_geojson_to_excel	no tags
bundle_migrate_convert	no tags
bundle_export_fixed	untrusted-input	untrusted-input: keyword "fetch"
bundle_export_multi_format	untrusted-input	untrusted-input: keyword "fetch"
bundle_migration_readiness	no tags
bundle_geocode_enrich	no tags
bundle_create_export_schedule	untrusted-inputexternal-sink	untrusted-input: keyword "download"; external-sink: keyword "webhook", parameter "webhook"
cancel_export_schedule	no tags
assess_property_hazard_x402	no tags
generate_contours	untrusted-input	untrusted-input: keyword "download"
plss_lookup	no tags
plss_find	no tags
guess_crs	no tags
get_elevation	no tags
convert_file	untrusted-input	untrusted-input: keyword "download"

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

flow-1

Untrusted input can drive an external action even though no sensitive source is exposed.

Supply chain and provenance

Integrityfirst-seen

Surface digeste5f93c978192ce28

Scanned2026-10-20

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

Where are you running it?

Tool surface

Release history

Gisgp MCP

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also