Next free-source huntWe check for new free data every weekday.
OSINTMCP serverFirst audited Nov 13, 2026

Mapsource OpenStreetMap & Geospatial APIs

OpenStreetMap queries, maps/styles, search, routing, terrain, analysis, pipelines, and rendering.The vendor's description, from its MCP Registry listing.

Passed, with 1 warningAudited Nov 13, 2026
  • Warning: 3 of 14 tools do not say whether they can change things.

Nothing failed, but there is something to know or fix. Public audit: we connect as an AI client would, list the tools and check what they say. We do not run them. How we audit

Does it work?
YesConnected in 568 ms.
Sign-up?
None neededIt answered without any account or key.
Can it change things?
YesSome tools say they can change things, and others do not say.
Endpointhttps://api.mapsource.io/mcp

Website Streamable HTTP · protocol 2025-11-25 · server version 0.2.0

What we checked, the evidence, and the tools it offers.

What we checked

Security

  • Passed: Connections are encrypted (HTTPS).

  • Passed: No hidden instructions found in tool text.

Safety labels

  • Warning: 3 of 14 tools do not say whether they can change things.

    MCP lets a server label each tool as read-only or destructive, so clients can ask the user before risky calls. Unlabelled tools are treated as able to change things.

    • service_status
    • overpass_query
    • find_features
  • Note: 2 tools are labelled as able to change things.

    Expected for tools that send, write or buy. Your AI client should ask before calling them.

    • geo_jobs
    • geo_style

Tools

  • Passed: 14 tools listed.

  • Passed: Every tool describes its inputs with a valid schema.

Protocol

  • Passed: The MCP handshake works (Streamable HTTP).

  • Passed: Protocol version 2025-11-25 (latest).

  • Passed: Unknown requests are refused.

Connection

  • Passed: The server responds.

Tools (14)

As the server describes them. The labels are the server's own: it says whether each tool only reads or can change things.

  • service_statusRead Overpass engine readiness, dataset timestamp, billing state, and x402 payment mode. Public. Use geo_data with operation status for the full subsystem report.Doesn't say
  • basemap_catalogList raster and vector tile templates, source zoom ranges, dataset snapshots, and attribution. The catalog is public; tile requests require a subscription key.Read-only
  • elevationSample terrain at lat/lon. elevationMeters is clamped to zero; sampledMeters retains the raw model elevation. belowSeaLevel identifies negative samples and bathymetryTile references the source raster…Read-only
  • geo_dataRead service status, basemap catalog, point elevation, contours, usage, and metrics. Status includes subsystem availability and replication lag. Elevation returns surface and raw model heights. Metri…Read-only
  • geo_jobsDurable JSON Overpass background queries: submit with an idempotency key, list owned jobs, inspect progress, or cancel work. Polling and downloads use no quota units. Operations: submit, list, status…Can change things
  • geo_styleConfigure semantic basemap styles. Operations: explain and schema retrieve public definitions; intent generates a proposal; preview compiles changes; save, list, revisions, diff, and delete manage pr…Can change things
  • geo_renderRender a static PNG map from a center and zoom or bounding box. Supports GeoJSON overlays, result handles, and up to 50 labeled markers. Dark and light styles use raster rendering; other preset or pr…Read-only
  • geo_analyzeMeasure or transform geometry using buffer, centroid, bbox, area, length, distance, intersect, union, difference, contains, intersects, nearest, simplify, or convex. Inputs accept GeoJSON, coordinate…Read-only
  • geo_searchSearch places and retrieve geographic entities. Use lookup for local address, business, brand and landmark search with soft map-focus bias, strict house numbers, source IDs and ambiguity reporting. U…Read-only
  • geo_navigateNavigation operations: route, matrix, isochrone, map_match, snap, and optimize. Route accepts 2–10 waypoints and optional elevation profiles. Matrix supports up to 625 pairs. Map matching accepts up…Read-only
  • routeCalculate a turn-by-turn route between 2–10 waypoints. Supported costing: auto, bicycle, pedestrian, truck, motor_scooter, and bus. Returns GeoJSON, distance, duration, and maneuvers. Set elevation t…Read-only
  • isochroneCalculate reachable-area polygons from a coordinate for up to four travel-time bands. Returns GeoJSON for catchment, coverage, and accessibility analysis. Requires a subscription key.Read-only
  • overpass_queryExecute bounded Overpass QL over OSM nodes, ways, relations, tags, geometry, areas, metadata, and spatial selectors. Historical attic queries are unsupported. Requires a subscription key or authorize…Doesn't say
  • find_featuresFind cafes, restaurants, buildings, parks, schools, hospitals, transit stops, drinking water, or trails within a bounding box up to 0.5 degrees per axis. Returns OSM geometry and tags, subject to the…Doesn't say

Audit history

  1. Nov 13Warnings

What we sent

Every request in this audit, with the answer and how long it took. We never send credentials and never call a tool.

RequestAnswerTime
initializeHTTP 200568 ms
initializedHTTP 202315 ms
tools/listHTTP 200620 ms
unknown-methodHTTP 200243 ms

Run this server, or disagree with the result?

Fix the issue and it shows in the next weekly audit, or email us to ask for a re-audit or to dispute a finding. Read how we audit for what each check means.