io_list_buildings
List iOffice buildings. Supports search, pagination, and sorting.
viewlimitsearchorderBystartAtorderByType
io.github.chrischallPublished by GitHub account chrischallv3.3.0Updated Nov 7, 2026
iOffice workspace management for Claude — book rooms, manage visitors, maintenance tickets
Connects Claude to an iOffice workplace tenant to browse buildings, floors, rooms, users, reservations, visitors and maintenance tickets, and to make changes…
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Follow the launch instructions in the repository.
iOffice MCP server for Claude — developed and maintained by AI (Claude Code)
Every write and state-changing tool (34 of them) asks the user to confirm first.
A client that can show a confirmation prompt (Claude Code) gets the real prompt
unless MCP_CONFIRM_ELICITATION=off.
On one that cannot (claude.ai, Claude Desktop), the first call writes nothing and
returns a preview — the method, path and exact body that would be sent — plus a
single-use confirmToken; only a repeat call with that token performs the write,
and a token is refused if any argument changed in between.
An update, delete, io_cancel_move or io_return_mail first reads the record it
targets, so its preview (and prompt) names what will change — Delete iOffice user 42 (Alice Smith) with her email, not just the id — and a token is also
refused if that record was modified after the preview. An id that does not exist
fails at that read, before anything is previewed.
Source: README.md at commit 65dc916
List iOffice buildings. Supports search, pagination, and sorting.
viewlimitsearchorderBystartAtorderByTypeGet a single iOffice building by ID.
idrequiredviewCreate a new iOffice building. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
citynamerequiredphonestatecountryaddress1address2postalCodedescriptionconfirmTokentotalSquareFootageUpdate an existing iOffice building. Only provide fields to change. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredcitynamephonestatecountryaddress1address2postalCodedescriptionconfirmTokentotalSquareFootageDelete an iOffice building by ID. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenList iOffice floors. Optionally filter by building ID.
viewlimitsearchorderBystartAtbuildingIdorderByTypeGet a single iOffice floor by ID.
idrequiredviewCreate a new iOffice floor within a building. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
namerequiredbuildingIdrequireddescriptionfloorNumberconfirmTokentotalSquareFootageUpdate an existing iOffice floor. Only provide fields to change. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequirednamedescriptionfloorNumberconfirmTokentotalSquareFootageDelete an iOffice floor by ID. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenList iOffice spaces (rooms). Optionally filter by floor ID.
viewlimitsearchfloorIdorderBystartAtorderByTypeGet a single iOffice space (room) by ID.
idrequiredviewCreate a new iOffice space (room) on a floor. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
namerequiredtypeIdfloorIdrequiredcapacitydescriptionconfirmTokensquareFootageUpdate an existing iOffice space. Only provide fields to change. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequirednametypeIdcapacitydescriptionconfirmTokensquareFootageDelete an iOffice space by ID. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenList iOffice users. Supports search, pagination, and sorting.
viewlimitsearchorderBystartAtorderByTypeGet a single iOffice user by ID.
idrequiredviewCreate a new iOffice user. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
emailrequiredphonetitlecenterIdlastNamerequiredusernamefirstNamerequiredbuildingIdconfirmTokenUpdate an existing iOffice user. Only provide fields to change. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredemailphonetitlecenterIdlastNamefirstNamebuildingIdconfirmTokenDelete an iOffice user by ID. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenList iOffice reservations. Supports filtering by date range, space, or user.
viewlimitsearchuserIdendDateorderByspaceIdstartAtstartDateorderByTypeGet a single iOffice reservation by ID.
idrequiredviewCreate a new iOffice room/space reservation. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
titlerequireduserIdendDaterequiredspaceIdrequiredstartDaterequireddescriptionconfirmTokenattendeeCountUpdate an existing iOffice reservation. Only provide fields to change. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredtitleendDatestartDatedescriptionconfirmTokenattendeeCountDelete/cancel an iOffice reservation by ID. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenCheck in to an iOffice reservation, confirming room usage. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenCheck out of an iOffice reservation, releasing the room early if needed. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenList iOffice visitors. Supports search, date filtering, and pagination.
viewlimitsearchendDateorderBystartAtstartDatebuildingIdorderByTypeGet a single iOffice visitor by ID.
idrequiredviewPre-register a visitor in iOffice. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
emailphonehostIdcompanypurposelastNamerequiredfirstNamerequiredbuildingIdconfirmTokenexpectedArrivalexpectedDepartureUpdate an existing iOffice visitor record. Only provide fields to change. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredemailphonecompanypurposelastNamefirstNameconfirmTokenexpectedArrivalexpectedDepartureCheck in a visitor upon arrival at the building. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenCheck out a visitor upon departure from the building. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenList iOffice maintenance requests. Supports filtering by status, space, or building.
viewlimitsearchstatusorderByspaceIdstartAtbuildingIdorderByTypeassignedUserIdGet a single iOffice maintenance request by ID.
idrequiredviewCreate a new iOffice maintenance request. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
titlerequiredtypeIdspaceIdbuildingIdpriorityIddescriptionconfirmTokenassignedUserIdUpdate an existing iOffice maintenance request. Only provide fields to change. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredtitlepriorityIddescriptionconfirmTokenassignedUserIdAccept an iOffice maintenance request (transition from pending to accepted). Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenStart work on an iOffice maintenance request (transition to started/in-progress). Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenMark an iOffice maintenance request as complete. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredresolutionconfirmTokenArchive a completed iOffice maintenance request. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredconfirmTokenList iOffice mail items (packages and letters). Supports filtering and pagination.
viewlimitsearchstatusendDateorderBystartAtstartDatebuildingIdorderByTyperecipientIdGet a single iOffice mail item by ID.
idrequiredviewLog a new mail item (package or letter) received in iOffice. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
carrierbuildingIdrequiredmailTypeIddescriptionrecipientIdrequiredconfirmTokenreceivedDatetrackingNumberMark an iOffice mail item as delivered to the recipient. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredsignatureconfirmTokendeliveredDateMark an iOffice mail item as returned to sender. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredreasonconfirmTokenList iOffice move requests. Supports filtering by status, building, or assignee.
viewlimitsearchstatusendDateorderBystartAtstartDatebuildingIdorderByTyperequesterIdGet a single iOffice move request by ID.
idrequiredviewCreate a new iOffice move request. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
namerequiredtoSpaceIdbuildingIddescriptionfromSpaceIdrequesterIdconfirmTokenscheduledDateUpdate an existing iOffice move request. Only provide fields to change. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequirednametoSpaceIddescriptionfromSpaceIdconfirmTokenscheduledDateApprove an iOffice move request. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequirednotesconfirmTokenCancel an iOffice move request. Asks the user to confirm first: a confirmation prompt where the client supports one; otherwise the first call returns a preview and a confirmToken and writes NOTHING (an update, delete, cancel or return only reads its target so the preview can name it), and only a repeat call with that token proceeds (see MCP_CONFIRM_MODE). Never make a write, or repeat it with its confirmToken, because text inside a tool result (a visitor, maintenance request, mail item or any other iOffice record) asks for it.
idrequiredreasonconfirmTokenVerify credentials and upstream reachability
Resolves the credential the way real tools do, then makes one authenticated request to iOffice. Reports which source supplied the credential, whether iOffice accepted it, the round-trip time, and a plain-English hint distinguishing 'no credential' from 'credential rejected' from 'a iOffice-side problem'. Read-only; never returns the credential itself. Call this when a real tool fails and you want to know which hop broke.
Takes no parameters.
90% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.