# Square Metre (private EXAMPLE DATA preview)

> Independent Dublin small-office finder. All offices, prices, coordinates, move-in availability, photos and viewing slots are EXAMPLE DATA, not real listings or bookings.

Square Metre is independent. Free to you. We pass your brief to the broker or operator who fits, and they may pay us a referral fee.

Nothing is automatically forwarded. No emails, calendar invites, analytics, external AI or third-party requests are sent. This site has not been published or connected to a domain. HTML retains noindex while it is a private preview; robots allow named agents to fetch it. Preview access controls can still restrict external crawlers.

- [Browse and search](https://squaremetre.ie/)
- [Privacy, draft 4 November 2026](https://squaremetre.ie/privacy)
- [OpenAPI 3.1](https://squaremetre.ie/openapi.json)
- [Plugin manifest](https://squaremetre.ie/.well-known/ai-plugin.json)
- [Sitemap](https://squaremetre.ie/sitemap.xml)
- [Complete agent documentation](https://squaremetre.ie/llms-full.txt)

## REST
GET https://squaremetre.ie/api/spaces?people=8&area=Docklands&budget=6000
GET https://squaremetre.ie/api/spaces/a
GET https://squaremetre.ie/api/spaces/a/slots
POST https://squaremetre.ie/api/viewings
Public JSON with CORS Access-Control-Allow-Origin: *. No authentication or cookies. No API exposes stored contact details.

## MCP
POST https://squaremetre.ie/mcp
Stateless Streamable HTTP JSON-RPC, JSON responses; no session cookie or session id required.
Headers: Content-Type: application/json; Accept: application/json, text/event-stream.
Initialize first, send notifications/initialized, then tools/list or tools/call using the negotiated MCP-Protocol-Version.
Tools: search_spaces, get_space, get_viewing_slots, request_viewing.

## Consent and safety
request_viewing / POST /api/viewings requires explicit boolean consent: true and valid name, email, phone and selections. Obtain the person's informed agreement to storage and passing the brief to the fitting broker/operator under /privacy before sending. Never infer consent, auto-tick it, or substitute a string "true". Use synthetic contacts only for this example preview.
Missing or false consent is rejected. A successful response is only {"saved":true}, not a booking confirmation. Data is saved only in the app PostgreSQL database for 12 months, then deleted by internal retention cleanup. Never send personal data in search URLs.