Safe-only API and MCP
AbuDhaBuy exposes source-labelled official facts, aggregate statistics, and AbuDhaBuy-created derived metrics. Row-level transactions and listing-provider-derived intelligence are excluded on every plan; Enterprise plan availability alone does not override that boundary.
Official open-data inputs
ADREC and Tawtheeq-derived products attribute Abu Dhabi Real Estate Centre and Digital Abu Dhabi. AbuDhaBuy sells normalization, matching, methodology, delivery, support, and derived work product; it does not claim ownership of source government facts. Customers must preserve attribution and may not imply endorsement.
Primary references: Digital Abu Dhabi Open Data Licence and ADREC API Gateway.
Derived commercial outputs
Community aggregates, normalized registry views, rental yields, investment screens, and forecast/fragility signals are distributed as AbuDhaBuy work product under the customer’s plan terms. Source attribution and method labels must remain intact when displayed externally.
Provider-restricted inputs
Listing observations remain outside the API and MCP until a documented provider contract expressly covers a commercial derived-data API. Raw listing records, photos, descriptions, phone numbers, contact details, and listing-backed catalogue fields are never exposed.
Customer rights
- Internal analysis and derived display inside the licensed product are allowed for paid plans.
- Bulk replication, resale, database substitution, model-training corpora, and raw redistribution require an Enterprise schedule.
- Personal data and broker contact fields are excluded from the commercial API unless a separate lawful-basis review approves them.
Release control
Contract-restricted datasets are absent from every plan entitlement, REST/OpenAPI discovery, and hosted and npm MCP tool lists. Their legacy REST paths are deny-only 451 stubs with no environment-variable bypass.
Legal review required
This page documents product controls, not legal advice. UAE counsel should approve the source-by-source rights matrix, customer licence, privacy notice, DPA, and raw-record position before the raw tier is enabled.