hotelscasa-mcpSAFE
HotelsCasa MCP server: hotels and apartments, owner homes, tours, flights, taxi and car rental for AI assistants. Remote, Streamable HTTP, no auth.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A remote Model Context Protocol server for [HotelsCasa](https://hotelscasa.com/), a travel marketplace for Europe, Turkey, the Caucasus, Central Asia and Latin America.
It lets an AI assistant search more than 1.3 million hotels and apartments, homes and cars listed directly by their owners, tickets and tours, and get the right links for flights, taxi, shipments and car rental. Every result comes with a page on hotelscasa.com where the traveller sees the exact price for the dates and books.
- Endpoint:
https://mcp.hotelscasa.com/mcp - Transport: Streamable HTTP (no SSE)
- Authentication: none. The server is public and read-only.
- Languages:
es,en,de,fr,it,pt,tr,ru(thelangargument of every tool) - Registry name:
com.hotelscasa/hotelscasa-mcp - Video (2 min): https://youtu.be/gHR8DM62KB0
This repository holds the public description of the server: this README and server.json for the MCP Registry. The server itself is hosted by HotelsCasa; there is nothing to install.
Connect
Claude (claude.ai, Claude Desktop): Settings → Connectors → Add custom connector → https://mcp.hotelscasa.com/mcp
Claude Code:
claude mcp add --transport http hotelscasa https://mcp.hotelscasa.com/mcp
Cursor, Cline, VS Code and other clients (mcp.json):
{
"mcpServers": {
"hotelscasa": {
"url": "https://mcp.hotelscasa.com/mcp"
}
}
}Clients that only speak stdio:
{
"mcpServers": {
"hotelscasa": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://mcp.hotelscasa.com/mcp"]
}
}
}Tools
All 13 tools only read the public catalogue. None of them creates a booking, sends a message or changes anything: booking always happens on the hotelscasa.com page that the tool returns.
b0b9b866b837OBSERVED · 2026-10-12Trust audit
SAFEgrade B · trust 88/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (3)
streamable-http
Gates applied: no_behavioural_pass, no_license.
b0b9b866b837full audit observations/trust-audit/mcp-server/hotelscasa__hotelscasa-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | b0b9b866b837 | SAFE | B | 88 | first audit |
Questions
What is the hotelscasa-mcp MCP server?
HotelsCasa MCP server: hotels and apartments, owner homes, tours, flights, taxi and car rental for AI assistants. Remote, Streamable HTTP, no auth.
Is hotelscasa-mcp safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (88/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does hotelscasa-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does hotelscasa-mcp run?
It speaks streamable-http, so it runs as a service you connect to over the network.
How current is this page?
The grade is for one exact copy of the source (b0b9b866b837), read on 2026-10-12. The repository is watched and re-audited when it changes.