AirbnbSAFE
Search Airbnb using your AI Agent
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://www.npmjs.com/package/@openbnb/mcp-server-airbnb)
A comprehensive MCP Bundle for searching Airbnb listings with advanced filtering capabilities and detailed property information retrieval. Built as a Model Context Protocol (MCP) server packaged in the MCP Bundle (MCPB) format for easy installation and use with compatible AI applications.
🚀 Prefer not to run a local server? Try openbnb.ai
👉 [openbnb.ai](https://openbnb.ai/) is a hosted MCP server that solves the same problem — searching Airbnb listings — without any local setup.
If you don't want to deal with installing and running this server yourself, [openbnb.ai](https://openbnb.ai/) is a separate, fully-hosted alternative you can connect to directly from your MCP client. It goes beyond what this open-source server offers:
- ✅ Zero setup — no Node, no
npx, no config files, no updates to manage - ✅ Advanced filters — richer search controls beyond the base tools here
- ✅ MCP UI — interactive UI components for browsing results, not just plain text
- ✅ Managed & maintained — kept running for you
Head to [openbnb.ai](https://openbnb.ai/) for setup instructions and the connection details for your MCP client.
If you'd rather self-host the open-source server, read on.
Features
🔍 Advanced Search Capabilities
- Location-based search with support for cities, states, and regions
- International location support via client-side geocoding, so non-US queries (e.g. "Paris, France", "Copenhagen, Denmark") return results in the right city
- Google Maps Place ID integration for precise location targeting
- Property type filtering for entire homes, private rooms, shared rooms, or hotel rooms
- Date filtering with check-in and check-out date support
- Guest configuration including adults, children, inf
29fc73e81285OBSERVED · 2026-09-30Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-server-airbnb -- npx -y @openbnb/[email protected]
{
"mcpServers": {
"mcp-server-airbnb": {
"command": "npx",
"args": [
"-y",
"@openbnb/[email protected]"
]
}
}
}Exposed tools (2)
2 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
airbnb_listing_details | read | Get detailed information about a specific Airbnb listing. Provide direct links to the user |
airbnb_search | read | Search for Airbnb listings with various filters and pagination. Provide direct links to the user |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (5 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (3)
.mcpbignore
const id = atob(result.demandStayListing.id).split(":")[1];@modelcontextprotocol/sdk, cheerio, node-fetch, robots-parser, @types/node, @types/node-fetch, shx, typescript
Gates applied: no_behavioural_pass.
29fc73e81285full audit observations/trust-audit/mcp-server/openbnb-org__airbnb.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-09-30 | 29fc73e81285 | SAFE | B | 89 | first audit |
Questions
What is the Airbnb MCP server?
Search Airbnb using your AI Agent
What tools does Airbnb expose?
2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Airbnb safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Airbnb need?
No credential environment variables were found in its source, so it appears to need none.
How does Airbnb run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @openbnb/mcp-server-airbnb at 0.3.0.
How current is this page?
The grade is for one exact copy of the source (29fc73e81285), read on 2026-09-30. The repository is watched and re-audited when it changes.