com.fostay/hotels

Est-ce que com.fostay/hotels est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.fostay/hotels » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• booking_status≈ 228 tokens

  Verify a completed booking: confirmation status, hotel confirmation code, stay and price. Requires the Fostay booking id AND the guest email it was booked under (both are in the guest's confirmation). Use after the human pays via a prepare_booking link.

  Paramètres, retour & exemple (2)

  Paramètres

  • booking_id · string · requis
    Fostay booking id, e.g. uzYG5ZTt9
  • guest_email · string · requis
    Guest email on the booking

  Exemple d'appel

  {"name": "booking_status", "arguments": {"booking_id": "texte", "guest_email": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• demand_calendar≈ 175 tokens

  Fostay's editorial demand calendar (UAE only — Dubai and Abu Dhabi; Goa has no event calendar yet): the upcoming date windows where Dubai and Abu Dhabi hotels predictably spike or sell out (GITEX, F1, NYE, Eid, school breaks...), each with a suggested book-by deadline. Use it to warn users about expensive dates or find event stays.

  Paramètres, retour & exemple (1)

  Paramètres

  • city · string · optionnel · Dubai | Abu Dhabi
    Filter by city (default: both)

  Exemple d'appel

  {"name": "demand_calendar", "arguments": {"city": "Dubai"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_live_rates≈ 341 tokens

  Live bookable room offers for one hotel and stay dates: total all-in price (AED), board (breakfast etc.), refundability and exact free-cancellation deadlines. For Goa, total_all_in counts GST, and any part the hotel collects at check-in is itemised separately (collected_by_hotel_at_checkin). The booking_url takes a human straight to this hotel on fostay.com to complete the booking.

  Paramètres, retour & exemple (5)

  Paramètres

  • adults · integer · optionnel
    Adult guests (default 2)
  • checkin · string · requis
    Check-in date, YYYY-MM-DD
  • checkout · string · requis
    Check-out date, YYYY-MM-DD
  • children · array · optionnel
    Children's ages at check-in, e.g. [7, 9]. IMPORTANT for families: child-inclusive rates price kids' breakfast and extras upfront — always pass ages when children travel.
  • hotel_id · string · requis
    Hotel id from search_stays (e.g. lp6556acf7)

  Exemple d'appel

  {"name": "get_live_rates", "arguments": {"checkin": "texte", "checkout": "texte", "hotel_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• prepare_booking≈ 399 tokens

  Books everything except the payment: holds the chosen offer (real prebook — the price is locked while the hold lasts), registers the guest details, and returns a payment_url. The human opens that link, sees the exact stay summary, and pays in one step — the agent never handles card details. Confirm the guest's name and email with the user before calling. If the held price differs from what you quoted, this returns the final price and any change warnings — tell the user before sending them to pay.

  Paramètres, retour & exemple (6)

  Paramètres

  • offer_id · string · requis
    offer_id from get_live_rates
  • agent_name · string · optionnel
    Your client name for attribution, e.g. 'claude' or 'chatgpt'
  • guest_email · string · requis
    Guest's email — booking confirmation goes here
  • guest_phone · string · optionnel
  • guest_last_name · string · requis
  • guest_first_name · string · requis

  Exemple d'appel

  {"name": "prepare_booking", "arguments": {"offer_id": "texte", "guest_email": "texte", "guest_last_name": "texte", "guest_first_name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• search_stays≈ 428 tokens

  Search hotels in Dubai, Abu Dhabi or Goa. For Dubai and Abu Dhabi, returns Fostay's hand-curated edit first (8 flagship stays with editorial verdicts), then catalog matches (~2,000 bookable hotels). For Goa, returns the best-reviewed hotels and resorts (hostels and homestays only when searched by name), optionally narrowed to one area. Use get_live_rates for prices. Results include a fostay_url where a human can view photos, live rates and book.

  Paramètres, retour & exemple (5)

  Paramètres

  • area · string · optionnel · candolim-calangute-baga | anjuna-vagator | morjim-mandrem-arambol | panaji-old-goa | south-goa-beaches | palolem-agonda
    Goa only: narrow to one area — candolim-calangute-baga (Candolim, Calangute & Baga); anjuna-vagator (Anjuna, Vagator & Assagao); morjim-mandrem-arambol (Morjim, Mandrem, Arambol & Siolim); panaji-old-goa (Panaji & Old Goa); south-goa-beaches (Colva, Benaulim, Varca & Cavelossim); palolem-agonda (Palolem & Agonda)
  • city · string · requis · Dubai | Abu Dhabi | Goa
    City or destination to search
  • limit · integer · optionnel
    Max catalog results (default 10)
  • query · string · optionnel
    Optional hotel-name filter, e.g. 'Atlantis' or 'Rove'
  • min_rating · number · optionnel
    Minimum guest rating on a 10 scale, e.g. 8

  Exemple d'appel

  {"name": "search_stays", "arguments": {"city": "Dubai"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• when_to_go≈ 190 tokens

  Prices upcoming weekends (Fri–Sun, 2 nights) to find the cheapest times to stay. Pass hotel_id for one hotel across ~8 weekends, or just a city to compare Fostay's curated stays (Dubai, Abu Dhabi) or top-rated Goa hotels across the next ~6 weekends. Cheapest options first.

  Paramètres, retour & exemple (2)

  Paramètres

  • city · string · optionnel · Dubai | Abu Dhabi | Goa
    Used when hotel_id is omitted
  • hotel_id · string · optionnel
    Optional hotel id from search_stays

  Exemple d'appel

  {"name": "when_to_go", "arguments": {"city": "Dubai", "hotel_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://fostay.com/api/mcp