com.trip1/mcp

Est-ce que com.trip1/mcp est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.trip1/mcp » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• get_hotel_details≈ 861 tokens

  Get rooms and rates for a hotel. Pass the hotel id from search_hotels results. Returns rate IDs needed for purchase_hotel. Each rate states its refundability and, when refundable, the cancellation deadline — quote these rather than inferring refund terms. When prices_changed is true, the price search_hotels quoted for this hotel is no longer the one on offer — tell the user prices changed rather than presenting these rates as the same quote. When the user picks a rate, call start_checkout with its id next -- it opens the booking form, so do not ask for guest details in chat.

  Paramètres, retour & exemple (2)

  Paramètres

  • id · string · requis
    The hotel id from search_hotels results
  • context · string · optionnel
    Why are you calling this tool? Describe the user's underlying goal in one short sentence — not the tool name. Never include names, emails, phones, or prices. Always pass this. Used for analytics only; never shown to the user.

  Exemple d'appel

  {"name": "get_hotel_details", "arguments": {"id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"name": "texte", "stay": {}, "rooms": [], "address": "texte", "check_in": "texte", "check_out": "texte", "next_step": "texte", "image_urls": [], "star_rating": 1, "prices_changed": true}}

• get_order_details≈ 632 tokens

  Get the current state of an order. Returns payment status, booking state, and item details. Poll until ready is true to confirm the booking is complete.

  Paramètres, retour & exemple (2)

  Paramètres

  • cart_id · string · requis
    The cart_id from purchase_hotel response
  • context · string · optionnel
    Why are you calling this tool? Describe the user's underlying goal in one short sentence — not the tool name. Never include names, emails, phones, or prices. Always pass this. Used for analytics only; never shown to the user.

  Exemple d'appel

  {"name": "get_order_details", "arguments": {"cart_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ready": true, "booking": {}, "payment": {}, "cart_url": "texte"}}

• pay_order≈ 694 tokens

  Open CoinGate's checkout page for an unpaid CoinGate booking, so the user can pay in their browser. Pass the cart_id from purchase_hotel or the booking form. Where the client supports it, this asks the client to open the page for the user (URL elicitation); otherwise, and once the page has been offered, it returns the order with its payment link. Not for x402 bookings, which your payments tool pays.

  Paramètres, retour & exemple (2)

  Paramètres

  • cart_id · string · requis
    The cart_id from purchase_hotel or the booking form
  • context · string · optionnel
    Why are you calling this tool? Describe the user's underlying goal in one short sentence — not the tool name. Never include names, emails, phones, or prices. Always pass this. Used for analytics only; never shown to the user.

  Exemple d'appel

  {"name": "pay_order", "arguments": {"cart_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"ready": true, "booking": {}, "payment": {}, "cart_url": "texte"}}

• purchase_hotel≈ 763 tokens

  Book a hotel room in chat, by providing guest details and a rate ID from get_hotel_details. Use start_checkout instead, which opens a booking form; call this only when the user says they cannot see or use that form. Creates a guest profile, adds the room to a cart, and initiates checkout. Ask the user how they want to pay before calling, and pass it as payment_service: 'x402' (USDC on Base, paid by an x402 payments tool you have) or 'coingate' (a checkout page the user pays in their browser, any crypto). If you have no x402 payments tool, use coingate. Returns a payment_url and the cart_url where the order can also be paid in a browser. The booking is confirmed once payment settles; poll get_order_details to check status.

  Paramètres, retour & exemple (10)

  Paramètres

  • email · string · requis
    Guest's email address
  • phone · string · requis
    Guest's phone number (e.g., +44123456789)
  • title · string · optionnel · MR | MRS | MS | MISS
    Guest's title: MR, MRS, MS, or MISS (default: MR)
  • context · string · optionnel
    Why are you calling this tool? Describe the user's underlying goal in one short sentence — not the tool name. Never include names, emails, phones, or prices. Always pass this. Used for analytics only; never shown to the user.
  • rate_id · string · requis
    Signed rate ID from get_hotel_details response
  • last_name · string · requis
    Guest's last name
  • first_name · string · requis
    Guest's first name
  • nationality · string · optionnel
    Guest's nationality as ISO 3166-1 alpha-2 code (default: GB)
  • price_currency · string · optionnel
    Payment currency (default: USD for x402, EUR for coingate). Supported: EUR, USD, GBP, PLN, CZK, HUF, SEK, NOK, DKK
  • payment_service · string · optionnel · x402 | coingate
    Payment method the user chose: x402 (USDC on Base, needs an x402 payments tool; default) or coingate (browser checkout, any crypto)

  Exemple d'appel

  {"name": "purchase_hotel", "arguments": {"email": "texte", "phone": "texte", "rate_id": "texte", "last_name": "texte", "first_name": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"cart_id": "texte", "message": "texte", "cart_url": "texte", "payment_url": "texte", "booking_reference": "texte"}}

• search_hotels≈ 691 tokens

  Search for available hotels by destination and dates. Returns a list of matching hotels with pricing, images, and booking links. Occupancy is fixed at 2 adults in one room and cannot be set. If the user asked for a different party size, tell them these prices are for 2 adults rather than presenting them as a quote for their group. Always include the hotel name, booking link, and image for each hotel in your response.

  Paramètres, retour & exemple (6)

  Paramètres

  • context · string · optionnel
    Why are you calling this tool? Describe the user's underlying goal in one short sentence — not the tool name. Never include names, emails, phones, or prices. Always pass this. Used for analytics only; never shown to the user.
  • sort_by · string · optionnel · relevance | price | rating | distance
    Sort results by: price, rating, distance, or relevance (default)
  • check_in · string · requis
    Check-in date in YYYY-MM-DD format. Must be today or later in the destination's own timezone. Do not assume the current year — the server instructions state today's date; a past date is rejected, and the rejection tells you the destination's today.
  • check_out · string · requis
    Check-out date in YYYY-MM-DD format. Must be after check_in.
  • sort_order · string · optionnel · asc | desc
    Sort order: asc (default) or desc
  • destination · string · requis
    Destination name (e.g., 'London', 'Paris, France', 'Vilnius')

  Exemple d'appel

  {"name": "search_hotels", "arguments": {"check_in": "texte", "check_out": "texte", "destination": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"hotels": [], "total_results": 1}}

• start_checkout≈ 1166 tokens

  Open the booking form for a rate the user picked from get_hotel_details. Shows the stay and the price, and lets the user enter the guest details and choose how to pay. On the first call, pass the user's own details you already know -- from this conversation or your memory of them -- so the form opens prefilled, and only those: never invent or guess any; the form asks for the rest and the user reviews every field before booking. If the user has not stated a title, pass title_suggestion instead: your best guess from their first name, which the form labels as a suggestion. If the user submits the form, it books the room itself (purchase_hotel) and tells you the booking reference: do not call purchase_hotel again for it. Call this again with more details to refill the form.

  Paramètres, retour & exemple (10)

  Paramètres

  • email · string · optionnel
    Guest's email, if known
  • phone · string · optionnel
    Guest's phone with country code, if known
  • title · string · optionnel · MR | MRS | MS | MISS
    MR, MRS, MS or MISS, only if the user has stated it
  • context · string · optionnel
    Why are you calling this tool? Describe the user's underlying goal in one short sentence — not the tool name. Never include names, emails, phones, or prices. Always pass this. Used for analytics only; never shown to the user.
  • rate_id · string · requis
    Rate id from get_hotel_details
  • last_name · string · optionnel
    Guest's last name, if known
  • first_name · string · optionnel
    Guest's first name, if known
  • nationality · string · optionnel
    Guest's nationality as ISO 3166-1 alpha-2, if known
  • payment_service · string · optionnel · coingate | x402
    Payment method the user already chose, if any
  • title_suggestion · string · optionnel · MR | MRS | MS | MISS
    When the user has not stated a title: your best guess from their first name. The form preselects it, labelled as a suggestion from their name, and the user can change it.

  Exemple d'appel

  {"name": "start_checkout", "arguments": {"rate_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"guest": {}, "price": 1, "adults": 1, "rate_id": "texte", "check_in": "texte", "currency": "texte", "check_out": "texte", "next_step": "texte", "room_name": "texte", "board_type": "texte", "hotel_name": "texte", "image_urls": []}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://trip1.com/api/mcp