ATA Travel
REMOTE · ATATRAVEL.CLOUD
ATA Travel: agent-first direct booking for accommodations, hotels, and vacation rentals.
Available components
Last scanned (12 hours ago)
Scores higher than 92% of remote servers
Reachable. Last reached 7 Nov 2026.
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Nothing on it is marked destructive, but we can't show that an anonymous caller can only read: full credit needs the server to list at least one tool and every tool to be verifiably read-only. We use a best-effort check of tool names and descriptions to tell read-only tools from tools that change things, so some genuinely read-only tools may not get full credit. Names that start with a read verb (get, list, read, search and similar) and accurate readOnlyHint annotations help. Meet that to earn full credit, or require authorisation. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability74
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 4209 tokens (~210/item across 20 items; 20 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage87
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 60% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 20 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 21 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Checks we ran (13)
- TLS certificate
- Authorization
- HTTPS
- HSTS header
- DNSSEC
- Transport
- Schema quality
- Stability
- Tool coverage
- Injection markers
- Destructive annotations
- Judged manipulation
- MCP protocol
Does not apply to this hosted endpoint (2)
- Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
- Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
The score does not measure everything. What the score does not measure →
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 6 Nov 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 1 Nov 26 0
- The server rewrote its instructions, which are the text every model session reads security
- “create_quote” added an optional parameter “bookingAssistance” cosmetic
- “get_building_details” added an optional parameter “internalAgentKey” cosmetic
- “search_property_catalog” added an optional parameter “internalAgentKey” cosmetic
- 24 Oct 26 0
- A breaking change shipped without a version bump: still 2.4.0 ▼ security
- Tool “get_available_room_cards” was removed ▼ security
- Tool “get_photo_gallery” was removed ▼ security
- Tool “show_available_rooms” was removed ▼ security
- Tool “show_property_photos” was removed ▼ security
- The server rewrote its instructions, which are the text every model session reads security
- Tool “get_building_details” rewrote its description, which is the text the model reads security
- Tool “get_company_mission” rewrote its description, which is the text the model reads security
- Tool “get_network_discovery_context” rewrote its description, which is the text the model reads security
- Tool “get_property_details” rewrote its description, which is the text the model reads security
- Tool “get_stays_in_building” rewrote its description, which is the text the model reads security
- Tool “get_traveler_handoff_status” rewrote its description, which is the text the model reads security
- Tool “ping” rewrote its description, which is the text the model reads security
- Tool “search_flexible_network_availability” rewrote its description, which is the text the model reads security
- Tool “search_network_availability” rewrote its description, which is the text the model reads security
- Tool “search_property_availability” rewrote its description, which is the text the model reads security
- Tool “search_property_catalog” rewrote its description, which is the text the model reads security
- Resource “ata-property-photos” was removed ▼ functional
- Tool coverage: 56% → 61% ▲ functional
- Schema quality: 230 → 206 ▲ functional
- The server no longer declares the “resources” capability functional
- “search_network_availability” reworded the description of “keyword” cosmetic
- “search_property_catalog” reworded the description of “keyword” cosmetic
- “search_property_catalog” reworded the description of “location” cosmetic
- “start_traveler_handoff” reworded the description of “guestEmail” cosmetic
- 17 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “get_building_details” rewrote its description, which is the text the model reads security
- Tool “get_network_discovery_context” rewrote its description, which is the text the model reads security
- Tool “get_property_details” rewrote its description, which is the text the model reads security
- Tool “get_stays_in_building” rewrote its description, which is the text the model reads security
- Tool “search_flexible_network_availability” rewrote its description, which is the text the model reads security
- Tool “search_network_availability” rewrote its description, which is the text the model reads security
- Tool “search_property_availability” rewrote its description, which is the text the model reads security
- Tool “search_property_catalog” rewrote its description, which is the text the model reads security
- Schema quality: 202 → 230 ▼ functional
- The server now declares the “resources” capability functional
- First check of Tool coverage: 17 functional
- First check of Capabilities: pass functional
- New resource “ata-property-photos” functional
- New tool “get_available_room_cards” functional
- New tool “get_photo_gallery” functional
- New tool “show_available_rooms” functional
- New tool “show_property_photos” functional
- “search_network_availability” added an optional parameter “budget” cosmetic
- “search_property_availability” added an optional parameter “budget” cosmetic
- 15 Oct 26 0
- Stability: fail → pass ▲ security
- 4 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- 3 Oct 26 0
- “create_provisional_booking” added an optional parameter “bookingAssistance” cosmetic
1 cosmetic change on this day. Switch on “Show cosmetic changes” to see it.
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 7 Nov 2026 · Probed https://atatravel.cloud/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=atatravel.cloud | CN=WR3,O=Google Trust Services,C=US | 18 Sept 2026 | 17 Dec 2026 | RSA 2048 | SHA256-RSA | 5a4f7b006e5f7eb912b279632bb9a28e |
| SANs: atatravel.cloud | ||||||
| CN=WR3,O=Google Trust Services,C=US (CA) | CN=GTS Root R1,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | RSA 2048 | SHA256-RSA | 7ff005a91568d63abc22861684aa4b5a |
| CN=GTS Root R1,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 19 Jun 2020 | 28 Jan 2028 | RSA 4096 | SHA256-RSA | 77bd0d6cdb36f91aea210fc4f058d30d |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of atatravel.cloud. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | Trust anchor | 20326, 38696 | 8, 8 | Verified |
| cloud. | DS published | 7041 | 13 | Verified |
| atatravel.cloud. | No DS | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| referrer-policy | no-referrer |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://atatravel.cloud/mcp | Verified | 200 | |
| http (plaintext) | http://atatravel.cloud/mcp | HTTPS enforced | 302 | https://atatravel.cloud/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
create_provisional_booking ~641
Secure a reservation or create a host-approval enquiry on behalf of a traveler. policyAcknowledged is required as an explicit boolean and must be true for financially binding flows after the exact total, payment schedule, and cancellation terms are shown; identity verification is not consent. A host-approval enquiry may pass false because payment is not due unless accepted. Also requires the traveler’s full name, email, and country (guestCountry, required for bookings; optional for quotes) plus travelerAssertion or approved internal BOOKING_HOLD agentHandoffId. If verification is needed, keep internal tool details private; tell the traveler to confirm their email and follow the code or link instructions returned by verification. If instant book is enabled and payment is ready, creates an inventory-holding provisional booking and returns payment/manual-payment next steps. If instant book is disabled or Stripe checkout is not ready, creates an enquiry hold for host approval/payment follow-up. Modern clients must provide a UUID idempotencyKey; exact retries replay the original result without repeating the action.
| Name | Type | Req | Description |
|---|---|---|---|
| adults | number | yes | – |
| agentHandoffId | string | – | Approved ATA traveler handoff ID from start_traveler_handoff/get_traveler_handoff_status. Required for third-party agents before inventory-holding booking actions. |
| bookingAssistance | string | – | Internal Little John booking attribution; requires the internal agent credential. |
| checkIn | string | yes | – |
| checkOut | string | yes | – |
| children | number | – | – |
| displayCurrency | string | – | Optional 3-letter currency for approximate traveler-facing display conversion. Native property currency remains authoritative. |
| guestCountry | string | yes | Required traveler country, as supplied by the traveler. Ask only if missing. Do not infer it from the property location, language, currency, or phone number. Quotes do not require country. |
| guestEmail | string | yes | – |
| guestName | string | yes | Traveler’s full name, as supplied by the traveler. |
| guestPhone | string | – | – |
| idempotencyKey | string | yes | Client-generated UUID for this exact write operation. Retry the same arguments with the same key; use a new key whenever any argument changes. |
| internalAgentKey | string | – | – |
| notes | string | – | Optional traveler comments, questions, or requests for the host. Especially useful for host-approval enquiries. |
| policyAcknowledged | boolean | yes | Explicit policy-consent state. Set true only after the traveler agrees to the exact price, payment schedule, and cancellation terms. Required before creating either an instant-book hold or a host-app… |
| priceAudience | string | – | – |
| propertyToken | string | yes | – |
| ratePlanId | string | – | Rate plan ID. If omitted, the system auto-selects the default active rate plan per night, then the cheapest active auto-selectable fallback. |
| roomId | string | yes | – |
| selectedRoomCount | number | – | For direct-booking room-count configurations, the number of rooms the traveler selected. Use defaultSelectedRoomCount from availability results. |
| travelerAssertion | string | – | Signed traveler email verification assertion from ATA. |
No output schema declared.
No examples provided.
create_quote ~396
Generate a non-binding reference quote for a traveler. Requires guest name/email plus a current travelerAssertion or fresh approved internal QUOTE agentHandoffId. If verification is needed, keep internal tool details private; tell the traveler to confirm their email and follow the code or link instructions returned by verification. Quotes do not hold inventory or guarantee future availability. Modern clients must provide a UUID idempotencyKey; exact retries replay the original result without repeating the action.
| Name | Type | Req | Description |
|---|---|---|---|
| adults | number | yes | – |
| agentHandoffId | string | – | Fresh approved ATA traveler handoff ID from start_traveler_handoff/get_traveler_handoff_status. Required for third-party quote creation without a current traveler assertion. |
| bookingAssistance | string | – | Internal Little John quote attribution; requires the internal agent credential. |
| checkIn | string | yes | – |
| checkOut | string | yes | – |
| children | number | – | – |
| displayCurrency | string | – | Optional 3-letter currency for approximate traveler-facing display conversion. Native property currency remains authoritative. |
| guestCountry | string | – | Optional for a quote. If omitted, the traveler supplies it when completing the booking. |
| guestEmail | string | yes | – |
| guestName | string | yes | – |
| guestPhone | string | – | – |
| idempotencyKey | string | yes | Client-generated UUID for this exact write operation. Retry the same arguments with the same key; use a new key whenever any argument changes. |
| internalAgentKey | string | – | – |
| priceAudience | string | – | – |
| propertyToken | string | yes | – |
| ratePlanId | string | – | Rate plan ID. Optional. |
| roomId | string | yes | – |
| selectedRoomCount | number | – | For direct-booking room-count configurations, the number of rooms the traveler selected. Use defaultSelectedRoomCount from availability results. |
| travelerAssertion | string | – | Signed traveler email verification assertion from ATA. |
No output schema declared.
No examples provided.
get_booking_details ~217
Read an existing booking by its ATA confirmation code returned by a successful booking or supplied by the traveler. Never invent a code. Requires a current signed ATA traveler assertion, a verified legacy MCP session, or an approved BOOKING_READ handoff with matching booking email and code. For stateless third-party clients, use start_traveler_handoff with action BOOKING_READ and confirmationCode, then poll get_traveler_handoff_status. Returns booked stay, prices, payments and cancellation terms. Cannot modify, cancel, pay, or create inventory holds. Never use a confirmation code as holdId in get_reservation_status.
| Name | Type | Req | Description |
|---|---|---|---|
| agentHandoffId | string | – | Approved BOOKING_READ handoff for this confirmation code. No write scope is accepted. |
| confirmationCode | string | yes | ATA confirmation code from the booking email. |
| propertyToken | string | – | Known property public token; required to match a property-scoped connection. |
| travelerAssertion | string | – | Current signed ATA traveler verification assertion; never a typed email or model claim. |
No output schema declared.
No examples provided.
get_building_details ~52
Get a published ATA building/complex profile with assigned stays and map coordinates. Use slug from search_buildings or property search results.
| Name | Type | Req | Description |
|---|---|---|---|
| internalAgentKey | string | – | – |
| slug | string | yes | – |
No output schema declared.
No examples provided.
get_company_mission ~30
Read ATA's published company mission and company description. Use for questions about ATA's purpose or services.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_network_discovery_context ~59
Return a summary of ATA's current destinations, property types, capacity, amenities, views, and published suitability information. Use to identify supported discovery options when the traveler has not specified a property or destination. Does not check availability for specific dates.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_property_details ~122
Get date-free property and room details, including traveler-facing amenities, property-authored direct-booking benefits, policies, Events & Weddings, room profiles, published image links and up to two bounded image previews (property and uniquely matched room). Missing previews retain links. When the traveler names a room or unit, pass that wording as roomQuery before treating it as another property.
| Name | Type | Req | Description |
|---|---|---|---|
| propertyToken | string | yes | – |
| roomQuery | string | – | Optional traveler-provided room or unit name, such as '5B Casita Vista'. No stay dates are required. |
No output schema declared.
No examples provided.
get_quote_details ~181
Read a previously created quote using its actual quoteId, quoteHash or quoteUrl. Requires a current signed traveler assertion, verified legacy session, or the still-valid USED QUOTE handoff that created this exact quote. A quote is not a booking or inventory hold. Returns stored prices and payment terms; never substitute another room's payment schedule.
| Name | Type | Req | Description |
|---|---|---|---|
| agentHandoffId | string | – | Still-valid USED QUOTE handoff that created this quote. Read-only access grants no additional writes; expired handoffs require fresh traveler verification. |
| propertyToken | string | – | – |
| quoteHash | string | – | – |
| quoteId | string | – | – |
| quoteUrl | string | – | Existing ATA /stays/quote/ link supplied by the traveler or returned by create_quote. |
| travelerAssertion | string | – | Current signed ATA traveler assertion for the quote owner. |
No output schema declared.
No examples provided.
get_reservation_status ~204
Return the current status and exact stay, price, payment schedule, and cancellation terms for a reservation previously created through ATA. Requires the hold ID plus the same verified traveler context/assertion or the secure booking handoff that created it. This tool is read-only and cannot change, pay, cancel, check in, or check out a reservation.
| Name | Type | Req | Description |
|---|---|---|---|
| agentHandoffId | string | – | Secure BOOKING_HOLD handoff ID that created this reservation. |
| displayCurrency | string | – | Optional 3-letter currency for approximate display conversion. Native property currency remains authoritative. |
| guestEmail | string | – | Traveler email. Required when using travelerAssertion; populated automatically for a verified MCP session. |
| holdId | string | yes | Hold ID returned by create_provisional_booking. |
| propertyToken | string | – | Known public property token for this reservation; must match the hold property when supplied. |
| travelerAssertion | string | – | Current signed ATA traveler verification assertion for the reservation guest. |
No output schema declared.
No examples provided.
get_stays_in_building ~109
Return ATA stays assigned to a published building, optionally filtered by live dates and guest counts.
| Name | Type | Req | Description |
|---|---|---|---|
| adults | number | – | – |
| checkIn | string | – | – |
| checkOut | string | – | – |
| children | number | – | – |
| displayCurrency | string | – | Optional 3-letter currency for approximate traveler-facing display conversion. Native property currency remains authoritative. |
| internalAgentKey | string | – | – |
| priceAudience | string | – | – |
| slug | string | yes | – |
No output schema declared.
No examples provided.
get_support_contacts ~85
Get published ATA support and optional property guest contact details. Use for human help, unanswered property questions, or booking support. Returns configured contact links only; does not send messages, create a case, or transfer the traveler to a person. Omit propertyToken for ATA support alone.
| Name | Type | Req | Description |
|---|---|---|---|
| propertyToken | string | – | Property public token, when the traveler needs help from that property. |
No output schema declared.
No examples provided.
get_traveler_handoff_status ~72
Check the verification status and permitted next actions for an existing ATA traveler handoff. Use the handoffId returned by start_traveler_handoff. Does not send email or create a quote or booking.
| Name | Type | Req | Description |
|---|---|---|---|
| handoffId | string | yes | ID returned by start_traveler_handoff. |
No output schema declared.
No examples provided.
list_property_extras ~118
List date-free published events, services, activities, day passes, experiences, dining, wellness, packages, transfers, and other extras for a known property. Returns read-only offer details and ATA purchase links when the property is published on ATA; it does not create an order.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Optional exact offer category filter, such as DAY_PASS, EXPERIENCE, WELLNESS, TRANSPORT, or PACKAGE. |
| propertyToken | string | yes | – |
| standaloneOnly | boolean | – | When true, exclude offers that require a stay. |
No output schema declared.
No examples provided.
ping ~29
Check whether the ATA MCP server responds. Returns 'pong'; does not search properties or change quotes or bookings.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
search_buildings ~104
Find published ATA building/complex profiles by destination, neighborhood, tag, amenity, or free-text. Use this for questions about buildings, condo towers, complexes, gated communities, marina developments, or neighborhoods.
| Name | Type | Req | Description |
|---|---|---|---|
| amenities | array | – | – |
| city | string | – | – |
| maxResults | number | – | – |
| neighborhood | string | – | – |
| query | string | – | Building name, neighborhood, city, or text query. |
| tags | array | – | – |
No output schema declared.
No examples provided.
search_flexible_network_availability ~344
Search participating ATA properties for availability and prices across a flexible date window. Defaults to a window 28–56 days from today, three nights, and two adults only when those values are missing; always return those defaults as explicit assumptions. Preferences are soft ranking signals, not a closed taxonomy.
| Name | Type | Req | Description |
|---|---|---|---|
| adults | integer | – | Adult guests. Defaults to 2. |
| amenities | array | – | Optional soft amenity preferences for flexible discovery. |
| children | integer | – | Child guests. Defaults to 0. |
| displayCurrency | string | – | Optional traveler-facing display currency. |
| earliestCheckIn | string | – | Earliest acceptable check-in date. Defaults to 28 days from today. |
| internalAgentKey | string | – | – |
| latestCheckIn | string | – | Latest acceptable check-in date. Defaults to 56 days from today. |
| location | string | – | Optional city, state, country, neighborhood, or building. Omit when the traveler is open to ATA's current destinations. |
| maxPrice | number | – | Maximum total stay price. |
| maxPriceCurrency | string | – | Currency for maxPrice when filtering mixed native currencies. |
| maxResults | integer | – | Maximum priced stays to return. Defaults to 4. |
| nights | integer | – | Length of stay. Defaults to 3 nights. |
| preferences | array | – | Open-ended soft preferences inferred from the traveler's own words or live network facets. |
| priceAudience | string | – | – |
| propertyType | string | – | Optional soft property-type preference; it ranks results and is reported as a difference when unavailable. |
| views | array | – | Optional soft view preferences for flexible discovery. |
No output schema declared.
No examples provided.
search_network_availability ~367
Find accommodations across the ATA Travel Network with real-time pricing. Use when dates are known. Supports filtering by amenities, views, property type, and free-text keyword to handle vague requests.
| Name | Type | Req | Description |
|---|---|---|---|
| adults | number | – | Number of adults |
| amenities | array | – | Filter by amenities on property or rooms. e.g. ['Pool', 'Gym', 'Pet Friendly', 'Spa'] |
| budget | object | – | Optional additional budget constraint. Clarify missing currency or basis before calling. Do not combine with legacy maxPrice/maxPriceCurrency. |
| checkIn | string | yes | Check-in date (YYYY-MM-DD) |
| checkOut | string | yes | Check-out date (YYYY-MM-DD) |
| children | number | – | Number of children |
| displayCurrency | string | – | Optional 3-letter currency for approximate traveler-facing display conversion. Native property currency remains authoritative. |
| internalAgentKey | string | – | – |
| keyword | string | – | Text matched against property name/description. Use for a required text match; use preferences for optional style preferences. |
| location | string | – | Optional city, state, or country. Omit when the traveler knows dates but is open to ATA's current destinations. |
| maxPrice | number | – | Maximum total price filter |
| maxPriceCurrency | string | – | Currency for maxPrice when filtering across mixed property currencies. If omitted, maxPrice is compared to each property's native currency. |
| preferences | array | – | Open-ended soft ranking signals. These do not exclude otherwise valid stays. |
| priceAudience | string | – | – |
| propertyType | string | – | e.g. 'Hotel', 'Apartment', 'Villa' |
| views | array | – | Filter by room views. e.g. ['Ocean', 'Mountain', 'Garden', 'City'] |
No output schema declared.
No examples provided.
search_property_availability ~168
Search specific dates and occupancy for a known property using its propertyToken.
| Name | Type | Req | Description |
|---|---|---|---|
| adults | number | – | – |
| budget | object | – | Optional additional budget constraint. Clarify missing currency or basis before calling. Do not combine with legacy maxPrice/maxPriceCurrency. |
| checkIn | string | yes | Check-in date (YYYY-MM-DD) |
| checkOut | string | yes | Check-out date (YYYY-MM-DD) |
| children | number | – | – |
| displayCurrency | string | – | Optional 3-letter currency for approximate traveler-facing display conversion. Native property currency remains authoritative. |
| internalAgentKey | string | – | – |
| priceAudience | string | – | – |
| propertyToken | string | yes | Exact public propertyToken returned by discovery or property context. Never add a prefix or invent a token. |
No output schema declared.
No examples provided.
search_property_catalog ~227
Browse participating ATA properties without stay dates. Filter by location, property type, amenities, views, or keyword. Does not check date-specific availability or prices.
| Name | Type | Req | Description |
|---|---|---|---|
| adults | integer | – | Optional adults for occupancy-safe catalog suggestions. |
| amenities | array | – | e.g. ['Pool', 'Spa', 'Pet Friendly', 'Gym'] |
| children | integer | – | Optional children for occupancy-safe catalog suggestions. |
| internalAgentKey | string | – | – |
| keyword | string | – | Text matched against property name/description. Use for a required text match; use preferences for optional style preferences. |
| location | string | – | City, state, or country to filter by. Omit to search all participating ATA destinations. |
| maxResults | number | – | Max number of properties to return (default 10) |
| preferences | array | – | Open-ended soft ranking signals inferred from traveler language or current network facets. |
| propertyType | string | – | e.g. 'Hotel', 'Villa', 'Apartment' |
| views | array | – | e.g. ['Ocean', 'Mountain', 'Garden'] |
No output schema declared.
No examples provided.
start_traveler_handoff ~408
Internal approval step for quote or booking tools. Before calling, read guestEmail back to the traveler and confirm it is correct; then set emailConfirmedByTraveler=true. If an email is sent, tell the traveler only to check their inbox and click the secure ATA link. Do not mention handoffs/tool details to the traveler. Modern clients must provide a UUID idempotencyKey; exact retries replay the original result without repeating the action.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Use BOOKING_HOLD before creating a reservation; BOOKING_READ grants only read access to an existing booking for questions. |
| adults | number | – | – |
| agentName | string | – | Agent/application display name when known. |
| agentProvider | string | – | Agent platform or provider name when known. |
| checkIn | string | – | – |
| checkOut | string | – | – |
| children | number | – | – |
| confirmationCode | string | – | Required for BOOKING_READ: the ATA confirmation code printed on the booking confirmation. |
| emailConfirmedByTraveler | boolean | – | Set true only after reading guestEmail back to the traveler and they confirm it is correct. |
| guestEmail | string | yes | Traveler-provided email address for the action-specific ATA verification link. |
| guestName | string | yes | Traveler name collected by the agent. |
| guestPhone | string | – | – |
| idempotencyKey | string | yes | Client-generated UUID for this exact write operation. Retry the same arguments with the same key; use a new key whenever any argument changes. |
| intentSummary | string | – | Short traveler-facing summary of what ATA is verifying, without mentioning internal handoff/tool details. |
| mcpSessionId | string | – | Optional client-side MCP/session correlation ID. |
| propertyToken | string | – | – |
| quoteHash | string | – | – |
| quoteId | string | – | – |
| ratePlanId | string | – | – |
| roomId | string | – | – |
| selectedRoomCount | number | – | – |
No output schema declared.
No examples provided.
How do I install the ATA Travel MCP server?
ATA Travel is a hosted endpoint at https://atatravel.cloud/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · atatravel.cloud
claude mcp add --transport http cloud-atatravel-travel-agency 'https://atatravel.cloud/mcp'
What is the ATA Travel MCP server?
ATA Travel is an MCP server listed in the public MCP registry as cloud.atatravel/travel-agency. ATA Travel: agent-first direct booking for accommodations, hotels, and vacation rentals. This page covers its hosted endpoint (https://atatravel.cloud/mcp).
Is the ATA Travel MCP server safe to use?
ATA Travel scores 86 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the ATA Travel MCP server expose?
ATA Travel exposes 20 tools: ping, get_network_discovery_context, search_flexible_network_availability, get_company_mission, search_property_availability, and 15 more. Their descriptions and schemas cost roughly 3,933 tokens of context every time the server is loaded.
Does the ATA Travel MCP server require authentication?
No. We connected to ATA Travel without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the ATA Travel MCP server still maintained?
ATA Travel is still listed as active in the MCP registry. We last reached this channel on 7 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What did VerifyMCP test on the ATA Travel MCP server?
VerifyMCP ran 13 checks on ATA Travel, covering TLS certificate, Authorization, HTTPS, HSTS header and 9 more. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.