Airport Lounge List
REMOTE · MCP.AIRPORTLOUNGELIST.COM
Search 8,500+ airport lounges and check access by card or membership.
Available components
Last scanned (13 hours ago)
Scores higher than 35% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Maps and Location
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security97
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
- The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability0
- Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http. See how to fix → View diagnostics → Unverified
Schema Quality & AI Usability0
- Schema blocked by authentication: the endpoint requires auth we don't have to read it. See how to fix → Unverified
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
- Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Tool Safety0
- Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.Unverified
Capabilities0
- Capabilities blocked by authentication: the endpoint requires auth we don't have to read them. See how to fix → Unverified
Unverified: 6 categories
Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm. Claim this server and supply a read-only token to verify it and lift the score.
Checks we ran (5)
- TLS certificate
- Authorization
- HTTPS
- HSTS header
- DNSSEC
Checks we could not complete (6)
These are gaps on our side, not findings about this hosted endpoint. We only credit what we can confirm, so a category made up entirely of them scores 0.
- Transport in Transport & Reachability (scores 0 for this)Transport blocked by authentication: the endpoint requires auth we don't have to verify streamable-http.
- Schema quality in Schema Quality & AI Usability (scores 0 for this)Schema blocked by authentication: the endpoint requires auth we don't have to read it.
- Stability in Stability & Change Management (scores 0 for this)Stability not yet verified: not enough scan history yet (needs a 30-day window).
- Tool coverage in Tool Coverage (scores 0 for this)Tool coverage blocked by authentication: the endpoint requires auth we don't have to read its tools.
- Tool safety in Tool Safety (scores 0 for this)Tool safety blocked by authentication: the endpoint requires auth we don't have to read its tools.
- Capabilities in Capabilities (scores 0 for this)Capabilities blocked by authentication: the endpoint requires auth we don't have to read them.
Does not apply to this hosted endpoint (2)
- Supply Chain SecurityScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
- Provenance & TransparencyScored on package channels only. This is a hosted endpoint, so there is nothing to install or inspect.
The score does not measure everything. What the score does not measure →
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 10 Oct 26 −49
- Endpoint reachability: reachable → behind authorisation ▼ security
- Stability: fail → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Transport: pass → unverified ▼ security
- DNSSEC: fail → pass ▲ security
- Authorization: The endpoint enforces authorisation, advertised via RFC 9728 protected-resource metadata. security
- Capabilities: pass → unverified ▼ functional
- Schema quality: 0 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- 3 Oct 26 0
- Tool “find_lounges_by_access” rewrote its description, which is the text the model reads security
- Tool “get_network_lounges” rewrote its description, which is the text the model reads security
- Tool “list_networks” rewrote its description, which is the text the model reads security
- Schema quality: 55 → 61 ▼ functional
- “find_lounges_by_access” added an optional parameter “airport” cosmetic
- “get_network_lounges” added an optional parameter “airport” cosmetic
- “get_network_lounges” reworded the description of “network” cosmetic
- 30 Sept 26 0
- Stability: unverified → fail ▼ security
- Tool “discover_more_flight_tools” was removed ▼ security
- Authorization: unverified → pass ▲ security
- Injection markers: unverified → pass ▲ security
- Endpoint reachability: behind authorisation → reachable ▲ functional
- Schema quality: unverified → 0 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- MCP protocol version: 2026-07-28 → 2025-11-25 functional
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 21 Sept 26 0
- Endpoint reachability: reachable → behind authorisation ▼ security
- Authorization: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Stability: 0.73 → unverified ▼ security
- Capabilities: pass → unverified ▼ functional
- Schema quality: 0 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- 30 Aug 26 0
- Stability: unverified → 0.03 ▲ functional
- 29 Aug 26 0
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://mcp.airportloungelist.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=mcp.airportloungelist.com | CN=WE1,O=Google Trust Services,C=US | 11 Oct 2026 | 9 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | c841bb729c328ee70ecc8ce0a4c786b9 |
| SANs: mcp.airportloungelist.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of mcp.airportloungelist.com. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | Trust anchor | 20326, 38696 | 8, 8 | Verified |
| com. | DS published | 19718 | 13 | Verified |
| airportloungelist.com. | DS published | 2371 | 13 | Verified |
| mcp.airportloungelist.com. | Verified address RRset verified with the apex keys |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On connection |
| HTTP status | 401 |
WWW-Authenticate challenge Bearer scope="read", resource_metadata="https://mcp.airportloungelist.com/.well-known/oauth-protected-resource/mcp"
Bearer scope="read", resource_metadata="https://mcp.airportloungelist.com/.well-known/oauth-protected-resource/mcp"| Header | Value |
|---|---|
| strict-transport-security | max-age=63072000; includeSubDomains |
| www-authenticate | Bearer scope="read", resource_metadata="https://mcp.airportloungelist.com/.well-known/oauth-protected-resource/mcp" |
Protected resource metadata
| Document | https://mcp.airportloungelist.com/.well-known/oauth-protected-resource/mcp |
|---|---|
| Retrieved | Yes |
| Resource | https://mcp.airportloungelist.com/mcp |
| Authorisation server | https://mcp.airportloungelist.com |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.airportloungelist.com/mcp | Auth required | 401 | |
| http (plaintext) | http://mcp.airportloungelist.com/mcp | HTTPS enforced | 301 | https://mcp.airportloungelist.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
add_to_wishlist Add a lounge to my wishlist ~47
Add a lounge to your wishlist. Idempotent — adding a lounge already on your wishlist is a no-op.
| Name | Type | Req | Description |
|---|---|---|---|
| lounge_slug | string | yes | Lounge slug (from search results) |
No output schema declared.
No examples provided.
delete_review Delete my lounge review ~36
Delete your review of a lounge. Identify it by lounge_slug.
| Name | Type | Req | Description |
|---|---|---|---|
| lounge_slug | string | yes | Lounge slug of the review to delete |
No output schema declared.
No examples provided.
delete_visit Delete a logged visit ~79
Delete one of your logged lounge visits. Identify it by lounge_slug; pass visited_at to pick a specific date if you have multiple visits to the same lounge.
| Name | Type | Req | Description |
|---|---|---|---|
| lounge_slug | string | yes | Lounge slug of the visit to delete |
| visited_at | string | – | Visit date (YYYY-MM-DD) — needed only to disambiguate multiple visits |
No output schema declared.
No examples provided.
find_lounges_by_access Find lounges by access ~144
Find all airport lounges accessible with a specific credit card, membership program, airline club, alliance status, or ticket class. For example, find all lounges you can access with your Amex Platinum or Priority Pass membership. Pass airport to limit the results to one airport, e.g. the lounges an Amex Platinum card opens at JFK.
| Name | Type | Req | Description |
|---|---|---|---|
| access_method | string | yes | Access method slug (e.g. amex-platinum, priority-pass, chase-sapphire-reserve, business-class, star-alliance-gold) |
| airport | string | – | Optional airport IATA code (e.g. JFK, LHR). Only lounges at this airport are returned. |
No output schema declared.
No examples provided.
get_airport_lounges Lounges at an airport ~65
Get all airport lounges at a specific airport by IATA code. Returns every lounge at the airport with terminal location, amenities, access methods, and ratings.
| Name | Type | Req | Description |
|---|---|---|---|
| iata | string | yes | Airport IATA code (e.g. LHR, JFK, SIN) |
No output schema declared.
No examples provided.
get_lounge_details Lounge details ~58
Get detailed information about a specific airport lounge by its slug. Returns full description, amenities, access methods, opening hours, capacity, ratings, and reviews count.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Lounge slug (from search results or airport lounges) |
No output schema declared.
No examples provided.
get_my_passport My lounge passport ~51
Get your lounge passport — stats (lounges visited, airports, countries, reviews), country stamps, full visit history, and your reviews. Includes a shareable passport URL when your profile is public.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_my_profile My profile ~32
Get your Airport Lounge List profile — username, stats (reviews, visits, wishlisted lounges), and recent activity.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_my_reviews My reviews ~49
Get your lounge reviews, including pending ones. Returns rating, content, approval status, and lounge info.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Max reviews to return (default 20, max 50) |
No output schema declared.
No examples provided.
get_my_visits My lounge visits ~39
Get your visited lounges list with dates and notes.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Max visits to return (default 20, max 50) |
No output schema declared.
No examples provided.
get_my_wishlist My lounge wishlist ~21
Get your lounge wishlist — lounges you want to visit.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_network_lounges Lounges in a network ~134
Get all lounges in a specific lounge network. Returns every lounge that accepts a particular network membership (e.g. all Priority Pass lounges worldwide). Pass airport to limit the results to one airport, e.g. the Priority Pass lounges at Heathrow.
| Name | Type | Req | Description |
|---|---|---|---|
| airport | string | – | Optional airport IATA code (e.g. JFK, LHR). Only lounges at this airport are returned. |
| network | string | yes | Network slug (e.g. priority-pass, loungekey, dragonpass, plaza-premium, amex-centurion, diners-club, star-alliance, skyteam, oneworld, aspire) |
No output schema declared.
No examples provided.
list_access_methods List access methods ~51
List all available lounge access methods including credit cards (Amex Platinum, Chase Sapphire Reserve, etc.), membership programs (Priority Pass, LoungeKey, etc.), airline clubs, alliance status levels, and ticket classes.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_networks List lounge networks ~59
List all lounge networks with their descriptions and total lounge counts. Includes Priority Pass, LoungeKey, DragonPass, Plaza Premium, Amex Centurion, Diners Club, Star Alliance, SkyTeam, oneworld, and Aspire Lounges.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
mark_lounge_visited Log a lounge visit ~180
Log a lounge visit (check in). Identify the lounge by its slug OR by lounge_name + airport_iata. Optionally add a 1-5 rating and notes. Idempotent: logging the same lounge on the same date updates the existing visit's rating/notes instead of creating a duplicate.
| Name | Type | Req | Description |
|---|---|---|---|
| airport_iata | string | – | 3-letter airport IATA code — use with lounge_name. |
| lounge_name | string | – | Lounge name — use with airport_iata if you don't have the slug. |
| lounge_slug | string | – | Lounge slug (from search results). Preferred if known. |
| notes | string | – | Optional notes about your visit |
| rating | integer | – | Your rating, 1 (poor) to 5 (excellent) |
| visited_at | string | yes | Date of visit (YYYY-MM-DD) |
No output schema declared.
No examples provided.
remove_from_wishlist Remove a lounge from my wishlist ~31
Remove a lounge from your wishlist.
| Name | Type | Req | Description |
|---|---|---|---|
| lounge_slug | string | yes | Lounge slug (from search results) |
No output schema declared.
No examples provided.
search_lounges Search lounges ~79
Search airport lounges worldwide by name, airport name, IATA code, city, or country. Returns matching lounges with amenities, access methods, and ratings. Use this to find specific lounges or discover lounges in a location.
| Name | Type | Req | Description |
|---|---|---|---|
| query | string | yes | Search query (lounge name, airport name, IATA code, city, or country) |
No output schema declared.
No examples provided.
update_review Update my lounge review ~74
Update your review of a lounge — change the rating and/or the text. Identify the review by lounge_slug.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | – | New review text (minimum 10 characters) |
| lounge_slug | string | yes | Lounge slug of the review to update |
| rating | integer | – | New rating, 1-5 |
No output schema declared.
No examples provided.
update_visit Update a logged visit ~135
Update one of your logged lounge visits — change the rating, notes, or date. Identify the visit by lounge_slug; if you have multiple visits to the same lounge, pass visited_at to pick the one to update.
| Name | Type | Req | Description |
|---|---|---|---|
| lounge_slug | string | yes | Lounge slug of the visit to update |
| new_visited_at | string | – | Change the visit date to this (YYYY-MM-DD) |
| notes | string | – | New notes |
| rating | integer | – | New rating, 1-5 |
| visited_at | string | – | Existing visit date (YYYY-MM-DD) — needed only to disambiguate multiple visits |
No output schema declared.
No examples provided.
write_review Write a lounge review ~83
Write a review for a lounge. Requires the lounge slug, a rating (1-5), and review text (min 10 characters).
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | yes | Review text (minimum 10 characters) |
| lounge_slug | string | yes | Lounge slug (from search results) |
| rating | integer | yes | Rating from 1 (poor) to 5 (excellent) |
No output schema declared.
No examples provided.
How do I install the Airport Lounge List MCP server?
Airport Lounge List is a hosted endpoint at https://mcp.airportloungelist.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.airportloungelist.com
claude mcp add --transport http com-airportloungelist-mcp-lounges 'https://mcp.airportloungelist.com/mcp'
What is the Airport Lounge List MCP server?
Airport Lounge List is an MCP server listed in the public MCP registry as com.airportloungelist.mcp/lounges. Search 8,500+ airport lounges and check access by card or membership. This page covers its hosted endpoint (https://mcp.airportloungelist.com/mcp).
Is the Airport Lounge List MCP server safe to use?
Airport Lounge List scores 39 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Airport Lounge List MCP server expose?
Airport Lounge List exposes 20 tools: search_lounges, get_airport_lounges, get_lounge_details, find_lounges_by_access, list_access_methods, and 15 more. Their descriptions and schemas cost roughly 1,447 tokens of context every time the server is loaded.
Does the Airport Lounge List MCP server require authentication?
Yes. Airport Lounge List asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the Airport Lounge List MCP server still maintained?
Airport Lounge List is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What did VerifyMCP test on the Airport Lounge List MCP server?
VerifyMCP ran 5 checks on Airport Lounge List, covering TLS certificate, Authorization, HTTPS, HSTS header and 1 more. 6 items could not be completed, a gap on our side rather than a finding about Airport Lounge List: Transport, Schema quality, Stability, Tool coverage and 2 more. 6 categories score 0 for that reason, because we only credit what we can confirm. Supply Chain Security and Provenance & Transparency do not apply to a hosted endpoint, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.