Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.DIDA-AI/hotelbooking

NPM · @DIDAAI/HOTELBOOKING · SCANNED SEP 25

Hotel Booking MCP Server

Available components

npm · @didaai/hotelbooking 77
0 this week 77 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 34 of 108 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency32
Schema Quality & AI Usability63
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 730 tokens (~243/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
  • Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 3 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the io.github.DIDA-AI/hotelbooking MCP server?

io.github.DIDA-AI/hotelbooking runs locally as an npm package, launched with npx -y @didaai/hotelbooking. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @didaai/hotelbooking

# add to Claude Code
claude mcp add dida-ai-hotelbooking -- npx -y @didaai/hotelbooking
// .cursor/mcp.json
{
  "mcpServers": {
    "dida-ai-hotelbooking": {
      "command": "npx",
      "args": [
        "-y",
        "@didaai/hotelbooking"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "dida-ai-hotelbooking": {
      "command": "npx",
      "args": [
        "-y",
        "@didaai/hotelbooking"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add dida-ai-hotelbooking -- npx -y @didaai/hotelbooking
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dida-ai-hotelbooking": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@didaai/hotelbooking"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add dida-ai-hotelbooking --command npx --arg -y --arg @didaai/hotelbooking
# ~/.hermes/config.yaml
mcp_servers:
  dida-ai-hotelbooking:
    command: "npx"
    args: ["-y", "@didaai/hotelbooking"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "dida-ai-hotelbooking": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@didaai/hotelbooking"
      ]
    }
  }
}
# add to Vellum
assistant mcp add dida-ai-hotelbooking -t stdio -c npx -a -y @didaai/hotelbooking
// mcp.json
{
  "mcpServers": {
    "dida-ai-hotelbooking": {
      "command": "npx",
      "args": [
        "-y",
        "@didaai/hotelbooking"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 24 Sept 26 +1
    • Security disclosure: unverified → fail ▼ functional
  • 23 Sept 26 −3
    • Security disclosure: fail → unverified ▼ functional
    • Stability: pass → 0.80 functional
  • 22 Sept 26 0
    • Stability: 0.97 → pass security
  • 21 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 19 Sept 26 +1
    • Security disclosure: unverified → fail ▼ functional
  • 17 Sept 26 +1
    • Security disclosure: fail → unverified ▼ functional
  • 16 Sept 26 −3
    • Stability: pass → 0.80 functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 25 Sept 2026 · Analysed npm/@didaai/hotelbooking@1.0.0

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 108 packages
Packages resolved 108
Stale 34
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 3 exposed · ~730 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
getHotelDetail ~290

查询单个酒店的实时房型和价格（包括房型、价格和税费、可用性、取消政策等）。在用户选择特定酒店后，用于二次比价和确认详情。

NameTypeReqDescription
dateParamobject–入住/退房日期对象。字段：checkInDate (字符串，YYYY-MM-DD，请尽可能传递有效的未来日期)；checkOutDate (字符串，YYYY-MM-DD，必须晚于 checkInDate)。
hotelIdnumber–酒店唯一 ID。使用此字段或 `name`；如果同时提供，则优先使用 `hotelId`（从 searchHotels 工具获取）。
localeParamobject–地区/货币偏好。字段：countryCode (ISO 3166-1 alpha-2，默认为 CN)；currency (ISO 4217，默认为 CNY)。
namestring–酒店名称（模糊匹配）。仅在未提供 `hotelId` 时使用。
occupancyParamobject–入住人员详情。字段：adultCount (整数，>=1，默认 2)；childCount (整数，>=0，默认 0)；childAgeDetails (儿童年龄数组，例如 [3,5])；roomCount (整数，>=1，默认 1)。

No output schema declared.

No examples provided.

getHotelSearchTags ~58

检索酒店搜索标签元数据（AI 缓存），包括可用标签的列表。适用于在本地缓存标签后，通过解析用户意图，将结构化标签传递给 `searchHotels.hotelTags`。

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

searchHotels ~382

根据位置搜索酒店。支持城市、机场、景点、火车站、地铁站、酒店名称、区县或详细地址。返回包含基本信息和价格的匹配酒店列表。

NameTypeReqDescription
checkInParamobject–入住参数。字段：adultCount (整数，>=1，默认 2)；checkInDate (字符串 YYYY-MM-DD，未来的日期)；stayNights (整数，1~28，默认 1)。
countryCodestring–ISO 3166-1 alpha-2 国家/地区代码，用于货币/地区偏好。默认值为 CN（中国）。
filterOptionsobject–酒店筛选选项，例如酒店星级、每间房成人数、距离等
hotelTagsobject–酒店筛选标签参数（可选）。当传入此参数时，将直接使用这些标签进行筛选和排序，无需服务端额外解析。包含字段：requiredTags（必须标签）、preferredBrands（偏好品牌）、maxPricePerNight（每晚最高预算）
originQuerystringyes综合多轮对话，归纳用户的完整住宿/预订意图。
placestringyes搜索目标名称。填写用户指定的城市、机场、景点、火车站、地铁站、酒店、区/县或详细地址；如果用户输入的是具体酒店名称，直接填写酒店名称
placeTypestringyesplace 的类型，必须与 place 的实际内容一致。可选值：城市、机场、景点、火车站、地铁站、酒店、区/县、详细地址。
sizenumber–返回酒店结果数量，默认5个酒店，最大不超过20个

No output schema declared.

No examples provided.

Common questions

What is the io.github.DIDA-AI/hotelbooking MCP server?

io.github.DIDA-AI/hotelbooking is an MCP server listed in the public MCP registry as io.github.DIDA-AI/hotelbooking. Hotel Booking MCP Server. This page covers its npm package (@didaai/hotelbooking).

Is the io.github.DIDA-AI/hotelbooking MCP server safe to use?

io.github.DIDA-AI/hotelbooking scores 77 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 25 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.DIDA-AI/hotelbooking MCP server expose?

io.github.DIDA-AI/hotelbooking exposes 3 tools: searchHotels, getHotelDetail, getHotelSearchTags. Their descriptions and schemas cost roughly 730 tokens of context every time the server is loaded.

Is the io.github.DIDA-AI/hotelbooking MCP server still maintained?

io.github.DIDA-AI/hotelbooking is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.