HotelUse - Hotel Metasearch
REMOTE · WWW.HOTELUSE.DEV
Compare hotel prices, room options and booking providers with live HotelUse searches.
Available components
Last scanned (3 hours ago)
Scores higher than 54% of remote servers
Reachable. Last reached 5 Nov 2026.
Category E-commerce
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security83
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability29
- 0% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Fail
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2851 tokens (~712/item across 4 items; 3 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management23
- Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage87
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 60% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 30 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 29 Oct 26 65
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://www.hoteluse.dev/mcp/search
TLS valid
Negotiated TLS 1.3 with TLS_AES_256_GCM_SHA384 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=www.hoteluse.dev | CN=YR1,O=Let's Encrypt,C=US | 21 Oct 2026 | 19 Jan 2027 | RSA 2048 | SHA256-RSA | 5a7a65f89cee0133f2b938f172e3690acd5 |
| SANs: www.hoteluse.dev | ||||||
| CN=YR1,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | a20253f15f2691c05dc1ce13b9bcca4e |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of www.hoteluse.dev. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| hoteluse.dev. | present | 29167 | 13 | Verified |
| www.hoteluse.dev. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://www.hoteluse.dev/mcp/search | Verified | 200 | |
| http (plaintext) | http://www.hoteluse.dev/mcp/search | HTTPS enforced | 308 | https://www.hoteluse.dev/mcp/search |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
get_hotel Hotel information ~492
Get undated facts for one identified or named hotel: address, photos, descriptions, star classification, sourced guest ratings, consecutive positive review count, facilities, pet/parking policies and timezone. Optional fee amounts may be absent in the catalog. Accepts the exact HotelUse hotel_id from a previous result, or hotel_name and destination. A unique, confident match is required. A full hotel name may be used without a destination; add the destination when ambiguous. No stay dates, availability, live prices or room-level offers are included. Supply exactly one hotel_id or hotel_name. Omit unknown optional values; do not send null. Resolve a hotel follow-up by name or position against the most recent relevant ordered search list. Copy its hotel_id exactly; if unavailable, use hotel_name and destination. Ask only if the hotel is ambiguous. For room options or current room prices call get_room_rates directly, passing search_quote_session_id from that search to preserve its stay and preferences. The first get_room_rates response includes all returned room groups and every provider minimum in room_groups. For all room options and prices, use that complete list after one call; do not paginate raw supplier offers or re-query the same stay. The raw_offer_page count describes supplier rate plans, not additional room types. Users can expand room cards locally without another price query. For undated amenities, policies or other hotel facts call get_hotel directly. Do not repeat a destination search before either hotel-specific tool. Existing returned prices may be explained without refreshing when no new search or current quote is requested.
| Name | Type | Req | Description |
|---|---|---|---|
| country | string | – | – |
| destination | string | – | City or region to disambiguate the hotel name. |
| hotel_id | string | – | Exact HotelUse hotel_id from a previous result. |
| hotel_name | string | – | Hotel name when no exact hotel_id is available. A unique, confident match is required. A full hotel name may be used without a destination; add the destination when ambiguous. |
| locale | string | – | Traveler BCP 47 language, such as en-GB, independent of the destination. |
| region | string | – | – |
| user_locale | string | – | Optional traveler locale from client context, such as en-GB. Independent of the hotel destination. |
| user_location_country | string | – | Optional traveler country from client context, used for default currency and residency. Independent of the hotel destination. |
No output schema declared.
No examples provided.
get_room_rates Room options ~785
Get one identified or named hotel’s room options and provider prices for explicit hotel-local dates (including today), or date_intent: tonight, and occupancy. Tonight is resolved server-side in the hotel time zone. Accepts the exact HotelUse hotel_id from search_hotels, or hotel_name and destination when the ID is unavailable; destination is optional but helps disambiguation. A unique hotel match is required. Returns server-grouped room types, rate terms and full-stay provider prices in a separate Room options view. Provider price links open external booking pages; no reservation is made. Providing search_quote_session_id inherits omitted dates, occupancy, currency, language, residency and rate filters from that exact search. Explicit itinerary changes create a new quote; the search device is preserved. Supply exactly one hotel_id or hotel_name. Supply check_in/check_out, date_intent, or an existing search_quote_session_id for room quotes. All returned room groups are included in the first response; no room pagination is needed. Omit unknown optional values; do not send null. Resolve a hotel follow-up by name or position against the most recent relevant ordered search list. Copy its hotel_id exactly; if unavailable, use hotel_name and destination. Ask only if the hotel is ambiguous. For room options or current room prices call get_room_rates directly, passing search_quote_session_id from that search to preserve its stay and preferences. The first get_room_rates response includes all returned room groups and every provider minimum in room_groups. For all room options and prices, use that complete list after one call; do not paginate raw supplier offers or re-query the same stay. The raw_offer_page count describes supplier rate plans, not additional room types. Users can expand room cards locally without another price query. For undated amenities, policies or other hotel facts call get_hotel directly. Do not repeat a destination search before either hotel-specific to…
| Name | Type | Req | Description |
|---|---|---|---|
| check_in | string | – | Hotel-local calendar date; today is allowed in the destination time zone, even after UTC midnight. |
| check_out | string | – | – |
| country | string | – | – |
| currency | string | – | Requested display currency. Omission defaults to client visitor country, then locale, then USD. |
| date_intent | string | – | A one-night stay resolved server-side in the destination or hotel time zone. Mutually exclusive with check_in/check_out. |
| destination | string | – | City or region to disambiguate the hotel name. |
| device | string | – | Optional traveler device. Omission uses trusted client hints, then desktop. Room follow-ups inherit the effective search device. Mobile app rates require an approved native-app integration. |
| hotel_id | string | – | Exact HotelUse hotel_id from a previous result. |
| hotel_name | string | – | Hotel name when no exact hotel_id is available. A unique, confident match is required. A full hotel name may be used without a destination; add the destination when ambiguous. |
| locale | string | – | Traveler BCP 47 language, such as en-GB, independent of the destination. |
| providers | array | – | – |
| rate_filters | object | – | – |
| region | string | – | – |
| residency_country | string | – | – |
| rooms | array | – | – |
| search_quote_session_id | string | – | A search result’s search_session_id. Inherits omitted stay dates, rooms, currency, language, residency and rate_filters from that search. Its device is preserved even if current client metadata chang… |
| user_locale | string | – | Optional traveler locale from client context, such as en-GB. Independent of the hotel destination. |
| user_location_country | string | – | Optional traveler country from client context, used for default currency and residency. Independent of the hotel destination. |
No output schema declared.
No examples provided.
search_hotels Search hotels ~1,136
Search a destination or latitude/longitude (with country) for explicit hotel-local dates (including today), or date_intent: tonight. Tonight is resolved server-side in the destination time zone, never UTC. Returns hotel summaries and the lowest eligible full-stay total from Expedia, Booking, Agoda and Brek, with direct provider booking links. Search starts at a 20 km core radius, expanding to 40 km then 60 km while fewer than 50 matching static candidates exist, within the same tool call and deadline. Explicit max_distance_km disables expansion. Providers are queried once after the final candidate scope is chosen. Default order is nearest 5 km distance bands first, then greatest Brek price advantage over the cheapest other provider in each band. The advantage uses comparable full-stay totals in the same currency; missing comparisons go last within their band. Preserve the returned hotel order unless the user requests another sort. Supports star ranges or exact stars, guest-review minimum and review count, facilities, property types, distance and full-stay price budgets. Hotel and rate filters can be combined; budgets cover all nights and requested rooms, including mandatory taxes and fees. Guest scores and hotel star classifications have separate filters. no_matching_offer means prices/terms failed the requested filters, not sold out. Room types and room-level rate plans are not included. No HotelUse account or API credits required. Device detection is automatic with a desktop fallback. For a fresh search supply destination or latitude/longitude with country, and either check_in/check_out or date_intent. Search pagination accepts only quote_session_id and cursor. Omit unknown optional values; do not send null. On follow-ups that change destination, dates, guests, hotel/rate filters or sort, call search_hotels again once with the updated criteria and preserve unchanged itinerary/preferences from the latest relevant search. Do not filter or reorder an earlier result…
| Name | Type | Req | Description |
|---|---|---|---|
| check_in | string | – | Hotel-local calendar date; today is allowed in the destination time zone, even after UTC midnight. |
| check_out | string | – | – |
| country | string | – | – |
| currency | string | – | Requested display currency. Omission defaults to client visitor country, then locale, then USD. |
| cursor | string | – | Copy the returned next_cursor exactly. Do not calculate an offset or mix new filters with a quote page. |
| date_intent | string | – | A one-night stay resolved server-side in the destination or hotel time zone. Mutually exclusive with check_in/check_out. |
| destination | string | – | – |
| device | string | – | Optional traveler device. Omission uses trusted client hints, then desktop. Room follow-ups inherit the effective search device. Mobile app rates require an approved native-app integration. |
| hotel_filters | object | – | – |
| latitude | number | – | Search center latitude. Supply together with longitude. Explicit coordinates take precedence over city/region. |
| locale | string | – | Traveler BCP 47 language, such as en-GB, independent of the destination. |
| longitude | number | – | Search center longitude. Supply together with latitude. |
| page_size | integer | – | – |
| providers | array | – | – |
| quote_session_id | string | – | Copy the exact quote_session_id from the result being paged. |
| rate_filters | object | – | – |
| region | string | – | – |
| residency_country | string | – | – |
| rooms | array | – | – |
| sort | string | – | For nearest, closest, or sorting by distance use distance_asc (exact straight-line distance ascending). Default: nearest 5 km distance bands first (0–5, 5–10, 10–15, 15–20 km), then greatest Brek pri… |
| user_locale | string | – | Optional traveler locale from client context, such as en-GB. Independent of the hotel destination. |
| user_location_country | string | – | Optional traveler country from client context, used for default currency and residency. Independent of the hotel destination. |
No output schema declared.
No examples provided.
How do I install the HotelUse - Hotel Metasearch MCP server?
HotelUse - Hotel Metasearch is a hosted endpoint at https://www.hoteluse.dev/mcp/search, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · www.hoteluse.dev
claude mcp add --transport http leo9-hoteluse 'https://www.hoteluse.dev/mcp/search'
What is the HotelUse - Hotel Metasearch MCP server?
HotelUse - Hotel Metasearch is an MCP server listed in the public MCP registry as io.github.leo9/hoteluse. Compare hotel prices, room options and booking providers with live HotelUse searches. This page covers its hosted endpoint (https://www.hoteluse.dev/mcp/search).
Is the HotelUse - Hotel Metasearch MCP server safe to use?
HotelUse - Hotel Metasearch scores 69 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the HotelUse - Hotel Metasearch MCP server expose?
HotelUse - Hotel Metasearch exposes 3 tools: search_hotels, get_room_rates, get_hotel. Their descriptions and schemas cost roughly 2,413 tokens of context every time the server is loaded.
Does the HotelUse - Hotel Metasearch MCP server require authentication?
No. We connected to HotelUse - Hotel Metasearch without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the HotelUse - Hotel Metasearch MCP server still maintained?
HotelUse - Hotel Metasearch is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.