Esoru by resortlife.travel
REMOTE · RESORTLIFE.TRAVEL
Read-only Maldives resort research, comparisons and media for approved travel agencies.
Available components
Last scanned (23 hours ago)
Scores higher than 64% of remote servers
Reachable. Last reached 4 Nov 2026.
Category Maps and Location
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security80
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability81
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2351 tokens (~106/item across 22 items; 21 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management3
- Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 21 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 23 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Stability: unverified → 0.03 ▲ functional
- Server version: 0.6.1 → 0.7.0 functional
- 3 Nov 26 +39
- Transport: unverified → pass ▲ security
- Injection markers: unverified → pass ▲ security
- Authorization: fail → partial ▲ security
- First check of Judged manipulation: pass security
- MCP protocol: unverified → pass ▲ functional
- Schema quality: unverified → 100 ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: fail functional
- First check of Destructive annotations: pass functional
- First check of Schema quality: fail functional
- First check of Capabilities: pass functional
- First check of Schema quality: good functional
- First check of Tool coverage: 100 functional
- 24 Oct 26 36
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Probed https://resortlife.travel/api/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=resortlife.travel | CN=YE1,O=Let's Encrypt,C=US | 14 Oct 2026 | 12 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 6bb4dbc824b85e8c24ce8bde298100e503e |
| SANs: resortlife.travel, www.resortlife.travel | ||||||
| CN=YE1,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 5ddd70dd31f801c85c186a7a04b80afe |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of resortlife.travel. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| travel. | present | 60277 | 8 | Verified |
| resortlife.travel. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000 |
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(self), geolocation=(self), payment=(), usb=(), browsing-topics=() |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://resortlife.travel/api/mcp | Verified | 200 | |
| http (plaintext) | http://resortlife.travel/api/mcp | HTTPS enforced | 301 | https://resortlife.travel/api/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
catalog_stats Catalog coverage ~26
How much of the Maldives this catalog actually covers — visible property count and atoll count.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
compare_resorts Compare resorts ~54
Side-by-side comparison of 2-6 properties on a fixed attribute set (location, transfers, scale, board, tier, experience tags).
| Name | Type | Req | Description |
|---|---|---|---|
| slugs | array | yes | 2-6 canonical property slugs. |
No output schema declared.
No examples provided.
find_nearby Find places near a resort, dive site or surf break ~149
What is close to a named place on the Maldives map: resorts, guesthouses, dive sites, surf breaks and restaurants at other properties, nearest first, with a mix of kinds and straight-line distance. Distance is not travel time.
| Name | Type | Req | Description |
|---|---|---|---|
| anchor | string | yes | Slug of that place. Guesthouses count as the resort type. |
| anchorType | string | yes | The kind of place to measure from. |
| include | array | – | Kinds of result to return: resort, guesthouse, dive_site, surf_break, dining. Defaults to all of them. |
| limit | integer | – | Maximum results (1-50). |
| radiusKm | number | – | Search radius in kilometres. |
No output schema declared.
No examples provided.
get_dive_site Get a dive site ~43
Full record for one dive site, including its description, photo with credit, protected status and marine-welfare guidance.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Dive site slug. |
No output schema declared.
No examples provided.
get_male_flights Flights on the Velana (Malé) airport board ~227
Current arrivals and departures on the board at Velana International Airport, Malé: scheduled and estimated times in Maldives time, status, terminal. It covers only what the airport shows now, so it is not a timetable, gives no journey lengths, and cannot say whether a transfer connects. The feed block reports whether the board is live and when it last updated.
| Name | Type | Req | Description |
|---|---|---|---|
| airline | string | – | Airline name or code, e.g. "Emirates", "EK". |
| category | string | – | Domestic flights connect to the local airports. |
| direction | string | – | Arrivals into Malé, departures from it, or both. |
| flightNumber | string | – | e.g. "EK 652". Spacing does not matter. |
| includeFinished | boolean | – | Also show flights that have landed, departed or been cancelled. |
| limit | integer | – | Maximum flights (1-60). |
| place | string | – | The other end of the flight: a city or airport code, e.g. "Dubai", "DXB", "Dharavandhoo". |
No output schema declared.
No examples provided.
get_resort Get a resort dossier ~103
Full record for one property: location, transfers, meal plans, room/dining counts, policies, sustainability, brand detail, a few photographs and its 360° tour when published. Optionally attaches the child catalogues (villas, dining, spa, dive, experiences) in the same call.
| Name | Type | Req | Description |
|---|---|---|---|
| include | array | – | Child catalogues to attach: villas, dining, spa, dive, experiences. |
| slug | string | yes | Canonical property slug. |
No output schema declared.
No examples provided.
get_resort_gallery Get a resort's photo gallery ~99
Photography for one property, in the site's own display order (editor's primary pick first, then owned bucket imagery). Returns direct image URLs with category and photo credit where recorded.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Filter to one image category, e.g. "Aerial", "Villas", "Dining". Case-insensitive. |
| limit | integer | – | Maximum images (1-60). |
| slug | string | yes | Canonical property slug. |
No output schema declared.
No examples provided.
get_vr_tour Get a 360° tour's scene list ~90
The scene graph for one published 360° tour: every panorama with its title, category and panorama image URLs: what a guest can walk through before booking.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Filter scenes to one category, e.g. "Villas & Suites", "Dining". |
| slug | string | yes | Resort slug (not the tour key) — e.g. "w-maldives". |
No output schema declared.
No examples provided.
list_atolls List atolls ~51
The Maldives atolls carrying accommodation, with resort counts and lagoon centroid coordinates. Optionally includes each atoll's resort roster.
| Name | Type | Req | Description |
|---|---|---|---|
| includeResorts | boolean | – | Attach the resort list for each atoll. |
No output schema declared.
No examples provided.
list_dining List dining venues ~47
Restaurants and bars at a resort: cuisine, style, setting, dress code, signature dishes. Pricing and priced menu documents are excluded.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Canonical property slug. |
No output schema declared.
No examples provided.
list_dive_centres List dive centres ~50
Dive operations: operator, PADI level, courses, instructor languages, house reef quality, named dive sites and the marine life encountered there.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Canonical property slug. |
No output schema declared.
No examples provided.
list_dive_sites List Maldives dive sites ~129
Named dive and snorkel sites with depth, skill level, current, best season and the species seen there. Coordinates appear only when the exact position has been verified. These are sites, not resort dive centres.
| Name | Type | Req | Description |
|---|---|---|---|
| atoll | string | – | Atoll name, partial match — e.g. "Baa", "South Ari". |
| limit | integer | – | Maximum results (1-100). |
| snorkelOnly | boolean | – | Only sites suited to snorkelling. |
| species | string | – | Marine species, partial match — e.g. "manta", "whale shark". |
No output schema declared.
No examples provided.
list_experiences List resort experiences ~43
Activities and excursions offered at a resort: type, category, duration, what is included and any age restriction.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Canonical property slug. |
No output schema declared.
No examples provided.
list_spas List spa venues ~41
Spa and wellness facilities: operating brand, setting, treatment rooms, couples suites, signature treatments and specialties.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Canonical property slug. |
No output schema declared.
No examples provided.
list_surf_breaks List Maldives surf breaks ~88
Named surf breaks with a verified position: wave type, skill level, best season, hazards and the nearest property.
| Name | Type | Req | Description |
|---|---|---|---|
| atoll | string | – | Atoll name, partial match — e.g. "North Male", "Laamu". |
| limit | integer | – | Maximum results (1-50). |
| month | string | – | Only breaks whose stated best season includes this month. |
No output schema declared.
No examples provided.
list_villas List villas ~52
Room and villa categories for a resort: size, occupancy, bed config, view, overwater/pool/beach flags and inclusions. Pricing is excluded.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Canonical property slug. |
No output schema declared.
No examples provided.
list_vr_tours List published 360° tours ~55
Every resort with a published self-hosted 360° virtual tour, with scene counts and a thumbnail. Only returns tours that are live on the site.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum tours (1-60). |
No output schema declared.
No examples provided.
resolve_resort Resolve a resort name to its slug ~100
Turn a loosely-written resort name into its canonical slug and a confidence score. Handles the real-world drift between how a resort is written and how it is stored — "Soneva Fushi" vs "SonevaFushi", "ONE&ONLY" vs "One & Only", missing or extra suffix words. A score below 0.6 is not a confident match.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Resort name as written by the user. |
No output schema declared.
No examples provided.
search_resorts Search resorts ~353
Search the Maldives accommodation catalog by name, atoll, star class, transfer mode, meal plan and experience. Results list resorts before guesthouses and are not a ranking by quality. Can also narrow to a short transfer from the airport or to stays with a 360° tour. Returns compact summaries.
| Name | Type | Req | Description |
|---|---|---|---|
| atoll | string | – | Atoll name, partial match — e.g. "Baa", "South Ari". |
| experiences | array | – | Properties must match ALL of these: honeymoon, family, diving, snorkeling, surfing, wellness, adults-only, all-inclusive, overwater-villas, private-pool, manta-rays, whale-sharks, water-sports, house… |
| hasVirtualTour | boolean | – | True: only stays with a published 360° tour. |
| limit | integer | – | Maximum results (1-60). |
| maxTransferMinutes | integer | – | Only stays with a recorded airport transfer this short, in minutes. Uses the top of any range, adds up the legs of a two-part journey, and leaves out stays with no figure on record. Connection waits… |
| mealPlan | string | – | Board basis — e.g. "All Inclusive", "Half Board". |
| propertyType | string | – | Restrict to resorts or guesthouses. |
| query | string | – | Free text: a name, island, atoll or words like honeymoon or overwater. Typo-tolerant for names. |
| starRating | string | – | Official star class. |
| transferType | string | – | Airport transfer mode, partial match — e.g. "seaplane", "speedboat", "domestic". |
No output schema declared.
No examples provided.
similar_resorts Find similar resorts ~55
Nearest alternatives to a given property, matched on atoll, tier, transfer mode and experience profile.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | How many alternatives (1-12). |
| slug | string | yes | Canonical property slug. |
No output schema declared.
No examples provided.
when_to_see When and where to see marine life ~167
Where and in which months to see an animal in the Maldives: manta rays, whale sharks, turtles, hammerheads and others. Gives the species' season, the sites that list it with each site's stated season, a month-by-month count, and the nearest stays to each site by straight line. With a month, sites stated as out of season are left out and counted. Never promises a sighting.
| Name | Type | Req | Description |
|---|---|---|---|
| atoll | string | – | Atoll name, partial match — e.g. "Baa", "South Ari". |
| limit | integer | – | Maximum sites (1-30). |
| month | string | – | The month of travel. |
| species | string | yes | The animal, e.g. "manta", "whale shark", "hawksbill turtle". |
No output schema declared.
No examples provided.
How do I install the Esoru by resortlife.travel MCP server?
Esoru by resortlife.travel is a hosted endpoint at https://resortlife.travel/api/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · resortlife.travel
claude mcp add --transport http travel-resortlife-esoru 'https://resortlife.travel/api/mcp'
What is the Esoru by resortlife.travel MCP server?
Esoru by resortlife.travel is an MCP server listed in the public MCP registry as travel.resortlife/esoru. Read-only Maldives resort research, comparisons and media for approved travel agencies. This page covers its hosted endpoint (https://resortlife.travel/api/mcp).
Is the Esoru by resortlife.travel MCP server safe to use?
Esoru by resortlife.travel scores 75 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Esoru by resortlife.travel MCP server expose?
Esoru by resortlife.travel exposes 21 tools: search_resorts, resolve_resort, get_resort, list_villas, list_dining, and 16 more. Their descriptions and schemas cost roughly 2,022 tokens of context every time the server is loaded.
Does the Esoru by resortlife.travel MCP server require authentication?
No. We connected to Esoru by resortlife.travel without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Esoru by resortlife.travel MCP server still maintained?
Esoru by resortlife.travel is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.