Skip to content
anlyon.devby Anlyon

Daytrip

com.daytrip/mcpdaytrip.comstreamable-httpv1.0.0Scanned

Search, quote and book Daytrip private door-to-door car transfers in 130+ countries.

3 tools: 1 change things and 2 only read.

Tools: 0 delete, 0 irreversible, 1 write, 2 read.
  • Reads private data · 0
  • Reads text others write · 3
  • Can send data out · 0
  • 2 findings

Anlyon alternative

1 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

3 tools

Changes things 1Claude Code: ask
Only reads 2Show 2 read-only tools
  • get_quotePrice one search_trips option exactly as it will be booked: the chosen vehicle, the party and any stops.Reads text others writeNo findings

    Why it is in this group

    • The name "get_quote" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Price one search_trips option exactly as it will be booked: the chosen vehicle, the party and any stops. Returns everything the traveler must see before committing (seller, total price and currency, what is included, when they are charged, cancellation policy and free-cancellation deadline) and a single-use quoteId for book_trip. Returns one of: - status "quoted": present price, cancellationTerms and paymentTiming to the traveler; if previousPrice is set, the price differs from the search option and must be confirmed again. The quote can be booked until expiresAt; afterwards call get_quote again. - status "offer_expired" (OFFER_EXPIRED): the search option is gone; call search_trips again. - status "route_not_available" (ROUTE_NOT_AVAILABLE): the trip can no longer be priced; call search_trips again or suggest alternatives. - status "invalid_input" (INVALID_INPUT): the vehicleType or a stop does not belong to that offer, or a customStops place could not be resolved; the message says what to fix. Nothing is reserved and no personal data is needed. Each call prices the trip afresh.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • search_tripsSearch Daytrip private door-to-door car transfers between two places (city to city, airport to city, …) and get bookable prices for every vehicle class.Reads text others write1 finding

    Why it is in this group

    • The name "search_trips" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.

    Findings

    • Info

      The description is 2,290 characters long, over the 2,000 this check looks for.

      Matched text

      description ends: "...and daytrip://cancellation-policy resources for what each class and policy means."

      What this check looks for
    Description, as the server wrote it
    Search Daytrip private door-to-door car transfers between two places (city to city, airport to city, …) and get bookable prices for every vehicle class. Returns one of: - status "ok": options[] (one per vehicle class) with price, capacity, duration and expiresAt, plus the resolved origin/destination and departureAt (local time). Present the options that fit the party (fitsPassengers) to the customer; when they choose, call get_quote with the option's offerId and vehicle.type (then book_trip with the quote), or get_booking_link with the same arguments for the traveler to finish on daytrip.com. availableStops[] lists sightseeing stops on the way with their extra cost per vehicle class (priceByVehicle, keyed by vehicle.type) and default time at the stop; offer them and pass the chosen ones to get_quote or get_booking_link. Only options with stopsAllowed can take stops (Lite classes are direct rides). - status "ambiguous_location" (code AMBIGUOUS_LOCATION): field says whether origin or destination was unclear, candidates[] lists the places it could mean. Ask the customer, then call search_trips again passing the chosen candidate's label verbatim in that field. - status "location_not_found" (LOCATION_NOT_FOUND): ask for a city, airport or IATA code. - status "invalid_departure" (INVALID_DEPARTURE): fix the date/time and retry. - status "route_not_available" (ROUTE_NOT_AVAILABLE): Daytrip does not serve that trip; suggest a nearby city/airport or another date. - status "price_unavailable" (PRICE_UNAVAILABLE): nothing could be priced for that date; suggest another date. When talking to the customer, describe options by vehicle name and price and never mention ids, tool names or internal steps. Prices are per vehicle (not per person), all-inclusive and valid until expiresAt. price is in the trip's pricing currency; when a currency was requested and priceInRequestedCurrency is present, that is the amount the checkout charges, so quote that one to the customer. Only one-way transfers with a single vehicle are searched; larger parties may need two bookings. vehicle.type is the vehicle class identifier to pass on; show the customer vehicle.name. Read the daytrip://vehicle-classes and daytrip://cancellation-policy resources for what each class and policy means.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write3
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

1 warn1 info
  • Warnget_booking_link

    The server marks "get_booking_link" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The name "get_booking_link" says "get": a word for reading.

    What this check looks for
  • Infosearch_trips

    The description is 2,290 characters long, over the 2,000 this check looks for.

    Matched text

    description ends: "...and daytrip://cancellation-policy resources for what each class and policy means."

    What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http daytrip https://mcp.daytrip.com/mcp
claude mcp add --transport http daytrip https://mcp.daytrip.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__daytrip__search_trips",
      "mcp__daytrip__get_quote"
    ],
    "ask": [
      "mcp__daytrip__get_booking_link"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as daytrip. Review it before you use it.

Capability tags behind 3 rules
  • mcp__daytrip__search_trips untrusted-input
  • mcp__daytrip__get_quote untrusted-input
  • mcp__daytrip__get_booking_link untrusted-input

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.daytrip/mcp/verify?hash=ca6254131fa5a79896c171081122e570495fb6d1b330e19acafe6b645a07b0c6" | jq -e '.changed == false'

Pinned hash ca6254131fa5, from Oct 26, 2026, 15:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.daytrip/mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.daytrip/mcp
[![anlyon.dev](https://anlyon.dev/badge/com.daytrip/mcp.svg)](https://anlyon.dev/servers/com.daytrip/mcp)

Source: MCP Registry. Synced Oct 26, 2026, 16:17 UTC.