Skip to content

com.fostay/hotels

by fostay.com · remote · no sign-in to list tools · v2.1.0 · published by com.fostay

Agent-bookable hotels in Dubai, Abu Dhabi & Goa: live all-in AED prices, rate holds, payment links.

Changes · 3
CompareRegistry entry

6 tools: 3 change things and 3 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http hotels https://fostay.com/api/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 3Claude Code: ask
  • demand_calendarFostay's editorial demand calendar (UAE only — Dubai and Abu Dhabi; Goa has no event calendar yet): the upcoming date windows where Dubai and Abu Dhabi hotels predictably spike or …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Fostay's editorial demand calendar (UAE only — Dubai and Abu Dhabi; Goa has no event calendar yet): the upcoming date windows where Dubai and Abu Dhabi hotels predictably spike or sell out (GITEX, F1, NYE, Eid, school breaks...), each with a suggested book-by deadline. Use it to warn users about expensive dates or find event stays.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • prepare_bookingBooks everything except the payment: holds the chosen offer (real prebook — the price is locked while the hold lasts), registers the guest details, and returns a payment_url.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Books everything except the payment: holds the chosen offer (real prebook — the price is locked while the hold lasts), registers the guest details, and returns a payment_url. The human opens that link, sees the exact stay summary, and pays in one step — the agent never handles card details. Confirm the guest's name and email with the user before calling. If the held price differs from what you quoted, this returns the final price and any change warnings — tell the user before sending them to pay.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • when_to_goPrices upcoming weekends (Fri–Sun, 2 nights) to find the cheapest times to stay.Reads text others writeNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Prices upcoming weekends (Fri–Sun, 2 nights) to find the cheapest times to stay. Pass hotel_id for one hotel across ~8 weekends, or just a city to compare Fostay's curated stays (Dubai, Abu Dhabi) or top-rated Goa hotels across the next ~6 weekends. Cheapest options first.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 3Claude Code: allow
  • booking_statusVerify a completed booking: confirmation status, hotel confirmation code, stay and price.Reads text others writeNo findings

    Why it is in this group

    • The name "booking_status" says "status": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Verify a completed booking: confirmation status, hotel confirmation code, stay and price. Requires the Fostay booking id AND the guest email it was booked under (both are in the guest's confirmation). Use after the human pays via a prepare_booking link.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • get_live_ratesLive bookable room offers for one hotel and stay dates: total all-in price (AED), board (breakfast etc.), refundability and exact free-cancellation deadlines.Reads text others writeNo findings

    Why it is in this group

    • The name "get_live_rates" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Live bookable room offers for one hotel and stay dates: total all-in price (AED), board (breakfast etc.), refundability and exact free-cancellation deadlines. For Goa, total_all_in counts GST, and any part the hotel collects at check-in is itemised separately (collected_by_hotel_at_checkin). The booking_url takes a human straight to this hotel on fostay.com to complete the booking.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
  • search_staysSearch hotels in Dubai, Abu Dhabi or Goa.Reads text others writeNo findings

    Why it is in this group

    • The name "search_stays" says "search": a word for reading.

    What it can reach

    • untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
    Description, as the server wrote it
    Search hotels in Dubai, Abu Dhabi or Goa. For Dubai and Abu Dhabi, returns Fostay's hand-curated edit first (8 flagship stays with editorial verdicts), then catalog matches (~2,000 bookable hotels). For Goa, returns the best-reviewed hotels and resorts (hostels and homestays only when searched by name), optionally narrowed to one area. Use get_live_rates for prices. Results include a fostay_url where a human can view photos, live rates and book.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write5
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out0
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 2.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http hotels https://fostay.com/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__hotels__search_stays",
      "mcp__hotels__get_live_rates",
      "mcp__hotels__booking_status"
    ],
    "ask": [
      "mcp__hotels__demand_calendar",
      "mcp__hotels__when_to_go",
      "mcp__hotels__prepare_booking"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as hotels. Review it before you use it.

Capability tags behind 5 rules
  • mcp__hotels__search_stays untrusted-input
  • mcp__hotels__get_live_rates untrusted-input
  • mcp__hotels__when_to_go untrusted-input
  • mcp__hotels__prepare_booking untrusted-input
  • mcp__hotels__booking_status untrusted-input