Skip to content

Posadita – direct-booking holiday rentals

by posadita.com · remote · no sign-in to list tools · v1.0.0 · published by com.posadita

Holiday rentals booked direct with the host: availability, prices, checkout links. No auth.

Final · 1Changes · 1
CompareRegistry entry

5 tools: 1 do something that can't be undone, 1 change things and 3 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http booking https://mcp.posadita.com

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • Warncheck_availability

    The server marks "check_availability" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

5 tools

Can't be undone 1Claude Code: ask
  • check_availabilityWhich nights are free between two dates, both inclusive, at most 62 days per call.1 finding

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "check_availability" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The input addresses people (input.to): what it sends cannot be taken back.

      What this check looks for
    Description, as the server wrote it
    Which nights are free between two dates, both inclusive, at most 62 days per call. Each night has available, minStay, whether arrival/departure is allowed that day, and priceCents (null when the place takes no online booking). For the price of a whole stay use get_quote – nightly prices do not include fees or discounts.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Changes things 1Claude Code: ask
  • create_checkoutPrepare a stay for the guest to confirm and pay.No findings

    Why it is in this group

    • The name "create_checkout" says "create": a word for a change.
    Description, as the server wrote it
    Prepare a stay for the guest to confirm and pay. It reserves NOTHING and books nothing: no nights are held, the host is not told, no e-mail is sent. It returns checkoutUrl, a link you must give to the guest; the GUEST opens it, checks the stay, agrees to the host's terms and pays. Until they do, anyone else can book those nights. The link expires after 24 hours. Never tell the guest they are booked, and never try to complete the booking for them. Quote first; contact details are optional and only pre-fill the form, which the guest can change. Limited to a few per hour per caller.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Only reads 3Claude Code: allow
  • get_propertyOne holiday rental: what it is, where (rounded when the host keeps the address private), capacity, amenities (fixed ids + labels), house rules, check-in/out times, cancellation pol…No findings

    Why it is in this group

    • The name "get_property" says "get": a word for reading.
    Description, as the server wrote it
    One holiday rental: what it is, where (rounded when the host keeps the address private), capacity, amenities (fixed ids + labels), house rules, check-in/out times, cancellation policy (`cancellation.terms` is what the level promises; for `custom` read `note`), photos and a from-price per night. `bookable: false` means the page shows the place but takes no online booking – the guest contacts the host; do not quote or prepare a checkout for it. `bookingMode` says what happens after the guest presses book: `request` (host confirms), `request_hold` (card held, host confirms) or `instant`.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_quoteThe total price of one stay for a party, with its breakdown (nights, length discount, extra-guest fee, cleaning) – the same calculation that charges the guest.No findings

    Why it is in this group

    • The name "get_quote" says "get": a word for reading.
    Description, as the server wrote it
    The total price of one stay for a party, with its breakdown (nights, length discount, extra-guest fee, cleaning) – the same calculation that charges the guest. Amounts are integer cents. When the stay cannot be booked the answer has ok:false and a reason: unavailable (with the taken dates), min_stay (with minStay), no_checkin_day, no_checkout_day, max_guests (with maxGuests), no_rates or invalid_range. A quote holds nothing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_staysSearch ONE collection – a host's portfolio, a residential community or a destination – named by its slug (posadita.com/s/{slug}, or from /llms.txt).No findings

    Why it is in this group

    • The name "search_stays" says "search": a word for reading.
    Description, as the server wrote it
    Search ONE collection – a host's portfolio, a residential community or a destination – named by its slug (posadita.com/s/{slug}, or from /llms.txt). There is no search across all of Posadita. With dates and guests every place is priced for exactly that stay (totalCents, the same figure get_quote gives) and those that can be booked come first; without dates you get each place's from-price per night. Only places with bookable:true can be quoted or checked out; the others are booked by contacting their host.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http booking https://mcp.posadita.com

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__booking__get_property",
      "mcp__booking__get_quote",
      "mcp__booking__search_stays"
    ],
    "ask": [
      "mcp__booking__check_availability",
      "mcp__booking__create_checkout"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as booking. Review it before you use it.