Install
$ agentstack add mcp-seanbabalala-bitvoya-mcp ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.2.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.2.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Luxury hotel intelligence and secure checkout handoff for AI travel agents.
Hosted public MCP for premium hotel discovery, benefit-rich rate comparison, quote preparation, and Bitvoya-controlled checkout completion.
Quick Start · Client Setup · Security Model · Secure Handoff · server.json
> Public users connect to the hosted endpoint https://bitvoya.com/api/mcp with a Bitvoya-issued agent key from Dashboard -> Connect Agent. No self-hosting is required for normal usage.
Why Bitvoya MCP
Bitvoya is not a generic hotel feed wrapped in MCP. It is designed around luxury booking value and the handoff boundary real travel agents actually need.
| What Bitvoya does well | Why it matters for agents | | --- | --- | | Luxury-first hotel coverage | Better fit for high-end trip planning, concierge, and member travel flows | | Structured benefits and promotions | Agents can explain breakfast, upgrade eligibility, late checkout, and property credits without scraping prose | | Explicit pricing semantics | supplier_total_cny, service_fee_cny, and display_total_cny stay distinct | | Secure checkout handoff | Card entry and payment stay on Bitvoya-owned surfaces instead of agent chat | | Remote hosted MCP | Users connect directly over Streamable HTTP with bearer auth |
Built For
- AI travel assistants
- concierge and itinerary agents
- premium membership travel copilots
- Bitvoya-connected partner agents
- workflows that care about stay quality, perks, and real booking value
Quick Start
1. Create an agent key
- Sign in to
https://bitvoya.com - Open
Dashboard -> Connect Agent - Create a named agent connection
Direct page:
https://bitvoya.com/dashboard/agent-keys
2. Connect the hosted MCP
Use the hosted endpoint:
https://bitvoya.com/api/mcp
Add this header:
Authorization: Bearer
Minimal remote MCP configuration:
{
"type": "streamable_http",
"url": "https://bitvoya.com/api/mcp",
"headers": {
"Authorization": "Bearer "
}
}
If you are testing manually outside an MCP client, also send:
Accept: application/json, text/event-stream
3. Start with a tool-driven travel prompt
Examples:
Search luxury hotels in Tokyo for next weekend and compare the best options.Find five-star hotels in Paris with breakfast and explain which rate has the best value.Prepare a booking quote for the strongest Shangri-La option in Singapore.
Recommended Models
Bitvoya works best when the driving model is strong at tool selection, stateful booking flows, and not hallucinating hotel details from prior knowledge.
- prefer
Claude 4.6,GPT-5.4, or comparable flagship reasoning models - these models follow quote, intent, and state-polling steps more reliably
- smaller models can connect, but they are more likely to skip tools or blur pricing semantics
- for weaker automatic tool choosers, the safest generic first-call entry tool is
start_travel_planning - if the request is already clearly a live hotel search,
start_hotel_searchremains the hotel-specific fast path
Supported Client Setups
Client-specific setup guides are in [docs/public/CLIENTSETUP.md](docs/public/CLIENTSETUP.md).
| Client | Remote MCP | Notes | | --- | --- | --- | | Cherry Studio | Yes | Use the wrapped import shape plus manual Authorization header entry | | Cursor | Yes | Works with mcp.json and environment-backed bearer auth | | Windsurf | Yes | Remote Streamable HTTP with custom headers | | Claude Code | Yes | Use claude mcp add --transport http | | GitHub Copilot CLI | Yes | Configure as remote HTTP MCP | | Goose | Yes | Use the remote MCP endpoint and bearer header |
What Agents Can Do
Bitvoya MCP is designed for discovery, comparison, quote preparation, and secure completion handoff.
| Workflow | Primary tools | | --- | --- | | Generic first-step routing | start_travel_planning | | City and hotel discovery | start_hotel_search, search_hotels, compare_hotels | | Hotel detail and room/rate exploration | get_hotel_detail, get_hotel_rooms, compare_rates | | High-level booking start | create_booking | | Quote preparation | prepare_booking_quote | | Booking intent creation | create_booking_intent | | Order and handoff state polling | get_booking_state |
Luxury Value Edge
Bitvoya is strongest when the traveler cares about premium stay value instead of just the lowest visible headline rate.
- participating rates can surface breakfast, upgrade paths, early check-in, late checkout, and hotel credit such as
USD 100property credit - long-stay promotions such as
stay 3 pay 2andstay 4 pay 3can materially change effective value - benefits and promotions are returned in structured output, so the agent can compare real booking quality instead of guessing from marketing copy
Benefit availability still depends on hotel, rate, market, and stay dates. Returned hotel and rate payloads should always be treated as the source of truth.
Booking Journey
Bitvoya intentionally keeps sensitive execution on Bitvoya-hosted surfaces.
- The agent discovers hotels, rooms, and rates.
- The agent prepares a booking quote and creates a booking intent.
- The traveler is handed to a Bitvoya-hosted secure checkout surface.
- The agent continues polling state with
get_booking_state.
Public agents do not directly own:
- raw card entry
- payment execution
- final supplier-facing booking submission
That boundary is deliberate. It keeps the public MCP useful without pushing payment risk or card handling into third-party chat tools.
Price Fields
Agents should present pricing carefully.
- search-stage output may include
supplier_min_price_cnyas indicative discovery pricing - final room and rate evaluation comes from
get_hotel_rooms get_hotel_roomsreturns:supplier_total_cnyservice_fee_cnydisplay_total_cnydisplay_total_cnyis the guest-facing total aligned with current Bitvoya product behavior
Docs Hub
- client setup: [docs/public/CLIENTSETUP.md](docs/public/CLIENTSETUP.md)
- FAQ: [docs/public/FAQ.md](docs/public/FAQ.md)
- security model: [docs/public/SECURITYMODEL.md](docs/public/SECURITYMODEL.md)
- secure handoff design: [docs/public/SECUREHANDOFF.md](docs/public/SECUREHANDOFF.md)
- release notes: [docs/public/releases/v0.3.1.md](docs/public/releases/v0.3.1.md)
- registry metadata: [server.json](server.json)
- maintainer setup: [DEVELOPMENT.md](DEVELOPMENT.md)
License
This repository is licensed under Apache-2.0. See [LICENSE](LICENSE) and [NOTICE](NOTICE).
The open-source license covers this repository's code and docs. It does not grant access to:
- Bitvoya hosted production infrastructure
- live hotel inventory and partner data feeds
- Bitvoya-issued agent keys or user accounts
- Bitvoya trademarks, brand assets, or service access outside normal product terms
Important Notes
- Bitvoya calls this flow
Connect Agent - the generated credential is a revocable agent key
- website login credentials and MCP credentials are intentionally different
- multiple agent keys under one Bitvoya user still map to the same Bitvoya account history
- normal users connect to the hosted MCP and do not need direct database or server configuration
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: seanbabalala
- Source: seanbabalala/bitvoya-mcp
- License: Apache-2.0
- Homepage: https://bitvoya.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.2.0 Imported from the upstream source.