# ai.autonomad/travel AI travel agent — book flights, hotels, activities, and events worldwide via autonomad.ai. - **Type:** MCP server - **Trust:** 30/100 (D), scored on the package rubric — Limited: the scan came back clean but coverage was partial, so the score sits below what full coverage would allow. Nothing was found. - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.4.0 - **Author:** ai.autonomad - **License:** Unknown - **npm:** autonomad-travel - **Endpoints:** streamable-http https://mcp.autonomad.ai/mcp - **Source:** https://github.com/Autonomad1/autonomad1 - **Endpoint health:** reachable (last checked 2026-10-02T01:40:17.080Z, 12 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 30/100 (D), scored on the package rubric — Limited: the scan came back clean but coverage was partial, so the score sits below what full coverage would allow. Nothing was found. - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 38 days ## Security scan - **Status:** clean - **Scanned:** 2026-08-28T12:14:14.793Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 8 declared. Observed from a live `tools/list` probe. - `search_hotels` — Search hotels, lodging, accommodations, resorts, and places to stay for a trip. Filter by city, country, check-in/check-out dates, room type, nightly price, sta - `search_flights` — Search airline flights / airfares between two cities by date, cabin class (economy / premium economy / business / first), and number of passengers. Returns avai - `search_transport` — Search ground transportation — rideshare (Uber, Lyft) and car rental (Hertz, Enterprise, Avis, etc.) — timed to a flight arrival for door-to-door planning. NOTE - `search_dining` — Search restaurants and dining options by city, date, time, cuisine, party size, neighborhood, and price range. PLANNING ONLY — this returns restaurant details a - `search_activities` — Search tours, experiences, attractions, sightseeing, and things to do via Viator (200K+ activities worldwide). Filter by city, date range, and category (food to - `search_events` — Search live events, concerts, sports games, theater, comedy, and shows in a city (Ticketmaster + SeatGeek catalog). Filter by city, date range, category (music - `create_booking_intent` — Create a booking intent — returns a deep-link the user clicks to complete the booking on autonomad.ai. The first booking they complete unlocks a 1-month free Au - `get_capabilities` — Return the server's version, mode (human vs autonomous-agent), API base, and the list of currently-exposed tools. Useful for the LLM to confirm tool-schema comp ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"autonomad-travel\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"autonomad-travel\"\n ]\n }\n }\n}" ``` ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs locally and hosted; read-only tool surface. - Floor 15, ceiling 33 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/ai.autonomad%2Ftravel - Install plan: https://forgeregistry.com/api/v1/packages/ai.autonomad%2Ftravel/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/ai.autonomad%2Ftravel - HTML page: https://forgeregistry.com/registry/ai.autonomad%2Ftravel - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.