# cloud.atatravel/travel-agency ATA Travel: agent-first direct booking for accommodations, hotels, and vacation rentals. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 2.4.0 - **Author:** cloud.atatravel - **License:** Unknown - **Endpoints:** streamable-http https://atatravel.cloud/mcp - **Source:** https://atatravel.cloud/for-agents - **Endpoint health:** reachable (last checked 2026-09-26T17:07:56.994Z, 5 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 19 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-07T21:47:10.366Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 22 declared. Observed from a live `tools/list` probe. - `ping` — A simple ping tool - `get_network_discovery_context` — Return a compact, live summary of destinations, stay types, capacity, amenities, views, and published suitability guidance currently available on the ATA networ - `search_flexible_network_availability` — Find real, priced ATA stays when the traveler is flexible. Defaults to a window 28–56 days from today, three nights, and two adults only when those values are m - `get_company_mission` — Returns the official ATA company mission and description. Call this when a user asks what ATA is, what we do, our vision, or about the company. - `get_traveler_memories` — Returns active structured memories for a verified traveler. Use this when you need durable personalization beyond the context already provided. - `suggest_traveler_memory` — Save or update one durable traveler memory for personalization. Use only for stable, travel-relevant preferences or constraints explicitly stated by the travele - `search_property_availability` — Search specific dates and occupancy for a known property using its propertyToken. - `search_network_availability` — Find accommodations across the ATA Travel Network with real-time pricing. Use when dates are known. Supports filtering by amenities, views, property type, and f - `search_buildings` — Find published ATA building/complex profiles by destination, neighborhood, tag, amenity, or free-text. Use this for questions about buildings, condo towers, com - `get_building_details` — Get a published ATA building/complex profile with assigned stays and map coordinates. Use slug from search_buildings or property search results. - `get_stays_in_building` — Return ATA stays assigned to a published building, optionally filtered by live dates and guest counts. - `search_property_catalog` — Browse the ATA property catalog WITHOUT needing dates. Fast, lightweight — no availability or pricing check. Use this for vague exploration, browsing by type/am - `get_property_details` — Get date-free property and room details, including traveler-facing amenities, property-authored direct-booking benefits, policies, Events & Weddings, room profi - `list_property_extras` — List date-free published events, services, activities, day passes, experiences, dining, wellness, packages, transfers, and other extras for a known property. Re - `start_traveler_verification` — Start general traveler verification for this MCP session after the traveler confirms their email address. The default is a six-digit email code. This does not c - `verify_traveler_code` — Consume the six-digit code for a challenge started in this MCP session. On success, ATA privately binds the verified traveler to this MCP session; no reusable b - `get_traveler_verification_status` — Check whether a code or email-link challenge started in this MCP session has completed. A completed link binds the traveler privately to this MCP session. - `start_traveler_handoff` — Internal approval step for quote or booking tools. Before calling, read guestEmail back to the traveler and confirm it is correct; then set emailConfirmedByTrav - `get_traveler_handoff_status` — Internal status check after sending an ATA verification link. Use to know whether the traveler clicked the link. Do not mention this tool, polling, or handoff s - `get_reservation_status` — Return the current status and exact stay, price, payment schedule, and cancellation terms for a reservation previously created through ATA. Requires the hold ID - `create_provisional_booking` — Secure a reservation or create a host-approval enquiry on behalf of a traveler. policyAcknowledged is required as an explicit boolean and must be true for finan - `create_quote` — Generate a non-binding reference quote for a traveler. Requires guest name/email plus a current travelerAssertion or fresh approved internal QUOTE agentHandoffI ## Install **Verdict: review** — Installable, but 2 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"travel-agency\": {\n \"type\": \"http\",\n \"url\": \"https://atatravel.cloud/mcp\"\n }\n }\n}" ``` ## Blast radius Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on someone else's infrastructure; read-only tool surface. - Floor 9, ceiling 27 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/cloud.atatravel%2Ftravel-agency - Install plan: https://forgeregistry.com/api/v1/packages/cloud.atatravel%2Ftravel-agency/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/cloud.atatravel%2Ftravel-agency - HTML page: https://forgeregistry.com/registry/cloud.atatravel%2Ftravel-agency - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.