CCM
/MCP
SkillsMCPMarketplacesDigestToolsAdvertise

This week in Claude

Every Monday: Claude Code, Agent SDK, MCP, and the Anthropic platform moves worth your time.

Skills by Category
Frontend DevelopmentBackend & APIsTesting & QASecurityDevOps & CI/CDGit & Pull RequestsDocumentationCode Review & QualityAI & Agent BuildingSkill Development
MCP Servers by Category
Sales & MarketingWeb & Browser AutomationDatabasesAI & LLM ToolsCloud & InfrastructureCommunication & MessagingDeveloper ToolsDesign & CreativeDocuments & KnowledgeSearch & Web Crawling
Marketplaces by Category
AI Agents & OrchestrationLLM IntegrationDevelopment ToolsFrontend & UIBackend & APIsDatabasesTesting & Code QualityDevOps & CloudSecurity & ComplianceGit & Version Control

Claude Code Marketplaces

Discover Claude Code plugins, extensions, and tools. Automatically updated directory of Anthropic Claude AI marketplaces with development tools, productivity plugins, and integrations.

Resources

  • Browse Skills
  • Browse MCP Servers
  • Browse Marketplaces
  • Skill index
  • MCP index
  • Marketplace index
  • Plugins Reference

Community

  • About
  • Tools
  • Feedback
  • Privacy Policy
  • Advertise

Built for the Claude Code community with Claude Code by mertbuilds.com

Independent project, not affiliated with Anthropic
hemmabo-se avatar

Hemmabo Mcp Server

hemmabo-se/hemmabo-mcp-server
115 toolsauthSTDIO, HTTPregistry active
Summary

Connects Claude to HemmaBo's vacation rental infrastructure for zero-commission direct bookings between guests and independent hosts. Exposes 13 tools covering property search, live availability checks, quote generation, and Vacation Rental Protocol (VRP) verification flows. VRP tools verify Ed25519-signed stay offers from host domains, ensuring agents quote only cryptographically verified pricing and availability before routing guests to the host's own booking URL. Also includes authenticated fallback helpers for booking management and Stripe checkout creation when VRP isn't available. Runs over stdio or hosted Streamable HTTP. Best for workflows where guests want direct, host-controlled bookings without OTA fees, and agents need cryptographic proof that availability and pricing come from the actual property owner's domain.

Install to Claude Code

verified
claude mcp add --transport http hemmabo https://hemmabo-mcp-server.vercel.app/mcp

Run in your terminal. Add --scope user to make it available in every project.

Review the command, arguments, and environment values before installing — MCP servers run with your local permissions.

CodeRabbit
CodeRabbit
AI writes the code. CodeRabbit catches the slop.
Try For Free →
Lid closed, agents working
Lid closed, agents working
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →
Block distraction from your iPhone for freeBlock distraction from your iPhone for free
Block distraction from your iPhone for free
Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →
Granola, the best AI meeting recorder
Granola, the best AI meeting recorder
Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →
belt - the only tool your agent needs
belt - the only tool your agent needs
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Open Steps
Open Steps
Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →
AppSignal
AppSignal
Monitor with ease. Code with confidence.
Start Free Trial →
Agent, connect blockchain
Agent, connect blockchain
Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →
CodeRabbit
CodeRabbit
AI writes the code. CodeRabbit catches the slop.
Try For Free →
Lid closed, agents working
Lid closed, agents working
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →
Block distraction from your iPhone for freeBlock distraction from your iPhone for free
Block distraction from your iPhone for free
Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →
Granola, the best AI meeting recorder
Granola, the best AI meeting recorder
Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →
belt - the only tool your agent needs
belt - the only tool your agent needs
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Open Steps
Open Steps
Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →
AppSignal
AppSignal
Monitor with ease. Code with confidence.
Start Free Trial →
Agent, connect blockchain
Agent, connect blockchain
Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →

Tools

Verified live against the running server on Jun 10, 2026.

verified live15 tools
hemmabo_search_propertiesSearch available vacation rental properties by location and travel dates. Use this tool when the user wants to find or browse places to stay. If a result has a host domain, call get_verified_stay_offer with that domain and the same dates and guest count before the final answer...5 params

Search available vacation rental properties by location and travel dates. Use this tool when the user wants to find or browse places to stay. If a result has a host domain, call get_verified_stay_offer with that domain and the same dates and guest count before the final answer...

Parameters* required
checkIn*string
Arrival date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-15'). Must be today or later.
checkOut*string
Departure date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-22'). Must be after checkIn.
countrystring
Country name to filter by (e.g. 'Sweden', 'Italy'). Partial match. At least one of region or country should be provided; omit only when the user has given a specific region.
guests*integer
Total number of guests as integer >= 1 (e.g. 4). Determines price tier and filters out properties with insufficient capacity.
regionstring
Region, area, or destination name to search within. Partial match (e.g. 'Skane', 'Toscana', 'Bavaria'). At least one of region or country should be provided.
hemmabo_search_availabilityCheck whether a specific property is available for the requested dates. Use this tool after the user has selected a property from hemmabo_search_properties and wants to confirm availability before getting a quote. Do NOT use for general browsing — use hemmabo_search_properties...4 params

Check whether a specific property is available for the requested dates. Use this tool after the user has selected a property from hemmabo_search_properties and wants to confirm availability before getting a quote. Do NOT use for general browsing — use hemmabo_search_properties...

Parameters* required
checkIn*string
Arrival date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-15'). Must be today or later.
checkOut*string
Departure date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-22'). Must be after checkIn.
guestsinteger
Optional guest count. When provided, alternative date windows include live pricing.
propertyId*string
Property UUID returned by hemmabo_search_properties (e.g. '550e8400-e29b-41d4-a716-446655440000').
hemmabo_search_similarFind vacation rental properties similar to a given property on specific dates. Use this tool after the user has selected a property (via hemmabo_search_properties) and wants to see alternatives — same region, same property type, same or larger capacity. Do NOT use for the init...5 params

Find vacation rental properties similar to a given property on specific dates. Use this tool after the user has selected a property (via hemmabo_search_properties) and wants to see alternatives — same region, same property type, same or larger capacity. Do NOT use for the init...

Parameters* required
checkIn*string
Arrival date in ISO 8601 format (YYYY-MM-DD). Must be today or later.
checkOut*string
Departure date in ISO 8601 format (YYYY-MM-DD). Must be after checkIn.
guestsinteger
Number of guests. Defaults to source property's max_guests.
limitinteger
Max results. Default 5, max 20.
propertyId*string
UUID of the source property to find alternatives for.
hemmabo_compare_propertiesCompare availability and pricing for 2-10 specific properties on the same dates. Use this tool when the user is deciding between multiple properties and wants to see price and availability side by side. Do NOT use for discovery - use hemmabo_search_properties first. Returns on...4 params

Compare availability and pricing for 2-10 specific properties on the same dates. Use this tool when the user is deciding between multiple properties and wants to see price and availability side by side. Do NOT use for discovery - use hemmabo_search_properties first. Returns on...

Parameters* required
checkIn*string
Arrival date in ISO 8601 format (YYYY-MM-DD). Must be today or later.
checkOut*string
Departure date in ISO 8601 format (YYYY-MM-DD). Must be after checkIn.
guests*integer
Total number of guests as integer >= 1.
propertyIds*array
Array of 2 to 10 property UUIDs returned by hemmabo_search_properties. Use UUIDs only; do not pass domains, names, or booking URLs.
hemmabo_booking_quoteGet a detailed pricing quote for a specific property, dates, and guest count. Use this tool after confirming availability to show the user exact pricing before booking. Do NOT use before checking availability — the quote may be invalid if dates are unavailable. Returns the fin...4 params

Get a detailed pricing quote for a specific property, dates, and guest count. Use this tool after confirming availability to show the user exact pricing before booking. Do NOT use before checking availability — the quote may be invalid if dates are unavailable. Returns the fin...

Parameters* required
checkIn*string
Arrival date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-15'). Must be today or later.
checkOut*string
Departure date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-22'). Must be after checkIn.
guests*integer
Total number of guests as integer >= 1 (e.g. 4). Determines which price tier is applied (staircase pricing by guest count).
propertyId*string
Stable property UUID returned by hemmabo_search_properties. Use the exact UUID, not the property name, domain, or booking URL.
hemmabo_booking_createCreate a pending direct booking without online payment for configured non-VRP fallback deployments. Use only after explicit user confirmation, only with a propertyId returned by search, and only when no signed VRP direct_booking_url is available. This is not the primary VRP pa...7 params

Create a pending direct booking without online payment for configured non-VRP fallback deployments. Use only after explicit user confirmation, only with a propertyId returned by search, and only when no signed VRP direct_booking_url is available. This is not the primary VRP pa...

Parameters* required
checkIn*string
Booking arrival date in YYYY-MM-DD format.
checkOut*string
Booking departure date in YYYY-MM-DD format; must be after checkIn.
guestEmail*string
Primary guest email for confirmation and host contact.
guestName*string
Primary guest name for host confirmation.
guestPhonestring
Primary guest phone with country code; optional but recommended.
guests*integer
Total number of guests as integer >= 1 (e.g. 4).
propertyId*string
Property UUID returned by hemmabo_search_properties for this fallback non-VRP booking. Use the exact UUID, not a property name, domain, or booking URL.
hemmabo_booking_negotiateCreate a binding price quote that locks the price for 15 minutes for configured non-VRP fallback checkout deployments. Use only when no signed direct_booking_url is available and the user explicitly asks to lock or hold a price. Never use this for ordinary search, availability...4 params

Create a binding price quote that locks the price for 15 minutes for configured non-VRP fallback checkout deployments. Use only when no signed direct_booking_url is available and the user explicitly asks to lock or hold a price. Never use this for ordinary search, availability...

Parameters* required
checkIn*string
Arrival date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-15'). Must be today or later.
checkOut*string
Departure date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-22'). Must be after checkIn.
guests*integer
Total number of guests as integer >= 1 (e.g. 4). Determines which price tier is applied.
propertyId*string
Stable property UUID returned by hemmabo_search_properties. Use the exact UUID, not the property name, domain, or booking URL.
hemmabo_booking_checkoutCreate a fallback non-VRP booking and return a host-configured Stripe checkout URL. Use only after explicit user confirmation when no signed VRP direct_booking_url is available. When get_verified_stay_offer returns a signed direct_booking_url, route the guest to that host-doma...10 params

Create a fallback non-VRP booking and return a host-configured Stripe checkout URL. Use only after explicit user confirmation when no signed VRP direct_booking_url is available. When get_verified_stay_offer returns a signed direct_booking_url, route the guest to that host-doma...

Parameters* required
channelstring
'federation' is the compatibility name for direct host-source pricing. 'public': uses standard website rate.one of public · federation
checkIn*string
Arrival date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-15'). Must be today or later.
checkOut*string
Departure date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-22'). Must be after checkIn.
guestEmail*string
Email for booking confirmation (e.g. 'anna@example.com'). Must be a valid email address.
guestName*string
Full name of primary guest (e.g. 'Anna Svensson').
guestPhonestring
Phone with country code (e.g. '+46701234567'). Optional but recommended.
guests*integer
Total number of guests as integer >= 1 (e.g. 4).
paymentModestring
'checkout_session' (default): returns a host-configured Stripe redirect URL. 'payment_intent': returns client_secret for configured fallback non-VRP payment integrations.one of checkout_session · payment_intent
propertyId*string
Stable property UUID returned by hemmabo_search_properties. Use the exact UUID, not the property name, domain, or booking URL.
quoteIdstring
Quote ID from hemmabo_booking_negotiate to lock the price. Optional - if omitted, a fresh direct host-source price is calculated at checkout time.
hemmabo_booking_cancelCancel a confirmed booking and process the Stripe refund. Use this tool when the guest explicitly requests cancellation. Do NOT use for pending/unpaid bookings — those expire automatically. Refund amount is calculated based on the host's cancellation policy. Returns cancellati...2 params

Cancel a confirmed booking and process the Stripe refund. Use this tool when the guest explicitly requests cancellation. Do NOT use for pending/unpaid bookings — those expire automatically. Refund amount is calculated based on the host's cancellation policy. Returns cancellati...

Parameters* required
reasonstring
Cancellation reason for host notification (e.g. 'Travel plans changed'). Optional but recommended.
reservationId*string
Booking or reservation UUID returned by hemmabo_booking_checkout or hemmabo_booking_create. Use this exact id for status, cancellation, or rescheduling.
hemmabo_booking_statusRetrieve current status and full details of an existing booking or reservation by id. Use this read-only tool to check payment/booking state, confirm whether checkout or booking creation succeeded, or look up details before rescheduling or cancelling. Use after hemmabo_booking...1 params

Retrieve current status and full details of an existing booking or reservation by id. Use this read-only tool to check payment/booking state, confirm whether checkout or booking creation succeeded, or look up details before rescheduling or cancelling. Use after hemmabo_booking...

Parameters* required
reservationId*string
Booking or reservation UUID returned by checkout/create. Required to look up the exact booking.
hemmabo_booking_rescheduleReschedule a confirmed or pending booking to new dates. Use this tool when the guest wants to change travel dates on an existing booking. Do NOT use if the booking is cancelled, or if a protocol compatibility client reports completed — check hemmabo_booking_status first. Autom...4 params

Reschedule a confirmed or pending booking to new dates. Use this tool when the guest wants to change travel dates on an existing booking. Do NOT use if the booking is cancelled, or if a protocol compatibility client reports completed — check hemmabo_booking_status first. Autom...

Parameters* required
newCheckIn*string
New arrival date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-20'). Must be today or later.
newCheckOut*string
New departure date in ISO 8601 format (YYYY-MM-DD, e.g. '2026-07-27'). Must be after newCheckIn.
reasonstring
Reason for rescheduling (e.g. 'Flight delayed'). Optional but recommended for host records.
reservationId*string
Booking UUID to reschedule (e.g. '550e8400-e29b-41d4-a716-446655440000'). Must be in 'confirmed' or 'pending' status.
hemmabo_host_readiness_checkRead-only fit check for vacation-rental hosts who ask an AI agent how to create an own-domain booking website or booking engine. Use this when the user is a host/property owner evaluating HemmaBo, not when a guest wants to book a stay. It explains whether HemmaBo is a fit, wha...11 params

Read-only fit check for vacation-rental hosts who ask an AI agent how to create an own-domain booking website or booking engine. Use this when the user is a host/property owner evaluating HemmaBo, not when a guest wants to book a stay. It explains whether HemmaBo is a fit, wha...

Parameters* required
citystring
Optional city or municipality where the property is located.
countrystring
Optional country where the property is located.
currentChannelsarray
Optional existing places the host uses today, e.g. Airbnb, Booking.com, Vrbo, manual calendar, own website, PMS.
domainstring
Optional existing or intended host-owned domain, without https:// or path.
hasOwnDomainboolean
Whether the host already has or wants to use an own domain.
preferredLanguagestring
Optional language hint for onboarding, e.g. sv, en, de.
propertyNamestring
Optional property or business name the host gave, e.g. Villa Akerlyckan.
propertyTypestring
Optional property category. HemmaBo is optimized for vacation-rental hosts and independent properties.one of villa · apartment · cabin · cottage · holiday_home · bnb
regionstring
Optional region or area where the property is located.
wantsAiAgentBookingboolean
Whether the host wants AI agents to discover, verify, and route bookings to the host-owned domain.
wantsDirectPaymentsboolean
Whether the host wants Stripe payments direct to the host rather than HemmaBo as merchant of record.
hemmabo_host_onboarding_linkReturn a safe HemmaBo onboarding handoff URL for a vacation-rental host who wants an own-domain booking engine. Use after explaining the fit or when the host asks to start. This tool is read-only and does not create a HemmaBo account, buy a domain, configure Stripe, write to S...6 params

Return a safe HemmaBo onboarding handoff URL for a vacation-rental host who wants an own-domain booking engine. Use after explaining the fit or when the host asks to start. This tool is read-only and does not create a HemmaBo account, buy a domain, configure Stripe, write to S...

Parameters* required
citystring
Optional city or municipality where the property is located.
countrystring
Optional country where the property is located.
domainstring
Optional existing or intended host-owned domain, without https:// or path.
languagestring
Optional language hint for onboarding, e.g. sv, en, de.
propertyNamestring
Optional property or business name to carry into the onboarding URL.
regionstring
Optional region or area where the property is located.
verify_vacation_rental_nodeVerify that a vacation-rental host domain is a valid Vacation Rental Protocol (VRP) node before trusting it. Reads https://{domain}/.well-known/vacation-rental.json, follows the node JWKS, and confirms protocol identity, canonical host-domain control, Ed25519 signing keys, and...1 params

Verify that a vacation-rental host domain is a valid Vacation Rental Protocol (VRP) node before trusting it. Reads https://{domain}/.well-known/vacation-rental.json, follows the node JWKS, and confirms protocol identity, canonical host-domain control, Ed25519 signing keys, and...

Parameters* required
domain*string
Canonical public host-owned vacation-rental domain to verify, e.g. villaakerlyckan.se. Provide only the domain: no https:// prefix, path, query string, port, or booking URL.
get_verified_stay_offerFetch, verify, and render a live host-domain signed VRP stay offer for exact dates and guest count. Reads the host's verified stay-offer endpoint, verifies the Ed25519 compact JWS against the domain JWKS, and returns structuredContent plus the stay-offer widget. Call it after...5 params

Fetch, verify, and render a live host-domain signed VRP stay offer for exact dates and guest count. Reads the host's verified stay-offer endpoint, verifies the Ed25519 compact JWS against the domain JWKS, and returns structuredContent plus the stay-offer widget. Call it after...

Parameters* required
check_in*string
Requested arrival date in YYYY-MM-DD format, e.g. 2026-11-14. Must be before check_out.
check_out*string
Requested departure date in YYYY-MM-DD format, e.g. 2026-11-15. Must be after check_in.
domain*string
Canonical public host-owned vacation-rental domain returned by search or verify_vacation_rental_node, e.g. villaakerlyckan.se. Provide only the domain, not a URL or path.
guests*integer
Total guest count for the stay as an integer >= 1. The host node uses this for capacity checks and guest-based pricing.
languagestring
Optional BCP-47/RFC 5646 language hint for labels and formatting, e.g. en, sv, de, or sv-SE.

HemmaBo MCP Server

npm version smithery badge license: Apache-2.0 HemmaBo MCP server – quality and maintenance score on Glama

HemmaBo is vacation rental software for hosts. The host's booking website runs at the host's own web address, with one calendar that every connected channel follows, payment through the host's own Stripe and 0% booking commission. Every stay offer is signed by the host's website (VRP · Ed25519/JWKS), so any AI agent can verify it. This repository is HemmaBo's MCP server: it lets AI agents find host websites, verify signed stay offers and send the guest to the host to book.

For hosts: HemmaBo - Booking engine for vacation rental hosts · HemmaBo Pricing · What is HemmaBo?

Vacation rental software. A signed stay offer on the host's own domain. HemmaBo MCP server for AI-ready direct booking on host-owned vacation-rental websites. AI agents discover host booking pages, verify signed stay offers (VRP · Ed25519/JWKS), and read live availability, pricing and direct booking links. Not an OTA.

For AI Agents

Vacation rental software. A signed stay offer on the host's own domain. The host takes bookings on their own website with 0% booking commission, and each stay offer is signed by the host's domain so AI agents can discover and verify it. Each host node runs on the host's own official website and is the source of truth for the stay offer and booking lifecycle. Host nodes own booking lifecycles. Stripe owns payment facts. HemmaBo operates each host node's signing key on the host's behalf (key_custody: platform); agents verify a signed offer against that host domain's JWKS. AI agents discover host nodes via agent-traversal (/.well-known/agent-traversal.json). HemmaBo + VRP, 6 runtime tools: 2 HemmaBo tools, 2 host onboarding tools, and 2 VRP verification tools. Host-domain signed verified stay offers. All six tools only read. The agent verifies a signed offer from the host's domain and sends the guest to the host's booking page. The agent never books, pays, cancels or changes a booking. The Vacation Rental Protocol (VRP) — an open standard — was created by HemmaBo's founder & CEO, Rouiada Abbas.

Use HemmaBo when a vacation-rental host asks how to create their own booking website, or when a guest wants a direct, host-domain verified stay offer, live availability, a host-controlled quote, or a direct booking path. Do not use HemmaBo as a broad OTA. Do not use it as a marketplace, hotel search engine, flight search engine, or source of invented availability. Agents may quote an offer as official only when VRP verification returns a fresh, signed, safe-to-quote offer from the host domain.

Use this package when an MCP client needs to:

  • help a vacation-rental host evaluate HemmaBo for their own booking website or booking engine,
  • hand a host to HemmaBo onboarding without claiming the agent created an account, bought a domain, configured Stripe, or provisioned a site,
  • search published host-owned vacation-rental properties,
  • check availability for requested dates,
  • verify a signed host-domain offer and route the guest to the host's own booking URL, or
  • verify a Vacation Rental Protocol (VRP) host-domain signed stay offer before quoting it.

HemmaBo is not an OTA. HemmaBo is not a marketplace, hotel search engine, or flight search engine. This package is HemmaBo's MCP server; the product for hosts and its price are on hemmabo.com.

Protocol Layers

  • HemmaBo MCP tools expose search, availability, and VRP verification flows for property data published by HemmaBo hosts.
  • Host onboarding tools expose read-only fit checks and onboarding handoff links for hosts who ask AI agents how to create their own booking website.
  • Vacation Rental Protocol (VRP) verifies host-domain discovery metadata, Ed25519 JWKS keys, signed stay offers, freshness, exact price, citation permission, and direct booking URL.

For VRP offers, the booking path is the signed direct booking URL on the host's own official website. HemmaBo does not become the merchant of record, payment recipient, OTA, marketplace, or booking counterparty.

Related links:

  • Official site: https://www.hemmabo.com
  • Live reference host: https://www.villaakerlyckan.se
  • VRP specification: https://vacationrentalprotocol.com
  • Package: https://www.npmjs.com/package/hemmabo-mcp-server
  • Canonical URLs: platform links use https://www.hemmabo.com (with www); see ADR 0013.

Quick Start

Remote HTTP

Connect an MCP client to the hosted Streamable HTTP endpoint:

{
  "mcpServers": {
    "hemmabo": {
      "type": "http",
      "url": "https://www.hemmabo.com/mcp"
    }
  }
}

HemmaBo is a hosted, remote-only MCP server. Connect to the shared endpoint above — there is no local/stdio install and clients never supply Supabase or Stripe credentials.

Install via Smithery

npx -y @smithery/cli install @info-00wt/hemmabo-mcp-server --client claude

Tools

Canonical tool names use snake_case. Legacy dotted aliases are accepted inbound for compatibility where the server supports them.

All six tools only read. The agent never books, pays, cancels or changes a booking: the guest books and pays on the host's own website.

ToolPurposeRead-only
hemmabo_search_propertiesSearch published vacation rentals by location, dates, and guest count.Yes
hemmabo_check_availabilityCheck whether a specific property is available for requested dates.Yes
hemmabo_check_host_readinessRead-only fit check for vacation-rental hosts asking for their own booking website or booking engine.Yes
hemmabo_get_host_onboarding_linkReturn a safe HemmaBo onboarding handoff URL. Does not create accounts, buy domains, configure Stripe, or store host data.Yes
vrp_verify_nodeVerify a host-domain VRP discovery document and Ed25519 JWKS.Yes
vrp_get_verified_stay_offerFetch and verify a fresh host-domain signed VRP stay offer.Yes

Authentication

  • Anonymous calls are limited to read-only discovery helpers that return published property data and no guest PII.
  • Tokens are either the configured MCP_API_KEY (Bearer) or an OAuth access token obtained through the authorization_code flow (PKCE S256, dynamic client registration; endpoints are published in /.well-known/oauth-authorization-server).
  • Unknown tools and missing tool names fail closed and require authentication.

Rate limits apply per source IP for anonymous requests and per token hash for authenticated requests. Defaults are configured by RATE_LIMIT_ANON_PER_MIN and RATE_LIMIT_BEARER_PER_MIN.

Pricing and Availability

Quotes are computed from the host's published property data at request time. Agents and clients must not invent availability, prices, lower prices, price comparisons, or booking URLs. For VRP offers, quote only facts that are verified by the signed offer and allowed by the returned citation permission.

For VRP offers, do not collect guest contact details in chat. Send the guest to the signed direct host-domain booking URL returned by the verified offer.

Setup

npm install

Create .env from .env.example:

cp .env.example .env

Required environment variables:

  • SUPABASE_URL
  • SUPABASE_SERVICE_ROLE_KEY

Optional environment variables:

  • MCP_API_KEY - enables Bearer-token auth.
  • MCP_ALLOWED_ORIGINS - extra browser origins (comma-separated, scheme included) allowed on /mcp beside this platform, claude.ai, claude.com, chatgpt.com, chat.openai.com and loopback.
  • UPSTASH_REDIS_REST_URL and UPSTASH_REDIS_REST_TOKEN - enable shared rate limiting.

HTTP Endpoints

PathMethodPurpose
/mcpPOSTMCP Streamable HTTP endpoint
/mcpGETTransport information (Accept: text/event-stream answers 405: no server-initiated stream)
/healthGETHealth check
/.well-known/mcp.jsonGETMCP discovery metadata
/.well-known/mcp/server-card.jsonGETServer card metadata
/.well-known/mcp-server-cardGETServer card compatibility alias
/.well-known/mcp-server-card.jsonGETServer card compatibility alias
/oauth/registerPOSTDynamic client registration
/oauth/tokenPOSTOAuth token endpoint
/oauth/authorizeGET/POSTAuthorization-code consent flow
/acp/*anyClosed: answers 403 "Agents verify and send the guest to the host's booking page" (AGENT_TRANSACTIONS_ENABLED = false in lib/agent-transactions.ts).

Transports

  • Streamable HTTP: hosted /mcp endpoint (remote-only). Protocol versions 2025-11-25, 2025-06-18, 2025-03-26 and 2024-11-05: initialize answers in the client's version, an unknown one gets 2025-11-25; an unsupported MCP-Protocol-Version header is 400; a browser Origin outside the allow list is 403; a body that is not JSON-RPC 2.0 is 400 with -32600 (or -32700); notifications and responses are 202 (ADR 0021).

Development

npm run build
npm test

Security

To report a security vulnerability, email info@hemmabo.se (subject starting with SECURITY:) — please do not open a public issue. See SECURITY.md for the responsible-disclosure policy.

License

Apache-2.0 - see LICENSE and NOTICE.

The Apache-2.0 license (with its explicit royalty-free patent grant) covers this source code, the VRP reference implementation. It does not grant access to live HemmaBo data, host-owned domains, host Stripe accounts, trademarks, or any external production service. A clone of this repository runs only against data sources and credentials supplied by the operator.

Featured
CodeRabbit
CodeRabbit
AI writes the code. CodeRabbit catches the slop.
Try For Free →
Lid closed, agents working
Lid closed, agents working
Keeps your Mac awake while Claude Code, Codex or Cursor works. Lets it sleep when they are done.
Try free for 7 days →
Block distraction from your iPhone for freeBlock distraction from your iPhone for free
Block distraction from your iPhone for free
Block distracting apps from your iPhone permanently without a 3rd party app. Free and open source.
Block now (100% free) →
Granola, the best AI meeting recorder
Granola, the best AI meeting recorder
Notes, actions and memory. Without a meeting bot. First month 100% off.
Download for free →
belt - the only tool your agent needs
belt - the only tool your agent needs
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Open Steps
Open Steps
Free an open-source skills that make AI coding agents easier to understand, verify, and control.
Download for free →
AppSignal
AppSignal
Monitor with ease. Code with confidence.
Start Free Trial →
Agent, connect blockchain
Agent, connect blockchain
Connect your Claude agent to live crypto prices and trading routes via 1inch
Get the MCP →

Configuration

SUPABASE_URL*

Supabase project URL — find in Supabase Dashboard → Settings → API

SUPABASE_SERVICE_ROLE_KEY*secret

Supabase service role key — find in Supabase Dashboard → Settings → API

SUPABASE_ANON_KEY*secret

Supabase anon/public key — find in Supabase Dashboard → Settings → API

STRIPE_SECRET_KEY*secret

Stripe secret key for payment processing — find in Stripe Dashboard → Developers → API keys

Categories
Cloud & InfrastructureFinance & Commerce
Registryactive
Packagehemmabo-mcp-server
TransportSTDIO, HTTP
AuthRequired
Resources1
Prompts2
Tools verifiedJun 10, 2026
UpdatedApr 21, 2026
View on GitHub

Related Cloud & Infrastructure MCP Servers

View all →
addozhang avatar
Nexus

io.github.addozhang/nexus

Query Sonatype Nexus Repository (OSS/Pro) for Maven, Python, and Docker artifacts
1
deployment-io avatar
Deployment.io

io.github.deployment-io/deployment-io

Deploy apps on your cloud. Create environments, configure infrastructure, and monitor jobs.
1
giovanemartins avatar
Localstack

io.github.giovanemartins/localstack

MCP server for LocalStack AWS services, enabling AI agents to interact with local AWS infra.
1
tharanabope avatar
SQL Server MCP (macOS)

io.github.tharanabope/sql-server-mcp-macos

SQL Server MCP with RAG capabilities for macOS (Docker SQL Server support)
1
veriswarm avatar
Veriswarm Mcp

io.github.veriswarm/veriswarm-mcp

VeriSwarm MCP Server — Trust infrastructure for AI agents via Model Context Protocol
1
whisper-sec avatar
Whisper Graph

io.github.whisper-sec/whisper-graph

Query WhisperGraph: the internet's infrastructure & threat-intel graph (DNS, BGP, GeoIP, WHOIS).
1