MCP.Market

Partelisto MCP server

online · 100% uptime
by TargetGrps·io.github.TargetGrps/partelisto-mcp·v1.1.0

Guest check-in, SES.HOSPEDAJES status, and booking creation for Spanish vacation rentals. No PII.

B79/100grade B
What users say
No reviews yet
Be the first
Safety scan
B79/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Partelisto yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Partelisto tools (8, 2 write)

write = sends, deletes, buys or posts
  • create_bookingwrite actionFree

    Creates a new booking (a check-in workflow) for one of the host's properties. Requires the write permission granted separately during sign-in. Ask the host to confirm the property and dates before calling this. Does not email the guest — call send_guest_checkin_link afterwards if a link should go out now.

  • get_attention_requiredFree

    Scans the signed-in host's most recent bookings (up to 50) and returns only what needs action right now: stays that are imminent or under way where the guest has not completed check-in, and bookings whose SES.HOSPEDAJES submission failed. Empty list means nothing needs attention within the window. No guest PII.

  • get_guest_form_statusFree

    Whether the guest has completed the check-in form for a booking the host owns (None or Submitted). No form content.

  • get_usage_summaryFree

    The signed-in host's plan tier, trial status, and this month's usage against plan limits (properties, templates, bookings).

  • list_bookingsFree

    Lists the signed-in host's bookings (newest first), paged. Returns id, property id, check-in/check-out dates, status, and whether a check-in link and guest contact exist — never the guest's email, phone, or documents.

  • list_propertiesFree

    Lists the signed-in host's properties: id, name, address, municipality/province, and whether it is archived. No guest data.

  • list_ses_statusesFree

    SES.HOSPEDAJES (police registration) submission status for a set of bookings the host owns: status, attempts, last error, and the official reference once accepted. Bookings with no submission yet are omitted.

  • send_guest_checkin_linkwrite actionFree

    Sends (or resends) the guest check-in link by email for a booking the host owns. This is a real action with a side effect: it emails the guest and, on resend, invalidates the guest's previous link. Requires the write permission granted separately during sign-in. Ask the host to confirm before calling this.

Public scan report

scanner v0.1.10 · 2026-10-27 · same rubric, same numbers if you re-run it

1 high
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1437ms20/20
  • Tool poisoning8 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 2 write-action tools with no auth3/15
  • Maintenancelast push 41 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 79/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Partelisto compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
79/100
higher than 58% of 48,243 servers
Tools
8
the typical server has 7
Tools that change things
25%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote server answers 100%
Response time
800 ms
faster than 18% of 30,027 servers

What its tools let an agent do: 6 read · 1 create · 1 send or post

Install Partelisto in Claude Code, Cursor or VS Code

claude mcp add --transport http partelisto-mcp https://mcp.partelisto.es/mcp
Add to Cursor

What the publisher says

From the Partelisto repository's README, as published. We do not edit it. Read it on GitHub

Partelisto MCP

SES.HOSPEDAJES and guest check-in for Spanish vacation rentals, exposed to AI agents.

A remote MCP server that lets Claude, ChatGPT, or any MCP-compatible AI agent answer operational questions about a signed-in host's Spanish accommodation — which arrivals still have an incomplete guest form, which bookings failed SES.HOSPEDAJES (police registration) submission, how close the account is to its plan limit — and, with a separately granted permission, resend a guest's check-in link. It adds no business logic of its own: every tool is a thin wrapper over one query or mutation that already exists on the api-gateway, gated exactly the way the web app is.

Tools: listproperties · listbookings · getguestformstatus · listsesstatuses · getusagesummary · getattentionrequired · sendguestcheckinlink · create_booking (the last two need the extra partelisto:write scope — see the Tools table below for what each one wraps).

Example prompts: "What needs my attention today?" · "Which of today's arrivals still have an incomplete guest form?" · "Show me bookings where SES.HOSPEDAJES submission failed." · "Create a booking for Casa Sol, 12–15 September, guest Ana García." · "Resend the check-in link for booking X."

No guest PII (email, phone, passport/DNI, date of birth, nationality, document content) is ever selected or returned by any tool — see Tools (v1) below.

Claude / ChatGPT / Copilot
        │  MCP over HTTP, Bearer token from Keycloak OAuth
        ▼
partelisto-mcp  (this service)
        │  same GraphQL call the SPA would make, same Bearer token forwarded as-is
        ▼
api-gateway  →  backoffice / booking / guestdocs

Why it deviates from the usual service-structure template

Every other TargetGrps service owns data (MongoDB, tenancy middleware, ApiServiceBootstrapper). This one doesn't — it has no Domain layer and no database. It's a client of the gateway, not a peer of it. The project layout keeps Application (DTOs, the fixed GraphQL documents, and the pure response-shaping/redaction logic) and Infrastructure (the gateway HTTP client) for the same testability reasons the template exists, but skips Mongo/multitenancy bootstrap because there's nothing to bootstrap.

Tools (v1)

None of these ever select or return guest email, phone, passport/DNI, date of birth, nationality, or document content — see GatewayQueries (what's selected) and ResponseShaper (what's mapped into the DTO). GatewayQueriesTests fails the build if a query is ever widened to select a field that looks like PII, as a second line of defense.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Partelisto: common questions

Is Partelisto MCP server safe?
Mostly: it is graded B (79/100). Read the Partelisto safety report
How do I install Partelisto?
It runs remotely at mcp.partelisto.es. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Partelisto need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Partelisto maintained?
The last commit was 51 days ago (2026-09-15). The latest release is v1.1.0.
Is Partelisto up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does Partelisto compare with other MCP servers?
safety score 79/100 (higher than 58% of 48,243 servers); tools 8 (the typical server has 7); tools that change things 25% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.