MCP.Market

Hostaway MCP server

by uncfreak1255-code·io.github.uncfreak1255-code/hostaway·v0.2.0

Read-only MCP server for Hostaway PMS — guest conversations, reservations, and listings

B80/100grade B
What users say
No reviews yet
Be the first
Safety scan
B80/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Hostaway yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Hostaway tools (6)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • get_conversation_context

    Return an agent-friendly conversation summary plus recent message history.

  • get_listing_brief

    Return the minimum useful listing context tied to conversations or reservations.

  • get_reservation_brief

    Return the minimum useful reservation context for an agent or operator.

  • list_unread_guest_threads

    List recent guest threads with raw unread metadata and derived attention signals.

  • search_conversations

    Lookup conversations by guest name, listing, reservation id, or conversation id.

  • search_reservations

    Lookup reservations by guest name, date range, listing, or reservation id.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan27 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 80/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Hostaway compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
80/100
higher than 60% of 48,255 servers
Tools
6
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break

What its tools let an agent do: 6 read

Install Hostaway in Claude Code, Cursor or VS Code

Runs npx -y hostaway-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add hostaway -- npx -y hostaway-mcp
Add to Cursor

What the publisher says

From the Hostaway repository's README, as published. We do not edit it. Read it on GitHub

hostaway-mcp

Read-only, hospitality-shaped MCP server for Hostaway.

This repo owns the operator product only: local/npm stdio, six read-only tools, no Cloudflare Worker, and no Seascape booking surface.

V1 Goal

Make Codex and Claude useful in real Hostaway workflows without hand-wiring raw API calls every time.

V1 is intentionally narrow:

  • read-only only
  • hospitality-native tools, not raw endpoint parity
  • optimized for conversation context, reservation lookup, and listing lookup

Exact V1 Surface

  • listunreadguest_threads
  • getconversationcontext
  • getreservationbrief
  • getlistingbrief
  • search_reservations
  • search_conversations

Local Development

npm install
npm test
npm run check
npm run build

Run the stdio server locally:

HOSTAWAY_API_TOKEN=your-token-here node dist/cli.js

Create a local npm package tarball:

npm pack

After publish, run without cloning:

npx hostaway-mcp

MCP Client Wiring

For local MCP clients, provide HOSTAWAYAPITOKEN through the environment and spawn the published npm package over stdio.

The snippets below are pinned to the current published version:

hostaway-mcp@0.2.0

Update that version intentionally when you upgrade.

Claude Desktop (macOS)

Edit ~/Library/Application Support/Claude/claudedesktopconfig.json.

If you already have top-level keys like preferences, keep them and add mcpServers alongside them:

{
  "mcpServers": {
    "hostaway": {
      "command": "npx",
      "args": ["-y", "hostaway-mcp@0.2.0"],
      "env": {
        "HOSTAWAY_API_TOKEN": "your-token-here"
      }
    }
  }
}

Restart Claude Desktop after saving the file.

Codex

Edit ~/.codex/config.toml and add:

[mcp_servers.hostaway]
command = "npx"
args = ["-y", "hostaway-mcp@0.2.0"]

[mcp_servers.hostaway.env]
HOSTAWAY_API_TOKEN = "your-token-here"

Verify the server is registered:

codex mcp list

Local Built CLI

If you want to run the repo checkout instead of npm, point the client at the built CLI directly:

{
  "command": "node",
  "args": ["/absolute/path/to/hostaway-mcp/dist/cli.js"],
  "env": {
    "HOSTAWAY_API_TOKEN": "your-token-here"
  }
}

Environment Variables

V1 Non-Goals

  • sending guest messages
  • mutating reservations or listings
  • Cloudflare Worker transport
  • Seascape booking/distribution flows
  • webhook ingestion
  • background sync pipelines
  • dashboards or owner reporting
  • generic REST-to-MCP proxy coverage

Source Design

See docs/designs/v1-readonly-hostaway-mcp.md.

Nothing above is checked by us. What we check is on the safety report.

Hostaway: common questions

Is Hostaway MCP server safe?
Mostly: it is graded B (80/100). Read the Hostaway safety report
How do I install Hostaway?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Hostaway need an API key?
Yes. The registry entry asks for HOSTAWAY_API_TOKEN.
Is Hostaway maintained?
The last commit was 43 days ago (2026-09-22). The latest release is v0.2.0.
How does Hostaway compare with other MCP servers?
safety score 80/100 (higher than 60% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.