Hostaway MCP server
io.github.uncfreak1255-code/hostaway·v0.2.0Read-only MCP server for Hostaway PMS — guest conversations, reservations, and listings
0 stars
Reviews
Write oneNobody has reviewed Hostaway yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Hostaway tools (6)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
get_conversation_contextReturn an agent-friendly conversation summary plus recent message history.
get_listing_briefReturn the minimum useful listing context tied to conversations or reservations.
get_reservation_briefReturn the minimum useful reservation context for an agent or operator.
list_unread_guest_threadsList recent guest threads with raw unread metadata and derived attention signals.
search_conversationsLookup conversations by guest name, listing, reservation id, or conversation id.
search_reservationsLookup reservations by guest name, date range, listing, or reservation id.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan27 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 6 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
How Hostaway compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 80/100
- higher than 60% of 48,255 servers
- Tools
- 6
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
What its tools let an agent do: 6 read
Install Hostaway in Claude Code, Cursor or VS Code
Runs npx -y hostaway-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add hostaway -- npx -y hostaway-mcp
What the publisher says
From the Hostaway repository's README, as published. We do not edit it. Read it on GitHub
hostaway-mcp
Read-only, hospitality-shaped MCP server for Hostaway.
This repo owns the operator product only: local/npm stdio, six read-only tools, no Cloudflare Worker, and no Seascape booking surface.
V1 Goal
Make Codex and Claude useful in real Hostaway workflows without hand-wiring raw API calls every time.
V1 is intentionally narrow:
- read-only only
- hospitality-native tools, not raw endpoint parity
- optimized for conversation context, reservation lookup, and listing lookup
Exact V1 Surface
- listunreadguest_threads
- getconversationcontext
- getreservationbrief
- getlistingbrief
- search_reservations
- search_conversations
Local Development
npm install
npm test
npm run check
npm run buildRun the stdio server locally:
HOSTAWAY_API_TOKEN=your-token-here node dist/cli.jsCreate a local npm package tarball:
npm packAfter publish, run without cloning:
npx hostaway-mcpMCP Client Wiring
For local MCP clients, provide HOSTAWAYAPITOKEN through the environment and spawn the published npm package over stdio.
The snippets below are pinned to the current published version:
hostaway-mcp@0.2.0Update that version intentionally when you upgrade.
Claude Desktop (macOS)
Edit ~/Library/Application Support/Claude/claudedesktopconfig.json.
If you already have top-level keys like preferences, keep them and add mcpServers alongside them:
{
"mcpServers": {
"hostaway": {
"command": "npx",
"args": ["-y", "hostaway-mcp@0.2.0"],
"env": {
"HOSTAWAY_API_TOKEN": "your-token-here"
}
}
}
}Restart Claude Desktop after saving the file.
Codex
Edit ~/.codex/config.toml and add:
[mcp_servers.hostaway]
command = "npx"
args = ["-y", "hostaway-mcp@0.2.0"]
[mcp_servers.hostaway.env]
HOSTAWAY_API_TOKEN = "your-token-here"Verify the server is registered:
codex mcp listLocal Built CLI
If you want to run the repo checkout instead of npm, point the client at the built CLI directly:
{
"command": "node",
"args": ["/absolute/path/to/hostaway-mcp/dist/cli.js"],
"env": {
"HOSTAWAY_API_TOKEN": "your-token-here"
}
}Environment Variables
V1 Non-Goals
- sending guest messages
- mutating reservations or listings
- Cloudflare Worker transport
- Seascape booking/distribution flows
- webhook ingestion
- background sync pipelines
- dashboards or owner reporting
- generic REST-to-MCP proxy coverage
Source Design
See docs/designs/v1-readonly-hostaway-mcp.md.
Nothing above is checked by us. What we check is on the safety report.
Hostaway: common questions
- Is Hostaway MCP server safe?
- Mostly: it is graded B (80/100). Read the Hostaway safety report
- How do I install Hostaway?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Hostaway need an API key?
- Yes. The registry entry asks for
HOSTAWAY_API_TOKEN. - Is Hostaway maintained?
- The last commit was 43 days ago (2026-09-22). The latest release is v0.2.0.
- How does Hostaway compare with other MCP servers?
- safety score 80/100 (higher than 60% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.