Rental Cars — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Rental Cars (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Free, no-login MCP server for discovering and comparing rental cars with real-time pricing from multiple providers worldwide.
Endpoint: https://mcp.octotrip.app/rental-cars/mcp
OctoTrip is free to use. Booking links contain affiliate attribution -- OctoTrip may earn a commission at no extra cost to you. Search results are ranked by price within each car category, not by affiliate payout.
Add to your MCP client configuration:
{
"mcpServers": {
"octotrip-rental-cars": {
"url": "https://mcp.octotrip.app/rental-cars/mcp"
}
}
}No API key or login required.
searchSearches live rental-car offers for a pickup location and rental period. Returns available cars from multiple vendors grouped by category (economy, compact, SUV, etc.), showing the cheapest options in each. The tool queries external provider APIs in real time and may include affiliate booking links. It does not book cars, modify reservations, charge users, or store user data.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
location | string | yes | -- | Pickup location: city, airport, station, address, or landmark |
pickup_date | string | yes | -- | Pickup date (YYYY-MM-DD, DD.MM.YYYY, or natural-language) |
dropoff_date | string | yes | -- | Dropoff date, must be after pickup date |
dropoff_location | string | no | same as pickup | Different dropoff location for one-way rentals |
pickup_time | string | no | "12:00" | Pickup time in 24-hour HH:MM format |
dropoff_time | string | no | "12:00" | Dropoff time in 24-hour HH:MM format |
currency | string | no | "EUR" | ISO 4217 currency code (EUR, USD, GBP, etc.) |
language | string | no | "en" | Response language code (en, de, etc.) |
age | integer | no | 30 | Driver age, minimum 18 (younger drivers may incur surcharges) |
Results are grouped by SIPP car category with the cheapest 2 options per group:
{
"results": [
{
"name": "Volkswagen Golf",
"vendor": "Europcar",
"sipp": "CDMR",
"category": "Compact",
"price": 181.03,
"price_per_day": 45.26,
"pay_now": 181.03,
"pay_later": 0,
"currency": "EUR",
"transmission": "manual",
"passengers": 5,
"bags": 1,
"doors": 4,
"air_con": true,
"fuel_policy": "Full to Full",
"mileage": "Unlimited",
"free_cancellation": true,
"free_amendment": true,
"deposit": 800,
"excess": 950,
"included_protections": ["Collision Damage Waiver", "Theft Protection"],
"image_url": "https://...",
"booking_url": "https://...",
"link_type": "affiliate",
"affiliate_disclosure": "This link contains affiliate attribution. OctoTrip may earn a commission at no extra cost to you."
}
],
"total": 23,
"total_available": 379,
"rental_days": 4,
"pickup_location_resolved": "Munich International Airport",
"dropoff_location_resolved": "Munich International Airport",
"query": { ... }
}The server returns structured errors with suggestions:
Add to claude_desktop_config.json:
{
"mcpServers": {
"octotrip-rental-cars": {
"url": "https://mcp.octotrip.app/rental-cars/mcp"
}
}
}Add to your MCP settings:
{
"mcpServers": {
"octotrip-rental-cars": {
"url": "https://mcp.octotrip.app/rental-cars/mcp"
}
}
}Add to your Cline MCP settings:
{
"mcpServers": {
"octotrip-rental-cars": {
"url": "https://mcp.octotrip.app/rental-cars/mcp"
}
}
}openclaw plugins install clawhub:@xltnapps/octotrip-rental-carsInstall via Smithery:
npx -y @smithery/cli install xltnapps/octotrip-rental-cars --client claudehermes mcp add octotrip-rental-cars --url https://mcp.octotrip.app/rental-cars/mcp
hermes mcp test octotrip-rental-carsOr add to ~/.hermes/config.yaml:
mcp_servers:
octotrip_rental_cars:
url: "https://mcp.octotrip.app/rental-cars/mcp"A complete MCP session using curl (initialize, list tools, call search):
# 1. Initialize
curl -s -X POST https://mcp.octotrip.app/rental-cars/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-d '{
"jsonrpc": "2.0", "id": 1, "method": "initialize",
"params": {
"protocolVersion": "2025-03-26",
"capabilities": {},
"clientInfo": {"name": "example", "version": "1.0"}
}
}'
# 2. List tools
curl -s -X POST https://mcp.octotrip.app/rental-cars/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-d '{"jsonrpc": "2.0", "id": 2, "method": "tools/list"}'
# 3. Search
curl -s -X POST https://mcp.octotrip.app/rental-cars/mcp \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-d '{
"jsonrpc": "2.0", "id": 3, "method": "tools/call",
"params": {
"name": "search",
"arguments": {
"location": "Munich Airport",
"pickup_date": "2026-08-01",
"dropoff_date": "2026-08-07"
}
}
}'Transport: stateless streamable HTTP. Responses use text/event-stream (SSE). No session persistence or resumability. Rate limit: 1 request/second with burst capacity of 5.
This server does not log IP addresses, search queries, or any user-identifiable data. See PRIVACY.md for full details including sample log entries.
To report a vulnerability, see SECURITY.md.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.