Bitvoya Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Bitvoya Mcp (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="docs/public/assets/bitvoya-logo-default.png" alt="Bitvoya" width="280" /> </p>
<p align="center"> <img src="docs/public/assets/bitvoya-mcp-banner.png" alt="Bitvoya MCP" width="100%" /> </p>
<p align="center"> <a href="LICENSE"><img src="https://img.shields.io/badge/License-Apache--2.0-101828?style=for-the-badge&logo=apache" alt="Apache-2.0 License" /></a> <img src="https://img.shields.io/badge/Hosted-Remote_MCP-C89B3C?style=for-the-badge" alt="Hosted Remote MCP" /> <img src="https://img.shields.io/badge/Transport-Streamable_HTTP-0F766E?style=for-the-badge" alt="Streamable HTTP" /> <img src="https://img.shields.io/badge/Recommended-Claude_4.6_%7C_GPT--5.4-1D4ED8?style=for-the-badge" alt="Recommended Models" /> </p>
<p align="center"> <strong>Luxury hotel intelligence and secure checkout handoff for AI travel agents.</strong> </p>
<p align="center"> Hosted public MCP for premium hotel discovery, benefit-rich rate comparison, quote preparation, and Bitvoya-controlled checkout completion. </p>
<p align="center"> <a href="#quick-start"><strong>Quick Start</strong></a> · <a href="docs/public/CLIENT_SETUP.md"><strong>Client Setup</strong></a> · <a href="docs/public/SECURITY_MODEL.md"><strong>Security Model</strong></a> · <a href="docs/public/SECURE_HANDOFF.md"><strong>Secure Handoff</strong></a> · <a href="server.json"><strong>server.json</strong></a> </p>
Public users connect to the hosted endpointhttps://bitvoya.com/api/mcpwith a Bitvoya-issued agent key fromDashboard -> Connect Agent. No self-hosting is required for normal usage.
Bitvoya is not a generic hotel feed wrapped in MCP. It is designed around luxury booking value and the handoff boundary real travel agents actually need.
| What Bitvoya does well | Why it matters for agents |
|---|---|
| Luxury-first hotel coverage | Better fit for high-end trip planning, concierge, and member travel flows |
| Structured benefits and promotions | Agents can explain breakfast, upgrade eligibility, late checkout, and property credits without scraping prose |
| Explicit pricing semantics | supplier_total_cny, service_fee_cny, and display_total_cny stay distinct |
| Secure checkout handoff | Card entry and payment stay on Bitvoya-owned surfaces instead of agent chat |
| Remote hosted MCP | Users connect directly over Streamable HTTP with bearer auth |
https://bitvoya.comDashboard -> Connect AgentDirect page:
https://bitvoya.com/dashboard/agent-keysUse the hosted endpoint:
https://bitvoya.com/api/mcpAdd this header:
Authorization: Bearer <your_agent_key>Minimal remote MCP configuration:
{
"type": "streamable_http",
"url": "https://bitvoya.com/api/mcp",
"headers": {
"Authorization": "Bearer <your_agent_key>"
}
}If you are testing manually outside an MCP client, also send:
Accept: application/json, text/event-streamExamples:
Search luxury hotels in Tokyo for next weekend and compare the best options.Find five-star hotels in Paris with breakfast and explain which rate has the best value.Prepare a booking quote for the strongest Shangri-La option in Singapore.Bitvoya works best when the driving model is strong at tool selection, stateful booking flows, and not hallucinating hotel details from prior knowledge.
Claude 4.6, GPT-5.4, or comparable flagship reasoning modelsstart_travel_planningstart_hotel_search remains the hotel-specific fast pathClient-specific setup guides are in docs/public/CLIENT_SETUP.md.
| Client | Remote MCP | Notes |
|---|---|---|
| Cherry Studio | Yes | Use the wrapped import shape plus manual Authorization header entry |
| Cursor | Yes | Works with mcp.json and environment-backed bearer auth |
| Windsurf | Yes | Remote Streamable HTTP with custom headers |
| Claude Code | Yes | Use claude mcp add --transport http |
| GitHub Copilot CLI | Yes | Configure as remote HTTP MCP |
| Goose | Yes | Use the remote MCP endpoint and bearer header |
Bitvoya MCP is designed for discovery, comparison, quote preparation, and secure completion handoff.
| Workflow | Primary tools |
|---|---|
| Generic first-step routing | start_travel_planning |
| City and hotel discovery | start_hotel_search, search_hotels, compare_hotels |
| Hotel detail and room/rate exploration | get_hotel_detail, get_hotel_rooms, compare_rates |
| High-level booking start | create_booking |
| Quote preparation | prepare_booking_quote |
| Booking intent creation | create_booking_intent |
| Order and handoff state polling | get_booking_state |
Bitvoya is strongest when the traveler cares about premium stay value instead of just the lowest visible headline rate.
USD 100 property creditstay 3 pay 2 and stay 4 pay 3 can materially change effective valueBenefit availability still depends on hotel, rate, market, and stay dates. Returned hotel and rate payloads should always be treated as the source of truth.
Bitvoya intentionally keeps sensitive execution on Bitvoya-hosted surfaces.
get_booking_state.Public agents do not directly own:
That boundary is deliberate. It keeps the public MCP useful without pushing payment risk or card handling into third-party chat tools.
Agents should present pricing carefully.
supplier_min_price_cny as indicative discovery pricingget_hotel_roomsget_hotel_rooms returns:supplier_total_cnyservice_fee_cnydisplay_total_cnydisplay_total_cny is the guest-facing total aligned with current Bitvoya product behaviorThis repository is licensed under Apache-2.0. See LICENSE and NOTICE.
The open-source license covers this repository's code and docs. It does not grant access to:
Connect Agent~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.