Name: Bluerails Hotels
Author: bluerails

Bluerails Hotels MCP

Live hotel search and booking for AI agents in DACH, the UK and 10 US cities.

Tool-list grade A Remote · Streamable HTTP No auth needed 2 tools v1.0.0

No reviews yet by bluerails The publisher’s own endpoint — this marketplace is not in the path

93/100

tool-list score

tools declared

remote

at its publisher

—

calls last 7d

What it does

Live hotel search and booking for AI agents in DACH, the UK and 10 US cities.

Quickstart

# 1 — add it to Claude Code
claude mcp add --scope user --transport http bluerails-hotels-mcp https://402.bluerails.com/mcp

# 2 — ask your agent for something these tools do
#   list_hotels, hotel_reserve

Bluerails Hotels costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.

Publishernot claimed

bluerails1 server

1 category

All 1 server

Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.

Tool surface

What the model actually sees. Descriptions are diffed on every release — see version history.

Only tools that write or reach the network

Search hotel properties in Germany, Austria, Switzerland, the United Kingdom and the United States, and price them for a stay in the same call. ASK BEFORE YOU SEARCH. Four things are required and this tool answers nothing without them: checkIn, checkOut, adults and maxPricePerNight. "Hotels in Berlin for a couple" is not yet a search — it names a place and a party and nothing else, so ask

Parameter	Type	Required	Notes
query	string	no	Free-text match over a property’s NAME, short description and tags. It is NOT a natural-language request: EVERY word you pass must appear on the same property, so each extra word narrows the result an
city	string	no	Place to search around — any place name we cover, not just a city: a town, a village or a resort works, e.g. "Salzburg", "Munich", "Silvaplana", "Wals". Pass the place name ALONE, not a phrase: "Salzb
coordinates	object	no	A point to search around, for anywhere smaller than a town: a street, a landmark, a station, a junction, a named district. ESTIMATE IT YOURSELF for the place the guest named — city takes town names
radius	object	no	How far around city — or around coordinates, when you sent a point — to search, as a value and its unit: {"value": 10, "unit": "mi"}. Defaults to 20 km. May not exceed 100 km once converted; large
country	string	no	Filter by country: de=Germany, at=Austria, ch=Switzerland, us=United States, gb=United Kingdom
amenities	array	no	Facilities and house rules the property must ALL have — a hotel missing one is excluded, so every extra value narrows the result. Prefer this to naming an amenity in query: these are exact, while `q
starRating	string	no	Filter by star rating: 1-star, 2-star, 3-star, 4-star, 5-star. A property can hold stars AND be a boutique hotel; ask for the two separately.
style	string	no	Filter by how the property presents itself: boutique. Independent of starRating — combine them to ask for both.
limit	integer	no	How many results to return. Defaults to 10, and may not exceed 20; a larger value is rejected, never quietly reduced.
childrenAges	array	no	ONE ENTRY PER CHILD — their age, or null when you do not know it yet. Not a count: properties price a child by its age, and none may be invented. ASK WHETHER ANYONE UNDER 18 IS TRAVELLING, in the sa
language	string	no	The language to render the results card in — pass the language the guest is WRITING in, unless they have asked for another. A bare language code or a full BCP 47 tag both work ("de", "de-AT", "en-GB")
checkIn	string	no	Arrival date, YYYY-MM-DD. REQUIRED — ask the guest for their dates before you search. Without them nothing can be priced and the answer would be a list of property names with no rooms, no prices and n
checkOut	string	no	Departure date, YYYY-MM-DD. REQUIRED, on the same terms as checkIn — ask the guest, never choose.
adults	integer	no	Adults in the party. REQUIRED — ask how many people are travelling. Properties price by party size, so a number you assumed prices a stay nobody asked for. "A couple" is two; anything vaguer is a ques
maxPricePerNight	integer	no	Budget per night, in the currency you send alongside it — BOTH ARE REQUIRED. TAKEN FROM A FIGURE THE GUEST GAVE YOU AND NOWHERE ELSE. Ask them roughly what they want to spend a night before you sear
currency	string	no	THE CURRENCY OF maxPricePerNight, AND THE ONE THE ANSWER IS QUOTED BACK IN. ISO 4217 — EUR, CHF, GBP. REQUIRED on every search: send EUR when the guest gave you a euro figure, which is most
offerId	string	no	An offerId from an earlier answer, to get a fresh price for THAT room rather than searching again. Pass it when the guest has already chosen and you need a current handle — after hotel_reserve sai

Book a hotel room. Works for ANY offer list_hotels gave you an offerId for — there is no separate check to make first, so pass the offer the guest chose. Pass that offer’s offerId exactly as you were given it — it names the hotel, room, rate, stay and price, which is why none of those are separate arguments. It expires after 30 minutes; if it has expired or the hotel has raised the price sin

Parameter	Type	Required	Notes
offerId	string	yes	The offerId of the exact room and rate the guest chose, copied from list_hotels unchanged. It names the hotel, the room, the rate, the stay, the party and the price the guest was shown, so none of
guestGivenName	string	yes	—
guestLastName	string	yes	—
guestEmail	string	yes	The hotel sends its confirmation here. It is the guest's own address, never yours. An example or placeholder address such as name@example.com is refused and nothing is reserved: ask the guest for the
guestPhone	string	yes	The guest's phone number, in any format the guest gives it.
guestStreet	string	yes	Street and house number.
guestPostal	string	yes	Postal code.
guestCity	string	yes	—
guestCountry	string	yes	Two-letter country code, e.g. DE, AT, CH. The country the guest lives in, not the one they are travelling to.
guestStreetNo	string	no	House number, when the guest gives it separately from the street.
guestSalutation	string	no	How the guest is addressed, in their own words. Only pass what the guest told you; never guess from a name.
acceptedTerms	boolean	yes	TRUE only when the guest has agreed to book this rate. Where list_hotels gave that rate cancellation terms, show them first and get the agreement to those. Where its cancelTerms was null WE HOLD N

Free

$0 forever

Every tool — any call limit is its publisher’s, not ours
No card, and mcprush charges nothing for it
Runs at its publisher’s own address — this marketplace is not in the path
Nothing to cap, because mcprush bills nothing

Nothing here is billable: mcprush charges nothing to install Bluerails Hotels or to call it, at any volume.

ATool-list grade · score 93 / 100

Release 1.0.0 · scanned 6 Nov 2026

Graded from the tools this server lists, not from its source code.

Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.

Threat score100

Client score93

Findings0 threat · 0 capability

Capabilitymoderate

Coveragemanifest

Verificationnot in this report

Surface digest86eb26623b4b1515d2e3c6a32bf6d65438794f4615e5f9ffe4148e4b4331e84a

Score vectorthreat 100 → client 93

Term	Level	What it prices	Points
capability-exposure	moderate	capability blast radius (moderate) — client exposure if the model is manipulated	−3
coverage-honesty	manifest	inspection depth (manifest) — how much of the target the scan could see	−4

score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.

What the scan could actually read

A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.

The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.

Tool surfaceread

Implementation sourcenot available

Package metadatanot available

Live transportnot available

The implementation source was not read — this reflects the declared tool metadata only.

Capability — what it could do if the model were manipulated

Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.

Tool	Capability tags	Why the tag was assigned
list_hotels	external-sink	external-sink: declares readOnlyHint: false, openWorldHint: true
hotel_reserve	external-sink	external-sink: declares readOnlyHint: false, destructiveHint: true, openWorldHint: true

Toxic-flow graph

The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.

The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.

Supply chain and provenance

Integrityfirst-seen

Surface digest86eb26623b4b1515

Scanned2026-11-06

This is the first scan of this surface here, so there is nothing yet to compare it against.

Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.

Where are you running it?

Tool surface

Release history

Bluerails Hotels MCP

What it does

Quickstart

Where are you running it?

Tool surface

What counts against your monthly calls

What the scan could actually read

Capability — what it could do if the model were manipulated

Toxic-flow graph

Supply chain and provenance

Release history

See also