Home / MCP registry index / io.github.negm17111995/maqami-travel
MAQAMI Travel
io.github.negm17111995/maqami-travel in the official MCP registry.
Endpoint https://mcp.maqami.co/. Source: github.com/negm17111995/mcp-server.
The registry describes it as: Official MCP server for MAQAMI, a hotel and flight booking platform with 3M+ hotels.
We read its 41 tools on 2026-10-22. Nothing in them matched our tool-poisoning rules. It also sets server instructions, text a client puts in front of the model on connect; those were read too.
A clean read means these rules found nothing, not that the server is harmless. A server can change its tools at any time, which is why the index reads it again every week.
Tools it advertises
post_hotels_rates post_hotels_min_rates get_prebooks_prebookid post_rates_prebook listBookings get_bookings_bookingid cancel_hotel_booking put_bookings_bookingid_amend post_bookings_bookingid_alternative_prebooks getHotelTaxSchema get_data_hotels get_data_hotels_semantic_search get_data_hotel_ask post_data_hotel_highlights get_data_hotels_room_search get_data_hotel get_data_reviews get_data_cities get_data_countries get_data_currencies get_data_iatacodes get_data_facilities get_data_hoteltypes get_data_chains get_data_languages get_data_hotel_search get_data_flights_airlines_iatas_iatacode get_data_flights_airports_iatas_iatacode get_data_flights_airports_iatas post_flights_rates post_flights_verify get_flights_bookings_bookingid get_flights_bookings_bookingid_services get_flights_bookings_bookingid_cancellations post_flights_bookings_bookingid_cancellations get_data_flights_airlines get_data_flights_airlines_iatas get_data_flights_airports getExperienceBooking getExperienceBookingCancelPreview cancelExperienceBooking
Run this server? Show the check in your README
The badge reflects the latest weekly read: 
[](https://lazaretto.dev/mcp-registry/io-github-negm17111995-maqami-travel)How this was checked
Lazaretto connects to the endpoint the way any MCP client does, asks the server to introduce itself and list its tools, and reads every name, description, parameter schema and server instruction for tool poisoning: hidden directive blocks, orders to read local secrets, parameters built to carry secrets or the conversation out, orders that redirect another server's tools, and invisible characters. It never calls a tool. What we found across the registry.
To run the same check every time Claude Code adds a server, install the free lazaretto-guard plugin. Browse every server in the index.