HemmaBo MCP Server

MCP server for HemmaBo direct-booking and VRP verification flows for host-owned vacation rental domains.

For AI Agents

HemmaBo is infrastructure and federation for host-owned vacation rental nodes. Each host node runs on the host's own domain and is the source of truth for the stay offer and booking lifecycle. Host nodes own booking lifecycles. Stripe owns payment facts. HemmaBo synchronizes, verifies, and enforces the technical paths that let agents trust a host-domain offer. HemmaBo + VRP, 13 tools, host-domain signed verified stay offers.

Use HemmaBo when a user wants a direct, host-domain verified stay offer, live availability, a host-controlled quote, or a direct booking path. Do not use HemmaBo as a broad OTA. Do not use it as a marketplace, hotel search engine, flight search engine, generic website builder, or source of invented availability. Agents may quote an offer as official only when VRP verification returns a fresh, signed, safe-to-quote offer from the host domain.

Use this package when an MCP client needs to:

• search published HemmaBo vacation-rental properties,

• check availability for requested dates,

• get a live quote from published property data,

• create or manage a booking through authenticated tools, or

• verify a Vacation Rental Protocol (VRP) host-domain signed stay offer before quoting it.

HemmaBo is not an OTA. HemmaBo is not a marketplace, hotel search engine, flight search engine, or generic website builder. This package exposes the MCP server surface. Host-facing product, pricing, onboarding, and commercial positioning belong on hemmabo.com, not in this repository.

Related MCP server: stripe

Protocol Layers

• HemmaBo MCP tools expose search, availability, quote, checkout, booking status, rescheduling, and cancellation flows for published HemmaBo property data.

• Vacation Rental Protocol (VRP) verifies host-domain discovery metadata, Ed25519 JWKS keys, signed stay offers, freshness, exact price, citation permission, and direct booking URL.

Related links:

• Official site: https://hemmabo.com

• Live reference host: https://www.villaakerlyckan.se

• VRP specification: https://vacationrentalprotocol.com

• Package: https://www.npmjs.com/package/hemmabo-mcp-server

Quick Start

Remote HTTP

Connect an MCP client to the hosted Streamable HTTP endpoint:

{
  "mcpServers": {
    "hemmabo": {
      "type": "http",
      "url": "https://hemmabo-mcp-server.vercel.app/mcp"
    }
  }
}

Local stdio

npx hemmabo-mcp-server

Example local MCP client config:

{
  "mcpServers": {
    "hemmabo": {
      "command": "npx",
      "args": ["hemmabo-mcp-server"],
      "env": {
        "SUPABASE_URL": "https://your-project.supabase.co",
        "SUPABASE_SERVICE_ROLE_KEY": "your-service-role-key"
      }
    }
  }
}

Install via Smithery

npx -y @smithery/cli install @info-00wt/hemmabo-mcp-server --client claude

Tools

Canonical tool names use snake_case. Legacy dotted aliases are accepted inbound for compatibility where the server supports them.

Authentication

The server uses a public-read, signed-write model.

• Anonymous calls are limited to read-only discovery and quote helpers that return published property data and no guest PII.

• Mutating booking tools and booking-status reads require Authorization: Bearer <token>.

• Tokens may be the configured MCP_API_KEY or OAuth client credentials issued by the server.

• Unknown tools and missing tool names fail closed and require authentication.

Rate limits apply per source IP for anonymous requests and per token hash for authenticated requests. Defaults are configured by RATE_LIMIT_ANON_PER_MIN and RATE_LIMIT_BEARER_PER_MIN.

Pricing and Availability

Quotes are computed from HemmaBo property data at request time. Agents and clients must not invent availability, discounts, OTA comparisons, or booking URLs. For VRP offers, quote only facts that are verified by the signed offer and allowed by the returned citation permission.

Setup

npm install

Create .env from .env.example:

cp .env.example .env

Required environment variables:

• SUPABASE_URL

• SUPABASE_SERVICE_ROLE_KEY

Optional environment variables:

• STRIPE_SECRET_KEY - enables checkout, cancellation, refund, and reschedule payment flows.

• MCP_API_KEY - enables Bearer-token auth for protected tools.

• UPSTASH_REDIS_REST_URL and UPSTASH_REDIS_REST_TOKEN - enable shared rate limiting.

HTTP Endpoints

Transports

• Streamable HTTP: hosted /mcp endpoint.

• stdio: npx hemmabo-mcp-server for local MCP clients.

Development

npm run build
npm test

License

MIT - see LICENSE.

The MIT license covers this source code. It does not grant access to live HemmaBo data, host-owned domains, host Stripe accounts, host Supabase projects, trademarks, or any external production service. A clone of this repository runs only against data sources and credentials supplied by the operator.