search_hotels

SERVERFree Flight and Hotel Search (no API key) SOURCEhttps://lulu.flightpowers.com/mcp

Low RISK CLASS

Category Read

Parameters 73 required

Recommended Allowedsee the rule below

Registry record Grade C, identity unverified Pull the record →

This record as markdown: /tools/com-flightpowers-freemium-google-flights-and-booking/search-hotels.md

WHAT IT DOES

What search_hotels does on Free Flight and Hotel Search (no API key)

AI agents call search_hotels to retrieve information from Free Flight and Hotel Search (no API key) without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Parameter	Type	Required
`adults`	object	—
`children`	object	—
`currency`	object	—
`destination`	string	Yes
`checkin_date`	string	Yes
`checkout_date`	string	Yes
`budget_per_night`	object	—

Parameters from the server's own tool schema.

RISK

Why search_hotels is rated Low

Tool retrieves hotel data with no ability to modify, delete, or execute financial transactions directly.

From the tool's definition Search hotel availability and nightly prices, returns each property's price and booking link.

Risk signalsAccepts file system path (destination)

Attacks that exploit this kind of access

RECOMMENDED RULE

The rule that runs search_hotels safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Free Flight and Hotel Search (no API key), and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For search_hotels, this is the rule to start with:

search_hotels Allowed

search_hotels is read-only, so it stays allowed. Everything else on the server is denied unless you say otherwise.

View as policy code

policy.json

{
  "version": "1",
  "default": "deny",
  "tools": {
    "search_hotels": {}
  }
}

ALLOW ONLY THIS TOOL → Instant setup, no code required.

The button opens the PolicyLayer dashboard: create your workspace, connect Free Flight and Hotel Search (no API key), apply this rule, and every search_hotels call is checked against it from then on.

FAQ

Questions about search_hotels

What does the search_hotels tool do? +

Search live hotel availability and nightly prices for a destination and date range. Input: a free-text destination the way a person would say it ("Rome", "Tokyo Shibuya"), plus check-in and check-out dates. Returns each property's price, review score, room type and a booking link. Rates go stale within minutes -- never reuse an earlier result, search again. FREE TIER: this is the ad-supported server. For rate-parity pricing by country, the 24 Booking.com filters, no ads and no caps, use the paid server at https://hotels.flightpowers.com/mcp. It is categorised as a Read tool in the Free Flight and Hotel Search (no API key) MCP Server, which means it retrieves data without modifying state.

What parameters does search_hotels accept? +

search_hotels accepts 7 parameters: adults, children, currency, destination, checkin_date, checkout_date, budget_per_night. Required: destination, checkin_date, checkout_date. The full parameter table on this page comes from the server's own tool schema.

How do I enforce a policy on search_hotels? +

Register the Free Flight and Hotel Search (no API key) MCP server in PolicyLayer and add a rule for search_hotels: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Free Flight and Hotel Search (no API key). Nothing to install.

What risk level is search_hotels? +

search_hotels is a Read tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit search_hotels? +

Yes. Add a rate_limit block to the search_hotels rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block search_hotels completely? +

Set action: deny in the PolicyLayer policy for search_hotels. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides search_hotels? +

search_hotels is provided by the Free Flight and Hotel Search (no API key) MCP server (https://lulu.flightpowers.com/mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

KEEP EXPLORING

More on Free Flight and Hotel Search (no API key), and thousands of servers like it.

This server

All 4 Free Flight and Hotel Search (no API key) tools →

Across the catalogue

evaluate_search_quality on ACE-MCP →search_torrents on M-Team MCP Server →aiva_search_customers on AIVA MCP Server →search_channel on YouTube MCP Server → The MCP Attack Database →

Guides

Roll out MCP under one policy →Data exfiltration →MCP token cost →