# get_checkout_quote Re-price a specific room live against the supplier before checkout (no booking, no charge). Use the supplierRoomId and price/currency from search_hotels. Returns the authoritative grand total, a rateValidUntil timestamp, and any taxes/fees. Agent View of the PolicyLayer registry record for `get_checkout_quote`. HTML page: https://policylayer.com/tools/com-getmyhotels-getmyhotels/get-checkout-quote ## Facts - Tool: `get_checkout_quote` - Server: GetMyHotels (`https://mcp.getmyhotels.com`) — https://policylayer.com/tools/com-getmyhotels-getmyhotels.md - Homepage: https://github.com/fenilsonani/gmh - Risk category: Read (Low risk) - Registry record: grade F, identity unverified - Server auth posture: open - Server rate-limited: no - Parameters: 12 (5 required) - Recommended policy verdict: Allowed ## Parameters | Parameter | Type | Required | Description | | --- | --- | --- | --- | | `ref` | string | no | Hotel `ref` from `search_hotels` (e.g. 'TBO:1402689'). Alternative to supplierCode + supplierHotelId. | | `rooms` | integer | no | Rooms (default 1). | | `adults` | integer | no | Adults (default 2). | | `checkIn` | string | yes | Check-in date, ISO 8601 (YYYY-MM-DD). | | `checkOut` | string | yes | Check-out date, ISO 8601 (YYYY-MM-DD). | | `children` | integer | no | Children (default 0). | | `currency` | string | yes | ISO 4217 currency of `price`/`totalPrice` (e.g. 'USD'). | | `promoCode` | string | no | Optional promo code. | | `totalPrice` | number | yes | The room's price from `search_hotels` — the TOTAL for the whole stay, not a nightly rate (used to detect price changes). | | `childrenAges` | array | no | Age of each child. | | `supplierCode` | string | no | Supplier code (from `search_hotels`). Required if `ref` is omitted. | | `supplierRoomId` | string | yes | Bookable room/rate id from the chosen room in `search_hotels`. | Parameters from the server's own tool schema. ## Example call (MCP tools/call, JSON-RPC 2.0) ```json { "jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": { "name": "get_checkout_quote", "arguments": { "checkIn": "", "checkOut": "", "currency": "", "totalPrice": 0, "supplierRoomId": "" } } } ``` ## Why get_checkout_quote is rated Low This tool queries live pricing data from a supplier and returns pricing details. It performs no creation, modification, deletion, or financial transaction. The emphasis on 'no booking, no charge' explicitly indicates no state changes occur. This is a straightforward Read operation—data retrieval with no side effects. Severity is low because misuse would only retrieve pricing information, posing minimal risk. From the tool's own definition: "Tool description states it 're-price[s]...before checkout (no booking, no charge)' and 'Returns the authoritative grand total...and any taxes/fees.' The explicit clarifications that there is 'no booking, no charge' confirm this is a read-only retrieval of…" Risk signals: High parameter count (13 properties) ## Use case AI agents call get_checkout_quote to retrieve information from GetMyHotels without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere. ## Recommended policy (PolicyLayer) Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches GetMyHotels: ```json { "version": "1", "default": "deny", "tools": { "get_checkout_quote": {} } } ``` ## Other tools on GetMyHotels (17) - `cancel_booking` — Destructive — https://policylayer.com/tools/com-getmyhotels-getmyhotels/cancel-booking.md - `create_checkout` — Financial — https://policylayer.com/tools/com-getmyhotels-getmyhotels/create-checkout.md - `create_one_click_checkout` — Financial — https://policylayer.com/tools/com-getmyhotels-getmyhotels/create-one-click-checkout.md - `fetch` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/fetch.md - `get_booking` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/get-booking.md - `get_hotel_details` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/get-hotel-details.md - `get_my_booking` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/get-my-booking.md - `get_rooms` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/get-rooms.md - `list_my_bookings` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/list-my-bookings.md - `list_payment_methods` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/list-payment-methods.md - `list_trips` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/list-trips.md - `search` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/search.md - `search_hotels` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/search-hotels.md - `add_trip_item` — Write — https://policylayer.com/tools/com-getmyhotels-getmyhotels/add-trip-item.md - `modify_booking` — Write — https://policylayer.com/tools/com-getmyhotels-getmyhotels/modify-booking.md - `request_booking_action_code` — Write — https://policylayer.com/tools/com-getmyhotels-getmyhotels/request-booking-action-code.md - `save_trip` — Write — https://policylayer.com/tools/com-getmyhotels-getmyhotels/save-trip.md ## For agents This record is a snapshot. Live verdicts and the full registry: - Check every server in your MCP config at once: `npx -y policylayer stack` - Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md) - Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events` --- Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-getmyhotels-getmyhotels · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-getmyhotels-getmyhotels