# search

Search GetMyHotels for hotels matching a query. Returns a list of results with ids that can be passed to fetch for full details. Provide the destination and travel dates in the query.

Agent View of the PolicyLayer registry record for `search`. HTML page: https://policylayer.com/tools/com-getmyhotels-getmyhotels/search

## Facts

- Tool: `search`
- Server: GetMyHotels (`https://mcp.getmyhotels.com`) — https://policylayer.com/tools/com-getmyhotels-getmyhotels.md
- Homepage: https://github.com/fenilsonani/gmh
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server auth posture: open
- Server rate-limited: no
- Parameters: 10 (1 required)
- Recommended policy verdict: Allowed

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `query` | string | yes | Natural-language search, e.g. 'hotels in Lisbon 2026-08-10 to 2026-08-14 for 2 adults'. |
| `rooms` | integer | no | Rooms (1-6). Default 1. |
| `adults` | integer | no | Adults (1-10). Default 2. |
| `checkIn` | string | no | Check-in date, ISO 8601 (YYYY-MM-DD). |
| `checkOut` | string | no | Check-out date, ISO 8601 (YYYY-MM-DD). Must be after check-in. |
| `children` | integer | no | Children (0-6). Default 0. |
| `keywords` | string | no | Optional free-text preferences, e.g. 'beachfront pool spa'. |
| `destination` | string | no | City, region, or place to search (e.g. 'Paris', 'Goa', 'Lower Manhattan'). |
| `childrenAges` | array | no | Age of each child at check-in. Length should equal `children`. |
| `guestNationality` | string | no | ISO 3166-1 alpha-2 guest nationality (e.g. 'US', 'GB'). Affects supplier pricing. |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "<query>"
    }
  }
}
```

## Why search is rated Low

The search tool retrieves and queries hotel data without modifying, deleting, or executing any operations. It returns results that can be used by other tools but performs no mutations or external actions itself. This is a classic Read operation with minimal risk if misused—an agent might perform excessive searches but cannot cause financial or data loss damage.

From the tool's own definition: "Tool description states it 'Search GetMyHotels for hotels matching a query' and 'Returns a list of results'. The action is purely informational retrieval with no side effects."

Risk signals: Accepts file system path (destination) · High parameter count (10 properties)

## Use case

AI agents call search to retrieve information from GetMyHotels without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches GetMyHotels:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "search": {}
  }
}
```

## Other tools on GetMyHotels (17)

- `cancel_booking` — Destructive — https://policylayer.com/tools/com-getmyhotels-getmyhotels/cancel-booking.md
- `create_checkout` — Financial — https://policylayer.com/tools/com-getmyhotels-getmyhotels/create-checkout.md
- `create_one_click_checkout` — Financial — https://policylayer.com/tools/com-getmyhotels-getmyhotels/create-one-click-checkout.md
- `fetch` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/fetch.md
- `get_booking` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/get-booking.md
- `get_checkout_quote` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/get-checkout-quote.md
- `get_hotel_details` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/get-hotel-details.md
- `get_my_booking` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/get-my-booking.md
- `get_rooms` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/get-rooms.md
- `list_my_bookings` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/list-my-bookings.md
- `list_payment_methods` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/list-payment-methods.md
- `list_trips` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/list-trips.md
- `search_hotels` — Read — https://policylayer.com/tools/com-getmyhotels-getmyhotels/search-hotels.md
- `add_trip_item` — Write — https://policylayer.com/tools/com-getmyhotels-getmyhotels/add-trip-item.md
- `modify_booking` — Write — https://policylayer.com/tools/com-getmyhotels-getmyhotels/modify-booking.md
- `request_booking_action_code` — Write — https://policylayer.com/tools/com-getmyhotels-getmyhotels/request-booking-action-code.md
- `save_trip` — Write — https://policylayer.com/tools/com-getmyhotels-getmyhotels/save-trip.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=com-getmyhotels-getmyhotels · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/com-getmyhotels-getmyhotels