Back to Browse

Openclaw Otto Travel MCP Server

Developer ToolsModerate6.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Plan, book, and manage business travel.

About

Plan, book, and manage business travel.

Remote endpoints: streamable-http: https://api.ottotheagent.com/mcp

Security Report

6.2
Moderate6.2Moderate Risk

Well-structured OAuth2 MCP plugin with proper authentication, secure token handling, and appropriate scoping. Token storage uses correct file permissions (0600), OAuth device flow is RFC 8628 compliant, and no sensitive data is logged. Minor code quality issues around error classification do not materially affect security. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity).

7 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

home_dir_access

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

openclaw-otto-travel

OpenClaw plugin for Otto Travel — search, compare, and book flights and hotels in natural language. Global inventory, live prices, loyalty tracking, PNR-backed bookings.

Install

openclaw plugins install clawhub:openclaw-otto-travel

If your gateway has sandbox mode on (agents.defaults.sandbox.mode is "all" or "non-main"), allow-list the plugin's tools:

{
  "tools": {
    "sandbox": {
      "tools": { "allow": ["openclaw-otto-travel"] }
    }
  }
}

Restart the gateway if it doesn't pick up the new plugin automatically:

openclaw gateway restart

Authorize

Ask the agent to call otto_setup. It returns an authorization URL — visit it, approve access, and all travel tools become available in the same session.

Terminal equivalent:

openclaw otto-travel auth

Tokens are stored at ~/.openclaw/.otto-tokens.json and refresh automatically.

Tools

  • search_flights, query_flights, book_flight — flight search and booking
  • search_hotels, get_hotel_rooms, book_hotel — hotel search and booking
  • get_bookings, cancel_booking — manage existing bookings
  • read_preferences, write_preference — travel preferences
  • read_loyalty_programs, write_loyalty_program — frequent flyer & hotel loyalty
  • task_status — poll long-running operations
  • read_skill — load a usage guide the agent reads before calling other tools

Troubleshooting

SymptomFix
Plugin loaded but agent can't see toolsAllow-list under tools.sandbox.tools.allow (see Install)
OAuth flow never completesHave the agent show the auth URL, or run openclaw otto-travel auth
Tools stop working unexpectedlyDelete ~/.openclaw/.otto-tokens.json and re-authorize

License

Licensed under the Apache License, Version 2.0. See NOTICE for copyright and trademark information.

Reviews

No reviews yet

Be the first to review this server!