# Authentication

All MCP requests must include a Bearer token in the Authorization header.

# Token Types

Type Format Use case
Personal Access Token (PAT) pat_… Human users, IDE integrations
JWT Standard JWT Service-to-service integrations

For IDE integrations (Cursor, Claude Desktop, Codex), create a PAT — it's the simplest path.

# Creating a Personal Access Token

  1. Log in to portal.hotel-universe.travel (opens new window)
  2. Navigate to Settings → Access Tokens
  3. Click Generate new token
  4. Enter a descriptive name (e.g. Cursor MCP, Claude Desktop)
  5. Click Generate token
  6. Copy the token — it starts with pat_

Copy the token immediately

The token is shown only once. If you lose it, you must generate a new one.

# Required Permissions

A PAT inherits the permissions of the account that created it.

Permission What it unlocks Available to
hotels:view All search tools, get_hotel, geocode_location All accounts
lists:manage All 5 list tools All accounts
reviews:view get_hotel_reviews Full tier only
metasearch:view get_metasearch_pricing Full tier (included) or Trial tier with metasearch subscription

# Using the Token

Add the token to every request as a Bearer token:

Authorization: Bearer pat_YOUR_TOKEN

# Verifying Your Token

Call tools/list to confirm the token is valid and see all available tools:

curl -X POST https://api.hotel-universe.travel/mcp \
  -H "Authorization: Bearer pat_YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'

A valid token returns HTTP 200 with a result.tools array containing 12 tool definitions. If you have a metasearch subscription the get_metasearch_pricing tool will be present.

# Error Reference

HTTP status Meaning Resolution
401 Token missing or invalid Check the Authorization header and token value
403 Token lacks hotels:view Contact support to verify your account permissions
402 Trial hotel limit reached, or subscription missing Upgrade at hello@ubio.ai