Travel World MCP Server
Remote Model Context Protocol server (Streamable HTTP) at https://travel.augworlds.ai/mcp. Clients authenticate with OAuth 2.1 — the client registers itself and runs authorization_code + PKCE with a browser sign-in — or with a tvl_ personal access token for CI and non-OAuth clients. Anonymous tools/list returns 401 with an RFC 9728 resource_metadata challenge, so the tool list is not publicly introspectable; the authorization server publishes six mcp:* scopes (tools:list, tk:read, brandlanes:read, search:read, profile:apply, observations:write) and the docs describe flight and hotel search, flight status, city guides and preference-shaped results. Rate-limited per key with 429 + Retry-After.