dewy-resort
Verified Safeby workato-devs
Overview
A comprehensive hotel management system integrating with external services (Salesforce, Stripe, Twilio, Home Assistant) and an AI conversational agent (AWS Bedrock) for managing bookings, guest services, maintenance, and billing.
Installation
npx tsx lib/mcp/hotel-db-server.tsEnvironment Variables
- APP_URL
- NEXT_PUBLIC_APP_URL
- AUTH_PROVIDER
- WORKATO_API_TOKEN
- WORKATO_HOST
- SALESFORCE_API_COLLECTION_URL
- SALESFORCE_API_AUTH_TOKEN
- STRIPE_API_COLLECTION_URL
- STRIPE_API_AUTH_TOKEN
- TWILIO_API_COLLECTION_URL
- TWILIO_API_AUTH_TOKEN
- COGNITO_USER_POOL_ID
- COGNITO_IDENTITY_POOL_ID
- COGNITO_CLIENT_ID
- COGNITO_CLIENT_SECRET
- COGNITO_REGION
- AWS_REGION
- BEDROCK_MODEL_ID
- HOME_ASSISTANT_URL
- HOME_ASSISTANT_TOKEN
- ENABLE_HOME_ASSISTANT
- WORKATO_MOCK_MODE
- SALESFORCE_ENABLED
- STRIPE_ENABLED
- TWILIO_ENABLED
- DISABLE_SSL_VERIFICATION
- MCP_OPERATIONS_URL
- MCP_OPERATIONS_TOKEN
- USER_EMAIL
- USER_FIRST_NAME
- USER_LAST_NAME
- CHAT_CONTEXT_WINDOW
- CHAT_MAX_TOOL_LOOPS
- CHAT_TOOL_TIMEOUT_MS
- BEDROCK_LOG_LEVEL
- NEXT_PUBLIC_ENABLE_CHAT_DEBUG
- NEXT_PUBLIC_DEBUG_AUTH
- CHAT_STORAGE_MODE
- OKTA_DOMAIN
- OKTA_CLIENT_ID
- OKTA_CLIENT_SECRET
- OKTA_API_TOKEN
Security Notes
The project uses environment variables for sensitive data (API keys, tokens) rather than hardcoding. Authentication is delegated to external providers (Okta/Cognito). Extensive use of JSON parsing for configurations and inter-process communication is noted, which is safe when data sources are controlled. A configurable 'DISABLE_SSL_VERIFICATION' flag exists for fetch utilities; if enabled in production, it poses a significant man-in-the-middle attack risk. Default manager credentials are hardcoded in `hotel-db-server.ts` if not overridden by environment variables, which is acceptable for development but a concern for production.
Similar Servers
supermcp
A multi-tenant SQL database connector for the MCP platform, enabling AI assistants to interact with various SQL databases like PostgreSQL, MySQL, MSSQL, Oracle, Snowflake, and SQLite through a unified interface.
guidance-for-vibe-coding-with-aws-mcp-servers
Building AI-powered development workflows for a hotel booking agent using Amazon Bedrock AgentCore and AWS Model Context Protocol (MCP) Servers, demonstrating 'vibe coding' techniques in an interactive workshop format.
restaurant-ai-mcp
AI-powered restaurant management platform for no-show prevention, reservation handling, and operational analytics.
ai-infrastructure-agent
Manage AWS infrastructure using natural language commands with AI.