Legal
Terms of Service
Terms governing use of the Hostrail platform, APIs, and MCP surfaces.
These terms govern access to the Hostrail platform, including:
- the public site at
https://hostrail.dev - the API at
https://api.hostrail.dev - the MCP endpoint at
https://mcp.hostrail.dev/mcp - the documentation site at
https://docs.hostrail.dev
Platform use
- Public discovery surfaces may be fetched without an execution credential.
- Protected API and MCP calls require a valid agent credential or OAuth access token issued for the platform.
- End users must not be asked to paste platform bearer tokens into chat.
Booking execution
- Quote output is the current source of truth for price, taxes, and cancellation terms.
- A hold reserves availability only for its stated TTL window.
- Booking confirmation may require delegated traveler context and payment authorization.
Integration responsibilities
- Keep agent credentials and OAuth client secrets in secure server-side storage.
- Do not expose operator credentials in prompts, browser source, or client-side logs.
- Respect rate limits, idempotency rules, and published error remediation guidance.
Contact
For commercial, operational, or legal questions, contact api-support@hostrail.dev.