mrbilit

SUSPICIOUS. The core read-only travel-search purpose is coherent, and it does not ask for excessive credentials or booking authority. However, it depends on an unofficial external MCP package and explicitly allows traffic to be routed through an arbitrary HTTP proxy, creating moderate supply-chain and data-flow risk that is not necessary for a normal official integration.