Is Getyourguide free?

Yes, Getyourguide is free to use.

How do I install Getyourguide?

Getyourguide is a local plugin. Install it using npm package: getyourguide-mcp and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Getyourguide safe to use?

Getyourguide scored 7/10 (moderate risk) in MCP Marketplace's automated security scan. It has 1 high or critical finding to review. It's listed, but review the security report on this page before installing.

What credentials does Getyourguide need?

Getyourguide requires the following credentials or environment variables: GYG_API_KEY, GYG_CURRENCY, GYG_LANGUAGE. You can find setup instructions on the server detail page.

What AI apps work with Getyourguide?

Getyourguide uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Getyourguide MCP Server

by Chris Hall

Developer ToolsModerate7.0Local

Free

GetYourGuide tours & activities for Claude — search, details, options, and reviews

About

GetYourGuide tours & activities for Claude — search, details, options, and reviews

Security Report

7.0

Moderate7.0Moderate Risk

This is a well-structured MCP server for the GetYourGuide Partner API with solid security practices. Authentication is properly deferred until request time, credentials are never hardcoded, and all tools are read-only. Minor code quality observations exist around error handling breadth and input validation patterns, but these do not constitute security vulnerabilities. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

7 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Your GetYourGuide Partner API key (X-ACCESS-TOKEN). Get one by joining the GetYourGuide partner program at partner.getyourguide.com.Required

Environment variable: GYG_API_KEY

Default currency for prices (ISO 4217, e.g. USD or EUR). Optional — individual tool calls can override it.Optional

Environment variable: GYG_CURRENCY

Default content language (e.g. en, de). Optional — individual tool calls can override it.Optional

Environment variable: GYG_LANGUAGE

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-chrischall-getyourguide-mcp": {
      "env": {
        "GYG_API_KEY": "your-gyg-api-key-here",
        "GYG_CURRENCY": "your-gyg-currency-here",
        "GYG_LANGUAGE": "your-gyg-language-here"
      },
      "args": [
        "-y",
        "getyourguide-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

getyourguide-mcp

MCP server for GetYourGuide — search tours and activities, read tour details, bookable options, and reviews via the GetYourGuide Partner API.

🤖 This project was developed and is maintained by AI (Claude Code). Use at your own discretion.

npm: npmjs.com/package/getyourguide-mcp
Source: github.com/chrischall/getyourguide-mcp

Tools

All tools are read-only — this server registers no write tools.

Tool	What it does
`gyg_search_tours`	Search tours/activities by free text, location, category, or date range; sortable; `compact` mode for slim summaries
`gyg_get_tour`	Full record for one tour by numeric ID
`gyg_get_tour_options`	Bookable options of a tour (ticket types, times), optionally within a date range
`gyg_get_tour_availability`	Booking availability of a tour: participant categories, addons, available dates
`gyg_get_tour_reviews`	Customer reviews for a tour
`gyg_list_categories`	Activity categories (IDs feed `gyg_search_tours` / `gyg_list_category_tours`)
`gyg_list_category_tours`	Tours in one category
`gyg_get_location`	Details for a location (city, POI, region) by ID
`gyg_list_location_tours`	Tours available at one location

Setup

You need a GetYourGuide Partner API key — join the (free) partner program at partner.getyourguide.com and copy the API key from your dashboard. The key is sent as the X-ACCESS-TOKEN header on every request.

Claude Code / any MCP host

{
  "mcpServers": {
    "getyourguide": {
      "command": "npx",
      "args": ["-y", "getyourguide-mcp"],
      "env": {
        "GYG_API_KEY": "your-partner-api-key"
      }
    }
  }
}

The server also boots with no key set (so hosts can probe tools/list at install time); the first tool call then returns an actionable error telling you which env var to set.

Environment variables

Variable	Required	Meaning
`GYG_API_KEY`	yes (for tool calls)	Partner API key, sent as `X-ACCESS-TOKEN`
`GYG_CURRENCY`	no	Default currency for prices (ISO 4217; falls back to `USD` — the API requires one); per-call `currency` args override
`GYG_LANGUAGE`	no	Default content language (falls back to `en` — the API requires one); per-call `language` args override
`GYG_BASE_URL`	no	API base URL (default `https://api.getyourguide.com/1`)
`GYG_REQUEST_TIMEOUT_MS`	no	Per-request timeout (default 30000)

For local development, put them in a .env next to the server (gitignored; see .env.example).

Behavior notes

Rate limits: one automatic retry on 429/503 honoring Retry-After (capped at 10s). If it still fails, the error tells you to back off.
Auth errors: a 401/403 names both possible causes — a wrong key, or a key whose partner tier doesn't cover that endpoint.
API drift: responses are validated leniently. On an unexpected shape the server logs a precise warning to stderr and returns the raw response rather than breaking; search tools also accept extraParams to pass raw query params through verbatim. See docs/GETYOURGUIDE-API.md — routes and request shapes are live-verified against the API and its official OpenAPI spec; real 200 bodies still need pinning from a keyed capture.
Secrets: upstream error bodies are redacted then truncated before they reach a tool result; the API key is never echoed.

Development

npm install
npm run build          # tsc + esbuild bundle → dist/
npm test               # vitest (no network — everything mocked)
npm run test:coverage  # the CI gate: 100% lines/branches/functions/statements

Releases are automated with release-please; don't hand-bump versions. PR titles must be conventional commits (feat:, fix:, …) because the repo squash-merges.