Rialto connector documentation
This page describes the Rialto MCP connector for AI assistants and the people who configure them. It is a reference, not marketing: what the connector can do, what it will refuse, and what the data does and does not contain.
Endpoint
- Connector URL:
https://rialto.travel/mcp - Transport: MCP streamable HTTP, stateless JSON-RPC over
POST - Authentication: OAuth 2.1 with PKCE (S256). Client registration is by client metadata document (the
client_idis an HTTPS URL to the client's metadata). Dynamic client registration is not offered. - Discovery:
https://rialto.travel/.well-known/oauth-authorization-serverandhttps://rialto.travel/.well-known/oauth-protected-resource
Claude Desktop, Claude.ai and ChatGPT connect with the URL alone. The sign-in page accepts a six-digit email code or a passkey. A visitor without an account can apply for one from the same page; approval takes up to 24 hours and a referral from a member approves on the spot.
Tools
| Tool | What it does | Cost class |
|---|---|---|
find_hotel |
Resolve a hotel name to candidates with ids | light |
list_luxury_hotels |
Hotels near a place from the Rialto database, no live rates | light |
list_my_trips, get_trip |
The signed-in member's bookings | light |
search_hotels |
Live VIP-rate search for a place and dates | heavy |
search_award_flights |
One-way award-flight availability across mileage programs | heavy |
get_room_rates |
Live rooms and rates for one hotel and dates | medium |
get_rate_quote |
A held quote for one rate, with the cancellation terms in words | medium |
message_concierge |
Send a note to the Rialto team about a booking | write |
request_cancellation, confirm_cancellation |
Two-step cancellation: terms first, then an explicit confirm | write |
request_booking |
A secure link to finish a booking on Rialto; payment never goes through the chat | write |
Unknown parameters are rejected. Amenity filters (pool, spa, beach, pets) do not exist in the data; the tools say so.
Quotas
Every account has hourly and daily limits per cost class to prevent abuse. Trusted accounts have generous limits. Sweeping many cities or date ranges to answer a comparison question exhausts the quota quickly; the tool descriptions ask the assistant to narrow with the user first. Do not try creating multiple accounts to circumvent quotas as real identities are required for the actual hotel booking.
Data
- Hotels: 100,000+ regular hotels (encompassing all the major hotel chains using GDS) and about 5,500 luxury properties where Rialto holds the hotel's own invitation-only VIP program or a consortium program. Address, coordinates, chain, ratings.
- Rialto Score: Rialto's guest score from stays booked through it, out of 10.
- Rates: live, all-in (tax and hotel fees included), with the program benefits named per rate. Rates are never published outside the signed-in tools.
- Offers: filed promotions such as a free night on longer stays or an upgrade confirmed at booking, with their stay windows. Savings from an offer are already in the rate shown.
- Room catalog: names, categories, sizes and bed options for a subset of hotels.
What the connector will not do
- Take or store payment details in the conversation.
- Cancel or book without the user's explicit confirmation in a separate step.
- Invent amenities, availability, or prices it does not hold.
Public pages
The public pages at https://rialto.travel/destinations and https://rialto.travel/programs carry the same facts without rates and can be read without an account.