Skip to content
SecurityAuto-generatedScore: 28

Branded Fares Upsell MCP Server

The Branded Fares Upsell API, provided by Amadeus, is a specialized flight shopping service designed to unlock incremental revenue streams for airlines, travel agencies, and online travel platforms.

Quick Start Summary

The Branded Fares Upsell MCP server is a Model Context Protocol bridge that connects AI assistants — including Claude Desktop, Cursor, Windsurf, and VS Code Copilot — to the Branded Fares Upsell API through natural language. It exposes 1 API endpoints as callable tools, such as Return a list of upsell Flight Offers based on given Flight Offers. No authentication is required — setup takes approximately 30 seconds. The server uses STDIO transport and can be installed by running npx -y @mcp/amadeus-com-amadeus-branded-fares-upsell. This integration is sourced from the auto Branded Fares Upsell OpenAPI specification (v1.0.1) and has a quality score of 28/99 (fair documentation coverage).

1Endpointstools mapped
NoneAuthopen access
28/99Qualityfair
~30 secSetupno auth

Server Details

Category
Security
Authentication
None
Endpoints
1 operations
Transport
STDIO
Spec Version
v1.0.1
Install Command
npx -y @mcp/amadeus-com-amadeus-branded-fares-upsell

Environment Variables

BRANDED_FARES_UPSELL_API_KEY

Example: your_branded_fares_upsell_api_key

Top Endpoints

POST
/shopping/flight-offers/upselling

Return a list of upsell Flight Offers based on given Flight Offers

Own this API?

Verify ownership of this listing to control the description, configuration details, and documentation links. Choose between free manual verification or instant premium placement.

Option 1: Free Verification

Slow manual review. Requires creating a GitHub issue with verified documentation or domain verification.

  • • Verified badge on page
  • • Standard search sorting
  • • 2-3 business days review
Start Free Claim →
Instant & Boosted

Option 2: Featured Upgrade($9/mo)

Instant verification plus premium styling, featured badges, and directory placement boost.

  • • ★ Featured star & amber highlight border
  • • Top of directory search placement
  • • Instant activation via claim token

📖 Detailed MCP Integration Guide

A technical breakdown of capabilities, agent workflows, and security/configuration best practices.

Capabilities & Use Cases
The Branded Fares Upsell API, provided by Amadeus, is a specialized flight shopping service designed to unlock incremental revenue streams for airlines, travel agencies, and online travel platforms. Its core capability is to take an existing, often basic, flight offer and intelligently generate a curated set of premium fare options or ancillary bundles for upselling to a customer. By analyzing the initial offer context—including route, booking class, and available inventory—the API returns a list of higher-fare branded products with their respective price differences and added benefits (such as extra baggage, seat selection, lounge access, or greater flexibility). This transforms a simple fare search into a dynamic merchandising moment. Typical use cases include airlines looking to increase ancillary revenue on their booking engines, travel agencies aiming to enhance agent-assisted bookings with higher-margin options, and OTAs building sophisticated shopping flows that present value-added choices at the point of sale. It is fundamentally a tool for conversion optimization, enabling businesses to present the right upgrade at the right time to maximize customer value and satisfaction.
🤖AI Agent Value
When exposed as a tool via the Model Context Protocol (MCP) to an AI coding assistant like Claude Desktop or Cursor, this API becomes a powerful engine for automating and enhancing developer workflows related to travel commerce. The AI agent can act as an intelligent intermediary, dynamically interfacing with the upselling engine without the developer needing to manually construct complex payloads or interpret response schemas. This integration allows the AI to programmatically query for upsell opportunities based on any flight offer, instantly generating data that can be embedded into UI mockups, used in automated testing suites for booking flows, or incorporated into logic simulations for revenue management. The value lies in abstracting away the API's complexity, enabling developers to instruct the AI in natural language to "fetch premium fare options for this economy flight from Paris to Tokyo" or "simulate how upsell revenue changes if we adjust the price threshold by 10%." This accelerates prototyping, reduces integration time, and allows developers to focus on higher-level application logic while the AI handles the precise API interactions and data transformation.
💬Example Workflows
A developer can leverage this MCP-enabled AI agent to perform a variety of dynamic, context-aware tasks that streamline development and operational processes. For instance, the agent can be instructed to query the API to do X, such as: "For all economy flight offers in this JSON array, call the upsell API and append the best available premium fare to each record, creating a enriched dataset for our recommendation engine." Similarly, it can automate Z by being asked to update Y: "Using the output from the last upsell query, automatically generate a set of mock API responses for our integration tests, ensuring they cover scenarios where upsell options are available, priced above a certain threshold, or entirely unavailable." In a more advanced workflow, the AI agent could continuously query the API with variations of a test offer to map out fare ladder behaviors, helping developers understand pricing thresholds and brand structures. This turns a simple API call into a component of a larger, automated analysis pipeline, enabling rapid iteration on features like dynamic UI displays or personalized upgrade logic.
🛡️Security & Auth
Critical to the secure and effective use of this API is proper authentication and adherence to security best practices. While the specific endpoint may not require an authentication payload in every call, it is imperative that the underlying access token generated via the Amadeus authorization process is securely managed and injected into requests by the server. Developers must ensure that the token, which grants access to commercial data and billing, is never exposed to client-side environments or logged in plaintext. Following the principle of least privilege is key; if using API keys, they should be scoped only to the specific endpoints and resources required for the upselling function. When setting up the MCP server, configuration should include secure storage for credentials (such as environment variables or a secrets manager), robust error handling for token expiration, and strict validation of all data returned from the API before it is used in downstream processes. It is also essential to work within the constraints of the test environment, which is explicitly noted as a subset of production, to ensure that development and testing do not incur unintended costs or affect live data.

Similar APIs

Other APIs in the Security category.

Spotify Web API

The Spotify Web API is a comprehensive RESTful service provided by Spotify AB that empowers developers to programmatically access Spotify's vast catalog of over 100 million songs and 5 million podcast titles. Its core capabilities encompass music discovery, library management, audio content retrieval, and playback control across authenticated user devices. Beyond basic metadata queries for albums, artists, and tracks, the API provides specialized endpoints for deep audio analysis (e.g., tempo, key, loudness) and audio features (e.g., danceability, energy, valence), which are invaluable for applications in music recommendation, DJ software, and academic research into music theory and psychology. Typical use cases span consumer applications like building custom playlist generators, social sharing features, or music learning tools, as well as enterprise applications for music intelligence platforms, content discovery engines, and personalized marketing analysis. The API serves as the foundational gateway for any third-party integration that seeks to leverage Spotify's ecosystem, from simple "Now Playing" widgets to complex data processing pipelines.

1Password Connect

The 1Password Connect API is a robust RESTful interface provided by 1Password, a leading enterprise password management and secrets orchestration platform. This API serves as the programmatic backbone for 1Password Connect, a self-hosted server that acts as a secure bridge between an organization's internal infrastructure and its 1Password vaults. Its core capability is to enable secure, automated access to secrets, credentials, documents, and other sensitive items stored within 1Password, without exposing master passwords or sensitive data to applications directly. Typical use cases are extensive within modern DevOps and IT environments, including dynamically injecting database credentials into cloud application deployments, rotating secrets on a scheduled basis, automatically retrieving API keys for CI/CD pipelines, and centralizing secret management for microservices architectures. By providing a self-hosted component, the API allows organizations to maintain full control over their data flow and integrate 1Password's zero-knowledge security model directly into their internal tooling and automation scripts.

Events API

The 1Password Events API is a specialized service provided by the password and credential management platform 1Password, designed for enterprise security teams, IT administrators, and security analysts. Its core capability is to provide a secure, queryable stream of audit events related to secret access and authentication activity within a 1Password organization or team. By aggregating data from the specified endpoints—`/api/v1/itemusages` for secret access logs and `/api/v1/signinattempts` for user authentication logs—it enables comprehensive monitoring, threat detection, and compliance reporting. Unlike a general-purpose API for managing vaults or secrets, this API is strictly read-focused, serving as the primary telemetry pipeline for security information and event management (SIEM) systems, custom alerting tools, and internal audit platforms. Typical use cases include correlating unusual secret access patterns with potential insider threats, verifying compliance with data access policies, generating audit trails for regulatory frameworks like SOC 2 or GDPR, and building real-time dashboards to visualize credential usage across an organization.

Authentiq API

The Authentiq API provides a robust foundation for implementing strong, passwordless authentication and identity verification systems. Developed by Authentiq, a specialist in modern digital identity solutions, this API enables the secure management of cryptographic keys and the orchestration of login and scope-based authorization flows. Its core capabilities are centered around the lifecycle management of public-private key pairs, which serve as the user's credentials. The endpoints allow for the creation of a new key pair (POST /key), retrieval of a public key by its ID (GET /key/{PK}), and associated management operations (POST, PUT, DELETE on the key resource). Beyond basic key management, the API facilitates the authentication process itself through the POST /login endpoint, which verifies a signature from the user's private key. The /scope endpoints introduce a layer of fine-grained, permission-based access control, allowing developers to define, query, and manage specific authorization scopes tied to a job or session. This makes the API ideal for enterprise applications requiring secure internal tool access, consumer-facing mobile or web apps seeking seamless login experiences without credential fatigue, and IoT ecosystems where device authentication is paramount.

Related MCP Server Integrations

Spotify Web API MCP Setup

The Spotify Web API is a comprehensive RESTful service provided by Spotify AB that empowers developers to programmatically access Spotify's vast catalog of over 100 million songs and 5 million podcast titles. Its core capabilities encompass music discovery, library management, audio content retrieval, and playback control across authenticated user devices. Beyond basic metadata queries for albums, artists, and tracks, the API provides specialized endpoints for deep audio analysis (e.g., tempo, key, loudness) and audio features (e.g., danceability, energy, valence), which are invaluable for applications in music recommendation, DJ software, and academic research into music theory and psychology. Typical use cases span consumer applications like building custom playlist generators, social sharing features, or music learning tools, as well as enterprise applications for music intelligence platforms, content discovery engines, and personalized marketing analysis. The API serves as the foundational gateway for any third-party integration that seeks to leverage Spotify's ecosystem, from simple "Now Playing" widgets to complex data processing pipelines.

SecurityConfigure →

1Password Connect MCP Setup

The 1Password Connect API is a robust RESTful interface provided by 1Password, a leading enterprise password management and secrets orchestration platform. This API serves as the programmatic backbone for 1Password Connect, a self-hosted server that acts as a secure bridge between an organization's internal infrastructure and its 1Password vaults. Its core capability is to enable secure, automated access to secrets, credentials, documents, and other sensitive items stored within 1Password, without exposing master passwords or sensitive data to applications directly. Typical use cases are extensive within modern DevOps and IT environments, including dynamically injecting database credentials into cloud application deployments, rotating secrets on a scheduled basis, automatically retrieving API keys for CI/CD pipelines, and centralizing secret management for microservices architectures. By providing a self-hosted component, the API allows organizations to maintain full control over their data flow and integrate 1Password's zero-knowledge security model directly into their internal tooling and automation scripts.

SecurityConfigure →

Events API MCP Setup

The 1Password Events API is a specialized service provided by the password and credential management platform 1Password, designed for enterprise security teams, IT administrators, and security analysts. Its core capability is to provide a secure, queryable stream of audit events related to secret access and authentication activity within a 1Password organization or team. By aggregating data from the specified endpoints—`/api/v1/itemusages` for secret access logs and `/api/v1/signinattempts` for user authentication logs—it enables comprehensive monitoring, threat detection, and compliance reporting. Unlike a general-purpose API for managing vaults or secrets, this API is strictly read-focused, serving as the primary telemetry pipeline for security information and event management (SIEM) systems, custom alerting tools, and internal audit platforms. Typical use cases include correlating unusual secret access patterns with potential insider threats, verifying compliance with data access policies, generating audit trails for regulatory frameworks like SOC 2 or GDPR, and building real-time dashboards to visualize credential usage across an organization.

SecurityConfigure →

Authentiq API MCP Setup

The Authentiq API provides a robust foundation for implementing strong, passwordless authentication and identity verification systems. Developed by Authentiq, a specialist in modern digital identity solutions, this API enables the secure management of cryptographic keys and the orchestration of login and scope-based authorization flows. Its core capabilities are centered around the lifecycle management of public-private key pairs, which serve as the user's credentials. The endpoints allow for the creation of a new key pair (POST /key), retrieval of a public key by its ID (GET /key/{PK}), and associated management operations (POST, PUT, DELETE on the key resource). Beyond basic key management, the API facilitates the authentication process itself through the POST /login endpoint, which verifies a signature from the user's private key. The /scope endpoints introduce a layer of fine-grained, permission-based access control, allowing developers to define, query, and manage specific authorization scopes tied to a job or session. This makes the API ideal for enterprise applications requiring secure internal tool access, consumer-facing mobile or web apps seeking seamless login experiences without credential fatigue, and IoT ecosystems where device authentication is paramount.

SecurityConfigure →

IP geolocation API MCP Setup

The IP Geolocation API, developed by AbstractAPI, is a robust and scalable RESTful service designed to provide developers with precise geographic, network, and contextual data associated with any given IPv4 or IPv6 address. Its core capability lies in translating a digital identifier—a public IP address—into a rich dataset that includes region, country, city, latitude, longitude, timezone, and ISP details. Beyond this fundamental geolocation, the API extends its value by offering supplementary metadata such as the local currency code, national flag, primary language, and security flags indicating whether an IP is from a corporate network or associated with a known threat actor. Typical enterprise use cases span from real-time user authentication and fraud prevention, where a login attempt from an unexpected location can trigger a security alert, to localized content delivery, ensuring users see region-appropriate pricing, language, and offers. For consumers and developers, it powers features like website analytics dashboards, personalized news feeds, and dynamic form auto-population.

SecurityConfigure →