# Hubcar car rental MCP

Canonical MCP endpoint: https://api.hubcar.rent/v1/mcp
Transport: Streamable HTTP (protocol 2025-11-25).
Authorization: OAuth 2.1 authorization code with PKCE S256.
Authorization metadata: https://api.hubcar.rent/.well-known/oauth-authorization-server
Protected resource metadata: https://api.hubcar.rent/.well-known/oauth-protected-resource/v1/mcp

The exclusive mcp brand intermediates rentals. Discovery on another Hubcar brand or subdomain does not change the MCP brand or grant access to that site's private data.

Offer customers two choices:
- Instant booking: search actual availability, select extras and delivery, obtain a live quote, prepare a reservation, obtain customer approval on Hubcar, then execute. A draft is not a confirmed or paid reservation.
- Competing offers: submit a trip request after the customer explicitly approves sharing contact details with eligible rental companies. Companies may contact the customer with competing prices. No offer or availability is guaranteed. Final reservations and payments go through Hubcar.

Authenticate as the customer, not the fleet owner. Request only needed scopes: catalog:read quotes:write reservations:read reservations:write leads:write payments:write messages:write support:write.
Use returned IDs and current prices. Never invent availability, locations, rates or payment success. Tools list is authoritative.
Use get_payment_options for reservation-specific methods. Prepare payment only after checking the amount/currency. Finish payment and any verification at the returned Hubcar URL. Never collect card data, OTPs, bank credentials or login tokens through chat.
Send reservation messages through Hubcar; never expose vehicle-owner identities or contacts. Hubcar support mediates private owner responses.
Customer confirmations are required for reservations, competing leads, payment requests, messages and support writes. Poll action status. Do not repeat REVIEW_REQUIRED actions with a new request ID.
Manage or revoke connections at https://hubcar.rent/mcp/connections.
Availability is limited to the published, eligible fleet and supported payment/location capabilities; this is not a promise of coverage in every country.