Spec Driven Development
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Description from the maker (original English)
Decode Amadeus, Sabre, Galileo and Worldspan PNRs into itineraries, JSON and PRO ticket PDFs.
These three are never merged into one score: opinions, measurements and popularity are different things.
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
Pick the AI app you use, then copy the settings.
AuthorizationValues marked secret are keys to your account. Never share them or paste them into a chat.
You need
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Run this in your terminal
claude mcp add --transport http pnr https://keyflight.io/mcp --header 'Authorization: Bearer {api_key}'Fill in the empty values before running it.
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"pnr": {
"url": "https://keyflight.io/mcp",
"headers": {
"Authorization": "Bearer {api_key}"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Paste into .vscode/mcp.json in your project
{
"servers": {
"pnr": {
"type": "http",
"url": "https://keyflight.io/mcp",
"headers": {
"Authorization": "Bearer {api_key}"
}
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This address needs a key in a request header, which the add-connector menu cannot set. Use Claude Code, Cursor or VS Code instead.
Your choice stays on this device in a cookie; no account needed.
Authorization secret required HTTP headerThese settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
We have not read this server’s tool list yet; we check endpoints in rotation.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 6, 2026
The registry name was verified against the domain keyflight.io (the registry checks domain ownership)
We have not read this repo from GitHub yet
We have not read this repo from GitHub yet
Not checked yet; we check endpoints in rotation
Not checked yet; we check endpoints in rotation
Not checked yet; we read the tool list when we check the endpoint
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
You need to fill in: Authorization
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
The GitHub repo last changed –, and the latest version (1.0.0) reached the registry 17 days ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT in developer mode.
In the same category: Spec Driven Development, Remote Desktop Commander, zanadir
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MCP Server that facilitates spec-driven development workflows, not just Vibe Coding.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Find what a repository's CI is missing, and which security checks cannot fail the build.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Paste a raw booking from a GDS (Amadeus, Sabre, Galileo, Worldspan) into Claude, Cursor or another AI assistant and get a readable itinerary, the booking as JSON, or a PRO ticket PDF.
KeyFlight runs a hosted Model Context Protocol server at https://keyflight.io/mcp and an HTTP API at https://keyflight.io/api/v1/pnr/decode. Both use the same decoder as the free PNR converter on keyflight.io.
This repository holds the documentation and examples. The server itself is hosted by KeyFlight: there is nothing to install or run. Full reference: keyflight.io/pnr-api.
Who it is for: travel agents and agencies who work with GDS bookings, and developers who add PNR decoding to a booking tool, CRM, chat bot or e-mail flow.
The MCP server and the PNR API take the same key, kfp_ followed by 43 letters, digits, - and _.
While the subscription is not active, the key answers 403 subscription_inactive. There is no free tier for the API or the MCP server. The PNR converter on the website is free for everyone, with no key.
| Server URL | https://keyflight.io/mcp |
| Transport | Streamable HTTP, POST only, no sessions and no server-sent event stream |
| Authentication | header Authorization: Bearer kfp_… |
| Protocol versions | 2025-06-18, 2025-03-26, 2024-11-05 |
claude mcp add --transport http keyflight https://keyflight.io/mcp --header "Authorization: Bearer kfp_…"
.cursor/mcp.json){
"mcpServers": { "keyflight": { "url": "https://keyflight.io/mcp", "headers": { "Authorization": "Bearer kfp_…" } } } }
claude_desktop_config.json, needs Node.js)Claude Desktop connects through mcp-remote:
{
"mcpServers": { "keyflight": { "command": "npx", "args": [ "-y", "mcp-remote", "https://keyflight.io/mcp", "--header", "Authorization: Bearer kfp_…" ] } } }
cline_mcp_settings.json)In Cline open MCP Servers → Configure MCP Servers and add:
{
"mcpServers": { "keyflight": { "type": "streamableHttp", "url": "https://keyflight.io/mcp", "headers": { "Authorization": "Bearer kfp_…" }, "disabled": false, "autoApprove": [] } } }
Step-by-step notes for AI agents that install the server: llms-install.md.
Then ask, for example: *"Decode this PNR and make a PRO ticket with a price of 850 EUR"* and paste the booking.
Other clients: any MCP client that supports Streamable HTTP and custom headers. Requests sent from web pages of other sites (with a browser Origin header) are refused with 403 origin_not_allowed, so connect from a desktop app, a CLI or your server. Without a client, see examples/mcp/raw-jsonrpc.sh: one JSON-RPC message per POST, JSON back.
decode_pnr: decode a PNRTurns a raw PNR into a readable itinerary (text) and structured JSON: passengers, flights, airports, terminals, local times, flight duration, airline locators.
| Argument | Type | Default | Description |
|---|---|---|---|
text | string, required | The PNR as the GDS shows it, up to 20,000 characters. The format is recognised from the text. | |
view | table, lines2, lines3, whatsapp | table | Layout of the itinerary text. |
time_format | "24", "12" | "24" | 24 or 12 hour time. |
date_format | "short", "numeric" | "short" | short: 3 May 2026, numeric: 03.05.2026. |
Returns the itinerary text, then JSON: and the same JSON as the PNR API answer. Clients that read structuredContent get that JSON there.
Each decode that finds flights counts towards the monthly decodes of the subscription, like an API call. A text without flights returns an error and does not count. When the decodes of the month are used up, the tool returns an error until the 1st (UTC).
make_ticket: make a PRO ticket PDFMakes a PRO ticket PDF (PNR, airline logos, class, optional price) from a raw PNR and returns a link to the PDF. Included in the KeyFlight subscription.
The ticket is a document for the traveller: it is not an airline ticket and its PNR is not checked against airline systems.
| Argument | Type | Default | Description |
|---|---|---|---|
text | string, required | The PNR, up to 20,000 characters. Every flight needs a date and times. | |
passengers | array of strings, up to 20 | the names in the PNR | Passenger names as on the ticket, e.g. "SMITH/JOHN MR". |
pnr | string | the code in the text, or a random one | Booking code printed on the ticket, 5–8 letters and digits. |
booking_class | Economy, Premium Economy, Business, First Class | the cabin of the first flight's booking class | Class on the ticket. |
price | string | no price on the ticket | Total price printed on the ticket, e.g. "1200.50". |
currency | string, up to 10 characters | "$" | Currency next to the price, e.g. "USD", "€". |
logo | none, expedition | none | Logo in the ticket header. |
time_format | "24", "12" | "24" | 24 or 12 hour time. |
date_format | "short", "numeric" | short or numeric. |
Returns a line PRO ticket PDF: https://keyflight.io/tickets/….pdf with the PNR, the number of flights and the passengers, and as structuredContent:
{ "url": "https://keyflight.io/tickets/….pdf", "pnr": "PQ7XNR", "passengers": ["JOHNSON JOHN", "JOHNSON JANE"], "segments": 2 }
Tickets do not count towards the monthly decodes; one key can make up to 30 tickets an hour.
Errors (no flights in the text, a flight without a date or time, no passenger names, a wrong pnr or option, more than 30 tickets in an hour) come back as tool results with isError: true, so the assistant can read them and fix the call.
POST https://keyflight.io/api/v1/pnr/decode with Content-Type: application/json and Authorization: Bearer kfp_…. The body is { "text": "…", "options": { … } }. The HTTP API returns data and the itinerary as text and HTML; PRO ticket PDFs come from the MCP tool make_ticket. The examples below send the Amadeus booking from examples/pnr-amadeus.txt.
curl https://keyflight.io/api/v1/pnr/decode \
-H "Authorization: Bearer $KEYFLIGHT_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "text": "RP/LHRBA/LHRBA BA/BA 26APR26/1200Z PQ7XNR\nPQ7XNR/BA QLHR 03MAY\n1.JOHNSON JOHN\n2.JOHNSON JANE\n3 BA 178 Y 03MAY 7 LHRJFK HK2 0855 1205 03MAY E BA/PQ7XNR\n4 BA 117 Y 10MAY 7 JFKLHR HK2 1830 0640 11MAY E BA/PQ7XNR\n5 TKT/TIME LIMIT\n6 OPC LHRBA-10MAY:1900/1S2/Q TKT/T-BA\n7 FA PAX 125-2196837482/ETBA/GBP560.20/03MAY26/LHRBA2104/00390755/S3-4", "options": { "view": "table" } }'
examples/api/decode.mjs:
// Node.js 18+ (fetch is built in), in an ES module or an async function
const text = RP/LHRBA/LHRBA BA/BA 26APR26/1200Z PQ7XNR PQ7XNR/BA QLHR 03MAY 1.JOHNSON JOHN 2.JOHNSON JANE 3 BA 178 Y 03MAY 7 LHRJFK HK2 0855 1205 03MAY E BA/PQ7XNR 4 BA 117 Y 10MAY 7 JFKLHR HK2 1830 0640 11MAY E BA/PQ7XNR 5 TKT/TIME LIMIT 6 OPC LHRBA-10MAY:1900/1S2/Q TKT/T-BA 7 FA PAX 125-2196837482/ETBA/GBP560.20/03MAY26/LHRBA2104/00390755/S3-4;
const response = await fetch('https://keyflight.io/api/v1/pnr/decode', { method: 'POST', headers: { Authorization: Bearer ${process.env.KEYFLIGHT_API_KEY}, 'Content-Type': 'application/json', }, body: JSON.stringify({ text, options: { "view": "table" } }), }); const data = await response.json(); if (response.ok) { data.segments.forEach((s) => console.log(s.airlineCode, s.flightNumber, s.departure.date)); } else { console.error(response.status, data.error, data.message); }
examples/api/decode.py (needs requests):
import os
import requests
text = """RP/LHRBA/LHRBA BA/BA 26APR26/1200Z PQ7XNR PQ7XNR/BA QLHR 03MAY 1.JOHNSON JOHN 2.JOHNSON JANE 3 BA 178 Y 03MAY 7 LHRJFK HK2 0855 1205 03MAY E BA/PQ7XNR 4 BA 117 Y 10MAY 7 JFKLHR HK2 1830 0640 11MAY E BA/PQ7XNR 5 TKT/TIME LIMIT 6 OPC LHRBA-10MAY:1900/1S2/Q TKT/T-BA 7 FA PAX 125-2196837482/ETBA/GBP560.20/03MAY26/LHRBA2104/00390755/S3-4"""
response = requests.post( "https://keyflight.io/api/v1/pnr/decode", headers={"Authorization": f"Bearer {os.environ['KEYFLIGHT_API_KEY']}"}, json={"text": text, "options": { "view": "table" }}, timeout=30, ) data = response.json() if response.ok: for s in data["segments"]: print(s["airlineCode"], s["flightNumber"], s"departure") else: print(response.status_code, data["error"], data["message"])
| Field | Values | Default |
|---|---|---|
text | Required. The booking as the GDS shows it, up to 20,000 characters. | |
options.view | table, lines2, lines3, whatsapp: the layout of itinerary. | table |
options.timeFormat | "24" (18:30), "12" (6:30 PM) | "24" |
options.dateFormat | "short" (3 May 2026), "numeric" (03.05.2026) | "short" |
options.show.logo | true / false. Airline logos (HTML only). | true |
options.show.airports | true / false. Airport names and terminals next to the city. | true |
options.show.cabin | true / false. Cabin and booking class: Economy (Y). | false |
options.show.status | true / false. Segment status: Confirmed, Waitlisted. | false |
options.show.passengers | true / false. Passenger names above the flights. | false |
options.show.pnr | true / false. The booking reference and the airlines' references above the flights. | false |
An unknown option or a wrong value answers 400 invalid_option with the field and the allowed values.
The full answer to the example above: examples/api/response-example.json (itinerary.html shortened). Main fields:
| Field | Meaning |
|---|---|
pnrCode | The booking reference found in the text, or null. |
passengers[].name | A passenger name as the PNR writes it. |
segments[].airlineCode, airlineName, flightNumber | Airline and flight number ("950" for UA0950). |
segments[].bookingClass, cabin | Booking class letter and cabin by it: Economy, Premium Economy, Business, First Class. |
segments[].status, statusText | Status code as in the PNR ("HK2") and Confirmed, Waitlisted or the code itself. |
segments[].logoUrl | Airline logo, 64×64 PNG. |
| segments[].duration | Flight time in minutes across the two airports' time zones, or null
Only the beginning is shown; read the rest in the repo