Aa

io.github.thehesiod由 GitHub 帳號 thehesiod 發布v0.1.0更新於 Oct 27, 2026

MCP server for read-only American Airlines AAdvantage account access

已驗證STDIO僅桌面位置與生活金融

概覽

AI 產生的概覽

唯讀的 MCP 伺服器，讓助理查看你的美國航空 AAdvantage 帳戶：哩程、忠誠點數、行程、旅行額度與優惠。

可以做什麼
  • 讀取帳戶與個人資料：姓名、AAdvantage 號碼、哩程餘額、會員等級、忠誠點數進度及資料內容
  • 依日期範圍、分頁與搜尋查看哩程與忠誠點數的交易紀錄
  • 查詢即將出發的行程，並依訂位代號取得完整訂位詳情，含航段、旅客、機票與費用
  • 為某筆訂位搜尋替代航班，提供價格輪播與各艙等價格
  • 列出機票與行程旅行額度，以及儀表板上的合作夥伴優惠
  • 檢查已儲存的連線狀態，並從已登入的 Chromium 瀏覽器儲存連線 Cookie
適用情境
當你希望助理回答關於自己 AAdvantage 哩程餘額、等級進度、歷史活動、即將出發的行程或旅行額度的問題，並比較改票選項，而不必自己打開 aa.com 時適用。
執行需求
以 Python 套件形式在本機透過 stdio 執行（pip install aa-mcp-server）。需要真實的 Chromium 瀏覽器完成一次手動登入 aa.com（含可能出現的兩步驗證），再把 Cookie 擷取到本機連線儲存區。可選設定 AA_MCP_CHROMIUM 指定 Chromium 路徑。未宣告任何 API 金鑰。
安裝前請注意
它會把 aa.com 連線 Cookie 存在家目錄下的磁碟檔案，能存取該機器的人即可讀取，應視為帳戶憑證。它會讀取出生日期、AAdvantage 號碼、訂位詳情等個人資料。連線會過期，需要重新擷取。僅唯讀：不能訂票、兌換哩程或修改資料。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Aa，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

aa-mcp-server

An MCP server that gives Claude (or any MCP-compatible LLM) read-only access to your American Airlines AAdvantage account — mile balance, Loyalty Points progress, transaction history, upcoming trips, travel credits, and partner offers.

This is not a browser-automation wrapper. The server discovers and calls aa.com's underlying JSON APIs directly using session cookies extracted from a Chromium login. All HTTP traffic uses curl_cffi with Chrome TLS impersonation to satisfy aa.com's Akamai Bot Manager.

Tools

ToolEndpointReturns
get_account_summary/loyalty/api/member-informationName, AAdvantage #, mile balance, status, cobranded card, business memberships
get_loyalty_points_progress/loyalty/api/progress-qualificationLP YTD, last-year totals, tier thresholds, next-status delta
get_profile_details/api/loyalty/.../profileDOB, partners list, sales city, mile expiration, million-miler stats
get_mile_activity/api/loyalty/.../memberActivityMile/LP transaction history (date range, paginated, searchable)
get_upcoming_trips/loyalty/api/upcoming-tripsReservations with record locators
get_reservation_by_locator/manage-reservation/viewres/api/reservationFull reservation: segments, passengers, tickets, costs, change/cancel eligibility (requires lead-passenger name)
search_change_flights/manage-reservation/reshop/api/reshop/cheapestAlternative flights for a reservation with a ±6-day price carousel, per-cabin pricing (netPrice = delta vs paid). Accepts origin/destination/date changes; pricing is total for all pax (no per-passenger split)
get_flight_credits/api/loyalty/travelCredits/flightCredit/detailsSingle-passenger ticket credits
get_trip_credits/api/loyalty/travelCredits/tripCredit/detailsMulti-passenger / itinerary credits
get_partner_offers/loyalty/api/partnerOffersDashboard partner promotions
get_notifications/loyalty/api/notificationsAccount notifications
check_auth_status—Saved-session info: AA #, token expiry, cookie count
save_session_from_browserCDPPulls cookies from a logged-in Chromium and persists them

Setup

bash
pip install aa-mcp-server

One-time auth

aa.com is fronted by Akamai Bot Manager — you can't log in via headless requests. The flow:

  1. Launch a real Chromium with a persistent profile and a remote-debugging port:
    bash
    aa-auth-browser              # default accountaa-auth-browser personal     # named account
  2. Log into aa.com (and complete 2FA if prompted) in the window that opens.
  3. Copy the cookies into the MCP store:
    bash
    aa-mcp-server --extract-session default
    Or call the save_session_from_browser MCP tool from Claude.

The cookies live in ~/.aa-mcp/accounts/<account>/session.json. The chromium profile lives in ~/.aa-mcp/chrome-profiles/<account>/. To refresh after expiry, relaunch aa-auth-browser (the saved profile auto-refreshes the access_token cookie when you visit any aa.com page) and re-run --extract-session.

AA_MCP_CHROMIUM=<path-to-chrome.exe> overrides the auto-discovery if your Chromium is somewhere unusual.

Multi-account

Every tool takes an optional account parameter. Omit it to use the default account.

python
get_account_summary()                # defaultget_account_summary(account="spouse")

Running

bash
aa-mcp-server                        # stdio transportaa-mcp-server --setup                # show account status & setup hintsaa-mcp-server --extract-session NAME # save cookies from running Chromium

Add to your MCP client config (e.g. Claude Desktop):

json
{  "mcpServers": {    "aa": {      "command": "aa-mcp-server"    }  }}

Limitations

  • Read-only. No booking, no award redemption, no profile edits.
  • Cookie expiry. The access_token JWT lives ~45 min; the refresh_token cookie typically ~30 days. Visiting any aa.com page in the saved Chromium profile silently refreshes both. After a long gap, re-extract.
  • GraphQL coverage. Only the GetCustomer persisted query is wired up. Expanding requires capturing additional sha256Hashes from the browser bundle — easy but a per-feature task.
  • One region tested. All testing has been on US-locale aa.com. International locales may require different referer paths.

License

MIT

mcp-name: io.github.thehesiod/aa

來源：README.md，提交 f66f7d1

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.1.0最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分