Give each tool a clear job
A review summariser should take supplied reviews and return a summary. A reservation tool needs a different level of validation and authorisation. Avoid broad tools with unclear effects.
Treat supplier text as data
Property descriptions and guest messages can contain misleading instructions. Keep them separate from application rules and validate structured outputs.
Plan for human approval
A generated itinerary is a draft. A booking or cancellation is an external action. Make consequential actions explicit and require appropriate user authorisation.
Define the boundary around each tool
Start with a tool that has an observable, limited result. For example, a review-summary tool can accept an authorised set of reviews and return themes with the input count. It should not silently fetch unrelated customer records or publish a summary to a property website.
Separate reading, drafting and acting
A read-only property lookup, an itinerary draft and a reservation cancellation have different consequences. Expose those distinctions in tool names and descriptions. Keep credentials on the service side, validate each request and enforce permissions on the server rather than relying on a model to remember a rule.
Test the failure path
Use an unsupported destination, missing property information and a supplier timeout. Confirm that errors are understandable and that the agent does not invent a successful result. For actions that change external state, test retries and an interrupted response so a repeated call cannot accidentally duplicate a booking or message.
Make the source inspectable
Keep the original supplied facts available for review. A useful AI response should let a person tell which details came from the source, which are suggestions and which remain unknown. Never treat instructions embedded in a review or supplier description as permission to run another tool.
For supplier-connected platforms, the Nezasa TripBuilder profile links to its own MCP documentation. Access and permitted actions still depend on the provider.