Aruba Massage & Spa – Guide for AI assistants

Connect with MCP

Endpoint: https://arubamassageandspa.com/api/v1/mcp.php

Transport: Streamable HTTP, stateless JSON responses. Authentication: none for public information. Supported protocol versions: 2026-07-28, 2025-11-25 and 2025-06-18. Use an MCP client; opening the POST endpoint in a browser returns HTTP 405.

Modern clients use server/discover and per-request protocol metadata and matching headers. Legacy clients initialize first. Tools: get_service_facts, search_public_answers, get_public_answer, quote_spa_plan, assess_spa_plan, build_spa_handoff. All are read-only. They cannot check live availability, create custom quotes, book, modify, cancel, charge, refund or access customer records. The public website appointment flow is separate.

Public sources

- Guest questions
- Complete public answers JSON
- Complete public answers Markdown
- Service facts
- OpenAPI
- Exact tool definitions
- AI catalog
- Experimental MCP server card
- Terms · Privacy

Answer responsibly

Read the complete answer and every related_answers item. Required context is part of the answer, especially confirmation, cancellation, provider exceptions and refunds. Cite the returned public URL. Preserve review dates and qualifications. Unknown and non-public IDs return the same not-found result. No match means ask the team, not guess. Do not invent treatment benefits, eligibility, prices, availability or confirmation.

Search takes 1–512 characters, an optional limit from 1 to 10 and a service from the tool schema. Send short general service questions, not personal health, identity or payment details. Only public information is indexed. Responses have a 64 KiB ceiling including the full MCP envelope; an overlarge result returns context_too_large with public citations, never silently truncated conditions.

No query text is stored by the application. Requests are rate limited to 90 per minute per network address and 1,200 per minute overall. Only short-lived keyed address counters are stored outside the web root; counters expire after one minute and are replaced with a fresh random key on the next request. Standard hosting access logs may still record request metadata. Use POST bodies for questions, never URL query parameters. HTTP 429 means retry after 60 seconds.

Safe HTTP fallback

POST https://arubamassageandspa.com/api/v1/query.php with Content-Type: application/json and one object:

{"name":"get_public_answer","arguments":{"id":"S040"}}

For search: {"name":"search_public_answers","arguments":{"query":"couples massage","limit":3}}. For facts: {"name":"get_service_facts","arguments":{}}. No query-string arguments or extra fields. Request bodies are limited to 16 KiB.

Public planning

Use quote_spa_plan for current published USD prices, assess_spa_plan for schedule eligibility, and build_spa_handoff for a website link. Send items (category, treatment, duration in minutes, guests, optional yoga_mats), with optional service_date, preferred_start_time (15-minute increments, Aruba time), provider_mode (single or multiple) and location_type (Villa, Condo or Hotel). Keep treatment order: it affects where provider breaks fit. No names, email, property address, health notes, payment details or client-supplied prices are accepted.

These estimates include published service prices and selected mats. Classes above ten guests require a custom quote, so the entire visit total is withheld. A southern-location class travel cost may require separate agreement. Eligibility does not check a provider calendar or confirm a booking. Classes and multiple-provider visits need manual confirmation. An absent or mismatched backend returns planning_unavailable while public facts and answers remain available.

Handoff links carry public preferences in a URL fragment. The website validates them again, recalculates prices, clears the fragment and preserves any existing checkout recovery. The guest must review and complete checkout; a handoff never books, authorizes payment or supplies consent.

Booking boundaries

The published online planner saves a card during an appointment request, without a charge or funds hold at that point. Confirmation depends on the published conditions and the actual receipt. Existing bookings keep their accepted status and terms. These public tools cannot act for a guest. Direct guests to plan their spa time or contact the team. Never ask for card data, passwords, verification codes or medical history.