Code Pluginsource linkedVerified

Expedia Travelv1.0.4

OpenClaw plugin for live hotel and flight search via Expedia Travel Adapter

@expediagroup/expedia-openclaw·runtime expedia-openclaw·by @expediagroup
openclaw plugins install clawhub:@expediagroup/expedia-openclaw
Latest release: v1.0.4Download zip

Compatibility

Built With Open Claw Version
2026.5.26
Min Gateway Version
>=2026.4.5
Plugin Api Range
>=2026.4.5
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The manifest, README, skill, and runtime code consistently describe live hotel and flight search with signup, verification, account status, and booking links via Expedia's adapter.
ℹ
Instruction Scope
The skill gives strong instructions to reuse the cached email for token refresh, but this is disclosed in the README and tied to the expected re-authentication flow rather than an unrelated action.
✓
Install Mechanism
The package uses normal OpenClaw/npm metadata, registers one extension, and has no install-time lifecycle scripts in package.json.
✓
Credentials
Network calls are limited to the configured EG Travel adapter endpoints for signup, verification, status, and travel searches; no shell execution, browser automation, or broad local indexing was found.
ℹ
Persistence & Privilege
The plugin stores an EG Travel token, tenant ID, email contact, and expiry metadata in ~/.oc/credentials/eg-travel.json with restrictive file modes, which is proportionate to keeping the travel integration authenticated.
Scan Findings in Context
[EA2] expected: The cached-contact re-authentication concern is real but purpose-aligned and disclosed: the plugin sends a new code to the previously verified email when the token expires, and the README explicitly describes that behavior.
[P6] unexpected: The cited text is an output-format rule about not showing per-night rates unless asked; it does not instruct the agent to reveal system prompts or hidden instructions.
[staticScan] expected: Static scan reported no suspicious patterns, and manual review found no hidden persistence, destructive operations, broad file access, or unrelated data collection.
[VirusTotal] expected: VirusTotal telemetry was clean with zero malicious or suspicious detections; this supports but does not determine the benign verdict.
Assessment
Install this only if you are comfortable sharing travel searches and your email address with Expedia's adapter service. The plugin saves a local token for future searches and may automatically send a fresh verification code to the saved email when access expires; remove ~/.oc/credentials/eg-travel.json to clear that local credential.

Verification

Tier
source linked
Scope
artifact only
Summary
Validated package structure and linked the release to source metadata.
Commit
46d2222c2580
Tag
v1.0.4
Provenance
No
Scan status
clean

Tags

latest
1.0.4

Expedia OpenClaw Plugin

Live hotel and flight search powered by Expedia — built as an OpenClaw plugin. Ask your agent for a hotel or a flight and get back real prices, real availability, and real booking links. No web scraping. No browser automation. No fabricated URLs.

By using this plugin you agree to the Terms and Conditions.

Install

openclaw plugins install clawhub:@expediagroup/expedia-openclaw

Add the tools to your ~/.oc/oc.json:

{
  "tools": {
    "alsoAllow": [
      "search_stays",
      "search_flights",
      "eg_travel_signup",
      "eg_travel_verify"
    ]
  }
}

Restart the gateway:

openclaw gateway restart

How it works

Ask your agent about hotels, vacation rentals, or flights:

"Find me a hotel in Manhattan for next weekend, two adults"

"Round-trip flights from SFO to Tokyo, August 12–22"

The first time, the agent walks you through a one-time setup — it asks for your email, sends you a 6-digit code, and you paste the digits back into the chat. The whole thing takes about two minutes. After that, searches just work.

Your access stays active as long as you keep using it. If you go about a week without searching, the agent sends you a fresh code automatically — you don't have to re-enter your email.

What you get back

The agent presents real-time results from Expedia with prices, ratings, and direct booking links.

Hotels and vacation rentals:

The Plaza ⭐⭐⭐⭐⭐ · 9.0/10 (1,000 reviews) US$2,894 · Total Iconic NYC landmark on Central Park & 5th Ave. Full-service spa, family-friendly. 👉 Book on Expedia

Flights:

United Airlines · San Francisco (SFO) → Tokyo (NRT) Departs 11:15 AM · 11h 20m · Nonstop · Economy $845 USD per adult · Checked bag included 👉 View on Expedia

You can refine with follow-ups like "only 5-star", "pet-friendly", "under $300/night", "fewer stops", or "show me business class" — the agent re-searches with updated filters each time.

Tools

ToolPurpose
search_staysSearch hotels and vacation rentals with filters, sorting, and an optional trip-intent description
search_flightsSearch flights with filters for stops, airline, cabin class, and more
eg_travel_signupSend a 6-digit verification code to your email (first-time setup or re-auth)
eg_travel_verifyExchange the code for an API token, saved automatically to your credential store

The bundled travel-search skill tells the agent when and how to use each tool — including the setup flow, re-authentication after inactivity, error handling, and output formatting.

Configuration

All configuration is optional. The plugin defaults to the public Expedia service and US pricing.

{
  "plugins": {
    "entries": {
      "expedia-openclaw": {
        "enabled": true,
        "config": {
          "default_pos_country": "US",
          "default_currency": "USD",
          "request_timeout_ms": 12000
        }
      }
    }
  }
}

Privacy

See the Privacy and Data Use section of the Terms and Conditions.

Development

npm install --legacy-peer-deps
npm test                # unit tests (vitest)
npm run test:integration # integration tests (requires adapter)
npm run build           # compile TypeScript
npm run type-check      # type check without emitting
npm run lint            # eslint

Issues

File bug reports and feature requests at github.com/ExpediaGroup/expedia-openclaw/issues. See CONTRIBUTING.md for development setup.

License

Apache 2.0 — see LICENSE.