Enables governed, AI-safe access to traveler data through three typed tools, enforcing consent, PII removal, provenance, and audit at the MCP boundary.