Live platform · 2026 · Platforms, Claude agents, Integrations
Plan Marrakech travel platform
A live CMS-led travel platform combining managed tours, inquiry capture, affiliate journeys, editorial content, operational email, and an MCP server for agent access.
Visit live siteProblem
The operator needed to manage a mixed catalog of direct inquiries and third-party offers without editing code or losing attribution.
My role
Sole developer; product architecture, CMS, frontend, lead flow, integrations, security, and deployment
Stack
How the work moves
- Step 01Payload CMSTours, pages, media, offers
- Step 02Public siteSearch, SEO, trip discovery
- Step 03Lead routeInquiry + confirmation email
- Step 04Affiliate routeTracked redirect to partner
The business problem
Plan Marrakech combines two business models. Direct tours create inquiry leads for an operating partner; cars, flights, transfers, and some activities send visitors to affiliate providers. The owner needs to manage both without code.
Architecture decisions
Payload CMS models tours, affiliate items, pages, posts, inquiries, clicks, subscribers, reviews, media, and users. Public pages read cached content, while collection hooks revalidate the affected area after an edit.
Direct inquiries validate on the server, persist to the CMS, and send branded notification and confirmation emails. Affiliate items route through a tracked redirect so destinations remain editable and attribution stays visible.
MCP operations layer
A Payload MCP server exposes selected CMS operations for tours, posts, inquiries, and the supporting content collections. The configuration defines the maximum operations available per collection, while each API key narrows them further and Payload access control still runs as the key's user. Administrator users are deliberately excluded, and the Turnstile secret is redacted from global responses.
Writes pass through the Payload Local API so validation and revalidation hooks still run. Two custom read tools add Google Analytics 4 and Search Console reporting for traffic, queries, pages, countries, devices, clicks, impressions, CTR, and average position. Server instructions tell MCP clients to confirm destructive or bulk changes before acting.
Operating detail
The project includes global search, structured data, sitemap and robots routes, custom-tour requests, a cron-protected database keepalive, and a branded admin dashboard. A hands-on security review closed direct public write paths and re-tested the intended server routes.
Live status
The platform is live at planmarrakech.com, and the operator manages content, inquiries and affiliate offers without touching code.