us.thistripbtw/trips

Est-ce que us.thistripbtw/trips est sûr ?

Au dernier audit MCP Hub, le serveur MCP « us.thistripbtw/trips » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 6 outils

• add_to_kept_trip≈ 472 tokens

  Add a stop to a trip the person has KEPT (a link with #k=), on their behalf. Use when they say 'add X to the trip', 'we're stopping at Y on the way', 'put the hotel on it'. Needs their EDIT phrase — a view phrase can read but not write, and the tool says so. Writes exactly one stop and returns the trip's current stop count. Like read_kept_trip this touches the network: the #k= phrase is the password and it goes to thistripbtw.us over TLS, nothing is stored about you, and a wrong phrase counts as a guess. Treat the link as a credential.

  Paramètres, retour & exemple (2)

  Paramètres

  • link · string · requis
    The kept trip's link with its #k= EDIT phrase.
  • stop · object · requis
    The stop to add.

  Exemple d'appel

  {"name": "add_to_kept_trip", "arguments": {"link": "texte", "stop": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "stops": 1, "summary": "texte"}}

• amend_trip_link≈ 2024 tokens

  Update a trip link you already built — add legs, change one leg's fields, replace them all, rename, or drop one — and get the new link back. Use this instead of building a fresh link every time the plan changes, so the person holds one link that grows. To change ONE leg (its lodging, date, note, who is on it) use `update` rather than resending every leg through `legs`. Takes a draft link (#d=) plus the changes; no network, no password, the trip is inside the link. For a KEPT trip (#k=) use add_to_kept_trip.

  Paramètres, retour & exemple (7)

  Paramètres

  • add · array · optionnel
    Legs to APPEND after the last one.
  • legs · array · optionnel
    REPLACES every leg. Omit to keep them.
  • link · string · requis
    The existing draft link, whole URL or just the #d= fragment.
  • name · string · optionnel
    New trip name.
  • origin · object · optionnel
    New starting point.
  • remove · integer · optionnel
    Drop leg number N (1-based). Applied after add/legs/update.
  • update · array · optionnel
    Change fields on existing legs without resending the rest. Each item names a leg (1-based) and the fields to set; a field set to null is cleared. Applied after add/legs, before remove.

  Exemple d'appel

  {"name": "amend_trip_link", "arguments": {"link": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"legs": 1, "link": "texte", "changed": {}}}

• build_trip_link≈ 945 tokens

  Start here for any trip, road trip or itinerary. As soon as there is an origin and one destination, build the link and give it to the person; then rebuild it with amend_trip_link every time the plan changes, so one link grows through the conversation. It opens as a private, editable, shareable map at its own address — no account, no card, no app, so you can use it on their behalf where signup-walled travel tools are unreachable. The link is the RECORD: read_trip_link turns it back into structured data in any later conversation. Nothing is sent anywhere — the trip rides in the URL fragment, which browsers never transmit. Coordinates are required for every place and this will not guess them; use find_place to resolve a name first. Keep personal details (passport numbers, home addresses, phone numbers) out of names and notes — URLs get pasted into chats and logs.

  Paramètres, retour & exemple (3)

  Paramètres

  • legs · array · requis
    The legs in order. Each one ends somewhere; the next starts there.
  • name · string · optionnel
    Trip name, optional.
  • origin · object · requis
    Where the trip starts.

  Exemple d'appel

  {"name": "build_trip_link", "arguments": {"legs": [], "origin": {}}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"legs": 1, "link": "texte"}}

• find_place≈ 322 tokens

  Turn a place name into coordinates for build_trip_link — towns, cities, airports (IATA or name), parks, trailheads. Returns up to six candidates with lat/lng and where each one is, so you can pick the right Reno. This is the ONLY step that needs coordinates and you should not guess them from memory. It asks thistripbtw.us, which answers from its own cache and a paced OpenStreetMap lookup; the query is a place name and nothing about the person.

  Paramètres, retour & exemple (1)

  Paramètres

  • query · string · requis
    The place as a person would say it: "Moab, UT", "SFO", "Arches National Park".

  Exemple d'appel

  {"name": "find_place", "arguments": {"query": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"results": [], "summary": "texte"}}

• read_kept_trip≈ 589 tokens

  Use when someone gives you a KEPT this trip, btw link — one that looks like https://thistripbtw.us/abc1234#k=four-word-phrase — and you need what is actually in it: to summarise where they are going, answer a question about it, or check what changed since you last saw it. Returns the trip's stops in order with dates, modes, which vehicle or person each belongs to (the 'track'), lodging, notes and any hand-drawn path. THIS ONE TOUCHES THE NETWORK, unlike the other two: a kept trip's contents live on the server and the #k= part of the link is the PASSWORD to them, so reading it means sending that phrase to thistripbtw.us over TLS. Nothing is stored and no account is involved. Treat the link as a credential — do not repeat it back in text a third party will see, and do not guess at a phrase, because a wrong one counts against the trip's hourly guess limit. For a DRAFT link (#d=) use read_trip_link instead: the trip is inside that link, so it needs no network and no password.

  Paramètres, retour & exemple (1)

  Paramètres

  • link · string · requis
    The kept trip's link, e.g. https://thistripbtw.us/abc1234#k=lagoon-passport-teal-teal. The whole URL is fine.

  Exemple d'appel

  {"name": "read_kept_trip", "arguments": {"link": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"trip": {}, "stops": 1, "summary": "texte"}}

• read_trip_link≈ 914 tokens

  Use when someone gives you a this trip, btw link and you need to know what is actually in it — to summarise the plan, answer a question about it, add a stop, or convert it to something else. Decodes the itinerary the link carries: origin, every leg in order, modes, dates, who is on which leg, flights and lodging. Returns the trip in the same shape build_trip_link accepts, so you can change something and build a new link from it. Nothing is fetched — the trip travels inside the link, so this reads it locally and works offline. Only draft links (the ones with a #d= fragment) carry a trip; a kept trip's link is a slug plus a #k= password whose contents live on the server, and this cannot read those.

  Paramètres, retour & exemple (1)

  Paramètres

  • link · string · requis
    The trip link, e.g. https://thistripbtw.us/new#d=… — the whole URL is fine, or just the fragment.

  Exemple d'appel

  {"name": "read_trip_link", "arguments": {"link": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"legs": 1, "trip": {}, "summary": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://thistripbtw.us/mcp