Skip to content

us.thistripbtw/trips

by thistripbtw.us · remote · local (npm) · no sign-in to list tools · v1.3.5 · published by us.thistripbtw

Hand someone a complete trip as a private, editable map link. No account, no API key, no card.

Changes · 3

6 tools: 3 change things and 3 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http trips https://thistripbtw.us/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn2 info
  • The server marks "build_trip_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "build_trip_link" says "link": a word for a change.

    What this check looks for
  • The server marks "amend_trip_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "amend_trip_link" says "link": a word for a change.

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...ccount is involved. Treat the link as a credential — do not repeat it back in text a third..."

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...counts as a guess. Treat the link as a credential."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

6 tools

Changes things 3Claude Code: ask
  • add_to_kept_tripAdd a stop to a trip the person has KEPT (a link with #k=), on their behalf.1 finding

    Why it is in this group

    • The name "add_to_kept_trip" says "add": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...counts as a guess. Treat the link as a credential."

      What this check looks for
    Description, as the server wrote it
    Add a stop to a trip the person has KEPT (a link with #k=), on their behalf. Use when they say 'add X to the trip', 'we're stopping at Y on the way', 'put the hotel on it'. Needs their EDIT phrase — a view phrase can read but not write, and the tool says so. Writes exactly one stop and returns the trip's current stop count. Like read_kept_trip this touches the network: the #k= phrase is the password and it goes to thistripbtw.us over TLS, nothing is stored about you, and a wrong phrase counts as a guess. Treat the link as a credential.

    Annotations the server declares

    • title: Add a stop to a kept trip
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 3Claude Code: allow
  • find_placeTurn a place name into coordinates for build_trip_link — towns, cities, airports (IATA or name), parks, trailheads.No findings

    Why it is in this group

    • The name "find_place" says "find": a word for reading.
    Description, as the server wrote it
    Turn a place name into coordinates for build_trip_link — towns, cities, airports (IATA or name), parks, trailheads. Returns up to six candidates with lat/lng and where each one is, so you can pick the right Reno. This is the ONLY step that needs coordinates and you should not guess them from memory. It asks thistripbtw.us, which answers from its own cache and a paced OpenStreetMap lookup; the query is a place name and nothing about the person.

    Annotations the server declares

    • title: Find a place
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • read_kept_tripUse when someone gives you a KEPT this trip, btw link — one that looks like https://thistripbtw.us/abc1234#k=four-word-phrase — and you need what is actually in it: to summarise wh…1 finding

    Why it is in this group

    • The name "read_kept_trip" says "read": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ccount is involved. Treat the link as a credential — do not repeat it back in text a third..."

      What this check looks for
    Description, as the server wrote it
    Use when someone gives you a KEPT this trip, btw link — one that looks like https://thistripbtw.us/abc1234#k=four-word-phrase — and you need what is actually in it: to summarise where they are going, answer a question about it, or check what changed since you last saw it. Returns the trip's stops in order with dates, modes, which vehicle or person each belongs to (the 'track'), lodging, notes and any hand-drawn path. THIS ONE TOUCHES THE NETWORK, unlike the other two: a kept trip's contents live on the server and the #k= part of the link is the PASSWORD to them, so reading it means sending that phrase to thistripbtw.us over TLS. Nothing is stored and no account is involved. Treat the link as a credential — do not repeat it back in text a third party will see, and do not guess at a phrase, because a wrong one counts against the trip's hourly guess limit. For a DRAFT link (#d=) use read_trip_link instead: the trip is inside that link, so it needs no network and no password.

    Annotations the server declares

    • title: Read a kept trip
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.3.5. Values in angle brackets are yours to fill in.

claude mcp add --transport http trips https://thistripbtw.us/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__trips__find_place",
      "mcp__trips__read_trip_link",
      "mcp__trips__read_kept_trip"
    ],
    "ask": [
      "mcp__trips__build_trip_link",
      "mcp__trips__amend_trip_link",
      "mcp__trips__add_to_kept_trip"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as trips. Review it before you use it.