MCP.Market

trvl MCP server

by MikkoParkkola·io.github.MikkoParkkola/trvl·v1.27.0·88 stars
No reviews yet

Door-to-door travel MCP + CLI: flights, hotels, trains, cars, ferries. No API keys, Go binary.

D49/100grade D
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
D49/100

full report

Adoption
Established

88 stars238 downloads/wk

Reviews

Write one

Nobody has reviewed trvl yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

trvl tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

1 high2 medium
  • Code scan4 source files scanned3/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 3 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (3)

  • mediumnpm install lifecycle script presentinstall.script
  • highShell command built from a string (injection risk)exec.shell-concat
    bin/install.js: …ich is available since Windows 10 execSync(`tar -xzf "${tmpFile}" -C "${binDir}" trvl.exe`, { stdio: "pipe" }); …
  • mediumnpm install lifecycle script presentinstall.script
    package.json: …in/trvl-mcp.js" }, "scripts": { "postinstall": "node bin/install.js" }, "os": [ …
Overall 49/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How trvl compares

Against every graded Maps and travel MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
49/100
higher than 9% of 679 Maps and travel servers
GitHub stars
88
more than 96% of 323 Maps and travel servers
Downloads a week
238
more than 81% of 152 Maps and travel servers with a package

Release history: 7 versions in the registry since 2026-09-10, latest 2026-10-10, typically one every 4 days.

Install trvl in Claude Code, Cursor or VS Code

claude mcp add trvl -- docker run -i --rm ghcr.io/mikkoparkkola/trvl:1.27.0
Add to Cursor

trvl: common questions

Is trvl MCP server safe?
Not recommended: it is graded D (49/100). Read the trvl safety report
How do I install trvl?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does trvl need an API key?
Yes. The registry entry asks for TRVL_MCP_TOKEN, TRVL_MCP_READ_TOKEN, TRVL_MCP_WRITE_TOKEN, TRVL_MCP_OAUTH_CLIENT_SECRET and 11 more.
Is trvl maintained?
The last commit was 24 days ago (2026-10-12). The latest release is v1.27.0.
What can I use instead of trvl?
Servers from other publishers that do the same job: Openvan Travel MCP server, Pointsyeah MCP server and Optifeed Radar MCP server.
How does trvl compare with other Maps and travel MCP servers?
safety score 49/100 (higher than 9% of 679 Maps and travel servers); github stars 88 (more than 96% of 323 Maps and travel servers); downloads a week 238 (more than 81% of 152 Maps and travel servers with a package). Full comparison.

Alternatives to trvl

Same job from other publishers: the closest match first, then the best rated.

  • Openvan Travel
    Vanlife & RV data: roadbooks, fuel, tolls, ferries, visas, holidays, hazards, weather. openvan.camp
    A
  • Pointsyeah
    MCP server for searching award flights and travel deals via PointsYeah.
    A
  • Optifeed Radar
    AI visibility checker: does AI recommend your brand? GEO/AEO, runs locally, BYO keys. CLI + MCP.
    B
  • Travel & Events Data
    FlixBus and FlixTrain prices and seats, Google Hotels prices per booking site, Eventbrite events.
    A
  • geo-score
    Free 0-100 score: can AI engines cite a site? Plus citation checks with your own API keys.
    B