
Research
/Security News
Popular Rust Crates Compromised in Build-Time Supply Chain Attack
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.
isochrone-mcp
Advanced tools
MCP server for reachability: streets and places you can reach on foot, by stroller, wheelchair or bike within a time budget
MCP server for pedestrian isochrones: from a point, the actual street network reachable within a time budget — not a convex hull — for walk, stroller, wheelchair and bike profiles (stairs and rough surfaces slow or block strollers and wheelchairs; cycle paths are bike-only). Backed by iso.huseyincapan.dev (OSM → pgRouting). Berlin is always covered; other areas can be imported on demand.
This is a portfolio project. The API it calls is a single small VPS with a 60 req/min rate limit — fine for interactive agent use, not for batch jobs.
claude mcp add isochrone -- npx -y isochrone-mcp
Or in any MCP client config:
{ "mcpServers": { "isochrone": { "command": "npx", "args": ["-y", "isochrone-mcp"] } } }
reachable_area — how far can I get?| arg | ||
|---|---|---|
lat, lon | required | origin (WGS84) |
minutes | optional | time budget. Faster profiles allow fewer minutes (walk 25, bike 10) because the work grows with the area searched. Omit for the profile's default. |
profile | walk | stroller | wheelchair | bike | mobility profile |
target | optional {lat, lon} | is this destination reachable, and when? |
include_places | default true | also count what's reachable by group |
include_geometry | default false | also return the raw GeoJSON bands |
Returns a prose summary: total street length reached, N–S/E–W extent, arrival band for the target if given, and a link to view the isochrone on the map.
15 min (walk) from 52.52, 13.405 reaches 132.3 km of streets, spanning
3.0 km N–S × 3.5 km E–W in 10 arrival-time bands.
Target 52.522, 13.41 is reachable: arrival ~7.5–9.0 min (band 6 of 10).
Places within reach: 414 food, 284 shops, 200 culture, 166 outdoors, 51 money.
Map: https://iso.huseyincapan.dev/?lat=52.52&lon=13.405&profile=walk
places_nearby — what can I get to?Lists actual places with how long each takes to reach. Called without group
or kinds it returns a breakdown by group and invites you to pick one, rather
than an arbitrary mixture of the nearest things.
| arg | ||
|---|---|---|
lat, lon | required | origin (WGS84) |
minutes, profile | optional | as above |
group | optional | food, shops, culture, health, learning, outdoors, money |
kinds | optional | specific kinds, e.g. ["cafe","bakery"]; wins over group |
limit | default 15 | how many to list, nearest first |
8 pharmacy places within 15 min (walk) of 52.5219, 13.4132; nearest 3:
· 3.1 min — Bezirksapotheke am Roten Rathaus (pharmacy)
· 3.8 min — Panorama Apotheke (pharmacy)
· 5.8 min — Alexa Apotheke (pharmacy)
Point it at your own deployment with ISOCHRONE_API=https://your-host.
FAQs
MCP server for reachability: streets and places you can reach on foot, by stroller, wheelchair or bike within a time budget
The npm package isochrone-mcp receives a total of 68 weekly downloads. As such, isochrone-mcp popularity was classified as not popular.
We found that isochrone-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.