
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
mcp-tfl-journey
Advanced tools
A Model Context Protocol (MCP) server that provides journey information from Transport for London (TfL) API.
The project is organized into modular files following clean code principles:
mcp-tfl-journey/
├── index.js # Main MCP server configuration and entry point
├── tfl-api.js # TfL API communication and data fetching
├── helpers.js # Utility functions for data extraction and processing
├── package.json # Dependencies and project configuration
└── README.md # This file
index.js
: MCP server setup, tool definitions, and request handlerstfl-api.js
: API communication with TfL, data fetching, and response formattinghelpers.js
: Pure utility functions for extracting and processing journey dataRun directly without installation:
npx mcp-tfl-journey
Install dependencies:
npm install
Set your TfL API key as an environment variable:
export TFL_API_KEY="your-api-key-here"
Run the server:
npm start
# or
node index.js
Set your TfL API key as an environment variable:
export TFL_API_KEY="your-api-key-here"
You can get a free API key from TfL Developer Portal.
The server provides a search_journey
tool that accepts:
from
: Source station code (e.g., "9400ZZLUKSX")to
: Destination station code (e.g., "9400ZZLULVT")To publish this package to npm:
Update the repository URL in package.json
with your actual GitHub repository
Login to npm:
npm login
Publish the package:
npm publish
After publishing, users can run:
npx mcp-tfl-journey
This project follows clean code principles:
The server uses the official TfL endpoint:
https://api.tfl.gov.uk/Journey/JourneyResults/{from}/to/{to}
Some examples of station codes:
9400ZZLUKSX
: Kings Cross9400ZZLULVT
: Liverpool Street9400ZZLUPAD
: Paddington9400ZZLUVIC
: VictoriaFor more station codes, please refer to the official TfL API documentation.
FAQs
MCP server for TfL Journey API
The npm package mcp-tfl-journey receives a total of 3 weekly downloads. As such, mcp-tfl-journey popularity was classified as not popular.
We found that mcp-tfl-journey demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.