← MCP Security Catalog

wheels-router-mcp 0.5.0

npm · wheels-router-mcp · latest release

Verified with no proven findings
Security result
3
Observed tools
19
Version rating
100
Change risk

Independent inventory

Observed 2026-08-21T21:13:58.260Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
hello_toolHello tool
Input schema
{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "The name of the person to greet"
    }
  },
  "required": [
    "name"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
plan_tripPlan a transit trip. Uses Wheels Router for Hong Kong and Transitous for other regions. IMPORTANT: fares_min/fares_max are fare ranges, NOT interchange discounts. Interchange discounts (轉乘優惠) only apply when FareDiscountRules are explicitly present in the API response, and IT ONLY APPLIES TO CERTAIN ROUTES.
Input schema
{
  "type": "object",
  "properties": {
    "origin": {
      "type": "string",
      "minLength": 3,
      "description": "Required. Starting point as 'lat,lon' or 'stop:ID'. Use coordinates or stop IDs only."
    },
    "destination": {
      "type": "string",
      "minLength": 3,
      "description": "Required. Destination as 'lat,lon' or 'stop:ID'. Use coordinates or stop IDs only."
    },
    "depart_at": {
      "type": "string",
      "format": "date-time",
      "description": "Optional ISO 8601 departure time (UTC preferred)."
    },
    "arrive_by": {
      "type": "string",
      "format": "date-time",
      "description": "Optional ISO 8601 arrival deadline (UTC preferred)."
    },
    "modes": {
      "type": "string",
      "description": "Optional comma-separated modes (e.g. 'mtr,bus,ferry'). Only set if needed."
    },
    "max_results": {
      "type": "integer",
      "minimum": 1,
      "maximum": 5,
      "description": "Optional cap on returned plans (1-5). Defaults to API behavior."
    }
  },
  "required": [
    "origin",
    "destination"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
search_locationSearch locations via Nominatim (use for origin/destination lookup).
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "minLength": 2,
      "description": "Free-text place search. Example: 'Yau Tong MTR Exit A2' or 'Tokyo Station'."
    },
    "limit": {
      "type": "integer",
      "minimum": 1,
      "maximum": 10,
      "default": 5,
      "description": "How many results to return (1-10)."
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

Compared with initial baseline using full_baseline.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: d33a54ea4ddf0beb4bbc5b299821879f27afe7697f03ee86a2c0d91c2f70679e

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.